$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.mft File: 34pOYRe8o2iUDWjphUeYuWZgndQ.mft (raw, json) Hash identifier: Oj8B813c/xHFux7aVMmFnmq7TGZ1RMSQj0HNm8Tkezs= Subject key identifier: 53:03:AA:86:5A:3B:5F:77:B4:AC:BB:0B:48:BE:9E:23:AC:10:33:FB Authority key identifier: DF:8A:4E:61:17:BC:A3:68:94:0D:68:E9:85:47:98:B9:66:60:9D:D4 Certificate issuer: /CN=A91C8530/serialNumber=DF8A4E6117BCA368940D68E9854798B966609DD4 Certificate serial: 0811 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34pOYRe8o2iUDWjphUeYuWZgndQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.mft Manifest number: 080B Signing time: Sat 18 May 2024 21:52:22 +0000 Manifest this update: Sat 18 May 2024 21:52:21 +0000 Manifest next update: Sat 25 May 2024 21:52:21 +0000 Files and hashes: 1: 34pOYRe8o2iUDWjphUeYuWZgndQ.crl (hash: QeuHqyxnEM2NuJiMEZtOTvMZ14FU6kqM94nS3GHwmQM=) 2: 9BD30C5EB1E711EA86EFFD5EC4F9AE02.roa (hash: qrOVzHUnQpUjj2NXO2uI9c1Lmn26rV+B/0QYiSJpTNM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.crl rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34pOYRe8o2iUDWjphUeYuWZgndQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2065 (0x811) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8530/serialNumber=DF8A4E6117BCA368940D68E9854798B966609DD4 Validity Not Before: May 18 21:52:21 2024 GMT Not After : May 25 21:52:21 2024 GMT Subject: CN=66492316-dfe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e1:a1:9b:63:6d:b5:79:2f:f1:bb:19:3f:ae: 6a:9e:d1:ca:09:4c:7d:57:ba:4c:7f:ae:3d:e0:c2: 29:28:28:85:b6:19:c0:26:f1:71:5b:72:1e:b9:c3: a8:b7:b2:c0:78:8e:fb:fe:59:67:8b:bb:26:90:fd: f9:68:8e:0e:55:38:ab:2a:84:88:75:1e:c9:88:79: 9e:a3:aa:c5:21:40:08:ff:79:2c:c7:62:4a:37:d8: 4f:8b:b1:6b:3c:9f:11:97:d9:26:62:ca:cc:64:e2: 20:53:0e:5a:05:46:f0:59:b2:fa:08:ea:0d:d7:fc: d7:03:86:e6:12:74:4c:5c:23:f4:05:93:05:e4:a0: 2d:4e:94:0b:b3:c5:a0:21:8c:dd:32:cd:45:dd:13: 1c:fa:4a:03:87:96:b2:8a:40:b7:38:9a:8b:b9:d7: 0e:04:3f:3a:18:44:11:b3:84:f5:53:72:00:e4:73: cd:64:df:05:c2:83:5b:bb:e1:a7:f3:b2:a2:6a:a4: 3b:f9:d2:f4:ec:62:19:c8:36:c0:d2:35:c1:14:07: cb:d4:70:72:5a:1a:45:0f:a8:93:69:7b:1a:e5:6b: 8a:1b:a1:ae:63:a7:c4:ca:79:fb:3b:8a:4e:e7:a6: e1:3a:1b:82:63:b7:fa:c7:6a:2b:0f:00:cb:0f:29: a3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:03:AA:86:5A:3B:5F:77:B4:AC:BB:0B:48:BE:9E:23:AC:10:33:FB X509v3 Authority Key Identifier: keyid:DF:8A:4E:61:17:BC:A3:68:94:0D:68:E9:85:47:98:B9:66:60:9D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34pOYRe8o2iUDWjphUeYuWZgndQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:0f:5c:c3:c3:1b:ce:92:5d:cb:2e:6d:c3:29:b6:b5:07:36: 8c:28:da:d8:f7:b4:75:b6:af:0e:8d:eb:24:2d:fc:df:d1:b5: 53:7d:1b:3d:7f:54:07:3d:f2:fe:fa:c2:63:32:4a:28:ff:94: ad:99:a4:55:2a:51:1a:18:60:c9:bd:c4:a2:42:76:10:f9:63: 31:ce:8f:f8:82:f9:3f:43:40:6d:7e:30:61:66:7c:97:19:62: a9:80:16:9a:26:e4:b7:60:28:0d:91:26:2f:e2:15:25:7c:7c: 43:2b:f2:48:93:b1:46:39:cd:5a:b7:5b:fa:d8:3d:6e:bd:c2: a8:d5:96:b4:f8:46:c9:fd:e0:29:69:7c:71:51:b0:05:50:b2: 58:46:e0:54:68:ab:4d:fc:7f:be:5a:b5:00:cf:e7:ca:a5:e8: b9:b9:d0:d3:9b:0f:7b:f2:92:51:df:1c:f1:28:8b:fe:d1:05: b1:c2:54:e9:e5:49:00:3e:19:7e:12:db:77:82:68:0b:93:be: c5:26:0d:52:e3:8b:fc:8a:26:67:11:a9:f0:38:b0:e6:75:9f: ab:5a:78:bc:41:55:3e:09:c2:62:f9:d6:86:86:4e:41:85:f3: 0b:e1:5b:a1:b9:eb:72:78:74:93:45:88:87:86:10:da:cd:4b: e6:f4:45:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg1MzAxMTAvBgNVBAUTKERGOEE0RTYxMTdCQ0EzNjg5NDBENjhFOTg1NDc5OEI5 NjY2MDlERDQwHhcNMjQwNTE4MjE1MjIxWhcNMjQwNTI1MjE1MjIxWjAYMRYwFAYD VQQDEw02NjQ5MjMxNi1kZmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOGhm2NttXkv8bsZP65qntHKCUx9V7pMf6494MIpKCiFthnAJvFxW3IeucOo t7LAeI77/llni7smkP35aI4OVTirKoSIdR7JiHmeo6rFIUAI/3ksx2JKN9hPi7Fr PJ8Rl9kmYsrMZOIgUw5aBUbwWbL6COoN1/zXA4bmEnRMXCP0BZMF5KAtTpQLs8Wg IYzdMs1F3RMc+koDh5ayikC3OJqLudcOBD86GEQRs4T1U3IA5HPNZN8FwoNbu+Gn 87KiaqQ7+dL07GIZyDbA0jXBFAfL1HByWhpFD6iTaXsa5WuKG6GuY6fEynn7O4pO 56bhOhuCY7f6x2orDwDLDymjGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFMDqoZa O193tKy7C0i+niOsEDP7MB8GA1UdIwQYMBaAFN+KTmEXvKNolA1o6YVHmLlmYJ3U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODUzMC8xOEY2NkQ4NkIx RTYxMUVBQUE5MTMzNUFDNEY5QUUwMi8zNHBPWVJlOG8yaVVEV2pwaFVlWXVXWmdu ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM0cE9ZUmU4bzJpVURXanBoVWVZdVdaZ25kUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODUzMC8xOEY2NkQ4NkIxRTYxMUVBQUE5MTMzNUFDNEY5QUUwMi8zNHBPWVJlOG8y aVVEV2pwaFVlWXVXWmduZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8D1zDwxvOkl3LLm3DKba1BzaMKNrY97R1tq8OjeskLfzf0bVTfRs9 f1QHPfL++sJjMkoo/5StmaRVKlEaGGDJvcSiQnYQ+WMxzo/4gvk/Q0BtfjBhZnyX GWKpgBaaJuS3YCgNkSYv4hUlfHxDK/JIk7FGOc1at1v62D1uvcKo1Za0+EbJ/eAp aXxxUbAFULJYRuBUaKtN/H++WrUAz+fKpei5udDTmw978pJR3xzxKIv+0QWxwlTp 5UkAPhl+Ett3gmgLk77FJg1S44v8iiZnEanwOLDmdZ+rWni8QVU+CcJi+daGhk5B hfML4VuhuetyeHSTRYiHhhDazUvm9EUA -----END CERTIFICATE-----Generated at Sun May 19 00:16:19 2024 by rpki-client on console-fra.rpki-client.org