$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft File: Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft (raw, json) Hash identifier: +BjhZG6gZmgcxM37kGuxCoUH1cs3IxqxwO4Qa5ysvkg= Subject key identifier: 2B:D1:E0:22:B6:A0:56:BC:20:60:61:8B:A6:BC:F0:6B:D9:EA:62:AF Authority key identifier: 0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F Certificate issuer: /CN=A91AF5F7/serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F Certificate serial: 050C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft Manifest number: 04FF Signing time: Sun 19 May 2024 01:14:16 +0000 Manifest this update: Sun 19 May 2024 01:14:15 +0000 Manifest next update: Sun 26 May 2024 01:14:15 +0000 Files and hashes: 1: Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl (hash: erMgNTKsQQRXZgJ2OGVfxkmOHSiFdfQVhKAohMF95Xg=) 2: E2323DE4C7A411EC8667B90EC4F9AE02.roa (hash: K/3uQxJu9KgbFW1UeOyb9Kwabzwk+mFnggL7g7/+jHo=) 3: 0DD6AB9CA4F011EC96AF7B65C4F9AE02.roa (hash: ynn/ihuAK1oGjrymoHijk8sXm5p9ewm72t3IkazLAng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1292 (0x50c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF5F7/serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F Validity Not Before: May 19 01:14:15 2024 GMT Not After : May 26 01:14:15 2024 GMT Subject: CN=66495268-5570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5c:dd:75:76:33:03:8d:75:6d:f8:6f:fb:ee: 56:8e:05:bd:e7:65:20:cd:21:1a:5f:1a:b5:c0:d2: 43:f7:43:d2:5e:45:c8:a3:7f:6e:63:e8:3d:ca:7a: b1:76:14:9a:e7:a6:11:4b:66:a4:40:ab:24:42:6a: 03:33:24:5a:ef:1f:0e:d9:41:23:18:79:43:15:6f: 7d:bd:8a:95:7b:53:21:1c:f3:1a:17:58:3f:b8:f6: 9e:c1:43:26:ef:a0:98:74:bc:cb:94:3c:2a:85:6d: 05:4e:aa:93:13:cf:20:38:f5:d6:97:0d:21:fe:58: 79:1a:8d:a3:64:20:c5:da:2b:4e:fe:a8:d6:45:4d: f0:e6:8f:29:db:5b:1d:6f:31:c4:a8:a5:bc:c9:20: 88:60:45:4f:76:d0:f9:83:20:e8:ae:d9:c3:4c:e4: 1c:c2:c6:21:7d:fc:e5:e2:b8:45:72:d0:66:56:f5: f9:6e:98:81:e4:a1:66:60:19:bb:1f:63:a4:3a:5e: 9e:b2:b8:4d:61:44:00:6b:06:9f:1f:12:cb:7f:e2: fe:c7:7b:52:02:b0:5b:86:a5:76:13:44:96:a4:8b: a1:2f:a8:e5:85:87:71:43:17:f7:a4:87:52:03:fa: 4d:7b:7e:43:f9:5c:15:a4:ad:9d:fc:5a:e4:26:e5: eb:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D1:E0:22:B6:A0:56:BC:20:60:61:8B:A6:BC:F0:6B:D9:EA:62:AF X509v3 Authority Key Identifier: keyid:0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:17:64:c6:24:f0:d2:2b:73:70:f5:18:77:5b:85:31:9f:27: 31:97:bb:d4:db:d9:85:78:ca:a4:e7:3e:65:0a:71:4f:16:8a: 9d:43:d4:0d:f7:3e:d6:d3:d3:6b:96:64:a0:e4:8d:94:6a:a1: fe:b9:1b:fc:05:32:66:90:78:da:17:d2:80:c8:02:7f:35:97: df:bb:e5:1a:ee:cd:10:59:2c:ae:2b:01:a2:14:5f:32:fe:83: eb:87:94:20:30:27:5c:a0:9d:5a:33:d3:b5:98:39:45:86:00: 71:7c:2b:29:1a:7b:52:68:40:24:b8:52:0a:4e:14:33:7e:8c: c9:e9:e9:f9:dd:e4:68:01:84:ca:ef:35:1e:59:37:f0:72:19: e4:fc:01:33:59:78:2e:1a:26:0a:a6:14:b4:19:2c:1d:7a:bd: df:bc:17:f5:17:70:95:bb:a6:c2:c9:d7:45:03:16:bc:b1:0e: 2a:01:cd:94:5e:61:78:3f:f4:a5:ad:8e:66:d0:3e:73:9c:78: e8:c2:cb:41:39:9a:2c:87:25:94:0a:c9:7a:35:5c:7c:e8:b7: e9:93:0f:de:24:d6:89:85:49:95:d6:7e:35:60:e6:c7:e0:8e: ff:55:b1:5f:43:d3:72:69:04:be:e2:93:a1:5d:16:63:af:1d: 5b:6d:14:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY1RjcxMTAvBgNVBAUTKDBBMjc3RDI2QTlDMjQwMkI4QTFDRDQ1Nzc5MzVFNEYz QzI1OUMxOUYwHhcNMjQwNTE5MDExNDE1WhcNMjQwNTI2MDExNDE1WjAYMRYwFAYD VQQDEw02NjQ5NTI2OC01NTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1zddXYzA411bfhv++5WjgW952UgzSEaXxq1wNJD90PSXkXIo39uY+g9ynqx dhSa56YRS2akQKskQmoDMyRa7x8O2UEjGHlDFW99vYqVe1MhHPMaF1g/uPaewUMm 76CYdLzLlDwqhW0FTqqTE88gOPXWlw0h/lh5Go2jZCDF2itO/qjWRU3w5o8p21sd bzHEqKW8ySCIYEVPdtD5gyDortnDTOQcwsYhffzl4rhFctBmVvX5bpiB5KFmYBm7 H2OkOl6esrhNYUQAawafHxLLf+L+x3tSArBbhqV2E0SWpIuhL6jlhYdxQxf3pIdS A/pNe35D+VwVpK2d/FrkJuXrfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvR4CK2 oFa8IGBhi6a88GvZ6mKvMB8GA1UdIwQYMBaAFAonfSapwkArihzUV3k15PPCWcGf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjVGNy80NEZDRTU2OEM3 ODQxMUVCQUQ0Qzk2NTlDNEY5QUUwMi9DaWQ5SnFuQ1FDdUtITlJYZVRYazg4Slp3 WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NpZDlKcW5DUUN1S0hOUlhlVFhrODhKWndaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjVGNy80NEZDRTU2OEM3ODQxMUVCQUQ0Qzk2NTlDNEY5QUUwMi9DaWQ5SnFuQ1FD dUtITlJYZVRYazg4Slp3WjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1F2TGJPDSK3Nw9Rh3W4Uxnycxl7vU29mFeMqk5z5lCnFPFoqdQ9QN 9z7W09NrlmSg5I2UaqH+uRv8BTJmkHjaF9KAyAJ/NZffu+Ua7s0QWSyuKwGiFF8y /oPrh5QgMCdcoJ1aM9O1mDlFhgBxfCspGntSaEAkuFIKThQzfozJ6en53eRoAYTK 7zUeWTfwchnk/AEzWXguGiYKphS0GSwder3fvBf1F3CVu6bCyddFAxa8sQ4qAc2U XmF4P/SlrY5m0D5znHjowstBOZoshyWUCsl6NVx86Lfpkw/eJNaJhUmV1n41YObH 4I7/VbFfQ9NyaQS+4pOhXRZjrx1bbRQl -----END CERTIFICATE-----Generated at Sun May 19 01:47:14 2024 by rpki-client on console-fra.rpki-client.org