$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft File: 75XL1Zg1JkDUKwqsYABBBltNxEI.mft (raw, json) Hash identifier: cddls0xn+qAQ5Mk1s9MqFOfhoC7atUYi+uVhOUr+Hyg= Subject key identifier: 0C:22:00:9C:DD:7E:FD:E6:92:8C:0D:30:55:99:6D:E6:A2:C2:6A:42 Authority key identifier: EF:95:CB:D5:98:35:26:40:D4:2B:0A:AC:60:00:41:06:5B:4D:C4:42 Certificate issuer: /CN=A91DE8C5/serialNumber=EF95CBD598352640D42B0AAC600041065B4DC442 Certificate serial: 0BA5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft Manifest number: 0B9A Signing time: Thu 30 May 2024 19:41:38 +0000 Manifest this update: Thu 30 May 2024 19:41:38 +0000 Manifest next update: Thu 06 Jun 2024 19:41:38 +0000 Files and hashes: 1: 75XL1Zg1JkDUKwqsYABBBltNxEI.crl (hash: n+AjtpZIUM+rmDZKJiKbn4dWdCgf8G5jBmlHNpeu1y0=) 2: 44B3B572011611EA972FFC57C4F9AE02.roa (hash: aIByxK9JXmYqUFWAbW5QYUcefzxBLVKsjpZawUPcHRI=) 3: 452DDFB4011611EA972FFC57C4F9AE02.roa (hash: 6Q4mSCHV8BQvnZjmfuRVPn50cZ9zStqqddBgjxs4pRg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.crl rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 19:41:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2981 (0xba5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE8C5/serialNumber=EF95CBD598352640D42B0AAC600041065B4DC442 Validity Not Before: May 30 19:41:38 2024 GMT Not After : Jun 6 19:41:38 2024 GMT Subject: CN=6658d672-c0dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ad:62:f2:b0:ed:d8:e0:43:11:12:f9:b0:d2: fc:0d:97:28:0e:58:9d:b9:2d:bc:ec:50:05:a9:63: e2:5b:31:ab:01:59:85:7c:8b:bf:e0:aa:05:3e:e6: 28:d6:e5:80:98:ed:25:50:10:63:17:16:70:91:29: fd:d0:1b:49:af:44:f7:ff:d9:92:1d:75:a4:66:e2: b0:41:d3:a2:0f:09:7c:6b:95:1f:51:73:23:54:17: e8:05:e6:a2:76:eb:f9:c2:b5:c1:34:9a:ad:61:47: 8c:7d:8e:e9:16:ad:0b:ee:98:2c:b6:c3:32:36:25: 04:f5:55:57:8d:7b:b1:e8:52:7c:96:55:78:d9:e4: 33:86:9e:a8:a0:9c:55:eb:3f:0b:03:0b:75:e7:7e: 2a:aa:22:ed:34:88:e3:d3:56:36:c1:1c:88:1e:b1: 2c:7f:7f:8d:db:74:d7:b6:f8:9a:c1:5f:a1:54:b2: 28:53:f8:20:b8:5d:2a:64:47:01:cc:07:55:56:dc: 2a:29:aa:d8:e3:fd:e3:20:e2:55:e5:e0:d9:51:e2: 22:8b:a1:86:1e:78:ef:01:a4:2b:a4:f8:37:ca:18: 6b:ab:0e:c3:7b:4c:ad:1a:aa:0e:ac:c6:1d:3f:33: 96:3e:91:2a:35:8b:33:36:5d:a0:19:a3:39:70:26: c9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:22:00:9C:DD:7E:FD:E6:92:8C:0D:30:55:99:6D:E6:A2:C2:6A:42 X509v3 Authority Key Identifier: keyid:EF:95:CB:D5:98:35:26:40:D4:2B:0A:AC:60:00:41:06:5B:4D:C4:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:8e:17:83:88:11:d4:d0:d2:7c:aa:c2:90:f5:d2:b6:b8:54: 9b:b8:cc:9c:ca:13:5d:7f:e0:cd:cd:c1:6a:81:60:31:0f:0f: 4c:16:bd:c4:52:d2:2c:e7:cb:30:dd:e7:ea:10:35:5a:fe:07: 2e:db:fc:44:21:30:82:ad:89:26:91:eb:d1:54:db:50:62:26: 40:5b:1e:fd:62:e7:78:43:33:68:58:9e:04:a9:aa:e8:aa:54: 56:83:57:82:f3:74:17:57:5a:87:77:3d:ef:aa:18:62:c9:17: 11:d4:72:dd:d0:4c:fb:ee:e2:73:0f:17:28:9f:bb:87:66:cd: 2a:f5:64:e3:4a:ca:0b:dd:47:d1:e5:01:e9:89:04:e1:31:ca: 28:dd:5f:a0:5d:a0:fa:8e:bd:b4:e3:fc:55:01:d0:0e:e1:48: 49:ab:4f:ff:0b:54:07:a7:d6:cb:65:d4:08:08:4a:f6:9d:46: 9d:69:79:cc:98:fe:7c:f8:8d:e6:c4:8b:0d:a3:44:fd:fb:84: 39:85:3e:fb:f8:e2:b6:4c:f9:fc:ec:90:2a:db:73:43:74:f1: 30:26:13:ea:88:f2:40:35:ed:02:d0:46:3f:52:41:74:93:af: fc:75:30:88:f1:ba:60:d3:0a:50:c5:ef:15:b1:6a:e9:a8:34: fa:8c:7b:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU4QzUxMTAvBgNVBAUTKEVGOTVDQkQ1OTgzNTI2NDBENDJCMEFBQzYwMDA0MTA2 NUI0REM0NDIwHhcNMjQwNTMwMTk0MTM4WhcNMjQwNjA2MTk0MTM4WjAYMRYwFAYD VQQDEw02NjU4ZDY3Mi1jMGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2q1i8rDt2OBDERL5sNL8DZcoDliduS287FAFqWPiWzGrAVmFfIu/4KoFPuYo 1uWAmO0lUBBjFxZwkSn90BtJr0T3/9mSHXWkZuKwQdOiDwl8a5UfUXMjVBfoBeai duv5wrXBNJqtYUeMfY7pFq0L7pgstsMyNiUE9VVXjXux6FJ8llV42eQzhp6ooJxV 6z8LAwt1534qqiLtNIjj01Y2wRyIHrEsf3+N23TXtviawV+hVLIoU/gguF0qZEcB zAdVVtwqKarY4/3jIOJV5eDZUeIii6GGHnjvAaQrpPg3yhhrqw7De0ytGqoOrMYd PzOWPpEqNYszNl2gGaM5cCbJpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAwiAJzd fv3mkowNMFWZbeaiwmpCMB8GA1UdIwQYMBaAFO+Vy9WYNSZA1CsKrGAAQQZbTcRC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERThDNS8wNTJDODRGQzAx MTUxMUVBQTk4QTYyNTVDNEY5QUUwMi83NVhMMVpnMUprRFVLd3FzWUFCQkJsdE54 RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc1WEwxWmcxSmtEVUt3cXNZQUJCQmx0TnhFSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RThDNS8wNTJDODRGQzAxMTUxMUVBQTk4QTYyNTVDNEY5QUUwMi83NVhMMVpnMUpr RFVLd3FzWUFCQkJsdE54RUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdjheDiBHU0NJ8qsKQ9dK2uFSbuMycyhNdf+DNzcFqgWAxDw9MFr3E UtIs58sw3efqEDVa/gcu2/xEITCCrYkmkevRVNtQYiZAWx79Yud4QzNoWJ4Eqaro qlRWg1eC83QXV1qHdz3vqhhiyRcR1HLd0Ez77uJzDxcon7uHZs0q9WTjSsoL3UfR 5QHpiQThMcoo3V+gXaD6jr204/xVAdAO4UhJq0//C1QHp9bLZdQICEr2nUadaXnM mP58+I3mxIsNo0T9+4Q5hT77+OK2TPn87JAq23NDdPEwJhPqiPJANe0C0EY/UkF0 k6/8dTCI8bpg0wpQxe8VsWrpqDT6jHu9 -----END CERTIFICATE-----Generated at Thu May 30 20:35:38 2024 by rpki-client on console-fra.rpki-client.org