$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft File: U4XhOhtYRftEzutr7Y3rTomvOCk.mft (raw, json) Hash identifier: /E/bVNbQTFy+bTVn3mMsiLARTaSKJ2Mdr+NwGaFr3Xo= Subject key identifier: B8:8E:29:67:A0:4A:16:61:AE:59:7C:92:1F:6C:52:A1:FB:F4:91:27 Authority key identifier: 53:85:E1:3A:1B:58:45:FB:44:CE:EB:6B:ED:8D:EB:4E:89:AF:38:29 Certificate issuer: /CN=A91ACFEB/serialNumber=5385E13A1B5845FB44CEEB6BED8DEB4E89AF3829 Certificate serial: 08B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft Manifest number: 08A9 Signing time: Sat 18 May 2024 21:30:49 +0000 Manifest this update: Sat 18 May 2024 21:30:48 +0000 Manifest next update: Sat 25 May 2024 21:30:48 +0000 Files and hashes: 1: U4XhOhtYRftEzutr7Y3rTomvOCk.crl (hash: KEOwj4Snlsuxyo1E1dxZWj8ukEStKdYDtFouGy+NxfE=) 2: 3636BCD2937011EA8A795583C4F9AE02.roa (hash: YRt4jKdI4p9jPEw/yG2fC1+AmKWnjwB4/jgfu0A37Zs=) 3: 35831FCE937011EA8A795583C4F9AE02.roa (hash: quwFz9je4iFlkCJSU3B1mU1SM1se6oAq60Dc17Nx0YY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.crl rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2231 (0x8b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACFEB/serialNumber=5385E13A1B5845FB44CEEB6BED8DEB4E89AF3829 Validity Not Before: May 18 21:30:48 2024 GMT Not After : May 25 21:30:48 2024 GMT Subject: CN=66491e09-15e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a7:2c:00:c1:0a:ea:a6:15:19:dd:84:7c:05: 2c:ad:0a:af:24:90:0a:49:13:e7:1c:9d:1b:c6:d9: d2:39:44:e8:36:27:90:46:fd:6b:3d:f5:b5:95:ce: b6:af:cc:ed:63:83:2b:bc:6a:4c:f0:3c:8b:9e:f0: d5:6a:08:8c:2a:a5:77:10:57:f3:31:9e:8b:4f:8f: e2:e1:d8:e6:80:08:cb:61:86:6f:b5:5b:59:da:44: 0c:99:0c:3c:9d:51:cf:15:81:b2:66:d9:39:e3:09: d9:6f:0e:1d:41:e4:f6:c4:8b:7b:7c:76:83:e8:10: 6e:d3:b1:68:ce:67:93:60:d2:db:58:41:78:b3:43: 1f:ef:e4:21:30:b3:eb:d5:6b:93:b5:50:b2:16:5c: c8:cb:fb:fb:84:8a:51:b7:35:d1:67:05:48:b0:3b: 5c:d1:ec:bf:a7:ec:5e:72:0a:a6:dd:75:fc:76:a5: 2d:d2:2e:c8:f2:5f:bb:00:eb:ff:59:6f:6d:03:fc: c3:4c:b7:c2:f0:7e:f5:3c:6c:04:4a:22:eb:56:5d: 69:41:67:85:d7:09:75:48:f1:47:c0:cf:27:07:6a: 0d:bf:6d:a6:33:8e:64:a9:fe:99:08:56:d8:a9:a9: d2:6c:15:50:ae:63:d3:23:0a:c2:1f:f3:2f:a7:55: 7f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:8E:29:67:A0:4A:16:61:AE:59:7C:92:1F:6C:52:A1:FB:F4:91:27 X509v3 Authority Key Identifier: keyid:53:85:E1:3A:1B:58:45:FB:44:CE:EB:6B:ED:8D:EB:4E:89:AF:38:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:3e:fc:5c:db:d6:1b:13:c4:09:f5:64:a8:db:10:ab:f4:66: cb:e2:16:03:3d:42:e9:6a:97:24:d0:d0:32:55:b3:fc:55:65: 7a:5c:75:97:7a:11:5a:6e:d9:8c:75:2e:e0:d0:ca:5b:b0:af: 24:cf:41:e4:24:01:19:74:42:26:d2:ed:80:44:42:eb:48:47: 6c:e2:0b:08:d4:a1:a4:e0:ed:bf:b6:fe:af:b2:87:9f:3c:dc: ba:43:82:fa:87:91:79:46:89:bb:44:63:71:c4:d6:66:b9:40: 9a:c6:44:c7:0a:7a:28:23:ef:d7:0b:13:a4:c1:79:0b:93:cf: c5:3f:f3:63:45:db:7b:b1:b6:f5:9b:fd:c1:72:ab:c4:3d:51: 9b:7a:a8:eb:5e:94:c6:0d:4b:fa:1f:a5:35:96:10:9b:31:d0: f8:d3:1d:ab:19:5e:db:57:05:6e:85:da:b4:27:8c:1f:a5:0a: 26:f1:06:cb:90:c5:ff:00:9b:56:5f:82:bf:f3:e6:82:3c:fc: c5:05:25:37:1e:c0:ea:5c:52:39:59:10:72:35:31:7e:ce:e0: 94:03:26:2b:e1:57:73:51:b4:c8:ee:f9:09:aa:2a:ab:61:2c: c5:0f:fb:31:63:fe:bd:ce:ed:b8:3b:7c:2b:4b:50:75:3d:cf: 02:cb:a5:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNGRUIxMTAvBgNVBAUTKDUzODVFMTNBMUI1ODQ1RkI0NENFRUI2QkVEOERFQjRF ODlBRjM4MjkwHhcNMjQwNTE4MjEzMDQ4WhcNMjQwNTI1MjEzMDQ4WjAYMRYwFAYD VQQDEw02NjQ5MWUwOS0xNWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmKcsAMEK6qYVGd2EfAUsrQqvJJAKSRPnHJ0bxtnSOUToNieQRv1rPfW1lc62 r8ztY4MrvGpM8DyLnvDVagiMKqV3EFfzMZ6LT4/i4djmgAjLYYZvtVtZ2kQMmQw8 nVHPFYGyZtk54wnZbw4dQeT2xIt7fHaD6BBu07FozmeTYNLbWEF4s0Mf7+QhMLPr 1WuTtVCyFlzIy/v7hIpRtzXRZwVIsDtc0ey/p+xecgqm3XX8dqUt0i7I8l+7AOv/ WW9tA/zDTLfC8H71PGwESiLrVl1pQWeF1wl1SPFHwM8nB2oNv22mM45kqf6ZCFbY qanSbBVQrmPTIwrCH/Mvp1V/FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLiOKWeg ShZhrll8kh9sUqH79JEnMB8GA1UdIwQYMBaAFFOF4TobWEX7RM7ra+2N606Jrzgp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0ZFQi9DQjJDMzNFNjkz NkUxMUVBQTVFNTZCN0VDNEY5QUUwMi9VNFhoT2h0WVJmdEV6dXRyN1kzclRvbXZP Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U0WGhPaHRZUmZ0RXp1dHI3WTNyVG9tdk9Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0ZFQi9DQjJDMzNFNjkzNkUxMUVBQTVFNTZCN0VDNEY5QUUwMi9VNFhoT2h0WVJm dEV6dXRyN1kzclRvbXZPQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkPvxc29YbE8QJ9WSo2xCr9GbL4hYDPULpapck0NAyVbP8VWV6XHWX ehFabtmMdS7g0MpbsK8kz0HkJAEZdEIm0u2ARELrSEds4gsI1KGk4O2/tv6vsoef PNy6Q4L6h5F5Rom7RGNxxNZmuUCaxkTHCnooI+/XCxOkwXkLk8/FP/NjRdt7sbb1 m/3BcqvEPVGbeqjrXpTGDUv6H6U1lhCbMdD40x2rGV7bVwVuhdq0J4wfpQom8QbL kMX/AJtWX4K/8+aCPPzFBSU3HsDqXFI5WRByNTF+zuCUAyYr4VdzUbTI7vkJqiqr YSzFD/sxY/69zu24O3wrS1B1Pc8Cy6Wq -----END CERTIFICATE-----Generated at Sat May 18 22:14:04 2024 by rpki-client on console-fra.rpki-client.org