$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft File: RxDk3mQVxI6LUxtZzUekHNeTRV4.mft (raw, json) Hash identifier: VRRWK8mfK9tJJtPqgU8N5QhNMju9RDGfMDQoxiZG8ZA= Subject key identifier: C3:DE:E5:FF:A9:36:EB:6F:D1:BF:B4:FF:BD:9C:5E:17:3E:E0:CB:71 Authority key identifier: 47:10:E4:DE:64:15:C4:8E:8B:53:1B:59:CD:47:A4:1C:D7:93:45:5E Certificate issuer: /CN=A91D9A24/serialNumber=4710E4DE6415C48E8B531B59CD47A41CD793455E Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft Manifest number: 21 Signing time: Sun 19 May 2024 08:36:09 +0000 Manifest this update: Sun 19 May 2024 08:36:08 +0000 Manifest next update: Sun 26 May 2024 08:36:08 +0000 Files and hashes: 1: RxDk3mQVxI6LUxtZzUekHNeTRV4.crl (hash: uNRKBgj3kT5LJWOdd4SU88dL+FXgFwrowbBgy7ixqo8=) 2: A18158C6E64611EE95C0CE78C4F9AE02.roa (hash: OhwAMmDXpoUwiIlu+NNwWEG2Mjf5q973vVgDZWZTt/I=) 3: FE2FF9B0E64611EEA8AE7979C4F9AE02.roa (hash: zTFWSulVee4Ly8DKhZ3WsgppSiRMvqo0mmrNlUemSBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.crl rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9A24/serialNumber=4710E4DE6415C48E8B531B59CD47A41CD793455E Validity Not Before: May 19 08:36:08 2024 GMT Not After : May 26 08:36:08 2024 GMT Subject: CN=6649b9f8-0bc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:00:34:80:f0:7e:9c:3e:3b:3d:2b:23:97:e5: 79:0d:a1:c9:5a:ba:8a:7b:21:ba:29:ed:38:1f:73: 22:3d:a5:cf:bb:55:b2:29:78:a3:ea:9b:89:1b:c5: fd:91:94:10:9c:34:4b:77:e1:08:7c:bd:d7:98:fb: e2:3b:24:bf:d1:41:8e:1f:66:e7:c3:50:fc:86:ef: d1:39:64:97:0a:05:eb:f0:72:41:34:c8:aa:76:09: 66:49:f4:0b:ce:54:b6:ba:ee:9c:08:52:ba:a9:f9: fb:9b:5e:95:a2:fa:5f:ca:1c:f6:de:87:06:80:3f: 9e:40:58:b9:63:81:dc:d6:61:28:57:a5:3b:88:a4: 70:f4:54:1b:38:f6:2c:75:ec:2a:bf:0e:77:82:05: 08:b7:5d:0f:6a:95:98:dd:86:fe:01:15:7f:c6:7b: d7:7a:38:ae:4f:93:6d:e6:e9:fc:ab:72:b1:8a:8a: 13:9b:1d:de:ba:f4:1a:fd:80:63:3e:93:fe:31:fe: d1:09:d9:c6:c8:21:f5:7f:0e:73:5d:29:3f:85:a8: 05:75:f0:21:19:86:e6:04:96:60:f9:ae:62:01:00: 71:2a:cc:0e:9b:04:42:46:e9:8a:db:b3:70:e3:1f: 77:ed:08:e8:49:3f:94:0a:a2:c0:ac:29:3d:50:5e: b1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:DE:E5:FF:A9:36:EB:6F:D1:BF:B4:FF:BD:9C:5E:17:3E:E0:CB:71 X509v3 Authority Key Identifier: keyid:47:10:E4:DE:64:15:C4:8E:8B:53:1B:59:CD:47:A4:1C:D7:93:45:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:66:6f:4c:16:0a:77:0d:39:99:57:42:48:a2:28:f0:ea:13: d5:a2:d6:b2:57:51:fb:ce:0b:b1:f2:c0:99:d3:8b:b7:5f:f8: cc:ae:09:a0:5e:e1:31:f8:e5:b5:2c:58:e0:3e:37:4a:ee:94: 14:4c:10:c0:bf:84:11:7f:40:ae:ae:49:97:50:1f:b5:8d:93: d4:3c:93:16:c8:61:ff:7c:55:44:71:86:d3:0a:22:43:7e:b8: fe:e2:c4:82:e3:78:ad:5c:f0:f4:a0:24:2d:f2:a1:74:c2:3b: 37:cc:2c:f9:ad:79:bd:0b:b1:41:66:cc:66:de:c0:ea:28:87: 78:db:ca:31:f6:9b:da:39:81:36:6b:7b:03:9d:0b:26:e7:cf: fb:24:43:e8:e2:8f:48:d0:36:c4:b1:e7:f3:ab:b0:fb:69:bd: b0:63:14:9a:03:87:d1:65:e6:7b:af:f7:38:ff:df:ec:d4:6b: ed:7d:9c:53:c4:8f:2d:78:b6:db:df:c0:ea:7a:3b:82:f8:63: 2e:34:0a:60:2a:4c:20:46:25:b6:09:dd:a0:8d:58:ee:e6:19: 35:91:00:6c:3d:64:48:16:ae:4a:31:38:a4:33:bb:a3:a0:3f: 94:be:34:44:74:93:68:e8:48:0e:3a:d7:9a:bb:d6:bd:42:c6: 13:b1:a1:ae -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OUEyNDExMC8GA1UEBRMoNDcxMEU0REU2NDE1QzQ4RThCNTMxQjU5Q0Q0N0E0MUNE NzkzNDU1RTAeFw0yNDA1MTkwODM2MDhaFw0yNDA1MjYwODM2MDhaMBgxFjAUBgNV BAMTDTY2NDliOWY4LTBiYzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpADSA8H6cPjs9KyOX5XkNoclauop7Ibop7TgfcyI9pc+7VbIpeKPqm4kbxf2R lBCcNEt34Qh8vdeY++I7JL/RQY4fZufDUPyG79E5ZJcKBevwckE0yKp2CWZJ9AvO VLa67pwIUrqp+fubXpWi+l/KHPbehwaAP55AWLljgdzWYShXpTuIpHD0VBs49ix1 7Cq/DneCBQi3XQ9qlZjdhv4BFX/Ge9d6OK5Pk23m6fyrcrGKihObHd669Br9gGM+ k/4x/tEJ2cbIIfV/DnNdKT+FqAV18CEZhuYElmD5rmIBAHEqzA6bBEJG6Yrbs3Dj H3ftCOhJP5QKosCsKT1QXrEJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUw97l/6k2 62/Rv7T/vZxeFz7gy3EwHwYDVR0jBBgwFoAURxDk3mQVxI6LUxtZzUekHNeTRV4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5QTI0LzkzOTg0Q0YyRTY0 NTExRUVCNUE3MzU3N0M0RjlBRTAyL1J4RGszbVFWeEk2TFV4dFp6VWVrSE5lVFJW NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUnhEazNtUVZ4STZMVXh0WnpVZWtITmVUUlY0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5 QTI0LzkzOTg0Q0YyRTY0NTExRUVCNUE3MzU3N0M0RjlBRTAyL1J4RGszbVFWeEk2 TFV4dFp6VWVrSE5lVFJWNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADZmb0wWCncNOZlXQkiiKPDqE9Wi1rJXUfvOC7HywJnTi7df+MyuCaBe 4TH45bUsWOA+N0rulBRMEMC/hBF/QK6uSZdQH7WNk9Q8kxbIYf98VURxhtMKIkN+ uP7ixILjeK1c8PSgJC3yoXTCOzfMLPmteb0LsUFmzGbewOooh3jbyjH2m9o5gTZr ewOdCybnz/skQ+jij0jQNsSx5/OrsPtpvbBjFJoDh9Fl5nuv9zj/3+zUa+19nFPE jy14ttvfwOp6O4L4Yy40CmAqTCBGJbYJ3aCNWO7mGTWRAGw9ZEgWrkoxOKQzu6Og P5S+NER0k2joSA4615q71r1CxhOxoa4= -----END CERTIFICATE-----Generated at Sun May 19 09:04:14 2024 by rpki-client on console-fra.rpki-client.org