$ rpki-client -vvf rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft File: rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft (raw, json) Hash identifier: RSaQfnG+uJLo2RPraaLOGnCOQqzLNco0uFEBKy29rq8= Subject key identifier: 48:4D:29:08:76:78:D9:3F:BC:7B:30:32:6C:F4:75:2A:1A:8A:1B:5C Authority key identifier: AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2 Certificate issuer: /CN=A91A85A8/serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2 Certificate serial: 0409 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft Manifest number: 03FA Signing time: Thu 23 May 2024 02:07:23 +0000 Manifest this update: Thu 23 May 2024 02:07:23 +0000 Manifest next update: Thu 30 May 2024 02:07:23 +0000 Files and hashes: 1: rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl (hash: EBk3AMo90opZvusElVFRwmH9QZ20AvufHFk6K7x29Bw=) 2: B016290E2CE211EC8664D47EC4F9AE02.roa (hash: wdLaxMlyLonlvEVvLfT54XJHEzwZ2pNPKl+ktmPxWPM=) 3: 14172F4C264311EEB0342B45C4F9AE02.roa (hash: B260XF9kERkV9i1NPPdAEgiKoprmisLGNiyMvrM1HnM=) 4: 8C2F1C96367F11EEB689C243C4F9AE02.roa (hash: cJ9vrI4eJIdm2y+RaY9D8ivBT7pC0PY4Wcwl7yuzDtc=) 5: AF91ADB42CE211EC8664D47EC4F9AE02.roa (hash: Wn0MVgMwMs2RB0Rd+sm8BzCBL7NOaKO7j/pzgseZR4o=) 6: AEFA3DD02CE211EC8664D47EC4F9AE02.roa (hash: BJQEkBd6t7VbphH51tJLVCWI+17DBqRUmsn76+E+W7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 May 2024 00:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1033 (0x409) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A85A8/serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2 Validity Not Before: May 23 02:07:23 2024 GMT Not After : May 30 02:07:23 2024 GMT Subject: CN=664ea4db-702f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:16:ec:07:a2:76:c4:39:b6:7b:a1:09:9e:11: 21:f8:13:88:00:db:3b:16:6d:5e:60:0e:25:30:da: fc:c9:b3:57:f8:98:b0:78:ba:e8:91:94:d4:8f:a9: d6:e0:d1:c8:f3:c4:33:ed:0b:03:68:4e:91:40:d7: 46:f0:cd:5e:06:ea:05:57:8b:85:6d:3a:94:d4:23: 96:d7:4f:2e:62:c5:eb:35:ce:65:dd:42:af:ca:ca: bd:97:15:61:57:74:b1:7f:09:30:42:90:ff:a8:d6: 64:78:00:0c:b7:b0:09:a7:84:c9:c4:72:3f:fb:ba: c0:be:2f:cf:de:c9:b4:2d:73:e9:96:94:60:30:82: 47:83:6d:6f:3f:17:00:1b:42:fe:55:fc:90:06:be: 28:22:37:ba:30:5d:51:3c:e4:7d:a9:ce:4b:c6:02: c1:e7:d5:e1:a3:e4:ff:63:68:c3:ae:10:df:eb:2f: c8:e0:ce:da:4f:ab:17:2a:0e:a8:2c:b6:82:79:c9: 8d:13:8b:3f:1a:b1:af:67:96:58:36:6c:31:04:97: 2d:bc:16:31:2f:78:eb:05:68:ba:4b:6a:b3:4c:a1: 61:db:07:19:e0:4a:f1:3b:70:ea:2d:0d:9b:f5:84: 8e:d6:23:64:e7:49:be:f7:8b:2d:37:bd:85:41:1c: 7e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:4D:29:08:76:78:D9:3F:BC:7B:30:32:6C:F4:75:2A:1A:8A:1B:5C X509v3 Authority Key Identifier: keyid:AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:a9:90:e7:5b:1e:66:ee:90:39:f3:85:24:3b:24:88:87:c1: 58:ea:fb:fa:21:46:dd:85:18:17:4d:50:5d:81:a4:8c:11:13: 4f:20:6c:41:ec:c3:7a:88:90:91:d8:40:ff:19:1d:fa:62:fa: 81:39:c3:7f:3e:04:e8:44:c9:55:1d:30:ad:14:bc:01:38:af: 7d:13:b0:ce:33:2c:01:97:fd:bb:db:d7:76:e2:d0:00:90:c9: 94:71:46:d6:8c:81:de:ca:d3:4a:59:a9:09:61:bb:71:2a:f4: 56:50:4c:b2:f3:87:4f:52:8e:68:5e:66:8a:6e:6c:bb:99:3b: ae:0e:66:93:ff:82:e0:36:92:9e:6a:bf:f3:22:46:c1:0b:dd: 09:4a:c6:e5:5c:6c:b8:f5:85:5b:80:7e:51:60:d9:c7:26:5e: 13:81:ea:89:7c:e6:3e:d0:b1:cd:da:d5:c4:a8:5f:12:58:6c: 10:9b:77:12:5a:b8:28:51:e4:76:55:e1:70:03:92:de:2a:2d: d8:19:0b:a6:f4:1f:d3:74:eb:a2:19:e8:b5:eb:b2:1b:a6:0b: 5c:f2:54:19:ca:fc:51:10:35:35:e9:db:28:cd:89:c3:19:01: c9:7a:c9:20:53:ec:72:f9:aa:8e:68:01:c5:54:45:98:14:68: 5c:30:38:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg1QTgxMTAvBgNVBAUTKEFFMEEwRjk4QTA5MDNFMDE1RTVGQzU0Q0I4Q0UwODFE NDI0REI0RDIwHhcNMjQwNTIzMDIwNzIzWhcNMjQwNTMwMDIwNzIzWjAYMRYwFAYD VQQDEw02NjRlYTRkYi03MDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2xbsB6J2xDm2e6EJnhEh+BOIANs7Fm1eYA4lMNr8ybNX+JiweLrokZTUj6nW 4NHI88Qz7QsDaE6RQNdG8M1eBuoFV4uFbTqU1COW108uYsXrNc5l3UKvysq9lxVh V3SxfwkwQpD/qNZkeAAMt7AJp4TJxHI/+7rAvi/P3sm0LXPplpRgMIJHg21vPxcA G0L+VfyQBr4oIje6MF1RPOR9qc5LxgLB59Xho+T/Y2jDrhDf6y/I4M7aT6sXKg6o LLaCecmNE4s/GrGvZ5ZYNmwxBJctvBYxL3jrBWi6S2qzTKFh2wcZ4ErxO3DqLQ2b 9YSO1iNk50m+94stN72FQRx+VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEhNKQh2 eNk/vHswMmz0dSoaihtcMB8GA1UdIwQYMBaAFK4KD5igkD4BXl/FTLjOCB1CTbTS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODVBOC9BNTMwODE0NjJD REUxMUVDQUE2RkU2NzhDNEY5QUUwMi9yZ29QbUtDUVBnRmVYOFZNdU00SUhVSk50 TkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Jnb1BtS0NRUGdGZVg4Vk11TTRJSFVKTnROSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODVBOC9BNTMwODE0NjJDREUxMUVDQUE2RkU2NzhDNEY5QUUwMi9yZ29QbUtDUVBn RmVYOFZNdU00SUhVSk50TkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPqZDnWx5m7pA584UkOySIh8FY6vv6IUbdhRgXTVBdgaSMERNPIGxB 7MN6iJCR2ED/GR36YvqBOcN/PgToRMlVHTCtFLwBOK99E7DOMywBl/2729d24tAA kMmUcUbWjIHeytNKWakJYbtxKvRWUEyy84dPUo5oXmaKbmy7mTuuDmaT/4LgNpKe ar/zIkbBC90JSsblXGy49YVbgH5RYNnHJl4TgeqJfOY+0LHN2tXEqF8SWGwQm3cS WrgoUeR2VeFwA5LeKi3YGQum9B/TdOuiGei167Ibpgtc8lQZyvxREDU16dsozYnD GQHJeskgU+xy+aqOaAHFVEWYFGhcMDg/ -----END CERTIFICATE-----Generated at Thu May 23 02:34:48 2024 by rpki-client on console-fra.rpki-client.org