$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECA1F/09D37E48DB0711EB9F659537C4F9AE02/p_soeDndrIqKyBZ_BwQbayW9V9o.mft File: p_soeDndrIqKyBZ_BwQbayW9V9o.mft (raw, json) Hash identifier: xi3S2mtXfw3yHOQx/tUx0vZewMj8ltuoQXwuXl3NvzU= Subject key identifier: 70:02:3E:98:FD:78:31:62:8D:04:2E:DE:F4:F5:C5:EC:74:59:81:40 Authority key identifier: A7:FB:28:78:39:DD:AC:8A:8A:C8:16:7F:07:04:1B:6B:25:BD:57:DA Certificate issuer: /CN=A91ECA1F/serialNumber=A7FB287839DDAC8A8AC8167F07041B6B25BD57DA Certificate serial: 04CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_soeDndrIqKyBZ_BwQbayW9V9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECA1F/09D37E48DB0711EB9F659537C4F9AE02/p_soeDndrIqKyBZ_BwQbayW9V9o.mft Manifest number: 04C5 Signing time: Fri 31 May 2024 02:00:05 +0000 Manifest this update: Fri 31 May 2024 02:00:04 +0000 Manifest next update: Fri 07 Jun 2024 02:00:04 +0000 Files and hashes: 1: p_soeDndrIqKyBZ_BwQbayW9V9o.crl (hash: cRDC6jvdqK82xUWMvoATA5DSrYER7EFXEetzoKwNU+E=) 2: 8CBC85F8BA3511ECA20A3817C4F9AE02.roa (hash: 7ftrSg8k0A8IlBqdHDr5B+eZcGv8HCwzC5OC28xuw/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECA1F/09D37E48DB0711EB9F659537C4F9AE02/p_soeDndrIqKyBZ_BwQbayW9V9o.crl rsync://rpki.apnic.net/member_repository/A91ECA1F/09D37E48DB0711EB9F659537C4F9AE02/p_soeDndrIqKyBZ_BwQbayW9V9o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_soeDndrIqKyBZ_BwQbayW9V9o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 02:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1226 (0x4ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECA1F/serialNumber=A7FB287839DDAC8A8AC8167F07041B6B25BD57DA Validity Not Before: May 31 02:00:04 2024 GMT Not After : Jun 7 02:00:04 2024 GMT Subject: CN=66592f25-28c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:db:ca:29:cf:6c:55:9f:e6:23:82:d5:2e:0b: 36:e5:35:91:df:b2:98:4a:62:25:ca:33:36:ff:26: 63:10:e1:c9:32:33:42:90:a9:50:b2:31:4f:35:b7: af:8f:13:09:87:b8:f9:58:e9:dd:74:a1:ac:c6:25: de:87:79:2a:bb:6a:c5:96:cb:60:04:e0:ab:9b:54: 4c:b0:f7:b3:61:28:99:b3:d0:21:fc:4f:cf:bf:59: 28:dc:d6:11:41:ec:37:bf:9f:23:9c:45:35:62:f9: be:a7:a9:8f:09:67:ff:7b:d1:99:e8:46:c7:a2:44: 57:b6:75:07:26:b2:55:a8:48:c1:bb:6b:03:a5:3a: 7b:1c:b8:52:c9:32:76:b9:ad:d2:c5:ea:b0:21:c8: 04:1f:f8:33:ff:ec:23:5f:9d:59:58:18:63:d4:24: d9:f2:e0:92:dd:d7:56:c2:ec:86:47:23:d4:5a:6f: 00:67:ed:3a:04:d6:6d:d4:4a:fa:34:db:01:53:33: c3:0d:2c:07:30:dc:25:5e:8b:f2:2e:34:3d:03:74: 8d:6a:e7:c3:14:b1:56:c0:76:15:d6:d9:f6:56:a2: f1:5a:7e:75:cd:5a:65:ef:1b:d4:e1:47:05:a0:ec: b7:23:ab:b3:ad:bc:98:59:50:b6:36:f5:06:80:90: bd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:02:3E:98:FD:78:31:62:8D:04:2E:DE:F4:F5:C5:EC:74:59:81:40 X509v3 Authority Key Identifier: keyid:A7:FB:28:78:39:DD:AC:8A:8A:C8:16:7F:07:04:1B:6B:25:BD:57:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECA1F/09D37E48DB0711EB9F659537C4F9AE02/p_soeDndrIqKyBZ_BwQbayW9V9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_soeDndrIqKyBZ_BwQbayW9V9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECA1F/09D37E48DB0711EB9F659537C4F9AE02/p_soeDndrIqKyBZ_BwQbayW9V9o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:71:55:20:08:ae:3c:5f:3f:55:e2:5d:cc:e5:5c:93:12:72: 87:69:1f:ec:87:09:e3:d2:80:b3:eb:8e:33:e7:96:c0:93:74: 0d:30:75:a5:d8:82:7e:eb:8c:b4:48:e7:21:ff:92:c2:fe:44: f4:f6:0e:e7:ff:c9:6b:a2:f7:e3:03:d6:c9:af:3f:d0:bf:cb: cc:80:c9:0f:3f:cd:3f:12:b2:03:13:ee:6c:5f:f9:44:a1:3c: af:b3:03:1e:c3:8c:e4:4c:55:f2:a5:50:db:8f:76:d4:8d:d5: 31:48:bc:b2:68:f3:20:6f:c7:68:31:c6:c5:b5:c5:97:98:95: 46:4b:46:c5:83:50:f7:b9:39:99:ea:20:84:9c:1e:c4:98:88: 5d:88:4c:c0:fd:d7:75:db:f9:43:75:e2:53:a1:e4:0d:e3:00: 0f:8d:75:46:f7:ef:d8:28:23:08:2a:eb:39:f6:ab:9d:e9:7a: 64:99:36:93:90:72:9f:32:c7:9b:a8:a7:af:ed:bf:d3:22:36: 18:d6:33:68:20:6d:6c:a7:11:66:50:11:a9:62:61:59:93:9e: 6d:36:21:ad:07:98:94:2d:ec:c5:2d:d4:ac:79:6b:7c:82:6f: ff:d2:3a:ae:4d:18:3b:8f:bc:0d:8d:c2:20:8f:52:26:63:7d: b9:d5:c4:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNBMUYxMTAvBgNVBAUTKEE3RkIyODc4MzlEREFDOEE4QUM4MTY3RjA3MDQxQjZC MjVCRDU3REEwHhcNMjQwNTMxMDIwMDA0WhcNMjQwNjA3MDIwMDA0WjAYMRYwFAYD VQQDEw02NjU5MmYyNS0yOGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqdvKKc9sVZ/mI4LVLgs25TWR37KYSmIlyjM2/yZjEOHJMjNCkKlQsjFPNbev jxMJh7j5WOnddKGsxiXeh3kqu2rFlstgBOCrm1RMsPezYSiZs9Ah/E/Pv1ko3NYR Qew3v58jnEU1Yvm+p6mPCWf/e9GZ6EbHokRXtnUHJrJVqEjBu2sDpTp7HLhSyTJ2 ua3SxeqwIcgEH/gz/+wjX51ZWBhj1CTZ8uCS3ddWwuyGRyPUWm8AZ+06BNZt1Er6 NNsBUzPDDSwHMNwlXovyLjQ9A3SNaufDFLFWwHYV1tn2VqLxWn51zVpl7xvU4UcF oOy3I6uzrbyYWVC2NvUGgJC9yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHACPpj9 eDFijQQu3vT1xex0WYFAMB8GA1UdIwQYMBaAFKf7KHg53ayKisgWfwcEG2slvVfa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0ExRi8wOUQzN0U0OERC MDcxMUVCOUY2NTk1MzdDNEY5QUUwMi9wX3NvZURuZHJJcUt5QlpfQndRYmF5VzlW OW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Bfc29lRG5kcklxS3lCWl9Cd1FiYXlXOVY5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0ExRi8wOUQzN0U0OERCMDcxMUVCOUY2NTk1MzdDNEY5QUUwMi9wX3NvZURuZHJJ cUt5QlpfQndRYmF5VzlWOW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGcVUgCK48Xz9V4l3M5VyTEnKHaR/shwnj0oCz644z55bAk3QNMHWl 2IJ+64y0SOch/5LC/kT09g7n/8lrovfjA9bJrz/Qv8vMgMkPP80/ErIDE+5sX/lE oTyvswMew4zkTFXypVDbj3bUjdUxSLyyaPMgb8doMcbFtcWXmJVGS0bFg1D3uTmZ 6iCEnB7EmIhdiEzA/dd12/lDdeJToeQN4wAPjXVG9+/YKCMIKus59qud6XpkmTaT kHKfMsebqKev7b/TIjYY1jNoIG1spxFmUBGpYmFZk55tNiGtB5iULezFLdSseWt8 gm//0jquTRg7j7wNjcIgj1ImY3251cTF -----END CERTIFICATE-----Generated at Fri May 31 02:50:47 2024 by rpki-client on console-fra.rpki-client.org