$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft File: De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft (raw, json) Hash identifier: RKCq03eGo2WzZqg0Dfhf5GZbF/9kh5oQrVKaH6+sz8s= Subject key identifier: 2B:66:19:01:EE:32:85:F5:6B:DB:89:D2:C9:57:C7:24:0D:A4:EA:82 Authority key identifier: 0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61 Certificate issuer: /CN=A91B1FA8/serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561 Certificate serial: 1273 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft Manifest number: 125F Signing time: Sat 18 May 2024 17:40:20 +0000 Manifest this update: Sat 18 May 2024 17:40:19 +0000 Manifest next update: Sat 25 May 2024 17:40:19 +0000 Files and hashes: 1: De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl (hash: 43ToDtrfYHYD16GIPFjr34wFNDp2xK/gnDhpfH0/8kI=) 2: 7677A43AF8C511EBA498E771C4F9AE02.roa (hash: Ahb9X8aGkM4hgOjSkOVMY4nk30td0okGRRUIVN6nUDA=) 3: B8B7B5BA64BE11EBA96DF40DC4F9AE02.roa (hash: a0NH5wp4HNks2+m4hfx7zhLI5guHxytTYFO6xK/58YU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4723 (0x1273) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1FA8/serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561 Validity Not Before: May 18 17:40:19 2024 GMT Not After : May 25 17:40:19 2024 GMT Subject: CN=6648e803-c40f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c6:e2:d6:ab:a5:79:22:03:5c:a9:46:61:c8: 81:23:28:37:b1:2b:57:4e:7a:8f:b4:80:aa:6a:a6: 11:07:28:da:ee:27:4f:75:01:30:04:a9:e4:ac:b5: f8:2e:e7:cd:89:73:81:4e:84:38:03:4e:fe:b1:8b: fb:84:d5:21:5f:e0:d3:9b:30:f3:63:de:b7:6f:42: 8a:ce:55:0f:2b:b8:7a:a3:62:04:49:f7:f6:de:03: ad:34:f6:14:15:ae:41:9f:fc:81:31:97:32:0a:90: 53:8f:82:74:9a:25:b3:a0:26:c7:1b:b6:e4:4c:91: 83:c2:4a:90:85:74:e5:f7:c0:e4:bd:57:b1:9f:49: 6e:6a:cc:83:a2:49:f0:b0:af:d7:76:4b:a2:bf:87: f8:98:65:bc:b1:9e:63:27:cb:87:27:9e:c6:33:6d: 5d:a8:fd:76:12:80:be:53:14:69:4a:56:b3:3b:dc: 5d:03:e2:0d:19:1a:e4:36:dc:81:a9:0d:06:80:1b: b2:65:4d:be:c6:1b:6c:ec:69:42:32:83:40:35:50: c9:d4:bc:c9:b7:8b:dd:ce:88:31:01:4d:94:4b:19: 2d:fd:8f:4c:b2:1a:ea:95:e8:72:75:7d:7e:d9:59: c2:37:1f:94:29:0a:04:97:ef:66:44:72:4c:b6:fd: b9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:66:19:01:EE:32:85:F5:6B:DB:89:D2:C9:57:C7:24:0D:A4:EA:82 X509v3 Authority Key Identifier: keyid:0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:27:f6:6c:88:56:a8:ba:e5:45:79:31:76:22:4d:8c:1d:c5: 26:c7:4f:c4:3f:5a:f3:38:37:c8:3d:48:0c:61:10:b4:bb:bd: a3:74:c9:29:33:db:b2:d3:92:0a:f8:be:dd:c6:2e:57:d1:15: fa:25:27:8c:55:2a:9b:02:f7:b1:8f:0b:21:f1:63:f4:30:cc: f8:84:d0:ca:23:58:ec:31:30:7f:c7:0f:b7:0a:42:ec:c2:2e: 99:5e:c9:51:a6:a5:7c:0c:3f:4c:59:19:e6:a0:7c:ae:61:58: 1e:15:6f:0a:99:90:82:21:d0:8a:f0:85:1f:b3:0a:06:e6:60: 66:a2:44:19:c3:c2:3f:69:da:4c:7f:7e:f0:f4:fe:73:dc:eb: bc:a2:01:18:78:c0:85:28:7f:1b:04:7e:63:b7:b0:98:ea:f7: 9c:64:4e:cc:0a:07:2f:0f:01:e4:07:c4:37:f4:8c:76:40:4a: a5:be:3c:a5:68:b0:bc:ac:1c:84:d0:d3:10:67:03:ae:53:94: b8:e7:c7:00:74:7e:f2:a5:df:19:d1:a1:c8:b1:80:18:6f:c2: 11:e7:3f:36:b9:84:35:61:ee:5b:53:54:d2:26:c2:a5:ca:a5: 1d:66:fb:7e:76:5f:b0:ee:44:ac:b4:d0:53:fa:a9:04:19:4e: 71:9c:3d:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGQTgxMTAvBgNVBAUTKDBERUVFRDEzNjIxNDNDMzYyRjI0Rjk3QzY3QzhFNEVD RTJDN0E1NjEwHhcNMjQwNTE4MTc0MDE5WhcNMjQwNTI1MTc0MDE5WjAYMRYwFAYD VQQDEw02NjQ4ZTgwMy1jNDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2cbi1quleSIDXKlGYciBIyg3sStXTnqPtICqaqYRByja7idPdQEwBKnkrLX4 LufNiXOBToQ4A07+sYv7hNUhX+DTmzDzY963b0KKzlUPK7h6o2IESff23gOtNPYU Fa5Bn/yBMZcyCpBTj4J0miWzoCbHG7bkTJGDwkqQhXTl98DkvVexn0luasyDoknw sK/Xdkuiv4f4mGW8sZ5jJ8uHJ57GM21dqP12EoC+UxRpSlazO9xdA+INGRrkNtyB qQ0GgBuyZU2+xhts7GlCMoNANVDJ1LzJt4vdzogxAU2USxkt/Y9MshrqlehydX1+ 2VnCNx+UKQoEl+9mRHJMtv25OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCtmGQHu MoX1a9uJ0slXxyQNpOqCMB8GA1UdIwQYMBaAFA3u7RNiFDw2LyT5fGfI5Ozix6Vh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUZBOC9ERjQ3MDkwMkFG RDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9EZTd0RTJJVVBEWXZKUGw4WjhqazdPTEhw V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RlN3RFMklVUERZdkpQbDhaOGprN09MSHBXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUZBOC9ERjQ3MDkwMkFGRDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9EZTd0RTJJVVBE WXZKUGw4WjhqazdPTEhwV0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPJ/ZsiFaouuVFeTF2Ik2MHcUmx0/EP1rzODfIPUgMYRC0u72jdMkp M9uy05IK+L7dxi5X0RX6JSeMVSqbAvexjwsh8WP0MMz4hNDKI1jsMTB/xw+3CkLs wi6ZXslRpqV8DD9MWRnmoHyuYVgeFW8KmZCCIdCK8IUfswoG5mBmokQZw8I/adpM f37w9P5z3Ou8ogEYeMCFKH8bBH5jt7CY6vecZE7MCgcvDwHkB8Q39Ix2QEqlvjyl aLC8rByE0NMQZwOuU5S458cAdH7ypd8Z0aHIsYAYb8IR5z82uYQ1Ye5bU1TSJsKl yqUdZvt+dl+w7kSstNBT+qkEGU5xnD2Q -----END CERTIFICATE-----Generated at Sat May 18 18:12:33 2024 by rpki-client on console-fra.rpki-client.org