$ rpki-client -vvf rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft File: 0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft (raw, json) Hash identifier: FjC64b15jhORR90oD2a694kmcDikjyq/omtOlC1HJ1c= Subject key identifier: 1F:B3:A4:D2:E2:B5:4F:B9:C7:36:04:AE:87:66:73:15:5F:24:9D:CC Authority key identifier: D3:03:8B:A4:49:0E:A8:15:AD:B0:9F:1A:38:65:8B:CD:8B:17:F4:82 Certificate issuer: /CN=A91F018E/serialNumber=D3038BA4490EA815ADB09F1A38658BCD8B17F482 Certificate serial: 0D91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft Manifest number: 0D8B Signing time: Sat 18 May 2024 18:32:55 +0000 Manifest this update: Sat 18 May 2024 18:32:55 +0000 Manifest next update: Sat 25 May 2024 18:32:55 +0000 Files and hashes: 1: 0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl (hash: //LjaRBZHvAGi5/JKB5YM4xK5QZvIacIaWZ0e2v2cy4=) 2: 7214B0AA9E1711E9B3710950C4F9AE02.roa (hash: HKMv6lMzUEnj1OeWCUm5Usk6S8rbshVmXllyOLilxZk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3473 (0xd91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F018E/serialNumber=D3038BA4490EA815ADB09F1A38658BCD8B17F482 Validity Not Before: May 18 18:32:55 2024 GMT Not After : May 25 18:32:55 2024 GMT Subject: CN=6648f457-7216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:27:e8:a9:60:f0:d3:e2:10:7e:1a:c2:ad:e6: 0b:fe:37:c2:cc:ca:8c:6d:1f:70:b0:93:b9:97:da: ab:db:3a:9e:0c:61:26:29:8c:40:b3:ab:84:19:e9: dc:7f:65:60:b2:a6:65:9e:0c:b0:f4:8b:57:13:05: 93:cf:b8:7b:dd:52:9c:8d:a8:04:22:4e:29:bf:04: ff:1f:14:a5:65:22:33:b9:0d:88:f1:82:04:a6:82: 76:39:9a:5a:f1:cb:ce:36:ee:08:df:1d:2c:85:e6: e1:ef:29:9b:7d:5f:8d:4d:59:46:f3:3f:d7:07:f7: d5:e1:86:8c:80:08:5c:60:95:4b:37:10:f3:d7:1b: 34:ce:bc:d7:92:53:1f:04:b5:c1:2f:2a:c4:81:20: 95:73:3e:17:03:a3:15:a5:ad:b6:92:66:c3:4a:7c: 28:ff:3f:48:34:58:71:59:20:5f:fa:ea:09:6d:0b: b6:44:db:c1:68:58:01:57:ad:e9:c4:0c:0a:aa:31: 77:fe:79:58:ad:91:c7:e7:b1:aa:52:33:13:13:01: b8:ab:0e:f7:bc:af:57:73:d2:50:48:1c:ca:18:df: 1f:b5:83:fd:e8:6a:28:48:af:48:68:8e:4e:67:4f: 8f:ff:bb:61:3f:dd:5a:2a:c9:5a:ff:93:f4:74:5c: c6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B3:A4:D2:E2:B5:4F:B9:C7:36:04:AE:87:66:73:15:5F:24:9D:CC X509v3 Authority Key Identifier: keyid:D3:03:8B:A4:49:0E:A8:15:AD:B0:9F:1A:38:65:8B:CD:8B:17:F4:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:65:6c:b0:9f:1a:33:57:72:47:99:56:8a:cc:16:96:65:79: ee:a4:1f:65:78:ef:c7:01:cb:35:90:1d:b8:d3:a5:24:94:a5: d2:a5:18:7e:0a:4a:d7:35:e2:02:a1:99:cb:06:1e:c5:08:f7: 92:82:b5:93:30:3c:b0:83:86:5d:4c:96:d2:8c:f9:02:b0:61: f5:ad:56:a9:04:dc:c2:3a:a6:87:62:e2:85:6f:67:39:b7:09: 05:d3:ee:23:75:15:1e:af:c2:27:09:e3:2e:ff:9e:0e:61:3d: 3a:e6:70:94:ee:04:51:ae:98:0f:92:95:54:40:ce:c0:18:d3: b8:fb:9c:63:20:60:9d:6b:e0:51:e0:6f:4c:93:51:1e:bd:10: 0a:a7:31:6b:25:49:79:50:c0:28:f4:f9:09:d2:2e:c2:6a:25: d4:af:05:fb:22:47:9f:73:a6:8d:e4:e7:99:c2:15:32:4b:d0: 2c:92:a6:5c:1f:b4:c7:d8:05:4b:d6:88:39:34:45:4b:9e:f2: dc:8c:d6:ed:f6:d8:82:20:28:db:3e:c4:45:57:ff:5d:48:da: a8:20:f0:60:34:ba:64:fb:4c:7e:cd:b2:ef:1c:4f:e1:57:b6: d2:d6:c3:2f:a0:cd:23:d1:ae:d9:59:2f:0d:60:b0:41:3e:26: 13:10:52:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjAxOEUxMTAvBgNVBAUTKEQzMDM4QkE0NDkwRUE4MTVBREIwOUYxQTM4NjU4QkNE OEIxN0Y0ODIwHhcNMjQwNTE4MTgzMjU1WhcNMjQwNTI1MTgzMjU1WjAYMRYwFAYD VQQDEw02NjQ4ZjQ1Ny03MjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqifoqWDw0+IQfhrCreYL/jfCzMqMbR9wsJO5l9qr2zqeDGEmKYxAs6uEGenc f2VgsqZlngyw9ItXEwWTz7h73VKcjagEIk4pvwT/HxSlZSIzuQ2I8YIEpoJ2OZpa 8cvONu4I3x0shebh7ymbfV+NTVlG8z/XB/fV4YaMgAhcYJVLNxDz1xs0zrzXklMf BLXBLyrEgSCVcz4XA6MVpa22kmbDSnwo/z9INFhxWSBf+uoJbQu2RNvBaFgBV63p xAwKqjF3/nlYrZHH57GqUjMTEwG4qw73vK9Xc9JQSBzKGN8ftYP96GooSK9IaI5O Z0+P/7thP91aKsla/5P0dFzG/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+zpNLi tU+5xzYErodmcxVfJJ3MMB8GA1UdIwQYMBaAFNMDi6RJDqgVrbCfGjhli82LF/SC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDE4RS9GQTU2OEU1RTlF MTUxMUU5OTAxNTM2NEFDNEY5QUUwMi8wd09McEVrT3FCV3RzSjhhT0dXTHpZc1g5 SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB3T0xwRWtPcUJXdHNKOGFPR1dMellzWDlJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDE4RS9GQTU2OEU1RTlFMTUxMUU5OTAxNTM2NEFDNEY5QUUwMi8wd09McEVrT3FC V3RzSjhhT0dXTHpZc1g5SUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwZWywnxozV3JHmVaKzBaWZXnupB9leO/HAcs1kB2406UklKXSpRh+ CkrXNeICoZnLBh7FCPeSgrWTMDywg4ZdTJbSjPkCsGH1rVapBNzCOqaHYuKFb2c5 twkF0+4jdRUer8InCeMu/54OYT065nCU7gRRrpgPkpVUQM7AGNO4+5xjIGCda+BR 4G9Mk1EevRAKpzFrJUl5UMAo9PkJ0i7CaiXUrwX7Ikefc6aN5OeZwhUyS9AskqZc H7TH2AVL1og5NEVLnvLcjNbt9tiCICjbPsRFV/9dSNqoIPBgNLpk+0x+zbLvHE/h V7bS1sMvoM0j0a7ZWS8NYLBBPiYTEFJi -----END CERTIFICATE-----Generated at Sat May 18 19:21:05 2024 by rpki-client on console-fra.rpki-client.org