$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft File: h88dAWBFUehsJECeSB2vnGZZS_Q.mft (raw, json) Hash identifier: 99kKAnmKgPOzB/Ys+pFa22b7v7lNaJ9g7gVgf+kJa0I= Subject key identifier: 08:39:D2:9E:CA:10:D0:B0:5F:ED:15:91:CB:CB:12:15:B1:59:0B:48 Authority key identifier: 87:CF:1D:01:60:45:51:E8:6C:24:40:9E:48:1D:AF:9C:66:59:4B:F4 Certificate issuer: /CN=A91E2042/serialNumber=87CF1D01604551E86C24409E481DAF9C66594BF4 Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft Manifest number: 74 Signing time: Sun 19 May 2024 07:23:07 +0000 Manifest this update: Sun 19 May 2024 07:23:07 +0000 Manifest next update: Sun 26 May 2024 07:23:07 +0000 Files and hashes: 1: h88dAWBFUehsJECeSB2vnGZZS_Q.crl (hash: 2jjTHdmoIdEnHgZm3UvLylK3klSm085g1ZeyVAexKtg=) 2: A4E0754863B411EEAADB3A7CC4F9AE02.roa (hash: JQhGdtB6l/eaFxKzG8uYhmfWeKa/yx0yatQjsHXju4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.crl rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2042/serialNumber=87CF1D01604551E86C24409E481DAF9C66594BF4 Validity Not Before: May 19 07:23:07 2024 GMT Not After : May 26 07:23:07 2024 GMT Subject: CN=6649a8db-5070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:79:e3:6e:83:df:13:47:68:71:54:1f:75:44: 1e:e2:97:1a:50:33:f8:0e:9f:5a:7a:ff:78:0e:76: ea:ce:ee:12:a8:ec:e4:1c:68:7c:1f:a8:33:ee:3e: 33:56:d0:b2:12:9f:f4:5b:08:57:72:da:e8:b5:8c: 5c:96:23:7b:5d:d3:4c:69:40:68:a8:6b:2c:93:9f: a0:20:fc:cd:8c:bb:b9:93:27:38:aa:2b:57:91:74: 4e:03:b6:fe:96:fa:94:b2:b7:f2:66:1a:f7:3f:16: f9:cf:d2:36:da:42:06:fd:69:50:40:b4:25:b8:22: bf:39:89:01:b0:fb:3a:3d:f9:bc:1b:74:bb:ff:03: 85:68:89:30:84:2a:9e:dd:3f:eb:18:dc:2d:9e:4e: d8:ac:c8:1b:71:b2:80:95:71:e9:94:49:c4:fb:8e: 83:d9:5a:ea:2c:7b:23:a8:0b:8d:b7:4b:55:73:9e: b4:66:37:07:e1:a3:4b:af:4a:18:46:d2:4f:d9:8e: 02:3b:5d:6d:46:93:6e:85:90:43:f1:b8:36:20:19: 69:19:3b:34:4c:db:62:b7:c8:a8:b2:1f:5b:3a:d7: d7:6f:30:0f:e6:e0:a9:44:30:40:ae:f8:6f:1f:65: 3e:c3:7f:45:47:74:c1:88:97:42:10:aa:cc:66:42: 44:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:39:D2:9E:CA:10:D0:B0:5F:ED:15:91:CB:CB:12:15:B1:59:0B:48 X509v3 Authority Key Identifier: keyid:87:CF:1D:01:60:45:51:E8:6C:24:40:9E:48:1D:AF:9C:66:59:4B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:f3:9d:2e:a6:48:4d:e5:15:26:72:aa:1c:63:4e:fc:ed:0f: 63:31:f6:17:5d:07:ad:81:ab:85:ec:45:55:93:4d:92:35:28: b9:d6:57:96:0f:8e:3c:36:7b:ba:43:9f:14:dc:2c:bf:c7:7c: 22:bc:29:06:3d:5c:78:30:25:06:8d:5b:f0:71:71:24:53:da: f2:49:21:b1:89:df:b5:de:12:e4:2a:51:db:28:99:ad:02:c7: 65:8e:0b:7d:ef:84:1b:0c:1a:f8:a6:58:d4:dc:9f:d4:0c:da: 5d:4f:f8:23:93:94:eb:8a:a8:36:f5:54:61:50:88:ab:18:47: 45:e0:cd:0e:54:3e:77:6b:b4:2d:56:3a:ab:06:42:12:4d:29: 1e:f8:6d:c8:0c:b3:3d:0d:cc:4a:c5:81:fe:c3:cd:c2:90:90: 63:0c:57:db:d7:e8:2e:97:83:bc:48:d4:22:88:8b:0e:74:59: 6a:30:62:a7:35:22:c2:b5:1d:2b:57:48:0f:95:84:ad:46:9e: e5:b4:41:5a:69:6d:f9:9b:3c:c7:88:df:30:2e:0e:c1:16:ba: 69:1c:32:07:a5:e9:7c:c1:4b:b6:c7:07:93:1a:74:ca:0c:f2: 11:91:fb:5c:54:e2:74:a8:3b:e4:a0:ff:51:50:50:d9:d9:ac: 9d:38:ab:86 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MjA0MjExMC8GA1UEBRMoODdDRjFEMDE2MDQ1NTFFODZDMjQ0MDlFNDgxREFGOUM2 NjU5NEJGNDAeFw0yNDA1MTkwNzIzMDdaFw0yNDA1MjYwNzIzMDdaMBgxFjAUBgNV BAMTDTY2NDlhOGRiLTUwNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6eeNug98TR2hxVB91RB7ilxpQM/gOn1p6/3gOdurO7hKo7OQcaHwfqDPuPjNW 0LISn/RbCFdy2ui1jFyWI3td00xpQGioayyTn6Ag/M2Mu7mTJziqK1eRdE4Dtv6W +pSyt/JmGvc/FvnP0jbaQgb9aVBAtCW4Ir85iQGw+zo9+bwbdLv/A4VoiTCEKp7d P+sY3C2eTtisyBtxsoCVcemUScT7joPZWuoseyOoC423S1VznrRmNwfho0uvShhG 0k/ZjgI7XW1Gk26FkEPxuDYgGWkZOzRM22K3yKiyH1s619dvMA/m4KlEMECu+G8f ZT7Df0VHdMGIl0IQqsxmQkQPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCDnSnsoQ 0LBf7RWRy8sSFbFZC0gwHwYDVR0jBBgwFoAUh88dAWBFUehsJECeSB2vnGZZS/Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUyMDQyLzBBRUMxRDBDNjNC NDExRUVCNjVEMkI3QkM0RjlBRTAyL2g4OGRBV0JGVWVoc0pFQ2VTQjJ2bkdaWlNf US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaDg4ZEFXQkZVZWhzSkVDZVNCMnZuR1paU19RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUy MDQyLzBBRUMxRDBDNjNCNDExRUVCNjVEMkI3QkM0RjlBRTAyL2g4OGRBV0JGVWVo c0pFQ2VTQjJ2bkdaWlNfUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGLznS6mSE3lFSZyqhxjTvztD2Mx9hddB62Bq4XsRVWTTZI1KLnWV5YP jjw2e7pDnxTcLL/HfCK8KQY9XHgwJQaNW/BxcSRT2vJJIbGJ37XeEuQqUdsoma0C x2WOC33vhBsMGvimWNTcn9QM2l1P+COTlOuKqDb1VGFQiKsYR0XgzQ5UPndrtC1W OqsGQhJNKR74bcgMsz0NzErFgf7DzcKQkGMMV9vX6C6Xg7xI1CKIiw50WWowYqc1 IsK1HStXSA+VhK1GnuW0QVppbfmbPMeI3zAuDsEWumkcMgel6XzBS7bHB5MadMoM 8hGR+1xU4nSoO+Sg/1FQUNnZrJ04q4Y= -----END CERTIFICATE-----Generated at Sun May 19 08:26:45 2024 by rpki-client on console-fra.rpki-client.org