$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft File: 0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft (raw, json) Hash identifier: Gx2slgVXCNGXoldGlOGpLr1lh4kzmHjJi5UyIb65Z2E= Subject key identifier: DE:FF:6F:C4:9B:7E:3C:31:93:4C:DC:CD:F5:39:19:FA:B6:93:1E:23 Authority key identifier: D2:90:DD:16:72:22:C3:9B:13:4F:81:E5:27:F0:22:D8:5E:DF:23:F4 Certificate issuer: /CN=A91AE08E/serialNumber=D290DD167222C39B134F81E527F022D85EDF23F4 Certificate serial: 07D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft Manifest number: 07CA Signing time: Sat 18 May 2024 22:02:11 +0000 Manifest this update: Sat 18 May 2024 22:02:10 +0000 Manifest next update: Sat 25 May 2024 22:02:10 +0000 Files and hashes: 1: 0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl (hash: 7Ctzg9keaeuet8CKsfXwL8orJVdxkJD6kbi/ogNH+IE=) 2: 6E038820BF6211EA94C2957CC4F9AE02.roa (hash: 4ZJ4bpIZAyoZQWXKXEaFncTtQ6o2taA3kIC/oIBts/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2003 (0x7d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE08E/serialNumber=D290DD167222C39B134F81E527F022D85EDF23F4 Validity Not Before: May 18 22:02:10 2024 GMT Not After : May 25 22:02:10 2024 GMT Subject: CN=66492562-3135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:18:b8:c6:c1:af:17:ea:a9:a4:b0:0c:86:e8: dc:c6:71:50:e6:a4:be:21:50:ea:73:e1:a3:d5:f2: 38:6f:76:59:b8:2c:ea:0f:b3:a1:8d:81:ea:42:b9: e0:c5:1d:21:a5:30:62:21:9c:ee:6a:3e:4d:07:cc: 3b:f6:5a:4b:f3:6f:44:c6:6b:cc:ee:a2:21:a8:73: fc:84:c0:2a:d1:c2:94:75:3e:3a:c4:9a:0f:6c:5d: a3:78:3b:33:62:bb:e6:7c:bf:89:d8:18:eb:89:8f: 81:c8:e8:a5:8f:67:87:fa:4f:f4:35:2c:a0:38:d8: 52:c1:23:88:50:a2:d9:eb:0f:28:21:22:64:db:11: 7e:9f:3f:15:d7:65:26:fc:81:be:07:0f:37:6d:70: 58:54:26:69:1e:38:2a:2a:38:38:43:89:8c:2b:f2: d8:02:e5:a3:25:29:26:2d:f4:ef:09:a8:c0:5e:5b: f4:18:10:8c:9e:f5:f1:6b:54:9e:63:15:66:a4:0c: 8c:0e:ba:4a:93:ea:f5:43:01:c1:43:a9:1c:f2:fe: f7:62:ab:34:07:d3:df:bf:b1:dd:84:44:d8:07:91: 45:c2:ed:97:bc:85:48:f2:d4:23:3e:76:7e:87:af: fb:76:68:1f:fd:77:d9:d5:73:b4:a6:07:5d:8e:e0: e3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:FF:6F:C4:9B:7E:3C:31:93:4C:DC:CD:F5:39:19:FA:B6:93:1E:23 X509v3 Authority Key Identifier: keyid:D2:90:DD:16:72:22:C3:9B:13:4F:81:E5:27:F0:22:D8:5E:DF:23:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:d8:ef:c6:66:1d:11:85:39:83:f2:fd:fe:3a:83:03:8e:be: eb:1b:cc:b9:6a:2c:18:ff:5e:fe:da:60:86:7a:e8:78:82:fa: d7:52:01:74:d6:d9:6c:71:4d:5d:12:1b:fe:bb:4b:8a:31:3e: c4:95:28:9b:f2:10:04:ce:24:75:38:9d:ac:dc:78:44:b4:bf: 0f:05:a6:08:04:bb:57:bd:11:13:58:90:69:56:0e:ef:b4:64: 32:75:cb:c3:75:e5:9e:9a:e6:62:72:71:86:8a:47:9c:c0:62: 52:4b:86:bf:8d:51:c8:e5:5b:de:84:0e:3e:e0:94:01:a9:96: 79:70:c8:0b:ab:19:d4:20:40:ed:04:91:73:f0:ee:be:12:16: 3e:32:8b:a1:d2:65:20:35:e3:34:78:db:86:a6:f5:ad:51:c2: f9:79:84:f3:d9:0b:8d:58:b1:03:01:d6:bd:5e:d5:44:3b:d6: 46:16:30:5f:c2:eb:a9:3c:93:d4:cd:77:bf:6e:a8:4f:fe:4f: e3:c6:d7:c8:86:62:34:4a:ab:27:1e:a0:bc:4a:7f:d1:c1:dd: e3:41:28:09:9d:0d:aa:4c:ae:ae:94:f2:92:14:17:78:a6:e4: 95:c1:a6:d9:e0:da:4e:8e:3d:53:0a:9a:9b:ae:21:41:27:4e: f2:bf:48:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUwOEUxMTAvBgNVBAUTKEQyOTBERDE2NzIyMkMzOUIxMzRGODFFNTI3RjAyMkQ4 NUVERjIzRjQwHhcNMjQwNTE4MjIwMjEwWhcNMjQwNTI1MjIwMjEwWjAYMRYwFAYD VQQDEw02NjQ5MjU2Mi0zMTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBi4xsGvF+qppLAMhujcxnFQ5qS+IVDqc+Gj1fI4b3ZZuCzqD7OhjYHqQrng xR0hpTBiIZzuaj5NB8w79lpL829ExmvM7qIhqHP8hMAq0cKUdT46xJoPbF2jeDsz YrvmfL+J2BjriY+ByOilj2eH+k/0NSygONhSwSOIUKLZ6w8oISJk2xF+nz8V12Um /IG+Bw83bXBYVCZpHjgqKjg4Q4mMK/LYAuWjJSkmLfTvCajAXlv0GBCMnvXxa1Se YxVmpAyMDrpKk+r1QwHBQ6kc8v73Yqs0B9Pfv7HdhETYB5FFwu2XvIVI8tQjPnZ+ h6/7dmgf/XfZ1XO0pgddjuDjnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN7/b8Sb fjwxk0zczfU5Gfq2kx4jMB8GA1UdIwQYMBaAFNKQ3RZyIsObE0+B5SfwIthe3yP0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTA4RS9CMkEzQzIzQ0JG NEExMUVBOEMzMTVEMzFDNEY5QUUwMi8wcERkRm5JaXc1c1RUNEhsSl9BaTJGN2ZJ X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBwRGRGbklpdzVzVFQ0SGxKX0FpMkY3ZklfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTA4RS9CMkEzQzIzQ0JGNEExMUVBOEMzMTVEMzFDNEY5QUUwMi8wcERkRm5JaXc1 c1RUNEhsSl9BaTJGN2ZJX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCP2O/GZh0RhTmD8v3+OoMDjr7rG8y5aiwY/17+2mCGeuh4gvrXUgF0 1tlscU1dEhv+u0uKMT7ElSib8hAEziR1OJ2s3HhEtL8PBaYIBLtXvRETWJBpVg7v tGQydcvDdeWemuZicnGGikecwGJSS4a/jVHI5VvehA4+4JQBqZZ5cMgLqxnUIEDt BJFz8O6+EhY+Mouh0mUgNeM0eNuGpvWtUcL5eYTz2QuNWLEDAda9XtVEO9ZGFjBf wuupPJPUzXe/bqhP/k/jxtfIhmI0SqsnHqC8Sn/Rwd3jQSgJnQ2qTK6ulPKSFBd4 puSVwabZ4NpOjj1TCpqbriFBJ07yv0h+ -----END CERTIFICATE-----Generated at Sun May 19 00:16:18 2024 by rpki-client on console-fra.rpki-client.org