$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft File: 0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft (raw, json) Hash identifier: FehTghVEvjsIw0iDBegIK7Q+CypeVd2/ghtCM1UgK84= Subject key identifier: A1:5D:A0:5B:AE:1D:1A:A6:E8:EE:6C:FD:DA:33:74:BF:9C:F5:F9:45 Authority key identifier: D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0 Certificate issuer: /CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0 Certificate serial: 0889 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft Manifest number: 084E Signing time: Fri 31 May 2024 22:36:03 +0000 Manifest this update: Fri 31 May 2024 22:36:02 +0000 Manifest next update: Fri 07 Jun 2024 22:36:02 +0000 Files and hashes: 1: 0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl (hash: 7NGrfSUFhYKYGAdcTKxbv6/1O6sBfxsPMiUsVJjAtBg=) 2: 880A2B1EB26D11EEB1ADB21AC4F9AE02.roa (hash: KNHIPapW/T943NvxPhbFGmjSj7sAOJx3G4aK6MQoMc4=) 3: 2857F2E4111A11EF86332415C4F9AE02.roa (hash: d8stm93qiMJHuD7A7Kjf0EChjXZv6Yi1Blkv29w2AO0=) 4: 092420B8CCE211EE8A4B3130C4F9AE02.roa (hash: kBDg0zIX8kcCrBfvjQ2DhtqnT0zOKjXNLDjYx84C1Go=) 5: 51B031C80E8D11EE89A0B128C4F9AE02.roa (hash: TjvAc6jpZ9U97nYJG6DnvYohT4lBnpgp5Lc+Qvz205I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 22:36:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2185 (0x889) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0 Validity Not Before: May 31 22:36:02 2024 GMT Not After : Jun 7 22:36:02 2024 GMT Subject: CN=665a50d3-7c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d2:36:1b:c1:4e:2d:08:2c:a0:ee:be:6f:25: 87:a2:65:8b:42:97:27:25:d5:ae:4c:9b:6c:48:9a: b1:a0:2f:5e:27:84:a1:94:57:62:ff:c7:6b:33:f5: b1:8b:e3:b2:f4:36:95:e0:96:f9:1f:d0:69:5f:10: 61:37:28:24:18:30:bb:5d:a5:c2:58:49:b0:5c:ad: e2:32:58:5e:e4:ae:b2:f3:de:8f:65:cb:f2:43:d6: 26:f8:9a:d0:9c:cc:75:68:d0:8b:da:a7:2f:08:eb: 47:f8:c6:95:7e:18:45:07:1f:2a:f2:12:ac:f8:54: cd:84:a4:75:5a:6e:a7:19:3d:77:01:0d:9f:c8:0b: 9f:63:aa:50:eb:3c:4a:a2:34:b2:63:9b:d7:b8:dd: 48:28:5d:21:09:1f:6e:f5:92:34:6e:3c:f8:aa:34: 4b:96:a2:78:56:4f:1e:ef:9e:6d:a6:63:20:2a:8a: b3:60:69:9b:35:e4:b8:4d:45:f9:0d:3b:9a:d7:93: f6:90:4f:cb:4a:a5:28:ec:e5:31:be:bd:fe:95:09: 1a:21:bc:36:2b:bc:73:1c:d1:08:ce:a9:43:26:a5: 07:91:5f:62:5f:05:c6:f8:1b:5a:d4:aa:46:77:e8: d8:38:91:29:50:8b:d2:cf:53:c3:d5:3a:0a:89:71: 34:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:5D:A0:5B:AE:1D:1A:A6:E8:EE:6C:FD:DA:33:74:BF:9C:F5:F9:45 X509v3 Authority Key Identifier: keyid:D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:8b:fb:89:48:28:f2:b8:28:96:9c:41:6e:76:9e:83:41:fd: 5b:97:ab:95:e4:c6:5f:34:77:cc:04:ae:64:23:5c:33:d4:21: 9a:75:1b:61:64:e2:6e:ce:31:77:39:f7:aa:f7:66:46:b4:d7: fa:7e:5f:6b:0a:5a:b1:3f:db:f4:d1:eb:b9:f4:1e:2d:cc:92: b1:57:14:73:d9:d4:5c:dc:c1:6a:8b:6f:02:bd:7e:04:08:5b: b1:5f:81:e8:9f:18:3a:0c:17:67:40:92:47:25:ab:17:11:db: fe:d3:03:c1:07:8c:23:6c:61:76:71:94:18:bd:a3:60:e4:90: 84:75:cd:22:3f:17:20:e1:b6:3f:dc:82:64:e4:26:5b:4d:6c: 78:51:ea:56:c9:45:86:b5:7e:14:2e:31:56:fc:06:73:3f:12: 1f:89:fe:0e:01:e1:6b:6e:ee:58:53:ff:a2:5d:81:05:59:f1: 8a:97:50:6e:17:98:f9:9c:57:fb:80:89:6b:cd:a6:30:e5:c5: 8e:ac:0a:5c:38:18:42:0c:27:e8:e1:c7:01:5b:a1:c6:a3:7c: 2c:de:b5:e1:59:fb:8b:2f:d4:4d:10:58:7d:34:bb:14:d4:73: 60:b3:c9:2d:50:c9:b0:77:bc:38:2d:96:be:c1:59:b6:dc:97: d0:13:67:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhGMjcxMTAvBgNVBAUTKEQxQTM2Q0Q4RUQyMzU1MDgyNzYxQTNEQjEzRUREMzBE RkRBMkNGRDAwHhcNMjQwNTMxMjIzNjAyWhcNMjQwNjA3MjIzNjAyWjAYMRYwFAYD VQQDEw02NjVhNTBkMy03YzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtI2G8FOLQgsoO6+byWHomWLQpcnJdWuTJtsSJqxoC9eJ4ShlFdi/8drM/Wx i+Oy9DaV4Jb5H9BpXxBhNygkGDC7XaXCWEmwXK3iMlhe5K6y896PZcvyQ9Ym+JrQ nMx1aNCL2qcvCOtH+MaVfhhFBx8q8hKs+FTNhKR1Wm6nGT13AQ2fyAufY6pQ6zxK ojSyY5vXuN1IKF0hCR9u9ZI0bjz4qjRLlqJ4Vk8e755tpmMgKoqzYGmbNeS4TUX5 DTua15P2kE/LSqUo7OUxvr3+lQkaIbw2K7xzHNEIzqlDJqUHkV9iXwXG+Bta1KpG d+jYOJEpUIvSz1PD1ToKiXE0bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKFdoFuu HRqm6O5s/dozdL+c9flFMB8GA1UdIwQYMBaAFNGjbNjtI1UIJ2Gj2xPt0w39os/Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEYyNy83RjUyMjlBOEIw OTIxMUVBQjVEQkVDNThDNEY5QUUwMi8wYU5zMk8walZRZ25ZYVBiRS0zVERmMml6 OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBhTnMyTzBqVlFnbllhUGJFLTNURGYyaXo5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEYyNy83RjUyMjlBOEIwOTIxMUVBQjVEQkVDNThDNEY5QUUwMi8wYU5zMk8walZR Z25ZYVBiRS0zVERmMml6OUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfi/uJSCjyuCiWnEFudp6DQf1bl6uV5MZfNHfMBK5kI1wz1CGadRth ZOJuzjF3Ofeq92ZGtNf6fl9rClqxP9v00eu59B4tzJKxVxRz2dRc3MFqi28CvX4E CFuxX4Honxg6DBdnQJJHJasXEdv+0wPBB4wjbGF2cZQYvaNg5JCEdc0iPxcg4bY/ 3IJk5CZbTWx4UepWyUWGtX4ULjFW/AZzPxIfif4OAeFrbu5YU/+iXYEFWfGKl1Bu F5j5nFf7gIlrzaYw5cWOrApcOBhCDCfo4ccBW6HGo3ws3rXhWfuLL9RNEFh9NLsU 1HNgs8ktUMmwd7w4LZa+wVm23JfQE2cS -----END CERTIFICATE-----Generated at Fri May 31 23:53:08 2024 by rpki-client on console-fra.rpki-client.org