$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.mft File: 788FLZiSks6xBQkSnI3iA9SfaAQ.mft (raw, json) Hash identifier: dYj/E2XHoMN60A4YM8IeGMP7v6edfjbWRtm03dbQRnQ= Subject key identifier: BE:30:3C:6A:18:BE:E4:2A:7F:0F:67:56:9A:9F:14:A7:B5:80:23:6B Authority key identifier: EF:CF:05:2D:98:92:92:CE:B1:05:09:12:9C:8D:E2:03:D4:9F:68:04 Certificate issuer: /CN=A91EB9C0/serialNumber=EFCF052D989292CEB10509129C8DE203D49F6804 Certificate serial: 0C8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788FLZiSks6xBQkSnI3iA9SfaAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.mft Manifest number: 0C88 Signing time: Sat 18 May 2024 18:51:20 +0000 Manifest this update: Sat 18 May 2024 18:51:19 +0000 Manifest next update: Sat 25 May 2024 18:51:19 +0000 Files and hashes: 1: 788FLZiSks6xBQkSnI3iA9SfaAQ.crl (hash: ptqptAzhpMbYdslsaVWmde6qOXPxYwOyepNzYdspqM8=) 2: 1004D41ED21D11E992825429C4F9AE02.roa (hash: Zc60K4ZMZPyJuc6g6BeiVIXF/a+xAC8+kYk2iliu0z8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.crl rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788FLZiSks6xBQkSnI3iA9SfaAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3214 (0xc8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB9C0/serialNumber=EFCF052D989292CEB10509129C8DE203D49F6804 Validity Not Before: May 18 18:51:19 2024 GMT Not After : May 25 18:51:19 2024 GMT Subject: CN=6648f8a7-7b05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c1:96:cf:3d:7f:0e:9a:82:12:84:2c:28:36: 42:3a:7d:2e:9f:29:46:11:c4:64:5e:54:d3:b5:5d: 78:45:7d:d1:9c:47:dd:80:d9:94:7a:ed:ad:a8:b7: b8:59:b2:69:51:0e:4d:b7:c3:44:a2:cd:98:7d:0b: e3:7c:d8:bc:d0:dc:2c:bd:a8:b6:18:5e:f0:fd:00: 84:ce:4e:12:00:02:24:cb:75:09:1e:bb:dc:c4:6c: 60:29:cb:34:a4:db:96:f1:bf:6d:d6:7c:e6:7b:de: 37:c0:a3:ea:45:3a:ea:ed:f7:f8:60:62:80:f9:ba: f1:df:3e:f0:7a:5e:85:f1:ad:54:2c:c1:c2:f4:00: 66:b2:58:da:c9:d4:5e:00:fc:3f:ab:f5:91:f9:b0: e2:86:dc:45:11:15:d8:11:77:e3:ea:a9:6f:ad:c5: 35:48:f0:64:33:b1:1c:aa:05:58:50:4c:30:0a:f7: c0:23:62:ac:3e:7b:87:00:c1:9b:3b:23:8d:64:82: 6b:09:fd:ec:7b:d4:f4:a0:0e:62:62:13:bf:3e:ac: 57:fa:91:ce:e3:d1:82:56:49:c1:75:18:d4:22:61: 1e:35:69:3c:0b:39:3d:8e:ed:db:90:4f:62:c9:b8: 9a:16:99:e0:8d:0f:9d:7c:6e:21:ce:44:df:73:57: 11:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:30:3C:6A:18:BE:E4:2A:7F:0F:67:56:9A:9F:14:A7:B5:80:23:6B X509v3 Authority Key Identifier: keyid:EF:CF:05:2D:98:92:92:CE:B1:05:09:12:9C:8D:E2:03:D4:9F:68:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788FLZiSks6xBQkSnI3iA9SfaAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:38:62:3e:91:2e:17:4b:c2:f5:09:0a:3b:02:9a:42:72:3a: 38:de:99:3f:fb:33:16:4e:f9:6e:8b:48:76:cd:c0:3e:36:a6: fb:8d:4d:9b:68:05:86:b3:30:b6:b0:5f:3a:3e:a8:5f:57:08: 89:2e:df:b2:3b:ed:f5:57:f6:83:2f:20:6e:ff:f0:98:e6:3d: 93:b2:0b:65:10:28:1d:08:08:70:d5:72:03:d7:70:fa:66:6d: 89:25:fe:e1:e0:b6:3d:d9:f0:64:93:b3:ed:fd:89:0c:10:25: 77:12:69:0c:1e:62:5e:c9:ee:52:db:8c:de:76:26:7d:9e:d2: 9a:48:a0:0e:4c:ce:73:2d:c0:c0:04:c6:1b:0e:39:6e:31:a3: 4f:39:cb:cb:30:97:ac:1f:9c:4d:51:78:e8:d3:90:43:65:05: cc:52:4d:c3:31:65:0d:4f:e3:f7:d3:ed:9e:eb:79:ad:2d:0e: 23:50:e2:ba:1c:de:f9:ba:64:fe:dc:bc:31:5f:35:df:be:e4: f2:ed:87:23:02:cb:8d:5d:a4:8e:7c:ca:4e:e2:94:fb:05:7d: 3d:af:ac:7e:94:e1:2d:e5:32:59:8c:bb:1b:6e:96:eb:7d:83: 87:b0:ac:ae:68:04:1b:d9:4b:4c:2c:00:67:ee:aa:b1:17:b8: 7f:5b:71:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI5QzAxMTAvBgNVBAUTKEVGQ0YwNTJEOTg5MjkyQ0VCMTA1MDkxMjlDOERFMjAz RDQ5RjY4MDQwHhcNMjQwNTE4MTg1MTE5WhcNMjQwNTI1MTg1MTE5WjAYMRYwFAYD VQQDEw02NjQ4ZjhhNy03YjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMGWzz1/DpqCEoQsKDZCOn0unylGEcRkXlTTtV14RX3RnEfdgNmUeu2tqLe4 WbJpUQ5Nt8NEos2YfQvjfNi80Nwsvai2GF7w/QCEzk4SAAIky3UJHrvcxGxgKcs0 pNuW8b9t1nzme943wKPqRTrq7ff4YGKA+brx3z7wel6F8a1ULMHC9ABmsljaydRe APw/q/WR+bDihtxFERXYEXfj6qlvrcU1SPBkM7EcqgVYUEwwCvfAI2KsPnuHAMGb OyONZIJrCf3se9T0oA5iYhO/PqxX+pHO49GCVknBdRjUImEeNWk8Czk9ju3bkE9i ybiaFpngjQ+dfG4hzkTfc1cRBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL4wPGoY vuQqfw9nVpqfFKe1gCNrMB8GA1UdIwQYMBaAFO/PBS2YkpLOsQUJEpyN4gPUn2gE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjlDMC9EMzY0RjBDQ0Qy MUExMUU5ODNGOUU1MjRDNEY5QUUwMi83ODhGTFppU2tzNnhCUWtTbkkzaUE5U2Zh QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc4OEZMWmlTa3M2eEJRa1NuSTNpQTlTZmFBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjlDMC9EMzY0RjBDQ0QyMUExMUU5ODNGOUU1MjRDNEY5QUUwMi83ODhGTFppU2tz NnhCUWtTbkkzaUE5U2ZhQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCOGI+kS4XS8L1CQo7AppCcjo43pk/+zMWTvlui0h2zcA+Nqb7jU2b aAWGszC2sF86PqhfVwiJLt+yO+31V/aDLyBu//CY5j2TsgtlECgdCAhw1XID13D6 Zm2JJf7h4LY92fBkk7Pt/YkMECV3EmkMHmJeye5S24zediZ9ntKaSKAOTM5zLcDA BMYbDjluMaNPOcvLMJesH5xNUXjo05BDZQXMUk3DMWUNT+P30+2e63mtLQ4jUOK6 HN75umT+3LwxXzXfvuTy7YcjAsuNXaSOfMpO4pT7BX09r6x+lOEt5TJZjLsbbpbr fYOHsKyuaAQb2UtMLABn7qqxF7h/W3HQ -----END CERTIFICATE-----Generated at Sat May 18 19:21:05 2024 by rpki-client on console-fra.rpki-client.org