$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft File: xE8qyrKneZlDFaqTsyPam0dce5o.mft (raw, json) Hash identifier: acB+Djghf+qUXT7IUaejmSPWe8sKz03oMFrGwgBg9H4= Subject key identifier: 70:8E:35:43:FA:41:EA:44:51:59:F1:3E:81:C3:8E:65:96:2A:C9:71 Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A Certificate issuer: /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Certificate serial: 02D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft Manifest number: 02C5 Signing time: Sun 19 May 2024 03:31:17 +0000 Manifest this update: Sun 19 May 2024 03:31:16 +0000 Manifest next update: Sun 26 May 2024 03:31:16 +0000 Files and hashes: 1: xE8qyrKneZlDFaqTsyPam0dce5o.crl (hash: sD48QFe6LGzln8iLJ7sjLWf9+afUEjONAQYzyFC65fI=) 2: 0A90D37481F111EE9004B21AC4F9AE02.roa (hash: 2I9IEN9zY1M9/iiiNpTlxWghriCahKvG+6nECUgG5Vk=) 3: F3EFD9AA8E8711EE90D68539C4F9AE02.roa (hash: scWbmVnpew3VrLWYiHJOJEyclO7ltcpuSiXsKrZEPPQ=) 4: 3091AB2A81F111EE9CCDE11AC4F9AE02.roa (hash: 8s9RZoWhuXaL/OgRzbyz5adndAQTYe/JD4RJBSvRHGk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 722 (0x2d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Validity Not Before: May 19 03:31:16 2024 GMT Not After : May 26 03:31:16 2024 GMT Subject: CN=66497284-3f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:49:35:a5:33:99:41:e4:77:ca:22:b8:4a:99: ce:d7:97:31:8b:88:99:83:c2:ea:03:65:98:22:68: 0e:69:3f:0d:e4:e5:e8:08:8b:b2:58:38:b7:5a:f7: 0a:20:0c:24:a3:53:cf:5c:e1:c5:7a:3d:6e:47:1e: 3c:3b:24:74:61:4a:1d:3e:bb:13:1f:1b:6d:4f:ff: 78:42:30:f6:29:f0:2a:d5:c7:48:44:47:02:c3:d0: 19:e6:e9:6d:fc:2e:13:b6:74:89:9c:1c:c8:9c:1d: 06:c7:c3:b2:c1:dd:f8:90:6d:00:e1:f3:31:7c:c5: de:19:a7:56:c5:29:e6:cd:56:42:e5:86:57:14:fb: 7f:63:f2:6e:88:e3:60:8d:bd:39:ad:a1:d4:e2:7b: 70:f1:45:c3:a1:21:bb:84:63:9b:4f:34:89:d6:a3: 61:64:cf:85:0a:fc:09:77:85:62:9a:6d:90:98:d2: d1:10:70:8a:f4:31:ef:ad:f5:ba:d4:2c:85:cc:1d: f0:43:04:ca:e3:43:fb:eb:8f:de:28:14:15:fa:8c: 5c:55:a3:82:31:74:ee:68:bf:f0:25:b5:64:a1:4a: 96:5a:f6:5d:fe:82:55:e7:a1:aa:15:06:dd:9e:3c: 3e:02:52:de:8c:3d:48:02:79:8e:ea:20:19:e2:51: b2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:8E:35:43:FA:41:EA:44:51:59:F1:3E:81:C3:8E:65:96:2A:C9:71 X509v3 Authority Key Identifier: keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:09:59:a0:e9:62:17:38:05:0b:ad:0c:7e:02:4c:05:39:3e: 90:c8:45:fe:f4:d0:25:f7:76:2a:eb:de:67:fd:c6:86:6c:60: 55:fa:2a:48:d5:1f:30:16:5e:fa:4c:47:c3:b7:7d:7c:32:98: 4a:c8:fc:c0:0f:e4:93:9c:31:85:2f:37:fa:bf:d8:cd:b5:0c: 47:94:a8:03:f9:1d:31:26:61:02:a9:ed:95:6b:ca:7a:e5:69: 24:b1:d9:2c:7e:1e:16:c1:ee:59:ec:e0:1e:39:5b:da:0c:f1: 1c:4e:09:2e:67:d4:b4:9b:54:43:c8:51:fb:05:1d:f5:2b:c3: 1d:83:0a:48:62:c6:b0:65:97:40:8a:c7:02:3a:61:b6:ae:f4: 44:4b:3a:ce:f9:fa:f3:21:45:45:ca:76:34:b0:4c:b2:5c:6d: 10:89:af:30:08:69:c2:55:a1:37:85:0f:cc:fa:cd:c7:d0:6b: 53:de:f8:d1:89:73:7c:b2:9a:6f:a8:3c:de:ce:e6:20:40:7a: 9b:53:de:73:63:5f:3d:f9:d2:27:48:0f:a8:c5:d8:89:9c:6a: c4:c1:a5:75:ea:da:bf:17:05:70:70:94:df:64:35:aa:af:32: 22:fa:d6:4f:10:32:9e:95:72:b6:83:9d:22:db:98:8e:35:69: 85:73:a6:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRDRjExMTAvBgNVBAUTKEM0NEYyQUNBQjJBNzc5OTk0MzE1QUE5M0IzMjNEQTlC NDc1QzdCOUEwHhcNMjQwNTE5MDMzMTE2WhcNMjQwNTI2MDMzMTE2WjAYMRYwFAYD VQQDEw02NjQ5NzI4NC0zZjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA60k1pTOZQeR3yiK4SpnO15cxi4iZg8LqA2WYImgOaT8N5OXoCIuyWDi3WvcK IAwko1PPXOHFej1uRx48OyR0YUodPrsTHxttT/94QjD2KfAq1cdIREcCw9AZ5ult /C4TtnSJnBzInB0Gx8Oywd34kG0A4fMxfMXeGadWxSnmzVZC5YZXFPt/Y/JuiONg jb05raHU4ntw8UXDoSG7hGObTzSJ1qNhZM+FCvwJd4Vimm2QmNLREHCK9DHvrfW6 1CyFzB3wQwTK40P764/eKBQV+oxcVaOCMXTuaL/wJbVkoUqWWvZd/oJV56GqFQbd njw+AlLejD1IAnmO6iAZ4lGyfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHCONUP6 QepEUVnxPoHDjmWWKslxMB8GA1UdIwQYMBaAFMRPKsqyp3mZQxWqk7Mj2ptHXHua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRENGMS9FQjU5MTEyMkE4 M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVabERGYXFUc3lQYW0wZGNl NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hFOHF5cktuZVpsREZhcVRzeVBhbTBkY2U1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RENGMS9FQjU5MTEyMkE4M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVa bERGYXFUc3lQYW0wZGNlNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNCVmg6WIXOAULrQx+AkwFOT6QyEX+9NAl93Yq695n/caGbGBV+ipI 1R8wFl76TEfDt318MphKyPzAD+STnDGFLzf6v9jNtQxHlKgD+R0xJmECqe2Va8p6 5Wkksdksfh4Wwe5Z7OAeOVvaDPEcTgkuZ9S0m1RDyFH7BR31K8MdgwpIYsawZZdA iscCOmG2rvRESzrO+frzIUVFynY0sEyyXG0Qia8wCGnCVaE3hQ/M+s3H0GtT3vjR iXN8sppvqDzezuYgQHqbU95zY189+dInSA+oxdiJnGrEwaV16tq/FwVwcJTfZDWq rzIi+tZPEDKelXK2g50i25iONWmFc6bO -----END CERTIFICATE-----Generated at Sun May 19 04:22:05 2024 by rpki-client on console-fra.rpki-client.org