$ rpki-client -vvf rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft File: u8EDVhr9epMDbRxy3UwKfCpOKc4.mft (raw, json) Hash identifier: P6a0ZwEJy4J8IKM/7+gs7SDDJ0qD+xtL5JzfKj0wG/A= Subject key identifier: 79:30:34:7C:69:8F:AE:2C:29:48:28:1A:99:27:36:C5:1A:69:10:6B Authority key identifier: BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE Certificate issuer: /CN=A91F277D/serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE Certificate serial: 059B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft Manifest number: 058A Signing time: Sun 19 May 2024 00:07:48 +0000 Manifest this update: Sun 19 May 2024 00:07:48 +0000 Manifest next update: Sun 26 May 2024 00:07:47 +0000 Files and hashes: 1: u8EDVhr9epMDbRxy3UwKfCpOKc4.crl (hash: ju5AahYb2wX98HC4xvBsbcZIteTp+zma6u2/m5iZn4s=) 2: CEF8E22E711711EDB49CE11AC4F9AE02.roa (hash: 65SFk+4TwOufzXDwexjbwGpZy2G0cdUSxHJoxJeEfYo=) 3: 70A77C348D6C11EBAFD23A2EC4F9AE02.roa (hash: 8e35oHpEk66wVCSfXTfi1bC+TzaBQMIYc44CKHvS+04=) 4: 0BABC0DCB15D11EB8937582CC4F9AE02.roa (hash: MgPPOqUabbysJ30azHsq0+KZaRUfNvm01tRHSvCQPaY=) 5: 715924988D6C11EBAFD23A2EC4F9AE02.roa (hash: gh/nb3m3ns3kKq7St1rxuJ1VhTdxd6xsjqs3qEYHHrA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1435 (0x59b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F277D/serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE Validity Not Before: May 19 00:07:48 2024 GMT Not After : May 26 00:07:47 2024 GMT Subject: CN=664942d4-a137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:40:c0:ae:da:95:88:b1:ea:35:92:23:11:7a: 0d:9c:da:97:ea:e3:06:d8:3e:e8:7f:a3:b2:24:d4: 99:05:43:05:51:0d:42:db:27:a9:e9:93:e7:2f:23: 01:cc:87:cc:43:04:36:70:23:d4:d3:1f:97:93:99: 9e:a8:3b:59:35:ea:45:f1:61:c1:ea:10:16:d9:eb: 9e:e6:bf:e9:de:83:35:9e:e2:79:92:21:a2:53:0d: 2f:eb:20:7e:a3:d1:b4:4f:6e:c7:b5:4b:4b:42:b8: 63:4f:cd:b6:e2:5f:de:6f:39:99:b2:7e:2c:4a:a9: 8b:fc:f6:96:a0:c2:e3:b4:98:6e:95:e1:e6:10:85: 6a:39:6a:a0:ad:a5:6a:5a:94:e0:4f:1d:00:97:7d: 9a:c2:c3:41:1f:cc:23:04:b6:41:9e:ef:cb:f6:bb: 18:ec:a1:ee:1e:f2:03:56:c5:c3:de:1a:0e:c3:96: 60:79:e3:9a:17:16:31:8e:06:6b:1f:4d:58:41:06: 53:65:f4:ec:d2:d9:6c:c2:d2:36:de:75:99:f3:6b: 90:14:8e:e9:c7:a5:fa:d5:81:40:b4:26:0c:af:3a: 05:99:79:5d:f1:a6:53:72:16:4a:24:d1:76:25:39: be:ee:b1:df:71:62:45:8e:00:f2:0e:82:c6:2e:8c: d3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:30:34:7C:69:8F:AE:2C:29:48:28:1A:99:27:36:C5:1A:69:10:6B X509v3 Authority Key Identifier: keyid:BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:28:56:f3:db:4b:dc:e7:b6:45:55:8b:29:2a:7e:96:3e:0d: 1f:58:45:f3:29:6d:46:fe:29:68:15:51:19:7e:ec:76:92:b9: ab:ce:32:2b:3e:af:6a:e2:86:ae:1f:dd:03:1d:ca:7d:6d:26: c0:fe:1f:7b:0e:c9:ea:03:2b:e2:87:cf:c4:06:c8:e0:6e:00: 95:a9:7d:4b:8a:43:a2:88:b2:a1:dc:be:f3:cc:3d:61:20:64: fb:21:c0:94:ea:c7:d4:28:4f:2b:57:2b:f8:fc:06:8d:5e:71: 15:64:9b:dc:08:87:c2:95:01:ca:86:b4:33:2b:da:4c:6d:78: dd:36:56:e6:1b:b1:81:9c:52:04:bd:19:69:8e:67:3d:f3:ef: b5:ad:29:2d:e5:cf:ec:0c:a9:9b:d8:78:c7:52:c0:9c:b3:e7: bb:fe:c9:83:99:2a:9c:30:7a:c9:59:1f:27:21:08:bf:6d:b9: 12:53:9c:9c:e3:d8:73:8e:aa:83:cf:64:de:e4:0a:76:14:11: 50:cd:b7:55:2a:f4:7d:ad:65:73:27:fd:97:fc:37:2d:04:e4: a1:6f:c8:52:c9:25:ad:25:cc:b3:d4:9b:c5:cd:cb:a8:2b:9f: bd:df:fb:83:fb:3a:2c:ea:2c:77:ba:55:66:b0:59:be:86:4c: 73:45:03:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjI3N0QxMTAvBgNVBAUTKEJCQzEwMzU2MUFGRDdBOTMwMzZEMUM3MkRENEMwQTdD MkE0RTI5Q0UwHhcNMjQwNTE5MDAwNzQ4WhcNMjQwNTI2MDAwNzQ3WjAYMRYwFAYD VQQDEw02NjQ5NDJkNC1hMTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0kDArtqViLHqNZIjEXoNnNqX6uMG2D7of6OyJNSZBUMFUQ1C2yep6ZPnLyMB zIfMQwQ2cCPU0x+Xk5meqDtZNepF8WHB6hAW2eue5r/p3oM1nuJ5kiGiUw0v6yB+ o9G0T27HtUtLQrhjT8224l/ebzmZsn4sSqmL/PaWoMLjtJhuleHmEIVqOWqgraVq WpTgTx0Al32awsNBH8wjBLZBnu/L9rsY7KHuHvIDVsXD3hoOw5ZgeeOaFxYxjgZr H01YQQZTZfTs0tlswtI23nWZ82uQFI7px6X61YFAtCYMrzoFmXld8aZTchZKJNF2 JTm+7rHfcWJFjgDyDoLGLozTiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHkwNHxp j64sKUgoGpknNsUaaRBrMB8GA1UdIwQYMBaAFLvBA1Ya/XqTA20cct1MCnwqTinO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjc3RC83OEExRDA4RThE NkIxMUVCOTg0MEUwNUZDNEY5QUUwMi91OEVEVmhyOWVwTURiUnh5M1V3S2ZDcE9L YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3U4RURWaHI5ZXBNRGJSeHkzVXdLZkNwT0tjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Mjc3RC83OEExRDA4RThENkIxMUVCOTg0MEUwNUZDNEY5QUUwMi91OEVEVmhyOWVw TURiUnh5M1V3S2ZDcE9LYzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9KFbz20vc57ZFVYspKn6WPg0fWEXzKW1G/iloFVEZfux2krmrzjIr Pq9q4oauH90DHcp9bSbA/h97DsnqAyvih8/EBsjgbgCVqX1LikOiiLKh3L7zzD1h IGT7IcCU6sfUKE8rVyv4/AaNXnEVZJvcCIfClQHKhrQzK9pMbXjdNlbmG7GBnFIE vRlpjmc98++1rSkt5c/sDKmb2HjHUsCcs+e7/smDmSqcMHrJWR8nIQi/bbkSU5yc 49hzjqqDz2Te5Ap2FBFQzbdVKvR9rWVzJ/2X/DctBOShb8hSySWtJcyz1JvFzcuo K5+93/uD+zos6ix3ulVmsFm+hkxzRQNZ -----END CERTIFICATE-----Generated at Sun May 19 00:59:44 2024 by rpki-client on console-fra.rpki-client.org