$ rpki-client -vvf rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft File: 1xRtqd4o9btePeL_AMWfyFyZONo.mft (raw, json) Hash identifier: /28h6oaSV/mV/O2TgOcFLemlsNhaTmkYCdFeMVUvOP0= Subject key identifier: 07:59:11:91:E4:99:AE:1D:C5:44:19:64:BB:0C:B4:29:38:E9:3A:E2 Authority key identifier: D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA Certificate issuer: /CN=A91D560D/serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA Certificate serial: 07C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft Manifest number: 1200 Signing time: Sat 18 May 2024 20:25:52 +0000 Manifest this update: Sat 18 May 2024 20:25:52 +0000 Manifest next update: Sat 25 May 2024 20:25:52 +0000 Files and hashes: 1: 1xRtqd4o9btePeL_AMWfyFyZONo.crl (hash: 7gmuILwViVYDFoOBZ27iTR64yyUKWhCvJWgV+0hbp7g=) 2: A10B1F2CC2C111EB9FF4B980C4F9AE02.roa (hash: oW5ufK8uuYVD0QdaX00seTUO6gXE6JmBRPLc71abQX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1986 (0x7c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D560D/serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA Validity Not Before: May 18 20:25:52 2024 GMT Not After : May 25 20:25:52 2024 GMT Subject: CN=66490ed0-ce6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cd:4c:e9:51:91:e1:83:37:ba:ee:32:e9:ad: d4:e2:b6:7d:1d:07:c0:4a:89:67:d6:fe:0c:05:bd: f3:48:8f:ab:3b:5d:cd:d7:fa:82:f1:da:19:e9:86: 3e:d6:6c:b7:32:03:ed:22:34:e9:7c:a9:c6:60:70: d4:ec:1a:da:a4:81:bd:11:09:16:b1:19:97:31:b9: a0:9a:cf:de:c6:f1:cb:ef:ce:58:5c:83:b3:4e:13: 17:d5:a0:c7:e4:36:c5:6f:f8:b4:e4:0d:c2:8b:23: 94:35:45:45:9f:69:69:42:d5:0e:bb:ed:e5:9c:dd: 53:2b:da:a5:d6:b0:c3:a0:8a:80:67:1d:b6:9e:7c: 2d:1a:30:55:39:ef:3f:d3:b2:41:91:93:0f:ae:0c: 5c:33:74:ee:57:9c:8d:6d:e0:84:f1:c5:01:b0:25: 96:1c:e8:62:4f:21:7e:e6:a5:c5:be:d9:d0:5d:a9: ca:a0:c9:92:1a:93:8f:50:8d:1a:77:8f:94:0b:bf: c8:97:0e:ac:59:5a:58:9f:ef:44:ed:2d:08:12:5b: 78:26:60:d1:81:9e:9a:53:d7:90:c7:1d:79:a2:5d: 9f:e2:de:31:d1:bc:b1:7c:c9:50:cb:af:9e:79:e3: 6c:5a:3d:ae:e4:26:8e:69:33:38:e8:5f:43:7e:b7: f0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:59:11:91:E4:99:AE:1D:C5:44:19:64:BB:0C:B4:29:38:E9:3A:E2 X509v3 Authority Key Identifier: keyid:D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d5:26:2e:35:be:2d:96:ba:40:19:d4:7c:2a:4b:73:47:d1: 28:ca:bd:dd:2a:42:af:29:2e:18:e6:4a:44:2b:ff:c0:bb:8d: 0c:18:eb:01:98:c7:fa:29:c4:46:2b:00:d7:ae:c3:f1:c7:cd: 3b:c7:da:78:e7:c6:4c:14:b7:8d:71:e2:eb:d9:55:7e:d6:7d: 88:71:39:16:d2:bf:3e:08:94:0d:f6:4a:54:a6:6a:02:29:73: a5:80:64:9d:63:45:9f:03:77:38:51:bc:bd:04:8d:bb:d7:a0: f7:07:ff:3d:d9:32:2d:77:b6:bc:e5:9e:cb:07:17:e4:e2:c2: 1a:8a:41:83:20:49:a9:33:8b:ac:10:ae:10:28:32:e7:36:8c: 8a:9f:b9:94:4d:fb:62:d7:5d:d5:50:a1:a3:e1:c3:0f:c7:a0: 6f:1b:fd:09:e7:a8:90:9b:39:74:8b:5c:26:08:82:15:dc:42: 26:fa:5f:a7:60:58:fc:e6:40:95:88:61:a2:59:ff:a3:ae:84: 04:26:a7:b7:7c:53:83:b0:98:d0:ae:95:05:94:2d:8b:51:25: 88:df:28:43:e9:2e:a9:1f:de:e5:c1:c5:be:98:4f:95:8b:38: f4:c3:6d:99:3a:72:22:6d:58:16:e8:c5:c8:02:31:ef:3d:15: 23:94:ab:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU2MEQxMTAvBgNVBAUTKEQ3MTQ2REE5REUyOEY1QkI1RTNERTJGRjAwQzU5RkM4 NUM5OTM4REEwHhcNMjQwNTE4MjAyNTUyWhcNMjQwNTI1MjAyNTUyWjAYMRYwFAYD VQQDEw02NjQ5MGVkMC1jZTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAts1M6VGR4YM3uu4y6a3U4rZ9HQfASoln1v4MBb3zSI+rO13N1/qC8doZ6YY+ 1my3MgPtIjTpfKnGYHDU7BrapIG9EQkWsRmXMbmgms/exvHL785YXIOzThMX1aDH 5DbFb/i05A3CiyOUNUVFn2lpQtUOu+3lnN1TK9ql1rDDoIqAZx22nnwtGjBVOe8/ 07JBkZMPrgxcM3TuV5yNbeCE8cUBsCWWHOhiTyF+5qXFvtnQXanKoMmSGpOPUI0a d4+UC7/Ilw6sWVpYn+9E7S0IElt4JmDRgZ6aU9eQxx15ol2f4t4x0byxfMlQy6+e eeNsWj2u5CaOaTM46F9Dfrfw0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdZEZHk ma4dxUQZZLsMtCk46TriMB8GA1UdIwQYMBaAFNcUbaneKPW7Xj3i/wDFn8hcmTja MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTYwRC82OEMzRjQ5QTQx RUUxMUVBOUNFQTFGNzVDNEY5QUUwMi8xeFJ0cWQ0bzlidGVQZUxfQU1XZnlGeVpP Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF4UnRxZDRvOWJ0ZVBlTF9BTVdmeUZ5Wk9Oby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTYwRC82OEMzRjQ5QTQxRUUxMUVBOUNFQTFGNzVDNEY5QUUwMi8xeFJ0cWQ0bzli dGVQZUxfQU1XZnlGeVpPTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB91SYuNb4tlrpAGdR8KktzR9Eoyr3dKkKvKS4Y5kpEK//Au40MGOsB mMf6KcRGKwDXrsPxx807x9p458ZMFLeNceLr2VV+1n2IcTkW0r8+CJQN9kpUpmoC KXOlgGSdY0WfA3c4Uby9BI2716D3B/892TItd7a85Z7LBxfk4sIaikGDIEmpM4us EK4QKDLnNoyKn7mUTfti113VUKGj4cMPx6BvG/0J56iQmzl0i1wmCIIV3EIm+l+n YFj85kCViGGiWf+jroQEJqe3fFODsJjQrpUFlC2LUSWI3yhD6S6pH97lwcW+mE+V izj0w22ZOnIibVgW6MXIAjHvPRUjlKtM -----END CERTIFICATE-----Generated at Sat May 18 20:48:21 2024 by rpki-client on console-fra.rpki-client.org