$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft File: pIqTm2fbIrr3fgB7Id87dFtig5A.mft (raw, json) Hash identifier: h6ByIQdFd9ZcZk1z/eRbubOJLUVgtPVCJmJ/AlpBVhU= Subject key identifier: 6C:5E:DC:F4:EF:FF:FA:F4:D9:71:15:C3:58:C4:F9:90:5B:BC:C5:FF Authority key identifier: A4:8A:93:9B:67:DB:22:BA:F7:7E:00:7B:21:DF:3B:74:5B:62:83:90 Certificate issuer: /CN=A91E1ED2/serialNumber=A48A939B67DB22BAF77E007B21DF3B745B628390 Certificate serial: 05A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft Manifest number: 059D Signing time: Sun 19 May 2024 00:22:08 +0000 Manifest this update: Sun 19 May 2024 00:22:08 +0000 Manifest next update: Sun 26 May 2024 00:22:08 +0000 Files and hashes: 1: pIqTm2fbIrr3fgB7Id87dFtig5A.crl (hash: 76cjo1AfjFe6qI35teOJEdi25H0Xm1HYOpPgFsZutE4=) 2: A3AA461082BE11EB93A19A35C4F9AE02.roa (hash: L+A7tON/SsVHe/hYZCgoE2p/FmTasyB1QLPBmuA1/U8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.crl rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1441 (0x5a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1ED2/serialNumber=A48A939B67DB22BAF77E007B21DF3B745B628390 Validity Not Before: May 19 00:22:08 2024 GMT Not After : May 26 00:22:08 2024 GMT Subject: CN=66494630-043c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ce:d6:cc:f6:be:e3:1e:c3:6f:fd:c2:ff:f1: fc:28:26:de:4b:61:39:05:f6:53:e3:8a:11:1a:0e: 82:b7:d6:e4:c5:77:b1:90:a3:71:1a:d2:9c:8b:52: 53:7b:be:05:c5:f3:fb:65:f8:e6:98:93:fa:b5:ce: b5:b4:a2:b4:fc:e3:3a:b3:e6:90:e9:f3:c5:d8:25: c6:f2:2f:d4:3f:97:39:23:fa:cb:f7:22:e1:07:08: 37:58:a5:a3:28:99:31:72:22:ac:62:6f:80:be:7a: 76:8a:db:4b:2a:0d:75:34:16:5c:f3:c5:3d:0e:56: 83:f3:76:68:cd:9c:a0:9e:b5:8b:6a:a8:29:01:8b: ce:92:08:9f:25:1b:b6:39:8e:d5:a0:b6:52:95:a8: b9:d7:31:28:9a:40:40:95:cf:b4:1f:d9:ac:8f:43: 0b:70:c9:c4:5b:92:d2:97:1e:9f:c0:d6:e4:f0:1b: fb:1c:5a:3c:41:6a:4b:bf:96:b6:1f:5d:10:98:0a: 95:d5:55:37:69:80:a3:a5:88:3d:6f:37:30:a7:20: ce:98:e4:cc:89:31:12:9a:77:0b:e3:c0:f8:9a:96: 26:3a:fd:df:90:f8:c7:cb:9f:a3:73:ab:cd:82:e9: 40:b1:56:ae:08:09:06:ac:aa:69:90:a9:4e:53:c7: d8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:5E:DC:F4:EF:FF:FA:F4:D9:71:15:C3:58:C4:F9:90:5B:BC:C5:FF X509v3 Authority Key Identifier: keyid:A4:8A:93:9B:67:DB:22:BA:F7:7E:00:7B:21:DF:3B:74:5B:62:83:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:25:33:fb:55:fd:ff:6e:ae:a5:83:0c:b4:14:2a:fa:df:13: b7:26:07:86:b4:cb:48:af:54:b7:d0:6a:39:fd:8f:86:6d:b1: 3c:73:40:26:c0:85:8b:25:f6:21:71:29:04:09:86:60:fd:77: 6b:71:07:da:73:b1:7e:21:75:e7:14:21:2b:85:86:54:34:50: f6:99:76:f9:a4:5d:38:da:67:1b:0b:ad:a5:12:b6:d0:27:17: e9:89:59:22:ec:6b:b1:cd:bf:eb:96:1b:73:e4:62:2f:58:cc: 77:62:5d:c2:6a:82:ff:9e:4e:e7:83:0f:70:3e:b1:d5:2a:44: fb:67:49:9f:3f:7d:e6:f6:ee:fb:b3:16:cd:8b:b5:15:89:56: ca:b1:e5:3c:7c:f4:0c:b5:b6:04:7b:10:f4:29:49:e3:b8:77: 1d:a0:fd:94:d8:22:1c:1b:a5:a3:d4:8a:92:e5:28:5d:7c:54: be:9c:c0:a7:b5:1c:84:13:9b:7f:92:b4:7c:b5:18:6b:2c:98: 3f:ae:10:ca:d4:49:4d:f5:24:0f:23:f3:74:e4:0f:54:93:61: 71:78:d6:e6:b1:0a:46:32:1d:86:b1:d5:c0:69:e0:bf:a6:95: b7:6c:1d:93:39:82:46:bb:89:fc:50:a1:9a:73:92:1c:49:55: 70:db:b4:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFFRDIxMTAvBgNVBAUTKEE0OEE5MzlCNjdEQjIyQkFGNzdFMDA3QjIxREYzQjc0 NUI2MjgzOTAwHhcNMjQwNTE5MDAyMjA4WhcNMjQwNTI2MDAyMjA4WjAYMRYwFAYD VQQDEw02NjQ5NDYzMC0wNDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuc7WzPa+4x7Db/3C//H8KCbeS2E5BfZT44oRGg6Ct9bkxXexkKNxGtKci1JT e74FxfP7ZfjmmJP6tc61tKK0/OM6s+aQ6fPF2CXG8i/UP5c5I/rL9yLhBwg3WKWj KJkxciKsYm+Avnp2ittLKg11NBZc88U9DlaD83ZozZygnrWLaqgpAYvOkgifJRu2 OY7VoLZSlai51zEomkBAlc+0H9msj0MLcMnEW5LSlx6fwNbk8Bv7HFo8QWpLv5a2 H10QmAqV1VU3aYCjpYg9bzcwpyDOmOTMiTESmncL48D4mpYmOv3fkPjHy5+jc6vN gulAsVauCAkGrKppkKlOU8fY0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGxe3PTv //r02XEVw1jE+ZBbvMX/MB8GA1UdIwQYMBaAFKSKk5tn2yK6934AeyHfO3RbYoOQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUVEMi8zRkU4REU2Qzgy QkQxMUVCOUJDNUQzMzRDNEY5QUUwMi9wSXFUbTJmYklycjNmZ0I3SWQ4N2RGdGln NUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BJcVRtMmZiSXJyM2ZnQjdJZDg3ZEZ0aWc1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUVEMi8zRkU4REU2QzgyQkQxMUVCOUJDNUQzMzRDNEY5QUUwMi9wSXFUbTJmYkly cjNmZ0I3SWQ4N2RGdGlnNUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3JTP7Vf3/bq6lgwy0FCr63xO3JgeGtMtIr1S30Go5/Y+GbbE8c0Am wIWLJfYhcSkECYZg/XdrcQfac7F+IXXnFCErhYZUNFD2mXb5pF042mcbC62lErbQ JxfpiVki7Guxzb/rlhtz5GIvWMx3Yl3CaoL/nk7ngw9wPrHVKkT7Z0mfP33m9u77 sxbNi7UViVbKseU8fPQMtbYEexD0KUnjuHcdoP2U2CIcG6Wj1IqS5ShdfFS+nMCn tRyEE5t/krR8tRhrLJg/rhDK1ElN9SQPI/N05A9Uk2FxeNbmsQpGMh2GsdXAaeC/ ppW3bB2TOYJGu4n8UKGac5IcSVVw27Sz -----END CERTIFICATE-----Generated at Sun May 19 00:59:43 2024 by rpki-client on console-fra.rpki-client.org