$ rpki-client -vvf rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft File: 64sK0sB2YghSy8N4kOZK1Aa0ieg.mft (raw, json) Hash identifier: zxKPqvnKLYFkWVQrVw7fUd8RS//KeQiBCE1/Lc9DJQE= Subject key identifier: CB:4B:3C:6D:8F:81:2B:4B:F7:C3:ED:79:2F:79:69:7B:D4:46:16:C7 Authority key identifier: EB:8B:0A:D2:C0:76:62:08:52:CB:C3:78:90:E6:4A:D4:06:B4:89:E8 Certificate issuer: /CN=A91C72B1/serialNumber=EB8B0AD2C076620852CBC37890E64AD406B489E8 Certificate serial: 0C52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft Manifest number: 0C49 Signing time: Sat 18 May 2024 18:56:48 +0000 Manifest this update: Sat 18 May 2024 18:56:48 +0000 Manifest next update: Sat 25 May 2024 18:56:48 +0000 Files and hashes: 1: 64sK0sB2YghSy8N4kOZK1Aa0ieg.crl (hash: lo96tPLnmf65bqi3GFo9GFftd3qDXdrf48BKVDamkNU=) 2: 6714424C3C9111EA9416CA78C4F9AE02.roa (hash: mY4rF8hK1zZU5SgCuKB7ywQBLhRSO9nn0rrF7lxwDOk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.crl rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3154 (0xc52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C72B1/serialNumber=EB8B0AD2C076620852CBC37890E64AD406B489E8 Validity Not Before: May 18 18:56:48 2024 GMT Not After : May 25 18:56:48 2024 GMT Subject: CN=6648f9f0-1ee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4d:a0:4f:c2:b9:c7:3c:26:9a:c9:a6:68:be: fc:92:ef:07:27:5b:5f:52:98:f1:49:a9:1c:56:c1: 02:39:02:16:4a:61:cf:e7:cf:c5:8b:6d:6d:a0:5e: 36:22:0c:60:0f:51:81:e8:47:f9:eb:da:39:de:4b: 87:58:9d:36:60:43:37:ca:81:d0:c9:cb:a2:b6:95: aa:92:2b:72:9f:26:8f:39:c2:7b:d9:5f:1c:3e:aa: 1e:8b:a8:14:8c:51:7a:fb:f7:62:98:ba:26:41:9f: 04:39:51:13:21:ef:ab:2c:01:22:ec:a1:91:c9:1b: b1:df:ed:69:52:92:99:71:9a:7f:a8:95:a9:c8:f7: 97:f7:b3:74:3b:77:15:f3:61:05:6b:c0:09:32:3f: 8f:27:8c:5c:e5:27:ad:7d:0e:ad:88:87:59:9b:c6: 10:85:d2:b4:ef:07:76:b9:f3:36:fe:ef:22:07:11: 36:49:b1:b3:d8:70:55:72:a4:da:17:ab:5a:80:1c: 5f:41:00:5d:c3:dd:7f:80:24:2d:c8:bf:7c:15:d0: fc:9c:47:40:85:01:69:64:f5:c3:2a:01:0d:0d:94: 3d:05:8f:3e:ec:37:45:f4:33:a1:40:c1:06:f5:41: 30:83:d1:aa:a0:50:ba:4b:39:96:dc:8f:01:40:24: 26:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:4B:3C:6D:8F:81:2B:4B:F7:C3:ED:79:2F:79:69:7B:D4:46:16:C7 X509v3 Authority Key Identifier: keyid:EB:8B:0A:D2:C0:76:62:08:52:CB:C3:78:90:E6:4A:D4:06:B4:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:3a:66:59:ce:80:8c:fb:55:30:57:92:7c:73:e0:69:3e:89: 71:1a:8f:b6:1e:8a:f6:47:28:5f:4e:c4:08:70:a2:63:c6:bd: 91:a7:21:4a:16:c4:a0:85:83:d5:38:36:6c:a6:74:5f:9d:96: c6:55:f9:6f:f2:ed:ef:ea:6a:86:c2:ee:6e:49:9f:d0:62:78: e6:60:fd:59:fb:d8:37:a6:0f:f3:75:67:13:ec:0e:74:bd:05: ba:46:61:3e:48:1e:6d:94:c3:1b:f0:16:23:a1:61:10:1b:5e: 64:fc:76:bc:3d:c1:3d:4f:0e:96:00:ec:a6:7b:1c:48:76:b5: f6:e7:92:35:a0:29:e3:4a:a4:66:3d:3e:9f:54:b3:af:1f:a7: 79:0c:64:d8:cf:da:3c:c0:5f:42:82:f5:f0:3d:ce:c6:58:f6: 74:cc:67:11:2a:80:f4:2b:44:76:6d:b8:e2:c6:5b:af:a9:00: a0:87:d7:91:8e:5e:6f:e7:7d:59:6a:cd:70:2d:9c:7f:da:be: dc:c3:09:c7:9b:a3:8f:e1:82:30:5b:e3:94:a1:ce:2e:a1:b7: 35:83:42:15:9e:42:ff:f2:95:6a:04:1a:d9:fa:dc:58:4f:89: 81:11:9d:f5:f4:5f:7b:69:f7:34:1b:93:a6:34:d4:c7:79:47: 94:2b:ca:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcyQjExMTAvBgNVBAUTKEVCOEIwQUQyQzA3NjYyMDg1MkNCQzM3ODkwRTY0QUQ0 MDZCNDg5RTgwHhcNMjQwNTE4MTg1NjQ4WhcNMjQwNTI1MTg1NjQ4WjAYMRYwFAYD VQQDEw02NjQ4ZjlmMC0xZWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwU2gT8K5xzwmmsmmaL78ku8HJ1tfUpjxSakcVsECOQIWSmHP58/Fi21toF42 IgxgD1GB6Ef569o53kuHWJ02YEM3yoHQycuitpWqkitynyaPOcJ72V8cPqoei6gU jFF6+/dimLomQZ8EOVETIe+rLAEi7KGRyRux3+1pUpKZcZp/qJWpyPeX97N0O3cV 82EFa8AJMj+PJ4xc5SetfQ6tiIdZm8YQhdK07wd2ufM2/u8iBxE2SbGz2HBVcqTa F6tagBxfQQBdw91/gCQtyL98FdD8nEdAhQFpZPXDKgENDZQ9BY8+7DdF9DOhQMEG 9UEwg9GqoFC6SzmW3I8BQCQmpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMtLPG2P gStL98PteS95aXvURhbHMB8GA1UdIwQYMBaAFOuLCtLAdmIIUsvDeJDmStQGtIno MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzJCMS8yQTQ1Rjk4MERF QzkxMUU5QUFBN0VDMzNDNEY5QUUwMi82NHNLMHNCMllnaFN5OE40a09aSzFBYTBp ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY0c0swc0IyWWdoU3k4TjRrT1pLMUFhMGllZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzJCMS8yQTQ1Rjk4MERFQzkxMUU5QUFBN0VDMzNDNEY5QUUwMi82NHNLMHNCMlln aFN5OE40a09aSzFBYTBpZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIOmZZzoCM+1UwV5J8c+BpPolxGo+2Hor2RyhfTsQIcKJjxr2RpyFK FsSghYPVODZspnRfnZbGVflv8u3v6mqGwu5uSZ/QYnjmYP1Z+9g3pg/zdWcT7A50 vQW6RmE+SB5tlMMb8BYjoWEQG15k/Ha8PcE9Tw6WAOymexxIdrX255I1oCnjSqRm PT6fVLOvH6d5DGTYz9o8wF9CgvXwPc7GWPZ0zGcRKoD0K0R2bbjixluvqQCgh9eR jl5v531Zas1wLZx/2r7cwwnHm6OP4YIwW+OUoc4uobc1g0IVnkL/8pVqBBrZ+txY T4mBEZ319F97afc0G5OmNNTHeUeUK8oQ -----END CERTIFICATE-----Generated at Sat May 18 19:21:05 2024 by rpki-client on console-fra.rpki-client.org