$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft File: a-Q-axOWQ8tMGebfcyO1A8STEds.mft (raw, json) Hash identifier: 1cMiwM0K/hBmlwwwEz62fSUdi3acVT6HWW0Jp6MEa/k= Subject key identifier: 81:27:BD:90:AC:58:5C:8E:52:C3:F7:AA:18:E7:57:B5:F4:D5:2D:96 Authority key identifier: 6B:E4:3E:6B:13:96:43:CB:4C:19:E6:DF:73:23:B5:03:C4:93:11:DB Certificate issuer: /CN=A91E8D27/serialNumber=6BE43E6B139643CB4C19E6DF7323B503C49311DB Certificate serial: 3336 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft Manifest number: 3320 Signing time: Sat 18 May 2024 15:35:38 +0000 Manifest this update: Sat 18 May 2024 15:35:37 +0000 Manifest next update: Sat 25 May 2024 15:35:37 +0000 Files and hashes: 1: a-Q-axOWQ8tMGebfcyO1A8STEds.crl (hash: mU92dYmvEGBkYRNZ2OwdYKY/LvStaeg4N1Hh/t8v3cs=) 2: DF04503A238911EDBAFA790DC4F9AE02.roa (hash: DOIoFfPOJgl62OZkobg1Vi1veyazlCKHk2nbi99GX7M=) 3: 9CA4F39C23A811ED95ECB53FC4F9AE02.roa (hash: XjFxEVk+QowNgV0F7XV7as/tWm3Uvwzq3LMmF9H1qMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.crl rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13110 (0x3336) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8D27/serialNumber=6BE43E6B139643CB4C19E6DF7323B503C49311DB Validity Not Before: May 18 15:35:37 2024 GMT Not After : May 25 15:35:37 2024 GMT Subject: CN=6648caca-3b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:22:dd:3a:e3:85:06:3b:01:ed:8d:9c:b4:9b: d0:a9:be:9f:37:c1:13:9a:9a:25:31:ad:4c:a0:5a: f8:81:70:01:14:b6:d9:ee:4f:3b:04:03:f9:92:0b: 86:9e:23:ae:76:99:3b:ee:c9:3e:e8:c0:e2:fb:c9: b1:05:20:c3:64:32:0f:2d:da:33:98:07:6a:24:71: 75:f9:4f:ec:10:c8:e3:8b:e5:f4:30:11:a4:d6:69: da:fc:77:71:73:71:65:c4:50:ef:84:10:53:aa:75: 54:21:69:01:06:94:d4:69:ba:9a:54:a5:89:e6:83: 14:9a:42:35:28:c7:c7:40:0d:c9:ba:27:d3:f1:f0: 7a:7a:77:d4:81:6d:cf:28:f9:64:80:11:b4:12:6f: d4:06:2a:87:54:58:03:98:e4:ac:7a:cf:76:ef:41: 4a:19:4b:61:8c:a4:6f:84:4a:41:86:5f:9c:61:c9: a0:d8:8e:62:f6:b3:53:b3:ea:8a:39:01:dd:42:3c: 0b:70:99:8a:18:a6:52:f1:f6:ae:68:45:b1:97:6b: 0e:4c:cc:76:32:1b:21:73:28:e9:19:79:d3:c2:5d: 06:b8:93:4f:0f:4c:2d:63:b8:6e:02:2d:fc:46:71: 5a:a2:87:3c:b6:f9:86:00:52:92:5a:01:8f:33:ee: 43:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:27:BD:90:AC:58:5C:8E:52:C3:F7:AA:18:E7:57:B5:F4:D5:2D:96 X509v3 Authority Key Identifier: keyid:6B:E4:3E:6B:13:96:43:CB:4C:19:E6:DF:73:23:B5:03:C4:93:11:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:ef:a4:ab:5e:f7:c1:9d:c3:f7:0e:7f:07:d9:ac:19:27:95: 23:c0:63:6f:30:a1:11:0c:13:e1:e6:0f:3c:ad:19:87:56:32: 91:cf:6c:80:38:f2:d3:02:cf:60:fa:ff:4f:db:90:e6:fb:63: 93:0e:24:b8:53:00:a7:e5:47:9b:cf:42:78:e6:4b:bc:60:4d: 12:89:34:b9:0e:4e:6f:b5:ab:5d:0b:bb:0e:92:ec:c6:76:ae: 73:2f:e2:fc:58:d8:02:53:5e:d4:fa:ba:4f:81:e2:8e:67:5e: 0f:87:46:04:77:eb:fe:f6:c9:10:97:95:05:ee:1c:53:26:8e: eb:6e:32:8a:15:ac:bb:89:ff:bc:00:63:70:d0:ab:14:aa:8d: 45:5b:7b:c5:e9:31:ba:4d:5a:15:8e:6b:c7:12:03:fe:ea:a3: 49:95:a6:f7:95:9e:4e:f8:4d:08:11:18:c9:65:77:67:ae:d1: 4f:02:aa:e6:c8:0e:94:06:2d:49:b9:5c:b1:20:d2:4b:6c:62: d2:03:f4:54:61:de:b8:04:cf:a6:ef:ef:1d:4a:c0:58:be:05: d2:28:5a:dd:7d:4a:dc:4e:2e:11:56:3b:88:a4:89:82:8f:2a: 06:70:83:dc:06:20:c4:50:34:08:5e:12:5c:95:78:65:c6:de: 0e:e1:46:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThEMjcxMTAvBgNVBAUTKDZCRTQzRTZCMTM5NjQzQ0I0QzE5RTZERjczMjNCNTAz QzQ5MzExREIwHhcNMjQwNTE4MTUzNTM3WhcNMjQwNTI1MTUzNTM3WjAYMRYwFAYD VQQDEw02NjQ4Y2FjYS0zYjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySLdOuOFBjsB7Y2ctJvQqb6fN8ETmpolMa1MoFr4gXABFLbZ7k87BAP5kguG niOudpk77sk+6MDi+8mxBSDDZDIPLdozmAdqJHF1+U/sEMjji+X0MBGk1mna/Hdx c3FlxFDvhBBTqnVUIWkBBpTUabqaVKWJ5oMUmkI1KMfHQA3JuifT8fB6enfUgW3P KPlkgBG0Em/UBiqHVFgDmOSses9270FKGUthjKRvhEpBhl+cYcmg2I5i9rNTs+qK OQHdQjwLcJmKGKZS8fauaEWxl2sOTMx2MhshcyjpGXnTwl0GuJNPD0wtY7huAi38 RnFaooc8tvmGAFKSWgGPM+5D4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIEnvZCs WFyOUsP3qhjnV7X01S2WMB8GA1UdIwQYMBaAFGvkPmsTlkPLTBnm33MjtQPEkxHb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEQyNy9DMEM1ODA3MDQy RTkxMUUyOTc1MEEzMkUyOTc5QkIyMC9hLVEtYXhPV1E4dE1HZWJmY3lPMUE4U1RF ZHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EtUS1heE9XUTh0TUdlYmZjeU8xQThTVEVkcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEQyNy9DMEM1ODA3MDQyRTkxMUUyOTc1MEEzMkUyOTc5QkIyMC9hLVEtYXhPV1E4 dE1HZWJmY3lPMUE4U1RFZHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB76SrXvfBncP3Dn8H2awZJ5UjwGNvMKERDBPh5g88rRmHVjKRz2yA OPLTAs9g+v9P25Dm+2OTDiS4UwCn5Uebz0J45ku8YE0SiTS5Dk5vtatdC7sOkuzG dq5zL+L8WNgCU17U+rpPgeKOZ14Ph0YEd+v+9skQl5UF7hxTJo7rbjKKFay7if+8 AGNw0KsUqo1FW3vF6TG6TVoVjmvHEgP+6qNJlab3lZ5O+E0IERjJZXdnrtFPAqrm yA6UBi1JuVyxINJLbGLSA/RUYd64BM+m7+8dSsBYvgXSKFrdfUrcTi4RVjuIpImC jyoGcIPcBiDEUDQIXhJclXhlxt4O4UYc -----END CERTIFICATE-----Generated at Sat May 18 16:20:16 2024 by rpki-client on console-fra.rpki-client.org