$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft File: 30PPMfEc2OafGltFHUP2ixRHa0c.mft (raw, json) Hash identifier: 2gq8GGKGmtGnjD1Qg62pt1Iw5tOUBqdswYuiuUXN3QI= Subject key identifier: 52:8B:D4:E5:1D:3C:67:D9:08:BF:7F:CA:AD:87:E5:70:C8:E1:C5:98 Authority key identifier: DF:43:CF:31:F1:1C:D8:E6:9F:1A:5B:45:1D:43:F6:8B:14:47:6B:47 Certificate issuer: /CN=A91E3D4D/serialNumber=DF43CF31F11CD8E69F1A5B451D43F68B14476B47 Certificate serial: 0586 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft Manifest number: 0576 Signing time: Sun 19 May 2024 00:45:22 +0000 Manifest this update: Sun 19 May 2024 00:45:21 +0000 Manifest next update: Sun 26 May 2024 00:45:21 +0000 Files and hashes: 1: 30PPMfEc2OafGltFHUP2ixRHa0c.crl (hash: mxpZLPS1pCEeRxyU0Er6lpE32682ZaY/YatNndNGA00=) 2: 8B5C69BACD5211EBBF89483BC4F9AE02.roa (hash: U6B0ZrH43k/tdZ4+XrMF2Ip95jyESNIPnRacE52Hdlw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.crl rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1414 (0x586) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3D4D/serialNumber=DF43CF31F11CD8E69F1A5B451D43F68B14476B47 Validity Not Before: May 19 00:45:21 2024 GMT Not After : May 26 00:45:21 2024 GMT Subject: CN=66494ba1-7f53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e1:7d:29:f9:9e:2b:a4:36:01:c7:34:cb:50: 9d:dc:e1:c6:8c:83:f0:f1:88:4b:5c:ff:f7:f8:4e: 80:3f:d2:17:0a:3b:00:69:4f:3c:c1:93:72:4c:a3: 75:5c:07:ae:46:57:0e:47:9a:b3:b6:5f:bc:cf:3b: e7:0e:39:ac:0e:5e:bc:28:66:d8:2f:d5:a7:53:c4: eb:ab:48:e2:69:af:e9:21:56:69:a0:e4:14:25:d1: bb:43:12:80:5b:d4:b9:1e:eb:4b:29:65:72:d4:72: be:28:72:6c:d1:9f:75:f2:22:1f:67:8a:74:8f:25: 15:78:ad:e7:3e:ac:96:a9:50:b2:05:f2:e7:18:20: bc:78:fd:09:b5:17:88:d8:53:e6:48:c3:36:72:3d: 3a:f7:14:8c:ca:91:ec:bb:97:82:8b:b5:38:9c:a3: b8:1c:4c:bf:85:f6:4c:ea:a5:a8:46:0a:de:47:0f: ff:e8:68:95:b8:fa:cd:cd:98:ee:26:2c:71:1e:1f: c9:a5:32:cf:4b:26:16:f1:79:fc:3b:bb:1f:25:a2: b7:11:a7:53:84:d8:07:a1:81:b7:e5:67:76:15:76: 20:58:ca:ef:5b:6e:83:54:08:68:65:fc:3d:a9:ba: cc:15:ff:97:6a:03:ee:80:d7:45:02:09:57:ea:4b: b7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:8B:D4:E5:1D:3C:67:D9:08:BF:7F:CA:AD:87:E5:70:C8:E1:C5:98 X509v3 Authority Key Identifier: keyid:DF:43:CF:31:F1:1C:D8:E6:9F:1A:5B:45:1D:43:F6:8B:14:47:6B:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:c3:3e:f0:b1:7f:3f:5d:6f:99:18:62:06:66:5b:fc:ed:9f: b9:4b:ef:bb:c8:a3:32:7b:e4:05:a9:46:89:f8:ae:de:1b:2f: ea:1c:a3:8a:c9:5d:68:76:30:f7:d4:65:ac:c4:6c:7a:44:cf: 44:e0:ee:90:e6:16:ec:12:b1:16:74:fb:c6:5a:8e:82:64:41: 46:dc:f7:48:63:eb:d2:87:c2:95:e8:cc:1d:7a:70:37:a4:7b: 5e:46:e6:0a:a4:e3:55:90:9e:9d:44:e6:c2:a2:2d:02:4e:cd: 13:09:4d:d1:ab:f9:fb:b5:2a:3b:54:83:d2:8e:ea:68:fa:b3: 27:a7:6f:92:fc:eb:ac:58:b6:55:39:0c:a3:58:47:a5:14:6f: d7:81:ca:3b:72:38:d2:9a:04:9c:4d:fe:b7:27:6a:ad:7c:8f: cf:6a:64:ba:62:69:9d:54:96:a0:ea:6d:f2:3a:76:e0:35:d6: b5:fd:26:79:74:c1:51:f5:94:bb:69:f8:35:92:85:9b:3a:cd: bf:54:91:93:b0:df:34:d9:f8:10:b3:44:45:aa:7b:34:b5:83: f0:9e:8b:e1:61:05:54:60:87:28:ea:ce:3a:eb:29:ad:3a:51: 1f:2f:a3:4d:60:c9:bd:2b:7d:96:96:cd:da:ab:e5:7d:a0:66: 43:4a:66:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNENEQxMTAvBgNVBAUTKERGNDNDRjMxRjExQ0Q4RTY5RjFBNUI0NTFENDNGNjhC MTQ0NzZCNDcwHhcNMjQwNTE5MDA0NTIxWhcNMjQwNTI2MDA0NTIxWjAYMRYwFAYD VQQDEw02NjQ5NGJhMS03ZjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5OF9KfmeK6Q2Acc0y1Cd3OHGjIPw8YhLXP/3+E6AP9IXCjsAaU88wZNyTKN1 XAeuRlcOR5qztl+8zzvnDjmsDl68KGbYL9WnU8Trq0jiaa/pIVZpoOQUJdG7QxKA W9S5HutLKWVy1HK+KHJs0Z918iIfZ4p0jyUVeK3nPqyWqVCyBfLnGCC8eP0JtReI 2FPmSMM2cj069xSMypHsu5eCi7U4nKO4HEy/hfZM6qWoRgreRw//6GiVuPrNzZju JixxHh/JpTLPSyYW8Xn8O7sfJaK3EadThNgHoYG35Wd2FXYgWMrvW26DVAhoZfw9 qbrMFf+XagPugNdFAglX6ku3iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKL1OUd PGfZCL9/yq2H5XDI4cWYMB8GA1UdIwQYMBaAFN9DzzHxHNjmnxpbRR1D9osUR2tH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0Q0RC9FRDZBMTk5MjlB RTcxMUVCOEEwNDU2MjZDNEY5QUUwMi8zMFBQTWZFYzJPYWZHbHRGSFVQMml4Ukhh MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMwUFBNZkVjMk9hZkdsdEZIVVAyaXhSSGEwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0Q0RC9FRDZBMTk5MjlBRTcxMUVCOEEwNDU2MjZDNEY5QUUwMi8zMFBQTWZFYzJP YWZHbHRGSFVQMml4UkhhMGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzwz7wsX8/XW+ZGGIGZlv87Z+5S++7yKMye+QFqUaJ+K7eGy/qHKOK yV1odjD31GWsxGx6RM9E4O6Q5hbsErEWdPvGWo6CZEFG3PdIY+vSh8KV6MwdenA3 pHteRuYKpONVkJ6dRObCoi0CTs0TCU3Rq/n7tSo7VIPSjupo+rMnp2+S/OusWLZV OQyjWEelFG/Xgco7cjjSmgScTf63J2qtfI/PamS6YmmdVJag6m3yOnbgNda1/SZ5 dMFR9ZS7afg1koWbOs2/VJGTsN802fgQs0RFqns0tYPwnovhYQVUYIco6s466ymt OlEfL6NNYMm9K32Wls3aq+V9oGZDSmaw -----END CERTIFICATE-----Generated at Sun May 19 01:47:14 2024 by rpki-client on console-fra.rpki-client.org