$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft File: vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft (raw, json) Hash identifier: bAUX6sU3S6UajqLiP8dXEfn/8uCjSS9Y2RXcB+P87N8= Subject key identifier: A5:73:87:8B:BA:F3:46:8B:1C:EE:70:EB:5B:F6:77:9B:0A:00:89:31 Authority key identifier: BD:06:BD:BF:8B:0E:ED:BC:9F:07:39:5A:65:25:4F:CB:85:83:98:9D Certificate issuer: /CN=A91CB816/serialNumber=BD06BDBF8B0EEDBC9F07395A65254FCB8583989D Certificate serial: 0656 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft Manifest number: 064E Signing time: Sat 18 May 2024 23:38:00 +0000 Manifest this update: Sat 18 May 2024 23:37:59 +0000 Manifest next update: Sat 25 May 2024 23:37:59 +0000 Files and hashes: 1: vQa9v4sO7byfBzlaZSVPy4WDmJ0.crl (hash: 6OH1MQ06n+7iDnzA8/7Kst6l99Zj8C/A2MVhFy78WLw=) 2: 122052A03DD811EBAE99F45CC4F9AE02.roa (hash: EohXolf65+4mOV0lpUcxHKxaaPPi5FKIJJ1IjSJxtCM=) 3: 7D8845C43DD911EB8DA0EE5FC4F9AE02.roa (hash: J2NTsyIpYZf2CeQjHrd3GmEpGqkuw4WoHXlCtDuwDwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.crl rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1622 (0x656) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB816/serialNumber=BD06BDBF8B0EEDBC9F07395A65254FCB8583989D Validity Not Before: May 18 23:37:59 2024 GMT Not After : May 25 23:37:59 2024 GMT Subject: CN=66493bd7-87da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:37:5e:09:4f:70:c3:2e:8b:e3:50:40:44:af: 2d:7e:69:e7:80:28:87:37:f5:af:68:a1:44:23:a6: af:7b:7d:f2:f5:2a:d4:5a:3a:e3:5a:3c:1e:e9:de: a1:46:97:d3:2c:a0:75:f0:7f:be:a9:70:7d:55:6b: 99:86:2e:53:09:55:d6:a2:b7:82:07:31:c2:41:69: a2:2f:2c:be:ce:24:62:2e:00:90:37:aa:16:8d:ea: ca:b7:ab:da:85:34:ce:48:73:53:b7:ff:c3:e6:45: 4a:e5:c9:03:0e:ea:43:1a:3f:2d:0f:dc:ec:5d:c4: ff:3a:df:e7:d3:ee:ee:13:18:ba:4a:a9:0a:0a:7a: 3d:33:5b:26:8a:d6:07:d0:f1:94:bc:30:9a:33:02: a9:d9:10:3a:2e:a1:d7:fc:6f:a3:d2:11:9a:47:f0: 8a:3d:b8:89:77:4e:8c:69:b7:a9:01:cd:60:38:6e: 38:a4:af:2f:8e:c9:f8:83:33:ed:1d:ee:a4:d6:92: 85:a7:08:5c:4c:e2:30:56:de:f4:18:84:1a:00:13: ea:78:8a:e9:b5:fd:f7:b2:22:fb:5b:ac:53:c6:1b: c6:38:b0:db:41:a8:88:f4:a3:74:f3:20:3d:bc:76: 94:3b:4c:bb:7e:ac:7f:5c:84:65:c3:77:3e:3f:7b: 4c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:73:87:8B:BA:F3:46:8B:1C:EE:70:EB:5B:F6:77:9B:0A:00:89:31 X509v3 Authority Key Identifier: keyid:BD:06:BD:BF:8B:0E:ED:BC:9F:07:39:5A:65:25:4F:CB:85:83:98:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:c2:0e:59:76:d5:17:e0:a1:f0:fd:82:3c:fa:fa:ad:26:9e: 1b:b0:f6:ea:7a:d8:3f:2b:a1:b5:f4:df:9c:03:a6:27:72:9c: e7:6b:66:85:29:c2:9b:5e:0a:57:64:02:18:ca:2b:23:48:96: 51:77:66:7e:56:50:39:eb:a6:bf:ed:a7:7b:aa:ff:50:77:a0: 37:1c:bc:de:c1:73:c1:b4:23:2a:3c:fa:2d:f7:77:fe:24:55: 83:79:37:72:9c:1f:d1:3d:3b:c6:4e:82:36:fb:9b:38:ac:1b: b1:1a:41:f6:c2:ca:79:6d:9f:8d:f9:38:48:a6:d4:b3:be:c2: 36:0a:b9:38:0e:c8:02:af:de:d8:b3:e4:42:88:38:1d:f5:71: 24:5b:a0:98:c0:e7:ce:85:6f:35:fb:2e:73:5b:08:4e:31:6f: b3:70:d3:00:bf:1c:64:a5:db:11:b0:91:3c:5c:27:8f:b4:6b: 93:a0:dc:3a:e6:5d:91:d2:a3:c9:88:eb:2b:fe:4f:93:24:3b: ca:27:d3:f8:c2:da:88:40:32:ed:b7:9b:97:7e:7d:d0:c7:1d: 1c:75:85:bf:c6:ea:d2:74:03:55:d8:a7:e5:8b:e0:68:7b:b8: 40:34:03:2a:03:ca:c7:2b:7f:08:01:f0:59:89:dc:ef:1f:a4: 5c:75:56:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4MTYxMTAvBgNVBAUTKEJEMDZCREJGOEIwRUVEQkM5RjA3Mzk1QTY1MjU0RkNC ODU4Mzk4OUQwHhcNMjQwNTE4MjMzNzU5WhcNMjQwNTI1MjMzNzU5WjAYMRYwFAYD VQQDEw02NjQ5M2JkNy04N2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2DdeCU9wwy6L41BARK8tfmnngCiHN/WvaKFEI6ave33y9SrUWjrjWjwe6d6h RpfTLKB18H++qXB9VWuZhi5TCVXWoreCBzHCQWmiLyy+ziRiLgCQN6oWjerKt6va hTTOSHNTt//D5kVK5ckDDupDGj8tD9zsXcT/Ot/n0+7uExi6SqkKCno9M1smitYH 0PGUvDCaMwKp2RA6LqHX/G+j0hGaR/CKPbiJd06MabepAc1gOG44pK8vjsn4gzPt He6k1pKFpwhcTOIwVt70GIQaABPqeIrptf33siL7W6xTxhvGOLDbQaiI9KN08yA9 vHaUO0y7fqx/XIRlw3c+P3tMswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKVzh4u6 80aLHO5w61v2d5sKAIkxMB8GA1UdIwQYMBaAFL0Gvb+LDu28nwc5WmUlT8uFg5id MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjgxNi82MTA0NjYxMDNE RDYxMUVCQTA2MDJDNUJDNEY5QUUwMi92UWE5djRzTzdieWZCemxhWlNWUHk0V0Rt SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZRYTl2NHNPN2J5ZkJ6bGFaU1ZQeTRXRG1KMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjgxNi82MTA0NjYxMDNERDYxMUVCQTA2MDJDNUJDNEY5QUUwMi92UWE5djRzTzdi eWZCemxhWlNWUHk0V0RtSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAwg5ZdtUX4KHw/YI8+vqtJp4bsPbqetg/K6G19N+cA6Yncpzna2aF KcKbXgpXZAIYyisjSJZRd2Z+VlA566a/7ad7qv9Qd6A3HLzewXPBtCMqPPot93f+ JFWDeTdynB/RPTvGToI2+5s4rBuxGkH2wsp5bZ+N+ThIptSzvsI2Crk4DsgCr97Y s+RCiDgd9XEkW6CYwOfOhW81+y5zWwhOMW+zcNMAvxxkpdsRsJE8XCePtGuToNw6 5l2R0qPJiOsr/k+TJDvKJ9P4wtqIQDLtt5uXfn3Qxx0cdYW/xurSdANV2Kfli+Bo e7hANAMqA8rHK38IAfBZidzvH6RcdVZV -----END CERTIFICATE-----Generated at Sun May 19 00:16:19 2024 by rpki-client on console-fra.rpki-client.org