$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft File: s2uXFySjur2JC3VFmJM3IPly_q8.mft (raw, json) Hash identifier: N5ZFNGtsxV0Y7BbXpph5JB0fLbsY5jfa8/szqNZjvBU= Subject key identifier: BB:C5:16:6F:C5:40:49:7B:35:12:45:F7:1E:9B:48:92:B1:7D:3A:42 Authority key identifier: B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF Certificate issuer: /CN=A91CE558/serialNumber=B36B971724A3BABD890B754598933720F972FEAF Certificate serial: 0A4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft Manifest number: 0A1E Signing time: Thu 16 May 2024 20:51:28 +0000 Manifest this update: Thu 16 May 2024 20:51:28 +0000 Manifest next update: Thu 23 May 2024 20:51:28 +0000 Files and hashes: 1: s2uXFySjur2JC3VFmJM3IPly_q8.crl (hash: hk81UQSkQwDUbsBaAkObR5/Pq7LHZ2ka8VwkJgKewHk=) 2: 466891560ADA11ECBFAECB29C4F9AE02.roa (hash: F3xCvYiCTg4FumPM67mthQgCC+4TyLyC1l9nIBqJtZw=) 3: 665751CE169B11ECB2AD5F80C4F9AE02.roa (hash: x50EXoRMcbgUsPqht4MqNyeMvFs8BpjXJn0McQSK97g=) 4: 456DD4320ADA11ECBFAECB29C4F9AE02.roa (hash: K2LPM/B/dohN64exCMk3SjRz22nGTdnf6CtUwK65PcA=) 5: F1EB46D2717F11EEB3FA0A5EC4F9AE02.roa (hash: vaFENyFd7nhalvOkRiTzb64Ct4WYu6zL3QUd5j9l2OY=) 6: A7470BFC33A711EBA4313B36C4F9AE02.roa (hash: qG1cjK6OIw78S024aOqFYZAQpmswaU3iLXu4jS/StRg=) 7: 43E8BE440AF611EC813DED67C4F9AE02.roa (hash: qcqxgJO0PiZ2gtCvIRe3NXUJTtKpHHBhAYo397BPQ1s=) 8: C1ACB1E819EF11EC84DBF462C4F9AE02.roa (hash: MJ6ZOEwR2CNQyIP4/Y3WNIgIpyl48iUxc6P/LmHl5F4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2638 (0xa4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE558/serialNumber=B36B971724A3BABD890B754598933720F972FEAF Validity Not Before: May 16 20:51:28 2024 GMT Not After : May 23 20:51:28 2024 GMT Subject: CN=664671d0-e88f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:71:c0:74:9f:df:10:5e:c5:e0:3c:e1:cb:11: 8f:4d:d0:ec:ba:6e:14:1b:95:f3:d3:d2:50:2d:cf: 3b:fe:36:7f:8e:5b:1b:19:95:d3:8e:36:a2:08:c8: 32:ff:04:9e:dd:06:9a:5b:40:30:3f:d6:32:9a:bf: 38:02:64:9d:9a:83:0e:48:ea:45:c2:ef:f5:f9:56: a8:d4:9e:5b:08:b2:c2:09:2d:cf:51:2a:a4:a0:67: 4b:46:46:62:52:be:52:c6:3a:02:8d:8c:4d:88:09: 6b:3f:75:95:e8:3f:71:c0:d4:89:26:c8:58:b6:07: c1:12:8e:f1:80:97:32:42:e7:76:70:81:40:4d:5c: 4d:55:a0:23:e1:27:8c:50:3c:41:04:78:e8:47:ec: 04:b7:12:02:c4:36:13:d4:0f:f8:43:74:cb:3a:b4: fc:dd:7c:0e:14:4a:4f:ad:4f:36:b9:f5:b0:c4:56: d9:6f:02:22:55:25:5c:e9:ac:d4:11:fa:b5:c6:b9: 24:ed:5a:cc:6d:0e:3c:63:e1:5f:63:7f:74:aa:51: be:3e:13:53:24:28:11:dd:66:e4:da:12:25:b2:dc: 37:19:26:e2:62:73:74:35:31:52:7c:86:20:a0:82: 39:c8:e0:13:6b:b3:86:e5:40:5f:71:90:9f:0a:7c: ff:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C5:16:6F:C5:40:49:7B:35:12:45:F7:1E:9B:48:92:B1:7D:3A:42 X509v3 Authority Key Identifier: keyid:B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:9e:8a:96:74:e3:e4:e4:62:24:12:97:01:b6:9b:c5:c5:5f: df:75:cd:28:d0:a3:75:b0:ed:68:e3:66:1c:ed:43:af:d0:45: dc:81:b2:b4:3b:61:5f:cd:2b:a7:4a:92:b2:6e:b6:64:d9:92: c4:a6:79:50:85:a6:00:55:62:66:7c:b1:c1:99:1a:d1:c6:8e: 37:74:a5:97:ba:3b:31:ed:ba:73:1c:2c:fb:ad:00:1f:e4:94: 87:b5:cc:d0:e3:73:69:00:b6:41:b3:d2:1e:46:c0:05:76:a1: 90:1b:c3:36:ab:d0:71:31:19:f9:5d:3f:d5:4a:77:46:fd:2a: 0b:3a:de:cd:9b:de:db:a1:c6:43:c3:ff:97:d2:6f:cb:0c:36: 65:27:30:01:73:ef:e1:82:d1:94:d4:99:9f:1a:3a:9f:ce:f9: 43:86:98:3a:5c:d7:5e:a8:08:29:71:09:22:10:cc:9d:38:f1: 02:46:db:37:d8:82:7f:4d:da:ee:3b:ac:ff:61:40:ab:0e:95: e8:ab:cc:40:d7:0a:8e:08:39:72:05:fd:bc:e8:d2:af:ef:b5: ac:91:7c:08:88:57:ac:b2:e6:e5:4f:93:52:4d:17:8e:f8:0c: 97:6c:1c:3a:87:77:c8:33:92:c4:23:71:5c:86:75:c7:51:cc: 96:ff:a0:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1NTgxMTAvBgNVBAUTKEIzNkI5NzE3MjRBM0JBQkQ4OTBCNzU0NTk4OTMzNzIw Rjk3MkZFQUYwHhcNMjQwNTE2MjA1MTI4WhcNMjQwNTIzMjA1MTI4WjAYMRYwFAYD VQQDEw02NjQ2NzFkMC1lODhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1nHAdJ/fEF7F4DzhyxGPTdDsum4UG5Xz09JQLc87/jZ/jlsbGZXTjjaiCMgy /wSe3QaaW0AwP9Yymr84AmSdmoMOSOpFwu/1+Vao1J5bCLLCCS3PUSqkoGdLRkZi Ur5SxjoCjYxNiAlrP3WV6D9xwNSJJshYtgfBEo7xgJcyQud2cIFATVxNVaAj4SeM UDxBBHjoR+wEtxICxDYT1A/4Q3TLOrT83XwOFEpPrU82ufWwxFbZbwIiVSVc6azU Efq1xrkk7VrMbQ48Y+FfY390qlG+PhNTJCgR3Wbk2hIlstw3GSbiYnN0NTFSfIYg oII5yOATa7OG5UBfcZCfCnz/VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLvFFm/F QEl7NRJF9x6bSJKxfTpCMB8GA1UdIwQYMBaAFLNrlxcko7q9iQt1RZiTNyD5cv6v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTU1OC8zREYxNEYwODUz OTQxMUVBQkY2QjRGNUZDNEY5QUUwMi9zMnVYRnlTanVyMkpDM1ZGbUpNM0lQbHlf cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MydVhGeVNqdXIySkMzVkZtSk0zSVBseV9xOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTU1OC8zREYxNEYwODUzOTQxMUVBQkY2QjRGNUZDNEY5QUUwMi9zMnVYRnlTanVy MkpDM1ZGbUpNM0lQbHlfcTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGnoqWdOPk5GIkEpcBtpvFxV/fdc0o0KN1sO1o42Yc7UOv0EXcgbK0 O2FfzSunSpKybrZk2ZLEpnlQhaYAVWJmfLHBmRrRxo43dKWXujsx7bpzHCz7rQAf 5JSHtczQ43NpALZBs9IeRsAFdqGQG8M2q9BxMRn5XT/VSndG/SoLOt7Nm97bocZD w/+X0m/LDDZlJzABc+/hgtGU1JmfGjqfzvlDhpg6XNdeqAgpcQkiEMydOPECRts3 2IJ/TdruO6z/YUCrDpXoq8xA1wqOCDlyBf286NKv77WskXwIiFessublT5NSTReO +AyXbBw6h3fIM5LEI3FchnXHUcyW/6Cx -----END CERTIFICATE-----Generated at Thu May 16 21:45:31 2024 by rpki-client on console-fra.rpki-client.org