$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft File: B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft (raw, json) Hash identifier: OShHTegMtczfJGk4pOhH9hRM5K/Cfus0/p78RjKAVus= Subject key identifier: DC:AD:30:77:C1:D9:DB:3C:38:38:E4:68:33:C8:A6:0D:1C:38:AA:B9 Authority key identifier: 07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67 Certificate issuer: /CN=A91CDCB6/serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467 Certificate serial: 1D6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft Manifest number: 1D55 Signing time: Sat 18 May 2024 16:29:57 +0000 Manifest this update: Sat 18 May 2024 16:29:56 +0000 Manifest next update: Sat 25 May 2024 16:29:56 +0000 Files and hashes: 1: B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl (hash: 2TJZpPSVYQThncB+WwGFD6ChJBnwCm/vq6ZIoPdB3tc=) 2: BD314CEA619711EE81211277C4F9AE02.roa (hash: y9bYv10Sj2SzJjf7aWhedeuMSKoXzsaYdKD0ELdpARk=) 3: 48471CAE611811EEB2B1C077C4F9AE02.roa (hash: bbgunNoeZwkmSm5GLmk8fdMF4Ue/kSTbRpGVK+vcIS8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7535 (0x1d6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDCB6/serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467 Validity Not Before: May 18 16:29:56 2024 GMT Not After : May 25 16:29:56 2024 GMT Subject: CN=6648d785-6733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bd:98:1b:d9:61:a3:79:9a:96:58:36:d2:7d: 94:29:aa:06:63:d1:3d:65:d7:3b:8a:64:59:b9:92: 77:d8:de:03:de:6f:65:d3:a3:3f:db:6b:9c:2d:91: fe:10:73:f2:0c:a3:31:31:c1:7f:f8:98:49:8e:cb: f0:ee:fb:1c:53:8e:d0:9c:da:7f:7b:ea:83:1d:ee: 39:e1:e9:bf:f1:f3:74:ce:48:08:cd:04:4f:94:ec: 47:d9:54:17:68:78:bf:53:07:15:86:e0:4d:1a:f2: ff:42:05:1f:b6:07:d1:e9:43:7b:57:5c:3e:07:6e: c6:6f:61:dd:60:b8:d5:7d:f3:7a:bb:42:ad:c2:f7: e2:d4:1d:d6:95:c1:1a:d2:00:42:1c:78:46:82:b1: 72:46:81:f9:f7:65:9a:cb:59:fc:6a:f3:17:8e:9c: fe:30:ca:f9:b4:d8:ec:65:e6:82:cd:2d:77:1b:f8: 63:ef:e7:65:2f:00:59:c9:78:c5:4c:96:38:d9:d7: ce:5b:7f:5f:ba:ca:d5:54:f8:d5:ad:7f:4e:fb:24: 5a:90:34:72:60:f4:82:42:d6:d3:58:14:15:b4:4c: 9b:44:08:43:fa:ae:ba:de:b0:99:d8:e2:01:24:c8: 0e:35:d5:ff:d1:9a:5e:b7:53:9a:d9:86:71:e9:04: 65:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:AD:30:77:C1:D9:DB:3C:38:38:E4:68:33:C8:A6:0D:1C:38:AA:B9 X509v3 Authority Key Identifier: keyid:07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:5c:82:ab:a7:5f:ce:75:0d:f3:d7:91:4b:5c:5d:80:11:c0: 0a:8d:7e:51:f0:59:2e:f1:10:a6:ac:1e:04:7c:b2:ed:3e:14: 8a:f4:f5:61:08:fc:b8:f0:c1:ae:b6:7e:be:c7:af:df:34:96: cb:59:4f:89:1b:09:18:98:60:be:77:9c:b7:f1:2a:50:d2:6f: b3:64:8b:ad:d2:c6:9c:f6:cf:3a:e8:c3:46:84:ad:d6:77:55: ca:1d:a8:1c:df:e9:66:8b:fc:4b:9a:97:dd:e7:3b:cb:e7:4b: 37:b9:cd:0b:2e:e6:47:58:62:40:0e:18:12:b7:f8:2c:9f:a5: 99:e0:ef:24:25:46:e6:fa:d8:98:35:28:a8:f8:9f:7a:09:9e: 48:d3:3b:ff:f9:92:30:4c:cb:50:3b:81:37:6f:bb:0d:82:9d: 16:6f:75:38:f7:1b:f2:83:28:e8:d9:40:f5:a5:a3:08:7c:b6: 0d:16:f0:99:a8:a4:e6:d8:59:23:93:8d:65:b9:5a:52:98:ac: c1:7d:7c:48:30:7b:aa:fa:6d:af:0e:b2:b5:b4:39:d3:33:bc: 40:18:d9:ac:14:56:a9:48:b4:08:96:7f:d7:04:3a:dc:81:db: 40:22:ea:04:5e:4c:82:0b:1f:48:9c:67:f4:50:c5:20:c2:7c: cb:c7:29:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RDQjYxMTAvBgNVBAUTKDA3ODE2NzVDQzY0RkFCMkI4NDVEQTdGNTExNTU0OTgw NDJFQ0U0NjcwHhcNMjQwNTE4MTYyOTU2WhcNMjQwNTI1MTYyOTU2WjAYMRYwFAYD VQQDEw02NjQ4ZDc4NS02NzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtb2YG9lho3mallg20n2UKaoGY9E9Zdc7imRZuZJ32N4D3m9l06M/22ucLZH+ EHPyDKMxMcF/+JhJjsvw7vscU47QnNp/e+qDHe454em/8fN0zkgIzQRPlOxH2VQX aHi/UwcVhuBNGvL/QgUftgfR6UN7V1w+B27Gb2HdYLjVffN6u0Ktwvfi1B3WlcEa 0gBCHHhGgrFyRoH592Way1n8avMXjpz+MMr5tNjsZeaCzS13G/hj7+dlLwBZyXjF TJY42dfOW39fusrVVPjVrX9O+yRakDRyYPSCQtbTWBQVtEybRAhD+q663rCZ2OIB JMgONdX/0Zpet1Oa2YZx6QRlswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNytMHfB 2ds8ODjkaDPIpg0cOKq5MB8GA1UdIwQYMBaAFAeBZ1zGT6srhF2n9RFVSYBC7ORn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRENCNi82N0M2QUE0QThB RjExMUU2OTgwNzgzNTVDNEY5QUUwMi9CNEZuWE1aUHF5dUVYYWYxRVZWSmdFTHM1 R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I0Rm5YTVpQcXl1RVhhZjFFVlZKZ0VMczVHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RENCNi82N0M2QUE0QThBRjExMUU2OTgwNzgzNTVDNEY5QUUwMi9CNEZuWE1aUHF5 dUVYYWYxRVZWSmdFTHM1R2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIXIKrp1/OdQ3z15FLXF2AEcAKjX5R8Fku8RCmrB4EfLLtPhSK9PVh CPy48MGutn6+x6/fNJbLWU+JGwkYmGC+d5y38SpQ0m+zZIut0sac9s866MNGhK3W d1XKHagc3+lmi/xLmpfd5zvL50s3uc0LLuZHWGJADhgSt/gsn6WZ4O8kJUbm+tiY NSio+J96CZ5I0zv/+ZIwTMtQO4E3b7sNgp0Wb3U49xvygyjo2UD1paMIfLYNFvCZ qKTm2Fkjk41luVpSmKzBfXxIMHuq+m2vDrK1tDnTM7xAGNmsFFapSLQIln/XBDrc gdtAIuoEXkyCCx9InGf0UMUgwnzLxymX -----END CERTIFICATE-----Generated at Sat May 18 16:57:54 2024 by rpki-client on console-fra.rpki-client.org