$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft File: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft (raw, json) Hash identifier: +hlwxK7AFjwiy4gQhlCxPMdYL1id2BClGuQhE8RPjag= Subject key identifier: F6:5B:0A:9F:07:11:53:B7:D9:F3:01:2E:A5:0D:24:62:19:DA:3E:B1 Authority key identifier: 63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9 Certificate issuer: /CN=A91B1461/serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9 Certificate serial: 309E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft Manifest number: 308E Signing time: Sat 04 May 2024 15:43:01 +0000 Manifest this update: Sat 04 May 2024 15:43:00 +0000 Manifest next update: Sat 11 May 2024 15:43:00 +0000 Files and hashes: 1: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl (hash: SBgiDhGOuSQ+suKx+XZDAJko5s466m+TrAMvG9vrr7Q=) 2: 33B0CCAEBCE311EA953FBB5EC4F9AE02.roa (hash: D1N2PqltUFeb2EXCCJMaqaYfg0iGljFbGHuYdjr+FsQ=) 3: 32538B4EBCE311EA953FBB5EC4F9AE02.roa (hash: Q+f6CDvuXieanMUN2OEVHBNkRx3E+2cd6GUP+sW2+hE=) 4: 31CCE602BCE311EA953FBB5EC4F9AE02.roa (hash: DXatxoET1+Gd2NPAgN9lssfdJ/wZs+mLGS3RWjHmUKs=) 5: 33036E24BCE311EA953FBB5EC4F9AE02.roa (hash: iDusxbeufXmGs67trrG8IfPzLwRxkKDY8iVJW3Aq6Ds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12446 (0x309e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1461/serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9 Validity Not Before: May 4 15:43:00 2024 GMT Not After : May 11 15:43:00 2024 GMT Subject: CN=66365785-ead6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:dd:bd:12:12:8b:e3:6c:7b:5a:55:01:8d:09: 70:40:cd:53:0e:0d:e1:ed:bc:56:b2:d8:41:d5:6e: 9f:15:23:bc:1a:e9:ce:af:4a:ff:65:88:69:60:34: 2a:82:c4:1c:07:33:8c:0e:79:fd:72:89:91:f0:4c: 29:8e:64:c1:a5:cb:aa:16:21:f8:ef:b4:94:43:0f: 54:50:03:b4:e5:c6:8e:12:29:6f:63:9f:c1:a2:47: 4b:86:bd:9b:5e:2f:67:aa:f1:04:6f:eb:c8:ba:ad: 8c:80:9b:dc:5a:81:81:cd:5b:76:1f:52:d7:f6:e5: 86:6c:f1:b7:39:4a:eb:c9:f7:e9:45:74:78:04:1c: b9:63:42:22:89:87:20:54:cf:03:ce:26:f9:13:c6: 05:ea:5a:75:b4:9e:75:21:17:c8:0c:65:12:7c:3c: dd:c7:17:e7:69:7a:60:b2:15:00:ac:16:f2:0d:1c: fd:62:e5:3d:40:91:d0:1b:5a:47:15:65:dc:89:1e: d4:ef:82:91:04:e6:6c:b4:d1:1f:33:05:c1:c4:9a: c0:24:4b:3b:85:26:aa:f5:ae:b4:46:02:3c:18:9d: ed:25:28:58:51:79:77:c1:d0:01:b0:26:12:8b:2d: 5c:99:77:7c:d2:02:b9:f3:2b:83:6d:e5:36:b9:9c: 8e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:5B:0A:9F:07:11:53:B7:D9:F3:01:2E:A5:0D:24:62:19:DA:3E:B1 X509v3 Authority Key Identifier: keyid:63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:9d:f9:a5:22:8e:c6:57:7d:65:17:18:38:a5:5d:e2:93:c5: dd:12:4a:95:1e:25:f7:46:68:e4:93:43:25:ee:0d:98:e2:3b: d6:2d:e4:49:7a:b7:03:ac:10:cb:18:9e:2e:1e:5b:04:8b:f1: a7:bc:d8:ad:61:18:30:f5:b6:25:58:02:1d:a5:a4:b6:b6:c9: 0c:93:f2:b1:1c:5b:85:5b:e6:b2:b6:cd:8d:04:88:88:10:3c: 4a:20:45:f5:fd:31:a3:42:02:5d:f3:8b:e4:c2:f6:dc:95:8a: 01:47:85:27:67:89:dc:01:75:cd:7f:5e:34:62:b2:7d:7b:a5: 3a:8e:d0:e9:3e:8d:55:d5:df:22:63:6f:ca:fc:4b:a9:7b:ce: 24:f6:8f:b2:cd:a9:f5:16:9a:25:80:9c:0d:2d:7a:b4:1e:67: 7c:f0:ac:27:a7:f2:cd:84:64:0a:71:80:7e:6a:18:9b:75:2d: ef:e5:9d:b1:cf:ea:aa:1a:dd:de:1f:d7:3b:ad:5e:f1:9f:22: 1a:af:2e:4f:60:32:35:8e:b1:60:74:9c:11:88:81:0b:6d:b1: dc:d4:28:41:65:b3:90:3b:e1:8a:f5:5e:d8:a5:22:2a:3a:28: 46:22:3d:ba:e4:97:d3:11:49:02:43:22:97:bb:0e:2a:98:fc: 36:0a:ca:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE0NjExMTAvBgNVBAUTKDYzN0VEMTQxRkZFMDI1RkQwNTE5OTQ1Q0VENDhFNzRG OEJEMEY1QzkwHhcNMjQwNTA0MTU0MzAwWhcNMjQwNTExMTU0MzAwWjAYMRYwFAYD VQQDEw02NjM2NTc4NS1lYWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzN29EhKL42x7WlUBjQlwQM1TDg3h7bxWsthB1W6fFSO8GunOr0r/ZYhpYDQq gsQcBzOMDnn9comR8EwpjmTBpcuqFiH477SUQw9UUAO05caOEilvY5/BokdLhr2b Xi9nqvEEb+vIuq2MgJvcWoGBzVt2H1LX9uWGbPG3OUrryffpRXR4BBy5Y0IiiYcg VM8Dzib5E8YF6lp1tJ51IRfIDGUSfDzdxxfnaXpgshUArBbyDRz9YuU9QJHQG1pH FWXciR7U74KRBOZstNEfMwXBxJrAJEs7hSaq9a60RgI8GJ3tJShYUXl3wdABsCYS iy1cmXd80gK58yuDbeU2uZyOkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPZbCp8H EVO32fMBLqUNJGIZ2j6xMB8GA1UdIwQYMBaAFGN+0UH/4CX9BRmUXO1I50+L0PXJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTQ2MS9GQ0U5QTY4MEJE RjUxMUUyOEE5MDRGQjQ2ODg2NUNFRS9ZMzdSUWZfZ0pmMEZHWlJjN1VqblQ0dlE5 Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kzN1JRZl9nSmYwRkdaUmM3VWpuVDR2UTljay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTQ2MS9GQ0U5QTY4MEJERjUxMUUyOEE5MDRGQjQ2ODg2NUNFRS9ZMzdSUWZfZ0pm MEZHWlJjN1VqblQ0dlE5Y2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0nfmlIo7GV31lFxg4pV3ik8XdEkqVHiX3Rmjkk0Ml7g2Y4jvWLeRJ ercDrBDLGJ4uHlsEi/GnvNitYRgw9bYlWAIdpaS2tskMk/KxHFuFW+ayts2NBIiI EDxKIEX1/TGjQgJd84vkwvbclYoBR4UnZ4ncAXXNf140YrJ9e6U6jtDpPo1V1d8i Y2/K/Eupe84k9o+yzan1FpolgJwNLXq0Hmd88Kwnp/LNhGQKcYB+ahibdS3v5Z2x z+qqGt3eH9c7rV7xnyIary5PYDI1jrFgdJwRiIELbbHc1ChBZbOQO+GK9V7YpSIq OihGIj265JfTEUkCQyKXuw4qmPw2Csqs -----END CERTIFICATE-----Generated at Sat May 4 16:34:31 2024 by rpki-client on console-fra.rpki-client.org