$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9427/3A408886E80211EE8CA1AC31C4F9AE02/-w-UodMQX3ZmLb2ELp0rA7ulkXE.mft File: -w-UodMQX3ZmLb2ELp0rA7ulkXE.mft (raw, json) Hash identifier: VW3CdHuhMndFIst6l8M0k2d1dvgtmtEorqWuGryhfhg= Subject key identifier: E2:C0:46:C5:87:CC:64:70:04:2B:25:7F:7B:FC:CC:D1:36:51:1D:85 Authority key identifier: FB:0F:94:A1:D3:10:5F:76:66:2D:BD:84:2E:9D:2B:03:BB:A5:91:71 Certificate issuer: /CN=A91A9427/serialNumber=FB0F94A1D3105F76662DBD842E9D2B03BBA59171 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-w-UodMQX3ZmLb2ELp0rA7ulkXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9427/3A408886E80211EE8CA1AC31C4F9AE02/-w-UodMQX3ZmLb2ELp0rA7ulkXE.mft Manifest number: 1F Signing time: Sun 19 May 2024 08:38:30 +0000 Manifest this update: Sun 19 May 2024 08:38:29 +0000 Manifest next update: Sun 26 May 2024 08:38:29 +0000 Files and hashes: 1: -w-UodMQX3ZmLb2ELp0rA7ulkXE.crl (hash: +TPvsYNC4RJrumT2H1+d36AVOrPI+YHL/9xqOdzinsU=) 2: 61B828C0E80611EE9F467C0CC4F9AE02.roa (hash: KVdS+73pSTwIF+JX9NuJGR0Vw4GTmQp1JMzU7MCSuC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9427/3A408886E80211EE8CA1AC31C4F9AE02/-w-UodMQX3ZmLb2ELp0rA7ulkXE.crl rsync://rpki.apnic.net/member_repository/A91A9427/3A408886E80211EE8CA1AC31C4F9AE02/-w-UodMQX3ZmLb2ELp0rA7ulkXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-w-UodMQX3ZmLb2ELp0rA7ulkXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9427/serialNumber=FB0F94A1D3105F76662DBD842E9D2B03BBA59171 Validity Not Before: May 19 08:38:29 2024 GMT Not After : May 26 08:38:29 2024 GMT Subject: CN=6649ba86-6afe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b1:24:44:dd:ed:f3:8d:be:65:ea:ca:d4:cb: 86:d4:49:71:4d:06:c7:38:3a:eb:2f:9b:e6:b4:22: c9:57:73:53:68:2c:d4:33:fa:f4:4e:94:ad:23:1b: 02:4c:2c:d8:a9:88:02:c2:7a:2a:4d:2f:fb:02:59: ba:05:df:4c:1a:71:58:64:3d:0e:ca:2f:c8:00:ac: 06:62:7f:8a:4a:f5:5b:6f:f2:bb:82:98:16:f5:bd: 88:14:04:90:81:fe:ad:a9:a8:d0:32:8a:a8:10:5e: 82:40:7b:82:9a:a7:98:93:82:72:30:a7:12:6b:ab: 19:eb:58:fd:9b:47:fe:9c:d9:8c:68:53:7c:62:89: 28:c2:27:75:b6:0f:80:2b:62:5e:b6:24:26:20:59: 82:b6:9b:6c:3c:42:a4:2a:71:c1:fd:46:48:7e:b7: ac:31:a2:00:52:61:f6:10:d4:ba:f0:a9:ac:38:8e: ad:bc:b8:49:13:9f:1d:2d:86:d8:4a:23:9c:4e:14: be:f9:25:6d:cc:1a:23:6a:74:22:a2:ff:b9:18:a0: b7:dc:63:ce:85:fc:bb:4d:5c:8f:05:e9:b5:8d:15: 3a:d7:3e:fa:15:ae:8d:0a:8e:bd:32:c7:c3:06:0f: 71:46:ca:05:82:09:15:67:9d:30:61:f4:b9:8b:50: 1f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C0:46:C5:87:CC:64:70:04:2B:25:7F:7B:FC:CC:D1:36:51:1D:85 X509v3 Authority Key Identifier: keyid:FB:0F:94:A1:D3:10:5F:76:66:2D:BD:84:2E:9D:2B:03:BB:A5:91:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9427/3A408886E80211EE8CA1AC31C4F9AE02/-w-UodMQX3ZmLb2ELp0rA7ulkXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-w-UodMQX3ZmLb2ELp0rA7ulkXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9427/3A408886E80211EE8CA1AC31C4F9AE02/-w-UodMQX3ZmLb2ELp0rA7ulkXE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:1d:a8:90:15:d1:24:16:59:69:75:b2:dc:a7:06:ba:6e:ef: 1b:6a:37:f5:c4:3b:16:cc:f5:7c:e3:88:e7:12:02:f5:48:50: bf:0a:ec:96:45:ed:cb:e8:98:c4:a2:72:29:02:1f:38:ec:7f: 38:da:ef:7e:56:c1:84:ff:33:b1:23:7a:fa:cc:f6:cc:d9:da: d9:bd:01:0a:5a:0a:cb:8d:fb:be:68:f1:94:50:7f:b2:24:87: f9:ce:d5:b4:4e:a0:8d:e0:27:72:c1:51:3d:94:5c:b7:04:6a: e6:4f:cc:65:d5:42:5e:a9:19:9c:c6:0f:47:70:c0:67:a8:7b: 77:41:55:93:13:3d:39:44:22:f9:67:ff:9e:47:d7:3a:7d:58: ab:21:a1:26:3e:a2:68:76:15:ce:84:5e:d6:e5:1d:6c:9c:7c: 25:d0:32:0f:01:35:69:f2:f1:6c:b4:a7:6a:5a:00:4d:80:46: a0:8f:15:d7:61:30:4c:7f:9f:4a:13:08:5e:95:29:39:62:ed: a0:37:92:90:23:3d:6a:6b:06:40:69:73:aa:b8:30:be:92:93: b5:f5:b1:86:d7:2e:54:59:48:2c:e6:d6:d1:e2:5a:b5:81:ff: e9:d2:e7:a2:65:6f:27:5a:dd:a9:64:71:fb:18:a8:74:73:f6: 3f:41:62:19 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OTQyNzExMC8GA1UEBRMoRkIwRjk0QTFEMzEwNUY3NjY2MkRCRDg0MkU5RDJCMDNC QkE1OTE3MTAeFw0yNDA1MTkwODM4MjlaFw0yNDA1MjYwODM4MjlaMBgxFjAUBgNV BAMTDTY2NDliYTg2LTZhZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmsSRE3e3zjb5l6srUy4bUSXFNBsc4Ousvm+a0IslXc1NoLNQz+vROlK0jGwJM LNipiALCeipNL/sCWboF30wacVhkPQ7KL8gArAZif4pK9Vtv8ruCmBb1vYgUBJCB /q2pqNAyiqgQXoJAe4Kap5iTgnIwpxJrqxnrWP2bR/6c2YxoU3xiiSjCJ3W2D4Ar Yl62JCYgWYK2m2w8QqQqccH9Rkh+t6wxogBSYfYQ1Lrwqaw4jq28uEkTnx0ththK I5xOFL75JW3MGiNqdCKi/7kYoLfcY86F/LtNXI8F6bWNFTrXPvoVro0Kjr0yx8MG D3FGygWCCRVnnTBh9LmLUB9nAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4sBGxYfM ZHAEKyV/e/zM0TZRHYUwHwYDVR0jBBgwFoAU+w+UodMQX3ZmLb2ELp0rA7ulkXEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5NDI3LzNBNDA4ODg2RTgw MjExRUU4Q0ExQUMzMUM0RjlBRTAyLy13LVVvZE1RWDNabUxiMkVMcDByQTd1bGtY RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLXctVW9kTVFYM1ptTGIyRUxwMHJBN3Vsa1hFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 NDI3LzNBNDA4ODg2RTgwMjExRUU4Q0ExQUMzMUM0RjlBRTAyLy13LVVvZE1RWDNa bUxiMkVMcDByQTd1bGtYRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHEdqJAV0SQWWWl1stynBrpu7xtqN/XEOxbM9XzjiOcSAvVIUL8K7JZF 7cvomMSicikCHzjsfzja735WwYT/M7EjevrM9szZ2tm9AQpaCsuN+75o8ZRQf7Ik h/nO1bROoI3gJ3LBUT2UXLcEauZPzGXVQl6pGZzGD0dwwGeoe3dBVZMTPTlEIvln /55H1zp9WKshoSY+omh2Fc6EXtblHWycfCXQMg8BNWny8Wy0p2paAE2ARqCPFddh MEx/n0oTCF6VKTli7aA3kpAjPWprBkBpc6q4ML6Sk7X1sYbXLlRZSCzm1tHiWrWB /+nS56Jlbyda3alkcfsYqHRz9j9BYhk= -----END CERTIFICATE-----Generated at Sun May 19 09:04:14 2024 by rpki-client on console-fra.rpki-client.org