$ rpki-client -vvf rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft File: 15qMdwXiQZ6rQpU7a8ilcga6xiY.mft (raw, json) Hash identifier: ek4GRno2Hzl8aLLXR1FaZ5AbRC08nfve7+vIgsO/Awo= Subject key identifier: A7:92:8B:A3:83:A0:F4:0F:65:56:7F:E4:CA:D4:11:5C:5B:63:32:43 Authority key identifier: D7:9A:8C:77:05:E2:41:9E:AB:42:95:3B:6B:C8:A5:72:06:BA:C6:26 Certificate issuer: /CN=A91BADCE/serialNumber=D79A8C7705E2419EAB42953B6BC8A57206BAC626 Certificate serial: 03DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft Manifest number: 03D4 Signing time: Sun 19 May 2024 02:22:42 +0000 Manifest this update: Sun 19 May 2024 02:22:42 +0000 Manifest next update: Sun 26 May 2024 02:22:42 +0000 Files and hashes: 1: 15qMdwXiQZ6rQpU7a8ilcga6xiY.crl (hash: rlw2ofVxRY0RQi+4GYIDrh4xR4vC4HCLvJnT0MzBMn8=) 2: 4BD423FE3AF911EC918C643AC4F9AE02.roa (hash: NFITE7TJAb/KXxBkyjqQoKIW0rgE3xHfQ2EjzFnf43U=) 3: 56C4925E3B0711EC9715501EC4F9AE02.roa (hash: zzgWG6q6KItbF0m0zrC3rt7sfg/sytV8ZrJ1Qdcqn+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.crl rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:22:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 989 (0x3dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BADCE/serialNumber=D79A8C7705E2419EAB42953B6BC8A57206BAC626 Validity Not Before: May 19 02:22:42 2024 GMT Not After : May 26 02:22:42 2024 GMT Subject: CN=66496272-8eea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:7a:d3:d8:af:87:45:6c:d9:23:66:d2:06:4c: 4b:47:04:e2:e9:8f:b2:bd:3f:81:5e:72:5c:7f:35: 87:2d:1b:0e:36:fc:c5:d9:6b:8f:3a:0e:c6:92:9f: f5:b9:fa:72:0d:db:f0:f3:be:a4:48:1b:b4:21:d4: 5b:1e:d5:98:6c:60:b8:73:e4:f9:71:a3:5d:37:34: d3:b3:9e:fb:72:4b:21:e8:07:3f:1b:28:b3:de:f3: e3:f6:3e:57:10:6b:ee:68:ac:3b:83:5a:04:15:4e: dd:45:fa:9f:d8:0b:62:54:a1:2d:52:1b:3e:80:09: bc:23:2c:3f:c2:56:1e:35:51:d7:68:be:e8:99:40: bb:6d:8d:01:86:0d:c9:c5:98:91:f2:ba:29:e6:e6: 1b:f6:04:d1:84:4e:4c:c6:8a:89:aa:65:bb:d2:ca: dc:32:f9:0c:93:80:ee:1e:18:7b:53:43:10:6e:6f: 46:1f:9b:ee:2b:f9:3f:1e:bc:89:fd:9e:36:e8:ae: cd:5b:a1:40:ab:b6:4d:82:06:3e:1b:bd:42:e5:e3: 55:42:5a:ba:11:52:34:fd:b8:9d:d4:c7:3e:2b:fd: 9b:50:35:a6:29:b2:21:e3:03:8c:6a:62:91:29:48: ff:0d:6d:fd:ed:4f:9f:a5:d0:02:7e:10:13:3b:71: 1b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:92:8B:A3:83:A0:F4:0F:65:56:7F:E4:CA:D4:11:5C:5B:63:32:43 X509v3 Authority Key Identifier: keyid:D7:9A:8C:77:05:E2:41:9E:AB:42:95:3B:6B:C8:A5:72:06:BA:C6:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:89:39:3f:ba:78:ee:7f:24:43:e9:26:12:6f:e8:5e:6b:70: 32:7a:56:6a:1b:e1:e9:20:f9:dd:70:6f:ad:5e:1c:c7:3d:e2: 00:86:f2:94:e2:07:10:5b:8f:a9:46:a4:36:19:c8:15:1d:2f: c1:2a:4e:62:c9:41:fe:07:4e:7d:1a:f6:b4:5f:8c:90:c9:a2: 88:27:74:e0:89:bb:8e:64:03:46:ae:6c:4a:db:a0:cb:05:82: 75:e6:a8:0f:e4:e0:58:d5:1a:6e:22:b3:4b:70:ff:86:ae:ac: e2:94:b4:2a:75:96:08:04:ee:ba:07:62:2c:20:28:00:72:bd: f7:bd:7a:c9:9b:a4:2c:8e:9f:87:4a:f8:47:45:4f:4a:84:0c: 3a:ed:3e:b0:38:c6:c6:3a:2a:cc:d7:ff:a5:a1:fd:bf:af:9d: eb:26:6a:24:6c:29:97:2c:86:96:3d:da:3c:76:21:71:74:8b: 7e:de:7f:f2:a4:28:63:09:05:75:fa:26:52:cd:e3:25:e6:6e: 2a:fd:33:ee:bf:02:4a:11:2e:ed:c1:ea:2e:e8:a3:d9:1c:52: df:34:59:b9:27:66:2d:c2:cf:d6:91:80:b7:99:db:f5:96:a8: af:54:20:1b:1e:aa:c8:44:f1:41:5c:b3:45:6d:32:34:0b:03: 19:49:e1:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFEQ0UxMTAvBgNVBAUTKEQ3OUE4Qzc3MDVFMjQxOUVBQjQyOTUzQjZCQzhBNTcy MDZCQUM2MjYwHhcNMjQwNTE5MDIyMjQyWhcNMjQwNTI2MDIyMjQyWjAYMRYwFAYD VQQDEw02NjQ5NjI3Mi04ZWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+nrT2K+HRWzZI2bSBkxLRwTi6Y+yvT+BXnJcfzWHLRsONvzF2WuPOg7Gkp/1 ufpyDdvw876kSBu0IdRbHtWYbGC4c+T5caNdNzTTs577cksh6Ac/Gyiz3vPj9j5X EGvuaKw7g1oEFU7dRfqf2AtiVKEtUhs+gAm8Iyw/wlYeNVHXaL7omUC7bY0Bhg3J xZiR8rop5uYb9gTRhE5MxoqJqmW70srcMvkMk4DuHhh7U0MQbm9GH5vuK/k/HryJ /Z426K7NW6FAq7ZNggY+G71C5eNVQlq6EVI0/bid1Mc+K/2bUDWmKbIh4wOMamKR KUj/DW397U+fpdACfhATO3Eb3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKeSi6OD oPQPZVZ/5MrUEVxbYzJDMB8GA1UdIwQYMBaAFNeajHcF4kGeq0KVO2vIpXIGusYm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQURDRS8wRjcyODFCQzNB RjQxMUVDODlDRTA3MkZDNEY5QUUwMi8xNXFNZHdYaVFaNnJRcFU3YThpbGNnYTZ4 aVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1cU1kd1hpUVo2clFwVTdhOGlsY2dhNnhpWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QURDRS8wRjcyODFCQzNBRjQxMUVDODlDRTA3MkZDNEY5QUUwMi8xNXFNZHdYaVFa NnJRcFU3YThpbGNnYTZ4aVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpiTk/unjufyRD6SYSb+hea3AyelZqG+HpIPndcG+tXhzHPeIAhvKU 4gcQW4+pRqQ2GcgVHS/BKk5iyUH+B059Gva0X4yQyaKIJ3TgibuOZANGrmxK26DL BYJ15qgP5OBY1RpuIrNLcP+GrqzilLQqdZYIBO66B2IsICgAcr33vXrJm6Qsjp+H SvhHRU9KhAw67T6wOMbGOirM1/+lof2/r53rJmokbCmXLIaWPdo8diFxdIt+3n/y pChjCQV1+iZSzeMl5m4q/TPuvwJKES7tweou6KPZHFLfNFm5J2Ytws/WkYC3mdv1 lqivVCAbHqrIRPFBXLNFbTI0CwMZSeFS -----END CERTIFICATE-----Generated at Sun May 19 03:14:49 2024 by rpki-client on console-fra.rpki-client.org