$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft File: fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft (raw, json) Hash identifier: HKsQQMVkwHyXUYtMm6J8H8bWoQQkpadaM4rw+ODCAe0= Subject key identifier: 1F:7C:FF:BB:B5:9C:AC:A1:6A:05:D9:E8:F7:CF:15:79:2F:D7:48:C7 Authority key identifier: 7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25 Certificate issuer: /CN=A91C6BF0/serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225 Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft Manifest number: 0E1A Signing time: Sat 18 May 2024 18:41:00 +0000 Manifest this update: Sat 18 May 2024 18:40:59 +0000 Manifest next update: Sat 25 May 2024 18:40:59 +0000 Files and hashes: 1: fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl (hash: byZ4v9nPCVNBzETyxU+fHLh2QYE3h+4Jjn8WK+YcSfw=) 2: 329274C4D31611EEA7F0475FC4F9AE02.roa (hash: HiUI4r/SFIegFaFFoXRBRf157uEBpMM7bqdYETmrC8o=) 3: B4A14106974911EEBAFA257BC4F9AE02.roa (hash: 8sLoIeCKa+LBQU6M3xgcWt70Xa8ypzI1STCtNIDj7w4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6BF0/serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225 Validity Not Before: May 18 18:40:59 2024 GMT Not After : May 25 18:40:59 2024 GMT Subject: CN=6648f63b-181f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ef:08:be:94:a5:4c:90:15:c9:dd:03:dc:96: 50:e6:70:a7:4c:69:48:b1:43:fe:c1:9a:a1:c5:d3: b8:21:b7:cd:54:e4:a7:9c:c5:ba:28:8c:71:07:c2: 28:26:3f:37:bd:19:ae:49:d7:7f:ec:00:8f:6d:d6: 13:0b:b1:4e:69:59:55:0b:db:1d:e9:48:aa:e8:79: 43:96:0b:bf:aa:e7:b9:90:a3:4b:fe:6b:6e:be:45: 5d:6a:d0:77:0a:13:02:4a:d8:1e:8f:3a:b9:e2:b4: a4:a5:3d:16:5d:c1:ba:30:c9:c0:37:e8:08:c4:a5: 6a:21:57:13:ed:06:f0:85:bd:7e:aa:d5:67:de:a4: 0f:9f:cc:a7:77:1f:e5:c7:17:66:fa:03:eb:6b:bd: 2e:76:2c:11:e1:3b:13:b2:dd:d1:11:f5:35:7b:49: 96:43:b8:ee:d7:dc:7b:3f:b6:ef:ad:32:86:74:b8: 5c:8c:4e:55:82:f6:d3:22:9e:6f:3e:db:c0:fc:96: c3:eb:bb:39:99:4c:10:8b:db:7a:8c:f0:8c:4a:24: 31:43:4e:0a:5e:98:b8:8e:3a:8b:15:95:ca:c9:22: 92:86:13:7f:45:5c:ea:ee:3a:8d:b4:75:28:70:21: 49:1c:c5:a6:2f:53:f8:44:e8:3f:54:ab:a5:68:a0: 7a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:7C:FF:BB:B5:9C:AC:A1:6A:05:D9:E8:F7:CF:15:79:2F:D7:48:C7 X509v3 Authority Key Identifier: keyid:7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:ff:f5:19:2d:82:96:d5:be:fc:56:c0:7a:50:9c:54:0a:ae: 6b:ad:5a:7d:ba:c5:d9:64:e4:c3:f7:81:68:13:c9:2f:c6:30: 18:70:e2:c6:cb:4c:e7:e9:c9:ca:eb:24:22:53:1c:e9:f9:f8: 46:40:dc:1b:71:b5:06:c8:ad:b4:06:3f:67:a8:f6:7c:3e:fa: 1c:7c:17:eb:3e:13:53:63:58:81:0d:02:0d:5f:e9:bd:53:50: 05:68:9f:ee:8b:53:dc:d6:a5:43:38:1e:5b:1a:ff:4d:d6:73: c5:76:a4:9b:6c:64:4e:d1:12:1f:f8:8e:5c:cf:41:9e:bd:62: 9f:9f:25:be:2b:46:c2:19:bd:94:4b:d6:c9:a1:9b:1c:4c:e6: 61:b6:a1:ae:e6:28:6e:10:58:dc:11:b2:ed:fe:7c:59:ca:3e: 29:98:d1:d4:0f:5f:00:6f:09:fb:65:2a:cb:58:59:dc:4a:c9: 64:d2:b3:9b:25:a4:98:4a:00:ae:ee:87:93:59:6f:c4:bc:47: 5d:a3:7a:f8:69:a6:2f:a8:0b:95:47:e3:ca:4c:65:19:91:7c: 4b:a1:5c:0e:87:b8:16:ac:b7:de:07:0a:b9:04:9a:d7:69:fd: 5b:a2:70:a7:07:a0:db:77:09:c1:23:ec:e8:8a:a0:d2:aa:24: b4:bd:65:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCRjAxMTAvBgNVBAUTKDdEMjNFNzVDMTBERjY1NzFCRUFDMTdGMzU1NUUxQjk5 ODM4MTQyMjUwHhcNMjQwNTE4MTg0MDU5WhcNMjQwNTI1MTg0MDU5WjAYMRYwFAYD VQQDEw02NjQ4ZjYzYi0xODFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAne8IvpSlTJAVyd0D3JZQ5nCnTGlIsUP+wZqhxdO4IbfNVOSnnMW6KIxxB8Io Jj83vRmuSdd/7ACPbdYTC7FOaVlVC9sd6Uiq6HlDlgu/que5kKNL/mtuvkVdatB3 ChMCStgejzq54rSkpT0WXcG6MMnAN+gIxKVqIVcT7Qbwhb1+qtVn3qQPn8yndx/l xxdm+gPra70udiwR4TsTst3REfU1e0mWQ7ju19x7P7bvrTKGdLhcjE5VgvbTIp5v PtvA/JbD67s5mUwQi9t6jPCMSiQxQ04KXpi4jjqLFZXKySKShhN/RVzq7jqNtHUo cCFJHMWmL1P4ROg/VKulaKB6swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB98/7u1 nKyhagXZ6PfPFXkv10jHMB8GA1UdIwQYMBaAFH0j51wQ32VxvqwX81VeG5mDgUIl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkJGMC8xNDkxOTc0QUFF QkIxMUU5OEEzOTBCNTlDNEY5QUUwMi9mU1BuWEJEZlpYRy1yQmZ6VlY0Ym1ZT0JR aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTUG5YQkRmWlhHLXJCZnpWVjRibVlPQlFpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkJGMC8xNDkxOTc0QUFFQkIxMUU5OEEzOTBCNTlDNEY5QUUwMi9mU1BuWEJEZlpY Ry1yQmZ6VlY0Ym1ZT0JRaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCp//UZLYKW1b78VsB6UJxUCq5rrVp9usXZZOTD94FoE8kvxjAYcOLG y0zn6cnK6yQiUxzp+fhGQNwbcbUGyK20Bj9nqPZ8PvocfBfrPhNTY1iBDQINX+m9 U1AFaJ/ui1Pc1qVDOB5bGv9N1nPFdqSbbGRO0RIf+I5cz0GevWKfnyW+K0bCGb2U S9bJoZscTOZhtqGu5ihuEFjcEbLt/nxZyj4pmNHUD18Abwn7ZSrLWFncSslk0rOb JaSYSgCu7oeTWW/EvEddo3r4aaYvqAuVR+PKTGUZkXxLoVwOh7gWrLfeBwq5BJrX af1bonCnB6DbdwnBI+zoiqDSqiS0vWWe -----END CERTIFICATE-----Generated at Sat May 18 19:21:05 2024 by rpki-client on console-fra.rpki-client.org