$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft File: I3t9TKhKJtX8SVjUgZHzahS8ei8.mft (raw, json) Hash identifier: JENpAOaGtkVKzPVKLzkMnUWg2W3NtbqCFUvvwfHvwOo= Subject key identifier: 51:F5:DE:FE:4D:FE:1F:B2:E0:33:3D:36:87:73:9B:FC:EB:73:07:67 Authority key identifier: 23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F Certificate issuer: /CN=A91DB6F8/serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Certificate serial: 011A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft Manifest number: 0116 Signing time: Sun 19 May 2024 05:23:13 +0000 Manifest this update: Sun 19 May 2024 05:23:13 +0000 Manifest next update: Sun 26 May 2024 05:23:13 +0000 Files and hashes: 1: I3t9TKhKJtX8SVjUgZHzahS8ei8.crl (hash: 216ShDwDQ/FoXTsrK3PoqKoPR4pQBFUmIp/gDQlJCWM=) 2: 4155ABCE725111ED82867F40C4F9AE02.roa (hash: oCKdsU3aoxN4ZJq4VlPybOXmRN+jsoto/3GeO2+L5/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 282 (0x11a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB6F8/serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Validity Not Before: May 19 05:23:13 2024 GMT Not After : May 26 05:23:13 2024 GMT Subject: CN=66498cc1-b2a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ce:4e:2c:6e:31:de:a7:a9:e7:bf:3e:ea:f7: 66:29:21:01:37:ff:b5:97:47:c9:f8:e9:0e:5c:37: 0b:7b:2d:f9:a7:a8:7f:11:31:de:96:8f:9a:cd:8e: df:9f:44:be:e3:55:96:6d:6d:f4:f2:f9:57:d8:fa: b7:e0:1c:ec:79:e6:2c:9f:16:f5:fa:c4:65:49:e1: d0:53:b2:59:0e:39:08:07:98:5b:03:08:69:23:09: 09:67:e1:9d:fc:16:7e:5f:50:08:86:88:d0:d6:c3: db:87:e3:3b:d5:01:a8:52:91:00:50:f2:4b:a8:6f: fc:b3:3c:96:98:22:45:6d:e2:55:1c:95:a7:3f:94: 40:87:77:0c:b7:84:29:3c:40:73:f0:85:ba:74:89: 63:52:9d:1a:43:66:97:30:9c:8f:67:70:0d:7a:dd: 36:27:f4:fc:cc:fc:af:33:56:31:54:82:ff:69:4f: 2b:02:c8:02:43:a4:20:25:e7:2d:cc:f4:08:43:98: 87:fd:80:f9:77:7c:77:3b:9d:a0:a2:98:d9:eb:de: ca:66:35:54:5c:fc:1c:41:69:58:df:9f:51:ce:35: c3:ea:ec:7a:fb:03:20:8e:74:c0:23:6c:79:5b:09: 4d:d3:2c:e7:7b:57:32:45:59:7a:bc:3f:17:4c:1e: d0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F5:DE:FE:4D:FE:1F:B2:E0:33:3D:36:87:73:9B:FC:EB:73:07:67 X509v3 Authority Key Identifier: keyid:23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:3a:6b:07:cb:6a:d1:f8:8f:a3:56:09:cf:0e:cf:5c:52:5d: 8e:50:d3:92:eb:be:bc:99:37:90:12:05:74:d2:0e:11:fb:e5: e2:f1:31:f7:d3:55:89:6b:2d:72:4c:6c:7a:ee:2a:ce:39:ca: b9:51:4a:d1:18:9e:0d:4e:b6:22:ad:eb:a8:87:57:35:bf:cd: 1b:94:a8:28:3a:5d:b2:3d:eb:3c:e3:47:13:20:6e:f8:b0:cb: c8:b2:25:11:d8:97:95:75:7a:9f:90:0d:98:cd:18:2a:d1:57: 05:bf:84:b8:a8:5f:20:8e:4b:7e:fb:70:9c:77:21:a4:2d:7e: 07:9d:ef:64:d7:3c:a6:61:ce:dd:45:0e:67:23:8c:bc:03:f8: 82:0d:77:8e:7a:ac:0b:fa:63:dc:3f:0e:f3:be:55:48:ac:70: 6a:d3:44:52:22:51:b8:99:6c:ac:21:35:5a:45:47:68:d7:4e: b5:cd:4c:51:7a:e8:61:66:f7:71:9f:9b:b1:70:8c:96:22:92: 4c:4c:22:ee:7b:aa:16:0c:98:c3:be:73:8f:55:b9:33:f9:22: d4:9f:06:cd:5b:01:d8:c1:6e:25:78:06:b1:1e:bc:99:e6:0d: 1e:04:a4:87:5b:fe:b8:c8:fb:65:44:45:e2:4c:f6:d7:18:75: f3:36:55:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI2RjgxMTAvBgNVBAUTKDIzN0I3RDRDQTg0QTI2RDVGQzQ5NThENDgxOTFGMzZB MTRCQzdBMkYwHhcNMjQwNTE5MDUyMzEzWhcNMjQwNTI2MDUyMzEzWjAYMRYwFAYD VQQDEw02NjQ5OGNjMS1iMmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn85OLG4x3qep578+6vdmKSEBN/+1l0fJ+OkOXDcLey35p6h/ETHelo+azY7f n0S+41WWbW308vlX2Pq34BzseeYsnxb1+sRlSeHQU7JZDjkIB5hbAwhpIwkJZ+Gd /BZ+X1AIhojQ1sPbh+M71QGoUpEAUPJLqG/8szyWmCJFbeJVHJWnP5RAh3cMt4Qp PEBz8IW6dIljUp0aQ2aXMJyPZ3ANet02J/T8zPyvM1YxVIL/aU8rAsgCQ6QgJect zPQIQ5iH/YD5d3x3O52gopjZ697KZjVUXPwcQWlY359RzjXD6ux6+wMgjnTAI2x5 WwlN0yzne1cyRVl6vD8XTB7Q4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFH13v5N /h+y4DM9Nodzm/zrcwdnMB8GA1UdIwQYMBaAFCN7fUyoSibV/ElY1IGR82oUvHov MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjZGOC81NjJDM0NCNDcy NEUxMUVEOEUyMDY3M0VDNEY5QUUwMi9JM3Q5VEtoS0p0WDhTVmpVZ1pIemFoUzhl aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzdDlUS2hLSnRYOFNWalVnWkh6YWhTOGVpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjZGOC81NjJDM0NCNDcyNEUxMUVEOEUyMDY3M0VDNEY5QUUwMi9JM3Q5VEtoS0p0 WDhTVmpVZ1pIemFoUzhlaTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJOmsHy2rR+I+jVgnPDs9cUl2OUNOS6768mTeQEgV00g4R++Xi8TH3 01WJay1yTGx67irOOcq5UUrRGJ4NTrYireuoh1c1v80blKgoOl2yPes840cTIG74 sMvIsiUR2JeVdXqfkA2YzRgq0VcFv4S4qF8gjkt++3CcdyGkLX4Hne9k1zymYc7d RQ5nI4y8A/iCDXeOeqwL+mPcPw7zvlVIrHBq00RSIlG4mWysITVaRUdo1061zUxR euhhZvdxn5uxcIyWIpJMTCLue6oWDJjDvnOPVbkz+SLUnwbNWwHYwW4leAaxHryZ 5g0eBKSHW/64yPtlREXiTPbXGHXzNlW0 -----END CERTIFICATE-----Generated at Sun May 19 05:48:52 2024 by rpki-client on console-fra.rpki-client.org