$ rpki-client -vvf rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft File: CROi4pwkcA4hQx4EweNJf9X5qAA.mft (raw, json) Hash identifier: 0EyYYNYFPfLsFYmjJm13zKlbegziLkhol6JWfVY8zoY= Subject key identifier: D5:C9:4C:01:79:FA:C5:0F:21:21:12:2F:A3:D2:CD:D3:C3:BC:C6:E5 Authority key identifier: 09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 Certificate issuer: /CN=A91D65C2/serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft Manifest number: 4A Signing time: Sun 19 May 2024 08:05:45 +0000 Manifest this update: Sun 19 May 2024 08:05:45 +0000 Manifest next update: Sun 26 May 2024 08:05:45 +0000 Files and hashes: 1: CROi4pwkcA4hQx4EweNJf9X5qAA.crl (hash: lW4JO9ysfmXtgF3dze6pK/jN6gFon5D9XT2ip42ArhI=) 2: C3A53484B06011EEA1D18B7FC4F9AE02.roa (hash: BKT8mKOvtKDrwuLWmsCuesw/k4MktBnMTWfVhN9KpJk=) 3: AA134FD6BD1411EE95F45624C4F9AE02.roa (hash: Qk5WperL9Uyej6ohOzdzkfdTG/QX7gXEMdP5wBlxS2E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D65C2/serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Validity Not Before: May 19 08:05:45 2024 GMT Not After : May 26 08:05:45 2024 GMT Subject: CN=6649b2d9-ef03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d7:dd:f8:85:4b:95:c4:d9:e2:b1:3e:65:f5: fe:12:38:62:eb:de:77:76:76:82:39:48:f4:99:12: 97:d3:15:5e:52:94:cb:ed:0d:7c:38:8f:ae:d7:ee: 41:4e:c2:ea:ed:c9:94:68:4e:13:9f:0b:79:ca:b0: 90:c3:df:11:40:1c:12:ff:90:fb:81:e6:60:33:b2: 75:8f:6b:98:94:8f:4d:66:6e:06:22:fe:bc:ab:f7: 9e:6b:2f:b8:a5:5e:55:92:2b:47:00:f8:cb:4d:aa: 14:fa:a1:da:af:ca:57:27:a1:61:1e:54:2e:c8:71: f3:57:0d:16:c5:2d:4c:cd:bb:90:1e:4a:97:08:6d: d0:13:ae:d6:b4:12:a7:ff:6f:f0:be:36:b2:b6:59: ed:a5:9b:36:46:64:fb:e0:9f:d9:1e:56:f8:0d:06: ec:fa:5e:bb:ef:1e:1e:01:01:2b:35:22:20:15:91: 3e:7c:62:ec:62:c0:29:2d:ff:e6:c4:26:fa:9c:86: bb:0a:50:90:86:60:1d:7f:3c:96:88:96:b3:fd:7d: 7a:8d:32:b4:6d:63:14:e8:fc:42:75:5c:e7:e6:a5: 86:ee:52:03:2f:95:7e:8f:43:e2:c3:da:43:ca:94: d1:9a:1a:03:d6:7e:32:11:2c:70:45:ad:5e:e5:52: d4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C9:4C:01:79:FA:C5:0F:21:21:12:2F:A3:D2:CD:D3:C3:BC:C6:E5 X509v3 Authority Key Identifier: keyid:09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:47:03:ce:aa:6c:ea:06:cf:4a:aa:42:34:e0:05:8c:d4:ad: 80:95:ca:3b:d6:0b:02:14:81:a2:d9:da:1e:f5:47:a2:a4:a3: 27:b1:24:0e:44:f2:f2:ae:48:b4:9e:ce:35:c4:ed:f6:c2:7a: ed:b9:2d:5a:80:94:3f:a4:e0:6b:51:08:e3:97:2a:62:50:d2: 1b:4c:8f:ab:0b:84:36:12:65:d7:7a:18:ba:cc:89:79:76:14: 6d:73:ee:bc:bb:83:c6:de:ff:cc:36:fe:8f:2b:ac:e7:54:7f: f4:12:83:9f:75:48:d1:1f:7b:de:09:20:5b:0f:2e:98:87:23: 67:c2:c7:f1:36:95:e3:3c:4c:60:7a:4d:0b:d0:cb:b8:b5:a9: a4:39:1e:cd:73:af:cd:db:d6:46:8a:fb:55:82:ed:91:1a:75: 2a:b9:a8:29:45:f7:6f:93:39:b6:9a:ae:14:00:5f:ce:41:c2: a5:7c:59:33:0c:7d:43:61:5e:31:02:5f:8f:6f:d8:bc:5d:d9: c6:9a:7a:cf:7c:d9:64:1d:17:3a:4d:da:e7:75:d4:d5:da:2e: 08:8c:81:f1:c6:b5:ea:68:1c:0f:24:b6:3b:e8:15:8f:62:de: 9e:b8:26:f0:c1:f5:2a:ee:05:b0:46:ac:fb:61:a6:d0:08:82: 30:b0:0d:28 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NjVDMjExMC8GA1UEBRMoMDkxM0EyRTI5QzI0NzAwRTIxNDMxRTA0QzFFMzQ5N0ZE NUY5QTgwMDAeFw0yNDA1MTkwODA1NDVaFw0yNDA1MjYwODA1NDVaMBgxFjAUBgNV BAMTDTY2NDliMmQ5LWVmMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC61934hUuVxNnisT5l9f4SOGLr3nd2doI5SPSZEpfTFV5SlMvtDXw4j67X7kFO wurtyZRoThOfC3nKsJDD3xFAHBL/kPuB5mAzsnWPa5iUj01mbgYi/ryr955rL7il XlWSK0cA+MtNqhT6odqvylcnoWEeVC7IcfNXDRbFLUzNu5AeSpcIbdATrta0Eqf/ b/C+NrK2We2lmzZGZPvgn9keVvgNBuz6XrvvHh4BASs1IiAVkT58YuxiwCkt/+bE JvqchrsKUJCGYB1/PJaIlrP9fXqNMrRtYxTo/EJ1XOfmpYbuUgMvlX6PQ+LD2kPK lNGaGgPWfjIRLHBFrV7lUtSbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1clMAXn6 xQ8hIRIvo9LN08O8xuUwHwYDVR0jBBgwFoAUCROi4pwkcA4hQx4EweNJf9X5qAAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2NUMyLzc2RUU3OTVDQjA2 MDExRUVCQkJGNjU3Q0M0RjlBRTAyL0NST2k0cHdrY0E0aFF4NEV3ZU5KZjlYNXFB QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ1JPaTRwd2tjQTRoUXg0RXdlTkpmOVg1cUFBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2 NUMyLzc2RUU3OTVDQjA2MDExRUVCQkJGNjU3Q0M0RjlBRTAyL0NST2k0cHdrY0E0 aFF4NEV3ZU5KZjlYNXFBQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAERHA86qbOoGz0qqQjTgBYzUrYCVyjvWCwIUgaLZ2h71R6KkoyexJA5E 8vKuSLSezjXE7fbCeu25LVqAlD+k4GtRCOOXKmJQ0htMj6sLhDYSZdd6GLrMiXl2 FG1z7ry7g8be/8w2/o8rrOdUf/QSg591SNEfe94JIFsPLpiHI2fCx/E2leM8TGB6 TQvQy7i1qaQ5Hs1zr83b1kaK+1WC7ZEadSq5qClF92+TObaarhQAX85BwqV8WTMM fUNhXjECX49v2Lxd2caaes982WQdFzpN2ud11NXaLgiMgfHGtepoHA8ktjvoFY9i 3p64JvDB9SruBbBGrPthptAIgjCwDSg= -----END CERTIFICATE-----Generated at Sun May 19 09:04:14 2024 by rpki-client on console-fra.rpki-client.org