$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft File: 9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft (raw, json) Hash identifier: +t6PyttLqT+dIC+SKwwkSG5a1ppBlKDH2rQU/aHkhAY= Subject key identifier: 94:46:0C:EE:81:AC:68:9B:68:CC:03:EA:AF:93:3C:8A:73:55:1A:AD Authority key identifier: F4:40:18:18:1E:E5:C6:24:0E:13:94:39:5A:5C:CC:4D:2F:62:31:A4 Certificate issuer: /CN=A91BDD82/serialNumber=F44018181EE5C6240E1394395A5CCC4D2F6231A4 Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft Manifest number: 0E43 Signing time: Sat 18 May 2024 18:30:02 +0000 Manifest this update: Sat 18 May 2024 18:30:01 +0000 Manifest next update: Sat 25 May 2024 18:30:01 +0000 Files and hashes: 1: 9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl (hash: SHX3p6AkpP8r7r0VxT12EvGC/GJjrIKZk4zaRIJ4W0c=) 2: 324967826D8D11EE9883B985C4F9AE02.roa (hash: Iw9nloeINldGMGy1FSw0VoNVET6GSwNxLTiS8s9vzes=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDD82/serialNumber=F44018181EE5C6240E1394395A5CCC4D2F6231A4 Validity Not Before: May 18 18:30:01 2024 GMT Not After : May 25 18:30:01 2024 GMT Subject: CN=6648f3aa-2514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:68:16:d2:5d:00:31:b0:72:6c:d7:29:3f:39: 98:d1:76:44:d8:59:de:c3:6d:51:2d:06:16:97:1a: 46:cd:13:41:bf:f0:90:9d:5f:bb:10:8f:3a:da:d1: fb:bd:88:5f:e0:c6:e7:8d:ca:df:33:37:23:53:ca: a1:55:df:e1:82:56:67:38:25:cc:6d:af:ab:85:45: fb:bd:b9:98:2f:62:78:20:1f:9b:53:8c:57:7d:28: ae:ec:13:25:08:a2:0c:4c:34:f6:c8:97:5c:27:ee: 49:84:74:c4:bc:d9:69:2f:a9:e0:7c:9b:c8:59:93: 2d:6f:55:7e:bf:eb:28:e9:ce:a4:4c:cd:fa:aa:83: 8b:42:ea:3b:8e:b1:b2:0d:59:29:cb:66:83:a7:fe: d5:f3:fe:25:b4:77:f5:ee:c8:72:13:be:3f:2f:69: 65:f7:2c:ac:33:16:16:f9:38:7e:25:3d:ee:9a:8c: a5:87:17:3c:74:83:73:2a:b7:90:9c:9a:58:ea:f6: e5:52:c3:b2:88:d4:f6:49:63:05:02:1f:9e:c0:51: a9:e8:b9:43:87:14:bf:e3:db:93:84:87:7d:ee:57: 85:e7:eb:55:41:cd:96:94:91:81:05:12:b3:05:70: ee:94:f2:cb:2a:c4:d2:25:89:6c:01:e2:53:7a:62: 26:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:46:0C:EE:81:AC:68:9B:68:CC:03:EA:AF:93:3C:8A:73:55:1A:AD X509v3 Authority Key Identifier: keyid:F4:40:18:18:1E:E5:C6:24:0E:13:94:39:5A:5C:CC:4D:2F:62:31:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:1d:67:67:22:10:25:50:14:06:d7:69:ad:8d:48:54:b3:9e: 7d:6d:9f:2b:b8:f3:42:56:72:f7:27:f5:cf:31:3c:91:6d:9c: d6:7d:5f:50:62:e2:18:e9:82:68:f2:f3:b9:76:ba:7c:9c:ee: 84:f6:73:37:c6:18:35:4f:cd:74:a0:04:ad:79:b7:02:b6:74: b5:66:fc:a5:a8:10:3a:f3:10:31:0e:10:8a:e9:73:c3:f1:75: f8:ed:a5:f3:a6:0a:66:6e:65:6c:c7:f2:6a:76:1e:e3:2c:1d: 3e:86:f3:b0:94:4e:12:2f:97:cc:a2:7c:77:36:28:d3:df:74: d4:83:7e:10:a6:48:26:f5:31:78:ab:4e:59:67:2d:b8:40:55: 45:23:a8:55:c4:ed:d2:9c:32:2a:e1:d7:86:a2:5b:c7:9b:31: 66:e0:fe:fe:6c:2d:e4:67:d4:86:81:75:d9:15:fb:03:c2:77: 8a:36:81:9c:f3:59:f8:ef:b0:75:30:b2:8a:93:83:f6:f2:46: 04:7e:d4:40:89:7e:c4:a8:ac:a6:86:81:01:ec:9f:53:3f:09: 31:44:39:64:1c:ea:f0:70:24:64:7f:88:4f:6f:9d:04:05:d8: 99:4b:80:5b:99:c5:ab:63:b1:9f:de:cb:84:1b:73:7b:4b:89: 04:75:85:67 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC REQ4MjExMC8GA1UEBRMoRjQ0MDE4MTgxRUU1QzYyNDBFMTM5NDM5NUE1Q0NDNEQy RjYyMzFBNDAeFw0yNDA1MTgxODMwMDFaFw0yNDA1MjUxODMwMDFaMBgxFjAUBgNV BAMTDTY2NDhmM2FhLTI1MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5aBbSXQAxsHJs1yk/OZjRdkTYWd7DbVEtBhaXGkbNE0G/8JCdX7sQjzra0fu9 iF/gxueNyt8zNyNTyqFV3+GCVmc4Jcxtr6uFRfu9uZgvYnggH5tTjFd9KK7sEyUI ogxMNPbIl1wn7kmEdMS82WkvqeB8m8hZky1vVX6/6yjpzqRMzfqqg4tC6juOsbIN WSnLZoOn/tXz/iW0d/XuyHITvj8vaWX3LKwzFhb5OH4lPe6ajKWHFzx0g3Mqt5Cc mljq9uVSw7KI1PZJYwUCH57AUanouUOHFL/j25OEh33uV4Xn61VBzZaUkYEFErMF cO6U8ssqxNIliWwB4lN6YiadAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlEYM7oGs aJtozAPqr5M8inNVGq0wHwYDVR0jBBgwFoAU9EAYGB7lxiQOE5Q5WlzMTS9iMaQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJERDgyLzE5N0Y5RDkyOTFF MjExRTk5NzY4ODkwRUM0RjlBRTAyLzlFQVlHQjdseGlRT0U1UTVXbHpNVFM5aU1h US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOUVBWUdCN2x4aVFPRTVRNVdsek1UUzlpTWFRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJE RDgyLzE5N0Y5RDkyOTFFMjExRTk5NzY4ODkwRUM0RjlBRTAyLzlFQVlHQjdseGlR T0U1UTVXbHpNVFM5aU1hUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALYdZ2ciECVQFAbXaa2NSFSznn1tnyu480JWcvcn9c8xPJFtnNZ9X1Bi 4hjpgmjy87l2unyc7oT2czfGGDVPzXSgBK15twK2dLVm/KWoEDrzEDEOEIrpc8Px dfjtpfOmCmZuZWzH8mp2HuMsHT6G87CUThIvl8yifHc2KNPfdNSDfhCmSCb1MXir TllnLbhAVUUjqFXE7dKcMirh14aiW8ebMWbg/v5sLeRn1IaBddkV+wPCd4o2gZzz WfjvsHUwsoqTg/byRgR+1ECJfsSorKaGgQHsn1M/CTFEOWQc6vBwJGR/iE9vnQQF 2JlLgFuZxatjsZ/ey4Qbc3tLiQR1hWc= -----END CERTIFICATE-----Generated at Sat May 18 19:21:05 2024 by rpki-client on console-fra.rpki-client.org