$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft File: 45Npup3YgJmHsja0d6144Vx1qxw.mft (raw, json) Hash identifier: FtSJkRNB9oTmUt6SERVRf1bhl8WKfsx51vnnTNr/Wdc= Subject key identifier: D8:F1:7B:A5:CB:4E:17:D8:A8:00:EC:BC:0D:79:2A:38:A0:1E:D8:E4 Authority key identifier: E3:93:69:BA:9D:D8:80:99:87:B2:36:B4:77:AD:78:E1:5C:75:AB:1C Certificate issuer: /CN=A91C0C73/serialNumber=E39369BA9DD8809987B236B477AD78E15C75AB1C Certificate serial: 015D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45Npup3YgJmHsja0d6144Vx1qxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft Manifest number: 0158 Signing time: Sun 19 May 2024 04:54:25 +0000 Manifest this update: Sun 19 May 2024 04:54:25 +0000 Manifest next update: Sun 26 May 2024 04:54:24 +0000 Files and hashes: 1: 45Npup3YgJmHsja0d6144Vx1qxw.crl (hash: IeaHN+9+FtSCpBjN80fTpWnDlHw4U2GpoVPlVerIpBQ=) 2: 10967BAC26CF11EE8D69411CC4F9AE02.roa (hash: 5fXe3+xtzK57aAlfxHGCRzdCv1DLMeOaPqswweKkerU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.crl rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45Npup3YgJmHsja0d6144Vx1qxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 349 (0x15d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0C73/serialNumber=E39369BA9DD8809987B236B477AD78E15C75AB1C Validity Not Before: May 19 04:54:25 2024 GMT Not After : May 26 04:54:24 2024 GMT Subject: CN=66498601-b08a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3e:d5:58:ce:3c:db:1e:05:ed:e2:32:28:8e: e6:62:71:f0:71:f4:3b:ee:14:e8:67:58:44:2f:69: b7:22:cb:d9:b7:44:e7:20:e1:95:23:be:dc:8d:21: d9:cd:74:9b:ce:81:5c:fa:f7:90:f7:50:00:13:c3: ff:68:7c:d4:ca:58:bf:6c:11:1a:e9:d6:cd:11:d6: 9f:76:29:1f:2d:ea:74:e3:70:7c:fc:f7:0b:f6:2a: 0d:4e:e0:b3:d4:6c:79:87:be:d6:3d:7b:58:0b:98: 6e:e4:48:d1:a3:fc:dd:8e:f3:34:4e:be:57:b4:86: c0:ec:b0:8c:e8:96:fe:f1:83:a5:b0:4f:b7:f4:24: 4c:31:f2:ae:91:9e:0d:40:56:93:54:1f:47:77:68: ff:b1:af:10:5e:ef:30:07:5f:7a:c5:55:cf:dd:80: b6:23:8c:13:79:0e:9b:74:bc:8d:c1:ac:45:aa:ab: 5c:e1:8f:e3:ee:6a:fb:96:36:4e:34:fb:65:fa:b3: 00:70:19:14:4d:f8:50:46:1a:30:4c:9d:bb:9c:eb: ab:6f:bd:10:69:90:6d:5e:6a:a1:79:cd:a9:04:7e: f8:02:ba:a8:4a:d9:c6:a1:8c:f2:cb:c4:aa:90:f8: e5:77:35:18:a1:3c:29:3c:9c:d3:b3:2e:9a:73:1c: 1e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F1:7B:A5:CB:4E:17:D8:A8:00:EC:BC:0D:79:2A:38:A0:1E:D8:E4 X509v3 Authority Key Identifier: keyid:E3:93:69:BA:9D:D8:80:99:87:B2:36:B4:77:AD:78:E1:5C:75:AB:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45Npup3YgJmHsja0d6144Vx1qxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:ba:57:8a:b2:1b:bd:28:df:b7:1c:8e:bf:ae:86:ba:2b:b1: 8b:dd:6a:26:76:ac:66:28:f0:31:91:91:f6:d4:56:68:59:ab: 01:f0:82:6d:9b:39:89:5b:85:13:07:53:52:29:d5:92:99:fe: fe:10:3d:5c:12:1b:b3:d1:a6:5f:22:e1:bc:22:ba:40:d0:e1: c3:88:a2:7a:d5:63:83:96:4e:5a:31:c7:18:32:71:b2:58:d8: 19:9a:70:1d:2b:be:80:68:af:8a:7d:96:b9:df:2c:69:21:59: 00:a7:35:88:a2:1f:a4:3c:67:b2:75:31:ed:07:a0:19:4c:c9: bd:c7:ed:c0:ca:95:68:11:69:20:2d:cb:1d:e0:c8:5c:ec:ce: 84:46:bf:22:2d:e2:e2:98:1e:eb:c9:5c:d5:65:f3:26:63:46: 5b:f9:38:f6:01:f9:a0:c7:e4:e2:c2:89:80:1a:2b:1b:a5:5c: 2a:75:f6:d9:b2:1d:17:84:25:bd:23:72:4a:9e:09:f2:84:ad: 85:17:2d:41:43:2a:e5:31:79:b4:dc:09:82:7c:6b:d7:6f:55: a0:64:b7:fe:b0:27:18:d2:75:6a:c8:50:ba:c0:84:e1:e0:e7: 78:5f:06:c5:6a:e2:c4:8c:00:2f:76:00:ab:d8:dc:9d:28:cf: ef:73:ac:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDNzMxMTAvBgNVBAUTKEUzOTM2OUJBOUREODgwOTk4N0IyMzZCNDc3QUQ3OEUx NUM3NUFCMUMwHhcNMjQwNTE5MDQ1NDI1WhcNMjQwNTI2MDQ1NDI0WjAYMRYwFAYD VQQDEw02NjQ5ODYwMS1iMDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsT7VWM482x4F7eIyKI7mYnHwcfQ77hToZ1hEL2m3IsvZt0TnIOGVI77cjSHZ zXSbzoFc+veQ91AAE8P/aHzUyli/bBEa6dbNEdafdikfLep043B8/PcL9ioNTuCz 1Gx5h77WPXtYC5hu5EjRo/zdjvM0Tr5XtIbA7LCM6Jb+8YOlsE+39CRMMfKukZ4N QFaTVB9Hd2j/sa8QXu8wB196xVXP3YC2I4wTeQ6bdLyNwaxFqqtc4Y/j7mr7ljZO NPtl+rMAcBkUTfhQRhowTJ27nOurb70QaZBtXmqhec2pBH74ArqoStnGoYzyy8Sq kPjldzUYoTwpPJzTsy6acxweuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjxe6XL ThfYqADsvA15KjigHtjkMB8GA1UdIwQYMBaAFOOTabqd2ICZh7I2tHeteOFcdasc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEM3My8yMTVFNUQzQTM2 NUExMUVEQUQxMEJBN0FDNEY5QUUwMi80NU5wdXAzWWdKbUhzamEwZDYxNDRWeDFx eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ1TnB1cDNZZ0ptSHNqYTBkNjE0NFZ4MXF4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEM3My8yMTVFNUQzQTM2NUExMUVEQUQxMEJBN0FDNEY5QUUwMi80NU5wdXAzWWdK bUhzamEwZDYxNDRWeDFxeHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCuleKshu9KN+3HI6/roa6K7GL3WomdqxmKPAxkZH21FZoWasB8IJt mzmJW4UTB1NSKdWSmf7+ED1cEhuz0aZfIuG8IrpA0OHDiKJ61WODlk5aMccYMnGy WNgZmnAdK76AaK+KfZa53yxpIVkApzWIoh+kPGeydTHtB6AZTMm9x+3AypVoEWkg Lcsd4Mhc7M6ERr8iLeLimB7ryVzVZfMmY0Zb+Tj2Afmgx+TiwomAGisbpVwqdfbZ sh0XhCW9I3JKngnyhK2FFy1BQyrlMXm03AmCfGvXb1WgZLf+sCcY0nVqyFC6wITh 4Od4XwbFauLEjAAvdgCr2NydKM/vc6yF -----END CERTIFICATE-----Generated at Sun May 19 05:48:51 2024 by rpki-client on console-fra.rpki-client.org