$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft File: raez5kKEQOUk2gaDhqHt8yH4gR4.mft (raw, json) Hash identifier: ZdeaTYRO5xsvNTvi/Gun2cc+siUa3oUI69se/6TRuxI= Subject key identifier: 2D:26:BC:83:56:7B:6E:2E:61:87:82:E5:31:36:28:D3:D4:D8:6C:36 Authority key identifier: AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E Certificate issuer: /CN=A91D7103/serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft Manifest number: 8B Signing time: Sun 19 May 2024 07:03:18 +0000 Manifest this update: Sun 19 May 2024 07:03:17 +0000 Manifest next update: Sun 26 May 2024 07:03:17 +0000 Files and hashes: 1: raez5kKEQOUk2gaDhqHt8yH4gR4.crl (hash: Em/ybyIVORnLGmkoDk48uNJ43TqAKCbGopnEGGBy4kQ=) 2: EFB54FEC42D211EE9D8A0832C4F9AE02.roa (hash: sa5RzcxUnwYh4Sc0qjOs54hFuG3B/OqKRSDlh83844g=) 3: 1E35039C42D511EEAE5F803AC4F9AE02.roa (hash: g1L7zesoB5nU8PuGkI145uH8R2UcPZqxEKfaWGmIbic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7103/serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E Validity Not Before: May 19 07:03:17 2024 GMT Not After : May 26 07:03:17 2024 GMT Subject: CN=6649a435-c6ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:80:d2:39:bd:80:27:ac:26:98:c2:b3:1d:a2: b8:57:ad:1c:cd:fd:03:04:69:37:19:73:4d:74:89: d1:79:34:e4:63:a5:b3:25:1b:3a:bb:fe:2e:c5:ce: 4a:2f:71:78:52:2d:81:4a:f5:4c:2d:f9:59:01:e9: 3a:7e:fc:d0:41:0f:bf:e3:5f:9f:de:eb:be:6d:aa: 6b:95:b9:dd:bb:cd:01:0e:30:64:fd:7e:c6:16:5c: 19:af:ec:ee:6b:fe:e6:41:8f:80:d1:ec:0f:03:73: 2f:da:b0:47:a1:9b:f1:6b:be:c1:39:6b:85:a3:9c: c0:28:2b:05:ad:65:67:f2:85:42:b5:4d:63:51:a4: 11:30:0f:ed:1d:d4:7a:fc:28:d4:1e:62:d1:c9:ce: 41:17:9d:67:cd:0d:41:9e:a3:eb:14:dc:b0:d1:da: 4f:91:02:d5:7e:83:34:e5:89:d8:a1:b8:07:5b:c4: 79:d3:98:d9:7c:ad:8e:8c:b3:7a:84:51:98:37:bc: 02:82:ee:dc:b5:c2:30:93:3e:73:e0:eb:b3:2e:a6: d6:1a:9e:44:24:a7:c1:17:17:52:d3:71:0f:af:3c: 68:76:51:48:3b:2d:1c:72:c8:fb:c0:11:3f:b1:3c: 97:97:ff:fb:f6:a4:46:88:6c:5b:b8:0e:3e:18:f6: ec:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:26:BC:83:56:7B:6E:2E:61:87:82:E5:31:36:28:D3:D4:D8:6C:36 X509v3 Authority Key Identifier: keyid:AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:44:13:59:6d:d0:b3:9f:02:5d:ec:32:31:72:c6:34:f2:ca: f2:29:47:7a:7d:f7:dc:8f:8b:2d:73:62:a4:9f:4c:15:b1:13: 15:20:f0:8f:27:bf:8d:0e:56:39:54:cf:c4:08:f8:65:41:22: ce:d8:bc:3a:95:a4:a7:48:4d:06:f1:d7:ce:b5:12:3e:45:a9: 60:ff:9e:6a:e2:8c:62:21:46:20:a3:93:31:ef:a9:24:6b:e4: c7:8e:2d:49:c9:29:6a:dc:b8:ec:d1:c4:87:e4:ef:e1:56:fe: 28:ba:0a:84:8a:4a:35:ce:0d:6f:b4:7f:66:f5:64:95:47:f0: 4d:bd:a4:73:c5:2e:6e:61:15:41:3e:23:86:41:93:51:d0:40: c1:e7:1c:49:a0:2c:9b:ee:3c:21:b7:85:e5:39:00:13:c3:14: ee:10:5e:40:41:4b:6a:f8:91:3b:63:ee:1b:84:5d:26:a1:1a: 5f:a8:80:f5:06:d7:8d:16:fb:6d:fd:6c:30:06:37:9c:7c:ea: 75:7d:e0:b9:8e:8e:11:b9:d6:50:64:a1:5a:53:67:fc:49:2a: bd:13:a4:22:8d:30:c0:93:f1:7c:8f:3c:1e:6e:e6:be:72:09: 07:59:ea:a8:95:5c:25:48:c5:6b:12:47:f4:99:41:48:c9:51: f4:e2:a9:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDcxMDMxMTAvBgNVBAUTKEFEQTdCM0U2NDI4NDQwRTUyNERBMDY4Mzg2QTFFREYz MjFGODgxMUUwHhcNMjQwNTE5MDcwMzE3WhcNMjQwNTI2MDcwMzE3WjAYMRYwFAYD VQQDEw02NjQ5YTQzNS1jNmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzIDSOb2AJ6wmmMKzHaK4V60czf0DBGk3GXNNdInReTTkY6WzJRs6u/4uxc5K L3F4Ui2BSvVMLflZAek6fvzQQQ+/41+f3uu+baprlbndu80BDjBk/X7GFlwZr+zu a/7mQY+A0ewPA3Mv2rBHoZvxa77BOWuFo5zAKCsFrWVn8oVCtU1jUaQRMA/tHdR6 /CjUHmLRyc5BF51nzQ1BnqPrFNyw0dpPkQLVfoM05YnYobgHW8R505jZfK2OjLN6 hFGYN7wCgu7ctcIwkz5z4OuzLqbWGp5EJKfBFxdS03EPrzxodlFIOy0ccsj7wBE/ sTyXl//79qRGiGxbuA4+GPbshwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC0mvINW e24uYYeC5TE2KNPU2Gw2MB8GA1UdIwQYMBaAFK2ns+ZChEDlJNoGg4ah7fMh+IEe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzEwMy83QUI4MTEyQTQy RDIxMUVFQjdDNEQwMUVDNEY5QUUwMi9yYWV6NWtLRVFPVWsyZ2FEaHFIdDh5SDRn UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JhZXo1a0tFUU9VazJnYURocUh0OHlINGdSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzEwMy83QUI4MTEyQTQyRDIxMUVFQjdDNEQwMUVDNEY5QUUwMi9yYWV6NWtLRVFP VWsyZ2FEaHFIdDh5SDRnUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgRBNZbdCznwJd7DIxcsY08sryKUd6fffcj4stc2Kkn0wVsRMVIPCP J7+NDlY5VM/ECPhlQSLO2Lw6laSnSE0G8dfOtRI+Ralg/55q4oxiIUYgo5Mx76kk a+THji1JySlq3Ljs0cSH5O/hVv4ougqEiko1zg1vtH9m9WSVR/BNvaRzxS5uYRVB PiOGQZNR0EDB5xxJoCyb7jwht4XlOQATwxTuEF5AQUtq+JE7Y+4bhF0moRpfqID1 BteNFvtt/WwwBjecfOp1feC5jo4RudZQZKFaU2f8SSq9E6QijTDAk/F8jzwebua+ cgkHWeqolVwlSMVrEkf0mUFIyVH04qlw -----END CERTIFICATE-----Generated at Sun May 19 07:40:45 2024 by rpki-client on console-fra.rpki-client.org