$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.mft File: m2fIchTtmWVAcRkL688LjZ-hr04.mft (raw, json) Hash identifier: EVu43bi86jcn89AE7WLUBxTIw2WfJ70tCO0z4lESt3w= Subject key identifier: A6:B8:C6:99:B1:F2:2C:87:95:7A:F2:7B:88:85:40:72:5C:9B:64:67 Authority key identifier: 9B:67:C8:72:14:ED:99:65:40:71:19:0B:EB:CF:0B:8D:9F:A1:AF:4E Certificate issuer: /CN=A91CBDC8/serialNumber=9B67C87214ED99654071190BEBCF0B8D9FA1AF4E Certificate serial: 0B36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m2fIchTtmWVAcRkL688LjZ-hr04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.mft Manifest number: 0B28 Signing time: Sat 18 May 2024 19:50:37 +0000 Manifest this update: Sat 18 May 2024 19:50:36 +0000 Manifest next update: Sat 25 May 2024 19:50:36 +0000 Files and hashes: 1: m2fIchTtmWVAcRkL688LjZ-hr04.crl (hash: BfQefOnMpxDUF3OeWyOgP0nTXCNdHRXsFTebpPUlImE=) 2: D5CA565EDFFD11EE97B62A3CC4F9AE02.roa (hash: pi1uhfbf3UNc1f8g1WiIm7gpS/X62rWRXSb5a4XWgQY=) 3: D6AAA3B2DFFD11EE97B62A3CC4F9AE02.roa (hash: dH/dI9NKlgKXp1vrlH29LwYMzXgppca6gSzeHJf+2cU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.crl rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m2fIchTtmWVAcRkL688LjZ-hr04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:50:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2870 (0xb36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBDC8/serialNumber=9B67C87214ED99654071190BEBCF0B8D9FA1AF4E Validity Not Before: May 18 19:50:36 2024 GMT Not After : May 25 19:50:36 2024 GMT Subject: CN=6649068d-0586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:17:e1:71:e9:5f:a4:83:64:37:17:db:fd:41: a7:24:9c:37:40:84:9b:c3:9b:0e:fe:70:47:de:89: 9b:95:97:12:2d:53:ed:9c:e0:bd:e6:ac:53:61:d3: cc:2a:81:0e:55:5c:4e:90:30:40:a8:4a:6e:89:b9: 88:a6:8e:9b:3d:4b:80:7c:2e:ad:3f:3c:86:59:66: 29:03:58:75:07:f1:73:ee:40:2a:55:97:81:52:3a: 42:c8:04:ab:41:11:c7:cf:ed:4f:da:f8:f7:f5:84: 01:a0:8e:a5:2f:ae:b6:38:8d:74:da:2f:77:f9:04: af:c1:1e:26:b4:fd:f4:54:87:ab:f3:51:12:57:31: 7d:2e:20:1d:91:40:8e:9c:b7:96:0b:4e:01:72:ba: 16:e0:f2:90:4d:b4:46:88:6d:67:ef:e3:80:8e:4f: 49:b2:c0:58:04:c9:22:8f:15:a5:5c:4a:fd:0f:45: 3b:50:83:43:06:30:8f:2f:15:9e:d4:de:6f:e5:ba: 4c:38:93:c4:e5:58:07:d9:13:c0:8a:65:65:2f:5a: cc:6b:6e:4e:a7:c8:ec:d7:5d:d3:40:95:c3:14:ff: b7:72:fa:a5:ea:79:91:27:77:f1:27:41:27:58:a3: 93:c4:36:9f:15:c7:e1:8c:19:08:b9:c7:64:74:f9: dc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B8:C6:99:B1:F2:2C:87:95:7A:F2:7B:88:85:40:72:5C:9B:64:67 X509v3 Authority Key Identifier: keyid:9B:67:C8:72:14:ED:99:65:40:71:19:0B:EB:CF:0B:8D:9F:A1:AF:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m2fIchTtmWVAcRkL688LjZ-hr04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:08:33:de:03:7f:66:7d:58:a3:d1:13:dc:20:fd:3b:57:4a: 27:3e:e4:8f:0f:5f:5d:4b:c7:c4:a3:1f:58:58:26:4c:5c:49: 9c:7c:78:a6:fc:63:25:c9:e2:0b:e2:e1:10:4c:dd:40:6b:8f: f2:d9:c3:0f:10:20:9e:ea:5f:24:60:8a:ee:7c:81:09:35:df: f2:17:74:de:e3:db:b9:e2:bb:99:a3:7b:4b:13:5d:9c:4b:69: 18:b7:3b:56:eb:90:1f:98:60:14:43:33:70:4e:fc:24:6a:72: 73:94:fb:d4:62:6a:a3:5e:b2:a1:cc:aa:c4:6f:5d:a2:e3:98: c5:9a:19:90:64:a3:e2:89:29:5a:28:f1:2e:b1:a4:92:f1:1d: fa:15:fe:3d:77:6b:18:5d:b5:19:12:d9:02:d3:7e:b0:2e:b0: bd:59:ba:75:06:c2:ff:57:0d:f8:7e:e2:da:d6:20:5b:cd:66: 39:d1:ba:35:66:2e:30:69:95:40:1c:50:6a:bf:a7:f2:24:b8: 4a:f2:ff:39:35:a3:50:a9:42:9e:77:42:93:76:0d:8b:0d:b3: 47:ed:61:a5:8b:c7:3d:14:a6:00:20:eb:cb:dd:3f:cf:04:25: e5:e0:ef:aa:ea:aa:8f:e4:0e:e4:cc:d2:31:cf:8a:d2:ce:a6: 89:cb:86:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JEQzgxMTAvBgNVBAUTKDlCNjdDODcyMTRFRDk5NjU0MDcxMTkwQkVCQ0YwQjhE OUZBMUFGNEUwHhcNMjQwNTE4MTk1MDM2WhcNMjQwNTI1MTk1MDM2WjAYMRYwFAYD VQQDEw02NjQ5MDY4ZC0wNTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7RfhcelfpINkNxfb/UGnJJw3QISbw5sO/nBH3omblZcSLVPtnOC95qxTYdPM KoEOVVxOkDBAqEpuibmIpo6bPUuAfC6tPzyGWWYpA1h1B/Fz7kAqVZeBUjpCyASr QRHHz+1P2vj39YQBoI6lL662OI102i93+QSvwR4mtP30VIer81ESVzF9LiAdkUCO nLeWC04BcroW4PKQTbRGiG1n7+OAjk9JssBYBMkijxWlXEr9D0U7UINDBjCPLxWe 1N5v5bpMOJPE5VgH2RPAimVlL1rMa25Op8js113TQJXDFP+3cvql6nmRJ3fxJ0En WKOTxDafFcfhjBkIucdkdPnczQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKa4xpmx 8iyHlXrye4iFQHJcm2RnMB8GA1UdIwQYMBaAFJtnyHIU7ZllQHEZC+vPC42foa9O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkRDOC82Njk3NjNGMDE4 RTAxMUVBQTBDMzhFN0JDNEY5QUUwMi9tMmZJY2hUdG1XVkFjUmtMNjg4TGpaLWhy MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL20yZkljaFR0bVdWQWNSa0w2ODhMalotaHIwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkRDOC82Njk3NjNGMDE4RTAxMUVBQTBDMzhFN0JDNEY5QUUwMi9tMmZJY2hUdG1X VkFjUmtMNjg4TGpaLWhyMDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACCDPeA39mfVij0RPcIP07V0onPuSPD19dS8fEox9YWCZMXEmcfHim /GMlyeIL4uEQTN1Aa4/y2cMPECCe6l8kYIrufIEJNd/yF3Te49u54ruZo3tLE12c S2kYtztW65AfmGAUQzNwTvwkanJzlPvUYmqjXrKhzKrEb12i45jFmhmQZKPiiSla KPEusaSS8R36Ff49d2sYXbUZEtkC036wLrC9Wbp1BsL/Vw34fuLa1iBbzWY50bo1 Zi4waZVAHFBqv6fyJLhK8v85NaNQqUKed0KTdg2LDbNH7WGli8c9FKYAIOvL3T/P BCXl4O+q6qqP5A7kzNIxz4rSzqaJy4bu -----END CERTIFICATE-----Generated at Sat May 18 20:48:21 2024 by rpki-client on console-fra.rpki-client.org