$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft File: RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft (raw, json) Hash identifier: GRIYnn9QMYZrpikhvdQUXXMGZZc6iUma3vwVXLuKW+s= Subject key identifier: 2F:15:71:8B:B8:58:56:AA:43:87:0C:59:5A:80:CC:87:8A:0C:30:7B Authority key identifier: 47:0A:93:44:9E:61:1F:A9:AD:05:A2:89:D6:18:82:20:B5:FC:FC:3A Certificate issuer: /CN=A91CB8BA/serialNumber=470A93449E611FA9AD05A289D6188220B5FCFC3A Certificate serial: 07FE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft Manifest number: 07F0 Signing time: Sat 18 May 2024 21:57:33 +0000 Manifest this update: Sat 18 May 2024 21:57:33 +0000 Manifest next update: Sat 25 May 2024 21:57:33 +0000 Files and hashes: 1: RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl (hash: XLzsh2FJBcyzyA0nqOqCFKwBfqBMNfpCw1ctWek2NJ8=) 2: 465DBB30BA8811EAAF996D39C4F9AE02.roa (hash: BUOojz26JFw+UA+gTz8CJNjuj9FcWUKQkglverhkPk0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2046 (0x7fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB8BA/serialNumber=470A93449E611FA9AD05A289D6188220B5FCFC3A Validity Not Before: May 18 21:57:33 2024 GMT Not After : May 25 21:57:33 2024 GMT Subject: CN=6649244d-2ae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5c:03:9b:eb:96:97:cb:7d:e0:78:c3:58:38: 24:df:79:74:c4:a6:23:ee:ce:86:2b:b4:66:86:8f: 99:88:19:99:03:e3:e8:1f:39:1a:7d:1a:d9:c2:e4: 2c:01:7f:8d:b1:79:94:c5:5c:d9:02:76:72:8c:c0: 87:34:e9:af:68:42:ed:3f:cc:d7:c2:ab:80:e3:12: 6e:20:73:c8:55:65:5f:23:dd:9c:b4:b7:67:42:68: b6:66:fd:6b:80:96:16:a8:f5:cb:d2:ea:be:35:92: 45:ea:c4:09:a6:97:61:5d:fb:c5:93:8d:85:2a:3f: f3:5c:47:9b:e1:8a:92:12:07:b5:40:26:39:26:af: 96:6d:90:d6:ed:92:bf:c5:b5:17:75:b4:c4:e6:18: 61:d9:15:4b:8b:56:00:9e:da:65:67:09:70:2e:6b: 5a:95:f4:3e:55:33:2c:58:a0:77:fd:99:11:13:26: f2:07:d6:7a:87:96:ad:8d:70:34:25:9e:ad:81:d7: 5e:bb:a3:c1:bb:f2:6f:e2:1f:2c:ea:69:72:47:69: 8e:48:0e:d7:30:f2:ca:58:4b:f8:2e:5e:2f:1e:ef: ff:92:36:be:6d:23:61:23:e5:2a:ae:0e:2a:fe:cb: a9:41:a5:ce:f4:37:31:c1:96:a2:cf:bc:9e:2b:fc: 76:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:15:71:8B:B8:58:56:AA:43:87:0C:59:5A:80:CC:87:8A:0C:30:7B X509v3 Authority Key Identifier: keyid:47:0A:93:44:9E:61:1F:A9:AD:05:A2:89:D6:18:82:20:B5:FC:FC:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:4b:75:b0:5f:66:67:df:00:db:81:e7:96:ee:c1:05:c0:39: 0d:5b:e0:dc:dd:3c:91:c7:10:0c:3a:bd:b0:52:f0:00:e0:b4: 9b:c6:94:9d:79:43:61:7c:16:4d:c0:9b:63:cf:9d:b2:97:1e: dd:f1:42:b1:4e:02:2f:31:0e:b7:cc:2b:28:12:66:d9:b5:63: ef:d6:fa:d5:16:e6:14:e4:4d:83:6e:75:14:ec:01:97:8d:9c: e0:59:9b:d1:57:d0:20:16:f6:d7:12:b9:61:b9:2a:47:3f:48: d4:2d:4a:2e:88:09:27:d8:fc:08:d4:78:15:c2:78:49:89:28: 34:c8:0a:95:3a:c6:00:fb:ba:d6:47:84:3c:35:eb:19:e1:24: e4:6f:aa:1d:4e:4b:8b:ca:ea:c6:0a:e8:bd:91:19:69:c8:69: c2:f8:ef:96:f5:3f:87:5d:48:ea:56:95:94:c2:7a:a0:f9:9f: 68:96:17:3e:7b:69:29:26:32:1f:bf:5d:f4:1a:81:63:ed:55: 14:03:50:6f:70:7a:f8:a3:a8:0a:e0:95:1a:ae:05:01:8f:f6: 5a:ee:34:d7:ce:15:7c:d1:29:2d:3a:96:11:57:ec:d8:c3:97: c1:a1:b7:fb:95:52:3b:fe:d6:0e:82:8a:11:7d:37:f3:d2:35: 41:be:0d:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4QkExMTAvBgNVBAUTKDQ3MEE5MzQ0OUU2MTFGQTlBRDA1QTI4OUQ2MTg4MjIw QjVGQ0ZDM0EwHhcNMjQwNTE4MjE1NzMzWhcNMjQwNTI1MjE1NzMzWjAYMRYwFAYD VQQDEw02NjQ5MjQ0ZC0yYWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVwDm+uWl8t94HjDWDgk33l0xKYj7s6GK7Rmho+ZiBmZA+PoHzkafRrZwuQs AX+NsXmUxVzZAnZyjMCHNOmvaELtP8zXwquA4xJuIHPIVWVfI92ctLdnQmi2Zv1r gJYWqPXL0uq+NZJF6sQJppdhXfvFk42FKj/zXEeb4YqSEge1QCY5Jq+WbZDW7ZK/ xbUXdbTE5hhh2RVLi1YAntplZwlwLmtalfQ+VTMsWKB3/ZkREybyB9Z6h5atjXA0 JZ6tgddeu6PBu/Jv4h8s6mlyR2mOSA7XMPLKWEv4Ll4vHu//kja+bSNhI+Uqrg4q /supQaXO9DcxwZaiz7yeK/x2twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC8VcYu4 WFaqQ4cMWVqAzIeKDDB7MB8GA1UdIwQYMBaAFEcKk0SeYR+prQWiidYYgiC1/Pw6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjhCQS8yQjczMkU3MEJB ODUxMUVBQkE4MzhFMzBDNEY5QUUwMi9Sd3FUUko1aEg2bXRCYUtKMWhpQ0lMWDhf RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1J3cVRSSjVoSDZtdEJhS0oxaGlDSUxYOF9Eby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjhCQS8yQjczMkU3MEJBODUxMUVBQkE4MzhFMzBDNEY5QUUwMi9Sd3FUUko1aEg2 bXRCYUtKMWhpQ0lMWDhfRG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpS3WwX2Zn3wDbgeeW7sEFwDkNW+Dc3TyRxxAMOr2wUvAA4LSbxpSd eUNhfBZNwJtjz52ylx7d8UKxTgIvMQ63zCsoEmbZtWPv1vrVFuYU5E2DbnUU7AGX jZzgWZvRV9AgFvbXErlhuSpHP0jULUouiAkn2PwI1HgVwnhJiSg0yAqVOsYA+7rW R4Q8NesZ4STkb6odTkuLyurGCui9kRlpyGnC+O+W9T+HXUjqVpWUwnqg+Z9olhc+ e2kpJjIfv130GoFj7VUUA1BvcHr4o6gK4JUargUBj/Za7jTXzhV80SktOpYRV+zY w5fBobf7lVI7/tYOgooRfTfz0jVBvg3T -----END CERTIFICATE-----Generated at Sun May 19 00:16:19 2024 by rpki-client on console-fra.rpki-client.org