$ rpki-client -vvf rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft File: ROq4zxyb1totteNCtBx0fuOkUF8.mft (raw, json) Hash identifier: w+mcS7uFmxNw7dmyoo6InATihz0xTn+RNxNjsN5s7Oc= Subject key identifier: 26:34:A6:38:F0:2C:59:E8:85:5B:63:0C:B8:B8:00:AE:D3:EB:2E:0F Authority key identifier: 44:EA:B8:CF:1C:9B:D6:DA:2D:B5:E3:42:B4:1C:74:7E:E3:A4:50:5F Certificate issuer: /CN=A91B00B6/serialNumber=44EAB8CF1C9BD6DA2DB5E342B41C747EE3A4505F Certificate serial: 0946 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROq4zxyb1totteNCtBx0fuOkUF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft Manifest number: 0941 Signing time: Sat 18 May 2024 21:06:20 +0000 Manifest this update: Sat 18 May 2024 21:06:20 +0000 Manifest next update: Sat 25 May 2024 21:06:20 +0000 Files and hashes: 1: ROq4zxyb1totteNCtBx0fuOkUF8.crl (hash: y+26qferF/SjfTdrS+vaY186zFV9GOW1BKz9Ok5HdeI=) 2: 800EC4AE756F11EAAA2E0F6CC4F9AE02.roa (hash: iFLleCrx5lJW9+fJUCH6MH2zTLB5N+94fs57s6ev9K4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.crl rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROq4zxyb1totteNCtBx0fuOkUF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2374 (0x946) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B00B6/serialNumber=44EAB8CF1C9BD6DA2DB5E342B41C747EE3A4505F Validity Not Before: May 18 21:06:20 2024 GMT Not After : May 25 21:06:20 2024 GMT Subject: CN=6649184c-dcc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f1:03:18:23:45:27:35:9c:e6:4d:ca:29:ae: c0:e9:75:cf:bf:3f:bb:17:18:a6:54:e4:78:be:47: 0a:8e:73:8a:1d:3c:a8:0c:01:62:af:33:3f:ff:4f: 7a:89:f9:3f:63:9b:c3:2a:a2:32:09:ff:42:9f:17: 9f:ae:49:58:0a:c4:9a:c6:a6:f7:69:cf:1f:e7:63: a6:d3:3a:3d:10:9f:d6:4c:26:27:ec:8b:0d:9f:98: 9a:da:40:e8:26:af:d4:7b:ae:13:ea:fe:79:f8:cf: b8:db:d4:73:05:26:6e:ec:27:f0:87:74:1e:dd:94: 7d:2d:46:07:ae:e7:26:56:5b:64:10:ff:66:9e:98: d3:32:a6:77:83:2b:1f:4b:48:5e:5b:34:b8:0f:3e: a1:4f:1b:3d:d9:86:dc:e0:45:1b:b0:20:8c:4a:0b: 3b:b3:38:fb:72:bb:32:2c:12:ae:1f:12:83:17:99: 6b:27:66:f8:cc:8e:07:7b:41:46:25:d6:11:ca:1d: ec:46:40:8c:66:26:d0:8e:77:2f:dd:c7:28:8a:4f: 45:96:53:f9:e0:e2:99:3c:03:78:f4:ce:4d:ae:4d: 6f:99:ab:0f:5b:ec:da:65:61:9a:5f:5e:db:82:5d: 94:9a:6a:01:76:3b:e6:41:87:17:d1:b6:01:05:7b: 10:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:34:A6:38:F0:2C:59:E8:85:5B:63:0C:B8:B8:00:AE:D3:EB:2E:0F X509v3 Authority Key Identifier: keyid:44:EA:B8:CF:1C:9B:D6:DA:2D:B5:E3:42:B4:1C:74:7E:E3:A4:50:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROq4zxyb1totteNCtBx0fuOkUF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:30:e2:e7:36:6a:34:9a:e1:2a:ca:7a:b6:5d:87:d4:84:c0: 0c:b6:f7:99:9d:7c:0c:5e:df:8c:e3:c4:45:90:67:8d:4b:79: f3:b6:83:81:19:fb:00:cf:4f:35:ab:02:2a:57:08:80:e2:d3: 2b:38:94:40:8c:db:86:ad:e1:1a:64:6d:7c:5e:ad:de:05:ef: bc:a8:ce:ab:a6:fc:4d:9d:13:33:e3:57:4a:3a:c1:a1:2f:2a: e5:ca:8c:a3:a7:47:57:b2:bc:b5:6e:14:d6:a0:9f:4b:ca:64: a9:09:50:f9:65:7c:4a:fd:31:44:b1:60:32:ee:ba:43:cf:54: df:5d:ce:5e:86:5f:11:5f:32:5c:1c:f9:ef:db:ff:d5:02:cf: d1:2d:a0:72:60:ec:ba:db:8c:0d:c0:24:35:b8:7e:52:76:56: 16:bb:86:20:81:f1:a2:7f:63:46:9c:ed:bb:a5:66:0b:81:e3: 5e:fc:35:4e:18:82:81:c3:be:7d:f4:76:37:fe:26:55:ee:c7: 02:77:26:d2:72:d8:e4:55:ee:bc:13:13:d6:03:7c:e0:ff:1b: eb:af:e3:f1:f8:61:71:ee:f4:a2:4b:31:2e:02:62:76:0e:8f: 43:43:ef:09:a3:d4:92:8d:84:0a:18:db:e4:f6:f5:9c:7e:5f: f9:89:dd:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAwQjYxMTAvBgNVBAUTKDQ0RUFCOENGMUM5QkQ2REEyREI1RTM0MkI0MUM3NDdF RTNBNDUwNUYwHhcNMjQwNTE4MjEwNjIwWhcNMjQwNTI1MjEwNjIwWjAYMRYwFAYD VQQDEw02NjQ5MTg0Yy1kY2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo/EDGCNFJzWc5k3KKa7A6XXPvz+7FximVOR4vkcKjnOKHTyoDAFirzM//096 ifk/Y5vDKqIyCf9CnxefrklYCsSaxqb3ac8f52Om0zo9EJ/WTCYn7IsNn5ia2kDo Jq/Ue64T6v55+M+429RzBSZu7Cfwh3Qe3ZR9LUYHrucmVltkEP9mnpjTMqZ3gysf S0heWzS4Dz6hTxs92Ybc4EUbsCCMSgs7szj7crsyLBKuHxKDF5lrJ2b4zI4He0FG JdYRyh3sRkCMZibQjncv3ccoik9FllP54OKZPAN49M5Nrk1vmasPW+zaZWGaX17b gl2UmmoBdjvmQYcX0bYBBXsQ+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCY0pjjw LFnohVtjDLi4AK7T6y4PMB8GA1UdIwQYMBaAFETquM8cm9baLbXjQrQcdH7jpFBf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDBCNi85RjlBRjdBODc1 NkUxMUVBOTkxNDIzNkJDNEY5QUUwMi9ST3E0enh5YjF0b3R0ZU5DdEJ4MGZ1T2tV RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JPcTR6eHliMXRvdHRlTkN0QngwZnVPa1VGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDBCNi85RjlBRjdBODc1NkUxMUVBOTkxNDIzNkJDNEY5QUUwMi9ST3E0enh5YjF0 b3R0ZU5DdEJ4MGZ1T2tVRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYMOLnNmo0muEqynq2XYfUhMAMtveZnXwMXt+M48RFkGeNS3nztoOB GfsAz081qwIqVwiA4tMrOJRAjNuGreEaZG18Xq3eBe+8qM6rpvxNnRMz41dKOsGh Lyrlyoyjp0dXsry1bhTWoJ9LymSpCVD5ZXxK/TFEsWAy7rpDz1TfXc5ehl8RXzJc HPnv2//VAs/RLaByYOy624wNwCQ1uH5SdlYWu4YggfGif2NGnO27pWYLgeNe/DVO GIKBw7599HY3/iZV7scCdybSctjkVe68ExPWA3zg/xvrr+Px+GFx7vSiSzEuAmJ2 Do9DQ+8Jo9SSjYQKGNvk9vWcfl/5id2F -----END CERTIFICATE-----Generated at Sat May 18 22:14:04 2024 by rpki-client on console-fra.rpki-client.org