$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft File: a63X1dESgRLXCrSiRSQBQo-dCXs.mft (raw, json) Hash identifier: ubdYiIxm4wVXyfMK5lKfgVY1Whn0/xRwq87O0he3BWQ= Subject key identifier: 8D:89:01:D2:7C:F1:77:61:C8:3A:48:8A:52:15:E0:F6:A7:F6:D3:1E Authority key identifier: 6B:AD:D7:D5:D1:12:81:12:D7:0A:B4:A2:45:24:01:42:8F:9D:09:7B Certificate issuer: /CN=A91CC86F/serialNumber=6BADD7D5D1128112D70AB4A2452401428F9D097B Certificate serial: B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft Manifest number: B4 Signing time: Fri 31 May 2024 07:42:29 +0000 Manifest this update: Fri 31 May 2024 07:42:28 +0000 Manifest next update: Fri 07 Jun 2024 07:42:28 +0000 Files and hashes: 1: a63X1dESgRLXCrSiRSQBQo-dCXs.crl (hash: +fC5/p7khcZwUHVm60b+xl4KJvq5pqMPhGzHeKGkQWc=) 2: AE1747DE13FC11EEAD14AF35C4F9AE02.roa (hash: IQBn4ZS4C/ZFnSsdM9cr5llJmaKNs+18E9KjqV8Ptcw=) 3: 96F5D26CFD5A11EEA0731E55C4F9AE02.roa (hash: G67FBcoSo5SdfUGnyF3K1ScYA7zHkycNrRNLNW9eMyM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.crl rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 184 (0xb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC86F/serialNumber=6BADD7D5D1128112D70AB4A2452401428F9D097B Validity Not Before: May 31 07:42:28 2024 GMT Not After : Jun 7 07:42:28 2024 GMT Subject: CN=66597f65-2b74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:28:e4:6a:31:ec:2c:ca:20:b9:4f:ce:ac:ec: 38:33:ff:d2:b2:3c:ce:e3:b2:b5:a0:df:4b:e1:e6: a8:83:12:13:c0:93:e8:e5:5b:f9:79:8e:e9:7c:dc: e8:b7:58:5d:b4:5a:02:7b:59:3f:ab:56:c7:00:a7: c3:62:0f:ff:46:ae:bb:b3:bb:f4:02:ec:ef:ad:40: d8:70:d1:8d:c7:11:d8:72:c1:ea:bc:e1:8d:02:ae: 71:14:a3:af:39:83:fe:6a:05:57:41:c4:77:55:7f: c3:40:ec:44:29:cf:a4:6a:9d:83:e8:57:98:f5:de: 91:76:b8:f6:ba:b6:eb:81:93:38:a6:37:f1:7f:74: cf:ae:13:16:87:5b:c6:15:71:46:fa:46:24:57:b4: 9c:f5:04:e1:70:0c:97:01:75:c1:a9:32:30:61:5c: 32:3c:69:4e:7b:7d:a7:20:d0:d2:4e:d3:37:26:e5: 86:35:69:ce:8f:3b:94:b4:ba:e1:10:6e:6b:11:05: fc:ab:cd:f2:ad:62:cf:2a:4c:93:bd:42:22:76:7b: 54:5f:f1:f2:88:12:4b:c4:7d:b8:dc:09:4e:3e:37: fb:97:0d:f9:4d:d7:2b:6a:79:b5:39:2a:4b:76:6a: a4:19:e2:35:8e:44:0e:be:0d:da:2b:1d:45:4a:9e: 34:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:89:01:D2:7C:F1:77:61:C8:3A:48:8A:52:15:E0:F6:A7:F6:D3:1E X509v3 Authority Key Identifier: keyid:6B:AD:D7:D5:D1:12:81:12:D7:0A:B4:A2:45:24:01:42:8F:9D:09:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:38:3b:6e:26:b0:19:53:c5:79:c4:82:c9:95:7b:a1:2a:16: b5:52:2d:01:e7:38:0f:a3:aa:2c:a9:b8:8c:37:be:62:85:03: 95:0d:ec:13:66:54:b4:d3:3b:63:70:6a:b7:ba:db:52:49:3b: 5a:10:05:b2:dc:7a:f4:f3:e6:1e:50:99:90:fb:ad:ce:95:2a: 31:db:54:28:8f:3b:a1:ed:a2:ec:dd:9d:28:be:38:85:81:22: bf:41:25:9a:bc:69:1b:d9:3e:3d:01:bb:32:cd:d6:a5:8e:7e: 4a:3e:55:84:c1:97:97:5a:94:c3:24:4b:af:d6:6d:1c:e8:1f: 09:df:e9:12:2a:d9:a8:42:aa:f5:c9:13:27:c6:99:c8:5f:b1: 60:d6:5a:f4:19:32:61:8d:66:62:d5:2a:d3:9e:d7:19:79:09: b3:2e:53:03:99:42:7d:b0:fd:1c:e8:2f:87:f3:d8:52:1c:42: 1f:84:6b:63:c9:6e:02:ce:1d:1f:50:5b:03:90:73:f6:1b:93: fc:7e:53:00:4c:3d:80:92:83:bc:88:95:e4:0c:5c:b1:d0:de: fd:87:77:c6:8a:1b:26:09:54:a3:cc:21:23:08:cb:1f:8d:34: 99:b9:09:17:95:09:98:5a:4d:69:55:31:b8:49:10:fb:72:fc: 77:36:1e:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M4NkYxMTAvBgNVBAUTKDZCQUREN0Q1RDExMjgxMTJENzBBQjRBMjQ1MjQwMTQy OEY5RDA5N0IwHhcNMjQwNTMxMDc0MjI4WhcNMjQwNjA3MDc0MjI4WjAYMRYwFAYD VQQDEw02NjU5N2Y2NS0yYjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxijkajHsLMoguU/OrOw4M//SsjzO47K1oN9L4eaogxITwJPo5Vv5eY7pfNzo t1hdtFoCe1k/q1bHAKfDYg//Rq67s7v0AuzvrUDYcNGNxxHYcsHqvOGNAq5xFKOv OYP+agVXQcR3VX/DQOxEKc+kap2D6FeY9d6Rdrj2urbrgZM4pjfxf3TPrhMWh1vG FXFG+kYkV7Sc9QThcAyXAXXBqTIwYVwyPGlOe32nINDSTtM3JuWGNWnOjzuUtLrh EG5rEQX8q83yrWLPKkyTvUIidntUX/HyiBJLxH243AlOPjf7lw35Tdcranm1OSpL dmqkGeI1jkQOvg3aKx1FSp40yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2JAdJ8 8XdhyDpIilIV4Pan9tMeMB8GA1UdIwQYMBaAFGut19XREoES1wq0okUkAUKPnQl7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzg2Ri80N0JBMjhBRTEz RjYxMUVFOTI1RjBBMzZDNEY5QUUwMi9hNjNYMWRFU2dSTFhDclNpUlNRQlFvLWRD WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E2M1gxZEVTZ1JMWENyU2lSU1FCUW8tZENYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Qzg2Ri80N0JBMjhBRTEzRjYxMUVFOTI1RjBBMzZDNEY5QUUwMi9hNjNYMWRFU2dS TFhDclNpUlNRQlFvLWRDWHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3ODtuJrAZU8V5xILJlXuhKha1Ui0B5zgPo6osqbiMN75ihQOVDewT ZlS00ztjcGq3uttSSTtaEAWy3Hr08+YeUJmQ+63OlSox21Qojzuh7aLs3Z0ovjiF gSK/QSWavGkb2T49Absyzdaljn5KPlWEwZeXWpTDJEuv1m0c6B8J3+kSKtmoQqr1 yRMnxpnIX7Fg1lr0GTJhjWZi1SrTntcZeQmzLlMDmUJ9sP0c6C+H89hSHEIfhGtj yW4Czh0fUFsDkHP2G5P8flMATD2AkoO8iJXkDFyx0N79h3fGihsmCVSjzCEjCMsf jTSZuQkXlQmYWk1pVTG4SRD7cvx3Nh6C -----END CERTIFICATE-----Generated at Fri May 31 08:39:00 2024 by rpki-client on console-fra.rpki-client.org