$ rpki-client -vvf rpki.apnic.net/member_repository/A91A860C/F806E01C1D9E11E2BBD0358F08B02CD2/aQ0lRcuMCiKcHNP1DixqKyEoFwo.mft File: aQ0lRcuMCiKcHNP1DixqKyEoFwo.mft (raw, json) Hash identifier: qMmuDQrk10V501o4Qy8cJWkXGKs4HMOEEK830RXqkRw= Subject key identifier: C5:E1:04:F8:2E:86:D0:94:C9:9B:8C:AE:22:BD:3A:78:A2:16:67:41 Authority key identifier: 69:0D:25:45:CB:8C:0A:22:9C:1C:D3:F5:0E:2C:6A:2B:21:28:17:0A Certificate issuer: /CN=A91A860C/serialNumber=690D2545CB8C0A229C1CD3F50E2C6A2B2128170A Certificate serial: 33EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQ0lRcuMCiKcHNP1DixqKyEoFwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A860C/F806E01C1D9E11E2BBD0358F08B02CD2/aQ0lRcuMCiKcHNP1DixqKyEoFwo.mft Manifest number: 33E1 Signing time: Sat 18 May 2024 15:12:28 +0000 Manifest this update: Sat 18 May 2024 15:12:27 +0000 Manifest next update: Sat 25 May 2024 15:12:27 +0000 Files and hashes: 1: aQ0lRcuMCiKcHNP1DixqKyEoFwo.crl (hash: tWg4KoF9nkUZ8Ovh+qLaxB9WWSpBSKQed/GM/ftf3uM=) 2: 513426C6AA7111E898EE8F79C4F9AE02.roa (hash: tCdj6bp+5IcOFcx8vDKw0wXb4PBJkK4AlD4pTuplRb8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A860C/F806E01C1D9E11E2BBD0358F08B02CD2/aQ0lRcuMCiKcHNP1DixqKyEoFwo.crl rsync://rpki.apnic.net/member_repository/A91A860C/F806E01C1D9E11E2BBD0358F08B02CD2/aQ0lRcuMCiKcHNP1DixqKyEoFwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQ0lRcuMCiKcHNP1DixqKyEoFwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13291 (0x33eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A860C/serialNumber=690D2545CB8C0A229C1CD3F50E2C6A2B2128170A Validity Not Before: May 18 15:12:27 2024 GMT Not After : May 25 15:12:27 2024 GMT Subject: CN=6648c55b-e877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:bb:f6:33:21:d8:17:0a:32:9d:18:12:ce:ea: f9:95:56:4c:4a:07:77:a7:1b:a1:34:91:64:03:2b: ac:c2:aa:3a:59:b6:06:e2:06:8b:fc:78:2e:53:41: c3:a2:a2:8f:a5:8c:e0:e5:db:2f:f0:d6:ed:84:fe: 85:2c:fa:31:da:6f:e1:3d:8b:d4:ea:b9:9e:a8:70: 31:d9:08:94:fc:97:e7:90:5b:ee:18:34:09:21:ec: e4:cf:a0:13:56:56:6b:ea:15:8c:1b:58:63:79:dd: 1a:5f:7b:b8:0a:20:c0:20:d1:82:df:3f:96:68:47: 18:f6:68:82:ca:a3:33:72:89:23:49:4c:3c:63:f3: ef:91:9b:0f:38:c2:ea:26:55:bd:27:91:76:1d:37: 4f:f6:7f:25:2c:07:a8:b3:8d:54:93:45:d8:e0:09: 82:e8:85:89:39:04:bd:af:86:aa:00:fc:2c:2b:5d: b4:e8:7d:ca:a3:9c:87:75:26:ea:19:db:cf:ba:3b: cc:c5:bb:91:fd:ac:73:82:80:ab:35:31:bf:cf:0c: 45:57:53:3b:01:86:43:2f:65:5d:3f:98:56:92:7a: 25:f7:51:73:4f:b0:b7:7b:09:3a:da:a1:d3:80:57: 7f:dd:99:52:2e:c7:4d:0f:20:41:33:bb:12:54:10: 03:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E1:04:F8:2E:86:D0:94:C9:9B:8C:AE:22:BD:3A:78:A2:16:67:41 X509v3 Authority Key Identifier: keyid:69:0D:25:45:CB:8C:0A:22:9C:1C:D3:F5:0E:2C:6A:2B:21:28:17:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A860C/F806E01C1D9E11E2BBD0358F08B02CD2/aQ0lRcuMCiKcHNP1DixqKyEoFwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQ0lRcuMCiKcHNP1DixqKyEoFwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A860C/F806E01C1D9E11E2BBD0358F08B02CD2/aQ0lRcuMCiKcHNP1DixqKyEoFwo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:1b:1c:ae:2d:9d:5f:5f:af:74:cd:24:b9:9b:5c:3c:10:f6: 33:d7:c2:33:d1:36:8d:c3:bb:8c:c8:e1:05:9f:a9:17:18:fa: 27:44:15:31:2f:57:f5:e1:fb:a8:84:aa:f2:86:8c:ea:c2:64: 98:fd:33:8c:25:e1:8e:b5:23:81:b5:a2:be:9f:4a:9f:17:eb: ee:26:5f:70:4f:30:d5:81:3f:25:08:3d:3e:5c:de:5b:ba:18: c4:bc:ca:cd:db:51:65:85:5a:00:ce:dd:d2:c5:c9:24:06:6d: 3c:9a:12:84:73:17:7e:5a:37:d6:02:cb:f5:12:f7:ae:86:37: 57:13:60:43:62:0c:a2:e7:ba:e9:a7:af:72:d4:9c:3b:50:8a: ef:8b:e1:7a:47:76:2b:cb:a1:bd:c0:2f:16:70:36:74:6d:89: a9:86:4f:ea:7f:c9:dc:bd:b2:e0:97:38:ad:8a:d6:18:89:a6: b1:dd:78:3b:0b:fb:00:f2:ee:1a:22:84:43:09:ee:61:ea:ad: da:d8:79:3e:64:12:2b:cd:2d:ba:7f:f5:5d:95:e5:cc:47:f6: ef:22:dc:a2:6e:18:cf:ba:6e:bc:ab:9c:25:d3:dd:a9:a3:29: 49:50:d4:bd:34:c0:5e:d5:d5:6f:b1:09:20:a8:83:bd:1d:d9: 88:e3:b8:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2MEMxMTAvBgNVBAUTKDY5MEQyNTQ1Q0I4QzBBMjI5QzFDRDNGNTBFMkM2QTJC MjEyODE3MEEwHhcNMjQwNTE4MTUxMjI3WhcNMjQwNTI1MTUxMjI3WjAYMRYwFAYD VQQDEw02NjQ4YzU1Yi1lODc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA57v2MyHYFwoynRgSzur5lVZMSgd3pxuhNJFkAyuswqo6WbYG4gaL/HguU0HD oqKPpYzg5dsv8NbthP6FLPox2m/hPYvU6rmeqHAx2QiU/JfnkFvuGDQJIezkz6AT VlZr6hWMG1hjed0aX3u4CiDAINGC3z+WaEcY9miCyqMzcokjSUw8Y/PvkZsPOMLq JlW9J5F2HTdP9n8lLAeos41Uk0XY4AmC6IWJOQS9r4aqAPwsK1206H3Ko5yHdSbq GdvPujvMxbuR/axzgoCrNTG/zwxFV1M7AYZDL2VdP5hWknol91FzT7C3ewk62qHT gFd/3ZlSLsdNDyBBM7sSVBADuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMXhBPgu htCUyZuMriK9OniiFmdBMB8GA1UdIwQYMBaAFGkNJUXLjAoinBzT9Q4saishKBcK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODYwQy9GODA2RTAxQzFE OUUxMUUyQkJEMDM1OEYwOEIwMkNEMi9hUTBsUmN1TUNpS2NITlAxRGl4cUt5RW9G d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FRMGxSY3VNQ2lLY0hOUDFEaXhxS3lFb0Z3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODYwQy9GODA2RTAxQzFEOUUxMUUyQkJEMDM1OEYwOEIwMkNEMi9hUTBsUmN1TUNp S2NITlAxRGl4cUt5RW9Gd28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVGxyuLZ1fX690zSS5m1w8EPYz18Iz0TaNw7uMyOEFn6kXGPonRBUx L1f14fuohKryhozqwmSY/TOMJeGOtSOBtaK+n0qfF+vuJl9wTzDVgT8lCD0+XN5b uhjEvMrN21FlhVoAzt3SxckkBm08mhKEcxd+WjfWAsv1EveuhjdXE2BDYgyi57rp p69y1Jw7UIrvi+F6R3Yry6G9wC8WcDZ0bYmphk/qf8ncvbLglzititYYiaax3Xg7 C/sA8u4aIoRDCe5h6q3a2Hk+ZBIrzS26f/VdleXMR/bvItyibhjPum68q5wl092p oylJUNS9NMBe1dVvsQkgqIO9HdmI47jn -----END CERTIFICATE-----Generated at Sat May 18 16:20:16 2024 by rpki-client on console-fra.rpki-client.org