$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft File: RWr15WZ94kipzwzrkMbRs9Ptb6g.mft (raw, json) Hash identifier: QWA3B0o/rSgYyfkRi9VnMLnzy8F9WnPOoEPO/026bKU= Subject key identifier: 33:D5:3B:0A:EE:32:0C:12:0B:FF:C9:A2:BB:9E:A5:7B:AD:6C:66:C2 Authority key identifier: 45:6A:F5:E5:66:7D:E2:48:A9:CF:0C:EB:90:C6:D1:B3:D3:ED:6F:A8 Certificate issuer: /CN=A91E8903/serialNumber=456AF5E5667DE248A9CF0CEB90C6D1B3D3ED6FA8 Certificate serial: 0111 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft Manifest number: 010A Signing time: Sun 19 May 2024 05:34:52 +0000 Manifest this update: Sun 19 May 2024 05:34:50 +0000 Manifest next update: Sun 26 May 2024 05:34:50 +0000 Files and hashes: 1: RWr15WZ94kipzwzrkMbRs9Ptb6g.crl (hash: LsX3SiFFUWQyT4g52OLHOmn1ZvSXYamQyM6CX9gzWnk=) 2: 5AFFB9E48C2211EDAE44DD87C4F9AE02.roa (hash: mffY3AuaPAKQ52OkYd/j1Cv7tCpL1MMwz1fbq1wCKrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.crl rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 273 (0x111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8903/serialNumber=456AF5E5667DE248A9CF0CEB90C6D1B3D3ED6FA8 Validity Not Before: May 19 05:34:50 2024 GMT Not After : May 26 05:34:50 2024 GMT Subject: CN=66498f7b-7360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:56:ee:6d:9c:f0:2e:91:f6:34:e8:a4:22:62: 9a:4d:89:79:10:ce:09:d8:8b:ea:fa:a4:af:c2:29: ff:00:c5:31:d1:51:11:fd:8f:7f:20:95:6a:3e:e8: f1:6f:e1:84:3d:d3:97:e7:0c:8e:15:2b:bd:e0:bc: 88:3a:e4:0f:22:be:51:a9:ea:db:d9:7d:c8:31:38: ba:1a:09:3a:52:a8:c4:68:ed:33:92:7a:62:32:0c: d1:3a:e2:82:ef:85:8b:a9:4d:5b:c7:84:a9:9d:6d: ef:94:00:0e:0a:3e:62:2a:2d:db:93:9a:7a:ce:7c: b6:f3:ce:f7:e7:91:f5:b1:91:eb:ba:28:89:55:33: 98:41:9c:28:bb:22:fe:43:9b:62:f5:e7:15:5c:07: cf:32:53:6e:a2:16:73:d0:a7:64:15:5a:c5:9d:d2: fb:bf:c3:c2:03:20:ec:a5:76:ab:c5:76:a9:dd:45: 75:87:d6:06:ed:a4:ff:56:0f:e0:0a:f5:62:5d:64: 3a:ad:5a:11:fc:0a:35:d7:75:d7:e6:da:ca:27:67: 5c:7e:73:ca:9a:d6:80:92:68:ba:8a:ec:af:2c:49: b2:d8:c7:9a:98:f8:53:c4:a2:dd:42:ae:a9:f9:91: ac:71:c1:69:8f:d1:32:d2:ab:24:f0:5b:82:37:a3: f2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D5:3B:0A:EE:32:0C:12:0B:FF:C9:A2:BB:9E:A5:7B:AD:6C:66:C2 X509v3 Authority Key Identifier: keyid:45:6A:F5:E5:66:7D:E2:48:A9:CF:0C:EB:90:C6:D1:B3:D3:ED:6F:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:2b:e9:d0:0e:be:c7:34:1c:87:09:f4:62:35:7f:dc:a4:04: 56:6a:bd:5f:c9:90:0f:d8:50:7a:a1:13:bd:b1:70:18:23:7f: a2:f5:ab:b6:59:e4:00:6b:6b:d5:27:08:81:d5:df:68:e1:a1: 69:47:46:30:05:61:08:2c:56:c7:1a:2d:5e:dd:32:e2:58:4f: a7:43:31:62:96:b5:0c:11:26:4e:33:2b:59:60:24:45:91:b0: 42:b3:e1:f6:a7:a5:23:8b:4a:21:39:f9:57:4c:9d:01:b8:71: 68:db:c6:45:40:14:52:c5:00:fe:3b:1f:d1:b4:f4:ac:97:8e: ac:f2:da:50:d3:77:14:6c:f2:94:d5:b1:7e:fd:9d:c6:17:10: 50:88:7b:87:7a:cd:c3:d4:04:35:0e:7d:57:d4:c3:66:cd:1c: 22:73:53:42:1f:06:ae:95:f5:da:ad:fe:8e:7b:51:6a:43:f3: 08:e5:f8:5d:1c:df:d3:13:d4:3b:3f:70:12:78:36:3a:d5:c5: 26:52:7e:1b:04:90:63:52:d4:51:6c:ee:0f:f2:d6:1d:d4:d5: 2a:6c:d0:9f:ee:12:f0:2b:d1:5d:b2:2d:b3:16:91:77:c1:65: a0:72:a5:20:28:37:da:96:36:bd:76:72:17:63:f3:9d:5f:d7: 8d:7a:b8:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5MDMxMTAvBgNVBAUTKDQ1NkFGNUU1NjY3REUyNDhBOUNGMENFQjkwQzZEMUIz RDNFRDZGQTgwHhcNMjQwNTE5MDUzNDUwWhcNMjQwNTI2MDUzNDUwWjAYMRYwFAYD VQQDEw02NjQ5OGY3Yi03MzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA51bubZzwLpH2NOikImKaTYl5EM4J2Ivq+qSvwin/AMUx0VER/Y9/IJVqPujx b+GEPdOX5wyOFSu94LyIOuQPIr5Rqerb2X3IMTi6Ggk6UqjEaO0zknpiMgzROuKC 74WLqU1bx4SpnW3vlAAOCj5iKi3bk5p6zny2887355H1sZHruiiJVTOYQZwouyL+ Q5ti9ecVXAfPMlNuohZz0KdkFVrFndL7v8PCAyDspXarxXap3UV1h9YG7aT/Vg/g CvViXWQ6rVoR/Ao113XX5trKJ2dcfnPKmtaAkmi6iuyvLEmy2MeamPhTxKLdQq6p +ZGsccFpj9Ey0qsk8FuCN6PyvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDPVOwru MgwSC//JoruepXutbGbCMB8GA1UdIwQYMBaAFEVq9eVmfeJIqc8M65DG0bPT7W+o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODkwMy9EODk4MjY1QThD MUYxMUVEQUU0NDFEODdDNEY5QUUwMi9SV3IxNVdaOTRraXB6d3pya01iUnM5UHRi NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JXcjE1V1o5NGtpcHp3enJrTWJSczlQdGI2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODkwMy9EODk4MjY1QThDMUYxMUVEQUU0NDFEODdDNEY5QUUwMi9SV3IxNVdaOTRr aXB6d3pya01iUnM5UHRiNmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPK+nQDr7HNByHCfRiNX/cpARWar1fyZAP2FB6oRO9sXAYI3+i9au2 WeQAa2vVJwiB1d9o4aFpR0YwBWEILFbHGi1e3TLiWE+nQzFilrUMESZOMytZYCRF kbBCs+H2p6Uji0ohOflXTJ0BuHFo28ZFQBRSxQD+Ox/RtPSsl46s8tpQ03cUbPKU 1bF+/Z3GFxBQiHuHes3D1AQ1Dn1X1MNmzRwic1NCHwaulfXarf6Oe1FqQ/MI5fhd HN/TE9Q7P3ASeDY61cUmUn4bBJBjUtRRbO4P8tYd1NUqbNCf7hLwK9Fdsi2zFpF3 wWWgcqUgKDfalja9dnIXY/OdX9eNerjp -----END CERTIFICATE-----Generated at Sun May 19 07:40:46 2024 by rpki-client on console-fra.rpki-client.org