$ rpki-client -vvf rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft File: CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft (raw, json) Hash identifier: xIfSvELGLVfCNHNf/Eo/yg0RQeZudt8+VItM6B77PGI= Subject key identifier: 40:ED:CA:7A:34:3E:4A:17:1A:2A:54:74:1A:34:77:29:35:DD:E0:18 Authority key identifier: 0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22 Certificate issuer: /CN=A91D890E/serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822 Certificate serial: 0863 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft Manifest number: 085E Signing time: Sat 18 May 2024 21:39:17 +0000 Manifest this update: Sat 18 May 2024 21:39:17 +0000 Manifest next update: Sat 25 May 2024 21:39:17 +0000 Files and hashes: 1: CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl (hash: Utii/ytSNmVGAtUxG94az1hJ56aJ7a8g8OxK5ox+Mo0=) 2: FDAEEFB0A12A11EAB063A548C4F9AE02.roa (hash: G8avC+ulnEE5Co+9F77RGYPLdXzyOYDLFUOhDerbuVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2147 (0x863) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D890E/serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822 Validity Not Before: May 18 21:39:17 2024 GMT Not After : May 25 21:39:17 2024 GMT Subject: CN=66492005-c649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f1:fb:7d:67:9b:bb:b1:48:73:cb:92:87:76: 65:b8:50:53:d9:a2:10:66:6d:a3:a2:11:d1:2f:da: e1:45:17:3d:0e:3c:5d:b4:dd:f9:e8:55:f1:bc:4f: d4:73:5e:75:c7:cb:23:1a:88:98:5d:26:d9:7c:d4: 61:a9:85:4b:11:3f:c2:f8:6f:b2:a2:82:4f:45:6a: 01:ca:f5:2b:08:c6:c0:7f:39:99:bd:8c:28:09:a4: 12:1d:58:87:ce:79:1b:dd:32:fa:7f:98:6f:fd:80: 46:1a:86:1a:3b:9e:5e:e4:50:a2:2d:a7:54:95:66: 51:84:22:ae:81:61:36:68:4e:f7:86:18:3b:b3:97: 20:32:b6:9a:9e:48:6d:dc:8b:88:49:ec:7a:f6:f8: 33:a9:02:41:be:5d:57:0a:1d:ba:69:5b:70:59:dd: d1:3c:6c:50:7d:0f:ed:e2:86:43:de:db:a7:5b:bb: 0a:4c:46:ee:44:71:8b:4f:08:16:f1:6f:5a:a5:ce: ca:e7:0b:a7:21:73:11:b6:fe:1e:e3:0d:cf:14:9b: b6:0e:8d:63:d0:a3:8a:ca:e7:b9:70:5d:22:ac:dc: c4:0c:c7:53:1f:33:a1:42:e9:7f:9a:3e:bc:38:c3: 36:87:70:9a:df:54:cf:34:9c:63:59:96:5a:d2:d5: e3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:ED:CA:7A:34:3E:4A:17:1A:2A:54:74:1A:34:77:29:35:DD:E0:18 X509v3 Authority Key Identifier: keyid:0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:9c:b3:d5:b1:ab:75:57:3a:b1:cc:0c:05:73:e6:fa:35:ce: 0d:13:dc:39:0d:3b:9e:24:e5:f1:69:46:41:c4:2b:c4:8f:69: a9:96:aa:4c:a2:94:6f:36:15:f5:1c:6f:7d:06:8a:2f:3c:e1: 78:c6:6a:47:90:2c:e6:5e:23:2d:b5:94:7e:73:1d:68:32:71: 20:9f:63:d4:e8:dd:ff:13:23:34:5d:a5:94:77:73:ae:17:77: 3f:aa:1c:df:13:b0:b3:70:a0:b0:e2:9f:c0:23:ff:47:c2:9b: 55:2b:9b:ab:2d:ba:bb:42:c6:4d:0a:4c:04:2a:60:d8:30:82: 9d:c3:0d:01:93:cd:f4:d1:98:56:34:21:13:39:c1:d9:4f:b7: a5:f1:13:12:bc:50:95:5c:d5:74:ec:d9:0d:4a:61:83:f4:4f: 88:9d:1e:e5:f7:ab:ef:0e:57:47:92:aa:05:95:a1:7d:6b:13: dc:77:dd:46:6e:b7:a8:a0:4d:2f:c3:8f:e1:95:27:38:91:18: f3:01:5a:f8:53:71:73:1f:94:bf:7e:8e:37:02:23:d6:43:d3: d7:25:f3:20:82:52:eb:93:c7:d8:79:c3:d5:7e:0e:c1:c5:8e: 5c:2a:99:5f:93:b8:5d:d8:27:a7:24:26:c3:04:43:b1:3f:db: 62:a1:e6:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5MEUxMTAvBgNVBAUTKDBCMDIyQjFFQTM0QzAzN0M1MUY2NTdGQzNFMEQ4NEEz QzYxODY4MjIwHhcNMjQwNTE4MjEzOTE3WhcNMjQwNTI1MjEzOTE3WjAYMRYwFAYD VQQDEw02NjQ5MjAwNS1jNjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxfH7fWebu7FIc8uSh3ZluFBT2aIQZm2johHRL9rhRRc9DjxdtN356FXxvE/U c151x8sjGoiYXSbZfNRhqYVLET/C+G+yooJPRWoByvUrCMbAfzmZvYwoCaQSHViH znkb3TL6f5hv/YBGGoYaO55e5FCiLadUlWZRhCKugWE2aE73hhg7s5cgMraankht 3IuISex69vgzqQJBvl1XCh26aVtwWd3RPGxQfQ/t4oZD3tunW7sKTEbuRHGLTwgW 8W9apc7K5wunIXMRtv4e4w3PFJu2Do1j0KOKyue5cF0irNzEDMdTHzOhQul/mj68 OMM2h3Ca31TPNJxjWZZa0tXjHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEDtyno0 PkoXGipUdBo0dyk13eAYMB8GA1UdIwQYMBaAFAsCKx6jTAN8UfZX/D4NhKPGGGgi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODkwRS84RDQxMzVGRUEx MjkxMUVBQTAyMjc3NDZDNEY5QUUwMi9Dd0lySHFOTUEzeFI5bGY4UGcyRW84WVlh Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N3SXJIcU5NQTN4UjlsZjhQZzJFbzhZWWFDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODkwRS84RDQxMzVGRUExMjkxMUVBQTAyMjc3NDZDNEY5QUUwMi9Dd0lySHFOTUEz eFI5bGY4UGcyRW84WVlhQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwnLPVsat1VzqxzAwFc+b6Nc4NE9w5DTueJOXxaUZBxCvEj2mplqpM opRvNhX1HG99BoovPOF4xmpHkCzmXiMttZR+cx1oMnEgn2PU6N3/EyM0XaWUd3Ou F3c/qhzfE7CzcKCw4p/AI/9HwptVK5urLbq7QsZNCkwEKmDYMIKdww0Bk8300ZhW NCETOcHZT7el8RMSvFCVXNV07NkNSmGD9E+InR7l96vvDldHkqoFlaF9axPcd91G breooE0vw4/hlSc4kRjzAVr4U3FzH5S/fo43AiPWQ9PXJfMgglLrk8fYecPVfg7B xY5cKplfk7hd2CenJCbDBEOxP9tioeZA -----END CERTIFICATE-----Generated at Sun May 19 00:16:19 2024 by rpki-client on console-fra.rpki-client.org