$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft File: sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft (raw, json) Hash identifier: +FdNlcBLECx4X2LlBTxiqyeBRXWO2kTBY3Q/toArvVA= Subject key identifier: D3:93:A4:30:03:BA:79:68:B2:9D:A7:9A:74:60:1D:3C:0D:E5:74:E7 Authority key identifier: B0:F4:7A:69:6A:CD:77:C7:4A:34:73:C4:CD:17:1D:A3:72:1C:EC:D0 Certificate issuer: /CN=A91F3099/serialNumber=B0F47A696ACD77C74A3473C4CD171DA3721CECD0 Certificate serial: 0400 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft Manifest number: 03F8 Signing time: Wed 29 May 2024 02:38:00 +0000 Manifest this update: Wed 29 May 2024 02:38:00 +0000 Manifest next update: Wed 05 Jun 2024 02:38:00 +0000 Files and hashes: 1: sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl (hash: H2pGBKbfNB50I1/J4kpJqdlOob1aMMzjyYR758DFd7E=) 2: 99961F74315E11EC953A8215C4F9AE02.roa (hash: +VGbXPgEMjbM44YtRZVvhAgjfsY3HNt2pKC/SE+Bb2w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 02:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1024 (0x400) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3099/serialNumber=B0F47A696ACD77C74A3473C4CD171DA3721CECD0 Validity Not Before: May 29 02:38:00 2024 GMT Not After : Jun 5 02:38:00 2024 GMT Subject: CN=66569508-d456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:86:52:61:14:1d:a3:9d:90:3c:1a:5f:be:2c: c0:5d:a5:f4:9d:db:83:e8:82:00:09:88:4a:69:db: f2:08:28:74:cc:37:aa:01:00:8b:d4:bf:62:df:b6: 7a:2e:1d:62:46:78:32:98:18:92:d5:c2:d2:1e:53: 36:e6:f5:16:54:43:63:21:a4:df:93:a8:7e:b2:38: cc:8a:c9:a9:e5:0d:dd:19:c4:5c:d8:39:de:16:30: ff:f7:35:17:f0:85:83:ee:94:7d:98:05:b2:ee:d1: f8:31:4e:44:c8:57:f0:c4:e1:8b:b6:d4:1b:20:a7: 12:68:02:b4:e2:b3:2c:fb:fc:01:b3:75:72:50:43: 95:b1:1d:f2:92:2d:06:13:b1:ab:00:12:66:84:bf: d0:44:ff:98:7a:a8:ab:04:06:f7:dc:0f:56:2c:e1: 4e:1a:af:a0:d9:71:fe:fb:bb:fa:41:57:99:d3:ad: 92:00:eb:57:95:50:50:bd:f2:5c:66:3b:3d:7a:c4: d9:89:08:89:22:31:18:d4:2a:96:ed:42:d9:97:d6: e5:24:91:77:50:0d:f4:2e:6d:e9:96:b2:9e:6d:91: 60:69:16:72:b8:f4:bd:0d:a2:c8:68:b1:f7:57:81: 84:8b:9f:7d:e8:64:b7:37:b0:c3:d4:d5:28:56:87: dc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:93:A4:30:03:BA:79:68:B2:9D:A7:9A:74:60:1D:3C:0D:E5:74:E7 X509v3 Authority Key Identifier: keyid:B0:F4:7A:69:6A:CD:77:C7:4A:34:73:C4:CD:17:1D:A3:72:1C:EC:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:f7:a2:99:4a:20:19:7f:90:78:86:ee:bd:47:3a:40:10:01: 96:09:ac:5c:15:e3:ff:4c:d2:49:3d:35:a6:6f:02:8a:98:01: d8:72:88:7f:13:9e:c0:56:2e:fe:a9:83:fd:56:a5:e1:f4:07: 87:61:04:41:39:85:e9:4a:69:5f:df:f1:3f:a7:30:86:eb:a4: 46:2c:af:bf:88:5c:7b:3f:66:58:c1:54:fe:b6:6d:a9:f1:3f: 21:ad:1a:a0:3c:84:3f:2b:b2:89:23:9c:58:78:a0:b7:8f:ad: 02:44:3e:b1:b4:82:ab:3c:2a:1c:43:d5:9c:0c:f3:ed:fb:7d: db:5a:af:a5:65:1e:8f:a6:ee:1f:e8:db:b1:19:7e:23:67:67: 56:1e:2d:4b:88:71:b7:a6:a5:4f:9e:3f:5a:d8:db:70:c8:2b: bb:58:dd:7e:25:69:44:6c:59:40:44:de:da:a1:f3:dc:40:b9: 9a:1e:8e:a9:bf:80:87:df:c2:67:76:ac:6e:08:0b:63:d0:eb: ed:38:70:6a:67:d7:97:25:73:30:c0:03:3e:a5:2e:ea:93:28: db:02:9e:6f:cb:75:9f:5f:59:e2:94:e6:19:9f:8f:48:10:c6: 01:3f:4b:91:36:f9:01:de:9e:be:6e:80:e9:29:ea:ed:70:fd: 38:d4:eb:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwOTkxMTAvBgNVBAUTKEIwRjQ3QTY5NkFDRDc3Qzc0QTM0NzNDNENEMTcxREEz NzIxQ0VDRDAwHhcNMjQwNTI5MDIzODAwWhcNMjQwNjA1MDIzODAwWjAYMRYwFAYD VQQDEw02NjU2OTUwOC1kNDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuIZSYRQdo52QPBpfvizAXaX0nduD6IIACYhKadvyCCh0zDeqAQCL1L9i37Z6 Lh1iRngymBiS1cLSHlM25vUWVENjIaTfk6h+sjjMismp5Q3dGcRc2DneFjD/9zUX 8IWD7pR9mAWy7tH4MU5EyFfwxOGLttQbIKcSaAK04rMs+/wBs3VyUEOVsR3yki0G E7GrABJmhL/QRP+YeqirBAb33A9WLOFOGq+g2XH++7v6QVeZ062SAOtXlVBQvfJc Zjs9esTZiQiJIjEY1CqW7ULZl9blJJF3UA30Lm3plrKebZFgaRZyuPS9DaLIaLH3 V4GEi5996GS3N7DD1NUoVofccwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNOTpDAD unlosp2nmnRgHTwN5XTnMB8GA1UdIwQYMBaAFLD0emlqzXfHSjRzxM0XHaNyHOzQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzA5OS9FQjRFRkJDNjMx NUMxMUVDQTlCNzNEMTVDNEY5QUUwMi9zUFI2YVdyTmQ4ZEtOSFBFelJjZG8zSWM3 TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NQUjZhV3JOZDhkS05IUEV6UmNkbzNJYzdOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzA5OS9FQjRFRkJDNjMxNUMxMUVDQTlCNzNEMTVDNEY5QUUwMi9zUFI2YVdyTmQ4 ZEtOSFBFelJjZG8zSWM3TkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi96KZSiAZf5B4hu69RzpAEAGWCaxcFeP/TNJJPTWmbwKKmAHYcoh/ E57AVi7+qYP9VqXh9AeHYQRBOYXpSmlf3/E/pzCG66RGLK+/iFx7P2ZYwVT+tm2p 8T8hrRqgPIQ/K7KJI5xYeKC3j60CRD6xtIKrPCocQ9WcDPPt+33bWq+lZR6Ppu4f 6NuxGX4jZ2dWHi1LiHG3pqVPnj9a2NtwyCu7WN1+JWlEbFlARN7aofPcQLmaHo6p v4CH38JndqxuCAtj0OvtOHBqZ9eXJXMwwAM+pS7qkyjbAp5vy3WfX1nilOYZn49I EMYBP0uRNvkB3p6+boDpKertcP041Osj -----END CERTIFICATE-----Generated at Wed May 29 04:02:10 2024 by rpki-client on console-fra.rpki-client.org