$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft File: A4qG82KyVX-Uvncu4MX9MYRf4mM.mft (raw, json) Hash identifier: j46+F+c9ttZ3IjbPzj+AhruIyE/dPNw1jFlEQwVm3/Y= Subject key identifier: 48:97:1A:CA:E9:66:B3:2F:A8:EA:63:02:B6:D8:CF:A4:1E:EF:15:F7 Authority key identifier: 03:8A:86:F3:62:B2:55:7F:94:BE:77:2E:E0:C5:FD:31:84:5F:E2:63 Certificate issuer: /CN=A91C4003/serialNumber=038A86F362B2557F94BE772EE0C5FD31845FE263 Certificate serial: 0B29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft Manifest number: 0B19 Signing time: Sat 18 May 2024 19:52:18 +0000 Manifest this update: Sat 18 May 2024 19:52:17 +0000 Manifest next update: Sat 25 May 2024 19:52:17 +0000 Files and hashes: 1: A4qG82KyVX-Uvncu4MX9MYRf4mM.crl (hash: Ei60rwKa7QAcyQaJYO160m4mjvdM1LHE2G25AQcucRU=) 2: 711115241AD911EA97EF1C30C4F9AE02.roa (hash: GP8wxJbpu8lKGC5wHZVnan9DYdthwH9r41+dEhQM+OU=) 3: 71A7B3621AD911EA97EF1C30C4F9AE02.roa (hash: 9r153uKD9O+R7bkXsQuugQY1h1itvtGz1Qj2pvwl7UY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.crl rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2857 (0xb29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4003/serialNumber=038A86F362B2557F94BE772EE0C5FD31845FE263 Validity Not Before: May 18 19:52:17 2024 GMT Not After : May 25 19:52:17 2024 GMT Subject: CN=664906f2-f67b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ee:df:5e:b2:24:7f:01:54:4a:04:1b:3b:c9: 13:95:98:f6:fe:29:86:d0:c4:ec:37:8e:77:8f:0d: 6d:26:15:91:1b:92:e0:5e:dc:dd:ad:af:48:db:bf: fc:be:ea:af:26:c2:0d:8a:e8:00:29:bc:69:03:8f: 4c:2a:0d:ae:dd:12:6e:bf:bb:6e:7d:61:23:9a:8c: 75:35:73:f6:0b:97:ec:44:c6:d3:b9:ee:80:6e:ed: 0f:af:db:9c:80:8b:20:ac:85:53:4c:31:f5:1c:e5: d6:c1:4e:d2:5b:f5:d8:cf:a0:c3:78:18:d1:58:3d: f5:e9:81:5d:76:18:01:fc:a2:dc:a9:40:a0:b1:6b: 3d:cb:58:e2:95:ad:af:ac:da:53:fc:4d:28:02:67: f4:c0:7c:6d:82:48:dc:f3:1c:78:d3:ec:b8:d0:69: d6:4d:40:31:1f:6c:79:74:50:d3:ee:93:08:52:5e: 2b:06:fc:60:d0:4e:a1:61:9e:55:9a:21:dd:7c:c9: 02:2a:de:ec:bc:4b:fd:db:4a:51:fe:1f:7c:40:4e: 4e:4f:53:40:0a:95:b6:73:8a:2d:f1:74:b4:ef:91: 9c:5d:30:05:97:bd:4a:cf:ab:bb:67:04:a3:9e:ba: 11:4c:45:68:ca:9d:90:91:ba:f3:7a:52:8a:2c:0d: 1f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:97:1A:CA:E9:66:B3:2F:A8:EA:63:02:B6:D8:CF:A4:1E:EF:15:F7 X509v3 Authority Key Identifier: keyid:03:8A:86:F3:62:B2:55:7F:94:BE:77:2E:E0:C5:FD:31:84:5F:E2:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:71:06:0f:e7:71:a6:64:ae:21:e3:7f:06:d1:4f:07:7c:39: a8:0d:0c:e0:fc:33:1d:b0:b1:c1:88:cd:ca:7c:2c:21:84:a1: 19:bb:25:ad:c8:5c:91:fa:02:91:45:35:16:1e:6f:e8:13:6a: e0:ea:f4:52:76:27:ae:73:0f:c5:89:ab:6a:cf:ca:34:b3:89: 41:f1:8f:9b:1b:1f:1a:69:f5:1b:45:c1:d5:35:7b:27:6d:3f: 33:ed:2b:02:e4:a6:6c:9d:27:aa:48:7c:12:0f:ab:15:4a:7f: 49:98:80:8b:1a:8d:7c:4f:91:3a:46:7c:0e:2d:5a:78:c9:db: b7:5f:24:40:4f:70:3f:b6:23:0b:92:5a:f4:e4:c1:c9:1a:c5: 7d:b5:21:fb:4b:cb:ba:06:2c:52:f2:cb:d6:d8:fd:11:da:78: fc:4b:d5:01:0e:a0:19:ce:94:12:00:31:4a:42:b3:a8:b9:b1: e0:02:8f:4e:1e:f2:88:fc:cc:2f:46:79:95:57:2c:a3:da:10: 95:ab:eb:28:e1:4f:8c:cd:8e:65:6d:60:d8:6d:18:06:d9:ac: c7:6f:ac:ba:94:91:12:20:da:1d:53:cf:db:71:e2:66:3c:f1: 54:14:19:5b:5f:99:f3:0a:7c:81:52:c3:99:8a:fd:5f:60:30: 5c:43:c0:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQwMDMxMTAvBgNVBAUTKDAzOEE4NkYzNjJCMjU1N0Y5NEJFNzcyRUUwQzVGRDMx ODQ1RkUyNjMwHhcNMjQwNTE4MTk1MjE3WhcNMjQwNTI1MTk1MjE3WjAYMRYwFAYD VQQDEw02NjQ5MDZmMi1mNjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAte7fXrIkfwFUSgQbO8kTlZj2/imG0MTsN453jw1tJhWRG5LgXtzdra9I27/8 vuqvJsINiugAKbxpA49MKg2u3RJuv7tufWEjmox1NXP2C5fsRMbTue6Abu0Pr9uc gIsgrIVTTDH1HOXWwU7SW/XYz6DDeBjRWD316YFddhgB/KLcqUCgsWs9y1jila2v rNpT/E0oAmf0wHxtgkjc8xx40+y40GnWTUAxH2x5dFDT7pMIUl4rBvxg0E6hYZ5V miHdfMkCKt7svEv920pR/h98QE5OT1NACpW2c4ot8XS075GcXTAFl71Kz6u7ZwSj nroRTEVoyp2QkbrzelKKLA0fmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEiXGsrp ZrMvqOpjArbYz6Qe7xX3MB8GA1UdIwQYMBaAFAOKhvNislV/lL53LuDF/TGEX+Jj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDAwMy9COEU4QUQ3MjFB RDgxMUVBODJFNzRCMkZDNEY5QUUwMi9BNHFHODJLeVZYLVV2bmN1NE1YOU1ZUmY0 bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E0cUc4Mkt5VlgtVXZuY3U0TVg5TVlSZjRtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDAwMy9COEU4QUQ3MjFBRDgxMUVBODJFNzRCMkZDNEY5QUUwMi9BNHFHODJLeVZY LVV2bmN1NE1YOU1ZUmY0bU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7cQYP53GmZK4h438G0U8HfDmoDQzg/DMdsLHBiM3KfCwhhKEZuyWt yFyR+gKRRTUWHm/oE2rg6vRSdieucw/Fiatqz8o0s4lB8Y+bGx8aafUbRcHVNXsn bT8z7SsC5KZsnSeqSHwSD6sVSn9JmICLGo18T5E6RnwOLVp4ydu3XyRAT3A/tiML klr05MHJGsV9tSH7S8u6BixS8svW2P0R2nj8S9UBDqAZzpQSADFKQrOoubHgAo9O HvKI/MwvRnmVVyyj2hCVq+so4U+MzY5lbWDYbRgG2azHb6y6lJESINodU8/bceJm PPFUFBlbX5nzCnyBUsOZiv1fYDBcQ8CE -----END CERTIFICATE-----Generated at Sat May 18 20:48:21 2024 by rpki-client on console-fra.rpki-client.org