$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft File: d4O93Owt-bn8-48Qm3PU95Shc4Y.mft (raw, json) Hash identifier: nXEKFuv0G/aI+eJFkKUSF8aOzpfaQTDKkFPn/Q1zU5E= Subject key identifier: 85:73:25:03:AD:B1:82:98:AA:A3:E8:90:FC:D9:D2:5A:73:B3:1A:07 Authority key identifier: 77:83:BD:DC:EC:2D:F9:B9:FC:FB:8F:10:9B:73:D4:F7:94:A1:73:86 Certificate issuer: /CN=A91EAD63/serialNumber=7783BDDCEC2DF9B9FCFB8F109B73D4F794A17386 Certificate serial: 0157 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft Manifest number: 0154 Signing time: Sun 19 May 2024 04:53:16 +0000 Manifest this update: Sun 19 May 2024 04:53:16 +0000 Manifest next update: Sun 26 May 2024 04:53:16 +0000 Files and hashes: 1: d4O93Owt-bn8-48Qm3PU95Shc4Y.crl (hash: KLIWguVsg7rBWhf25bfFBo2SRHu/x5b9qEPcBLhIjcY=) 2: 9BA13212344C11ED8F22CB70C4F9AE02.roa (hash: p7r78zQdPe18WNwZUgJb7Y6MXFrT+9kPthn7k/9lmnw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.crl rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAD63/serialNumber=7783BDDCEC2DF9B9FCFB8F109B73D4F794A17386 Validity Not Before: May 19 04:53:16 2024 GMT Not After : May 26 04:53:16 2024 GMT Subject: CN=664985bc-0d6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e8:dd:e1:f9:16:38:54:d2:a6:ca:1c:b8:d6: f4:f9:c2:0f:a7:8d:4f:72:88:dc:d6:0c:7e:4a:35: ff:b4:a5:da:b2:75:b6:50:1d:a5:8f:20:75:99:69: b4:b6:78:25:48:b9:03:78:be:67:89:3b:ac:3d:28: 6b:32:72:77:1d:bd:13:df:6d:e0:32:4b:7f:2d:79: c7:17:c8:2a:76:af:81:86:f8:15:3a:8f:a9:9a:47: 72:74:fc:fb:0c:d2:45:a7:f9:6a:9f:ea:8f:da:33: d9:71:d3:27:d0:7b:94:2a:85:36:15:41:08:08:f4: 22:d3:0f:de:9d:3a:f6:1c:e8:c2:da:6b:84:17:1a: f9:d8:ec:22:90:90:ea:73:ab:4b:89:52:75:d5:74: 7f:89:29:e5:e9:2a:db:cb:3c:cc:52:3b:63:29:86: b6:f1:63:f6:b8:88:5a:e2:46:ab:6b:2f:ac:92:0c: 04:43:28:cc:dd:3a:53:a8:51:fb:ca:52:54:e1:68: 8d:9f:59:65:48:7d:2f:ed:2f:79:fa:25:7a:bd:b5: 80:ae:a2:81:6a:c6:02:f8:95:a0:a8:10:72:09:fb: af:47:df:a4:c5:b0:30:df:df:a9:0b:d8:52:5d:59: d4:79:ee:d4:fb:1b:22:a0:32:4d:13:a9:e2:4d:44: dc:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:73:25:03:AD:B1:82:98:AA:A3:E8:90:FC:D9:D2:5A:73:B3:1A:07 X509v3 Authority Key Identifier: keyid:77:83:BD:DC:EC:2D:F9:B9:FC:FB:8F:10:9B:73:D4:F7:94:A1:73:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:c4:62:47:38:36:53:2a:48:a4:0f:4c:fc:5a:fe:f9:e5:54: 38:f2:a3:11:9e:16:13:db:0c:ba:b6:2d:83:20:2e:a6:e9:fe: 7d:1e:06:82:44:3d:5b:3d:24:71:23:69:51:50:f7:6f:79:56: 07:e2:0a:21:73:da:3f:7c:98:c5:a4:f6:ca:80:fa:86:09:e1: 26:06:65:45:31:30:39:49:95:80:8f:75:d7:5e:d0:99:01:30: 07:da:f3:fb:f2:83:25:6e:68:ac:6b:6d:1c:88:9e:02:e4:e1: 09:70:c2:70:0d:e8:70:37:b9:21:1c:0a:4a:4b:b7:47:eb:14: c9:ce:52:84:ce:84:81:a1:32:e8:e0:fa:f0:47:8a:d1:6c:84: 7b:6e:f0:4c:42:1f:19:dc:b4:69:f6:1c:25:6b:2d:b1:72:cf: e3:04:88:c4:ad:33:b8:a2:20:ca:eb:93:c6:a3:98:f8:a6:b5: 22:36:5d:9c:80:32:44:6c:54:1c:b0:c1:e7:6e:91:ac:d4:36: 9a:d2:18:63:af:b7:de:4e:70:8f:7c:27:28:6c:fb:c1:b3:6e: 0d:48:bf:cf:b8:6a:f3:5a:b5:33:23:0a:0b:f0:d9:7f:da:53: a3:19:fe:f6:b3:36:20:e2:1a:f5:19:41:83:f0:00:4b:d2:b8: 3f:57:32:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFENjMxMTAvBgNVBAUTKDc3ODNCRERDRUMyREY5QjlGQ0ZCOEYxMDlCNzNENEY3 OTRBMTczODYwHhcNMjQwNTE5MDQ1MzE2WhcNMjQwNTI2MDQ1MzE2WjAYMRYwFAYD VQQDEw02NjQ5ODViYy0wZDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoOjd4fkWOFTSpsocuNb0+cIPp41Pcojc1gx+SjX/tKXasnW2UB2ljyB1mWm0 tnglSLkDeL5niTusPShrMnJ3Hb0T323gMkt/LXnHF8gqdq+BhvgVOo+pmkdydPz7 DNJFp/lqn+qP2jPZcdMn0HuUKoU2FUEICPQi0w/enTr2HOjC2muEFxr52OwikJDq c6tLiVJ11XR/iSnl6SrbyzzMUjtjKYa28WP2uIha4karay+skgwEQyjM3TpTqFH7 ylJU4WiNn1llSH0v7S95+iV6vbWArqKBasYC+JWgqBByCfuvR9+kxbAw39+pC9hS XVnUee7U+xsioDJNE6niTUTcHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIVzJQOt sYKYqqPokPzZ0lpzsxoHMB8GA1UdIwQYMBaAFHeDvdzsLfm5/PuPEJtz1PeUoXOG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUQ2My9ERDM2NDExODM0 NDcxMUVEQjEwREE0M0FDNEY5QUUwMi9kNE85M093dC1ibjgtNDhRbTNQVTk1U2hj NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q0TzkzT3d0LWJuOC00OFFtM1BVOTVTaGM0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUQ2My9ERDM2NDExODM0NDcxMUVEQjEwREE0M0FDNEY5QUUwMi9kNE85M093dC1i bjgtNDhRbTNQVTk1U2hjNFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArxGJHODZTKkikD0z8Wv755VQ48qMRnhYT2wy6ti2DIC6m6f59HgaC RD1bPSRxI2lRUPdveVYH4gohc9o/fJjFpPbKgPqGCeEmBmVFMTA5SZWAj3XXXtCZ ATAH2vP78oMlbmisa20ciJ4C5OEJcMJwDehwN7khHApKS7dH6xTJzlKEzoSBoTLo 4PrwR4rRbIR7bvBMQh8Z3LRp9hwlay2xcs/jBIjErTO4oiDK65PGo5j4prUiNl2c gDJEbFQcsMHnbpGs1Daa0hhjr7feTnCPfCcobPvBs24NSL/PuGrzWrUzIwoL8Nl/ 2lOjGf72szYg4hr1GUGD8ABL0rg/VzKw -----END CERTIFICATE-----Generated at Sun May 19 05:48:52 2024 by rpki-client on console-fra.rpki-client.org