$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft File: k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft (raw, json) Hash identifier: aILVWQHG15bhZHiAL/NiKsG9jYLWNUMB8Cj9kbNLev0= Subject key identifier: 31:FA:6B:72:BD:EE:7C:62:65:74:E2:B9:51:36:5B:32:4C:8D:D4:4B Authority key identifier: 93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 Certificate issuer: /CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Certificate serial: 048A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft Manifest number: 0448 Signing time: Sat 01 Jun 2024 03:07:31 +0000 Manifest this update: Sat 01 Jun 2024 03:07:31 +0000 Manifest next update: Sat 08 Jun 2024 03:07:31 +0000 Files and hashes: 1: k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl (hash: jFbU471V+SS/fErdubwsvS/70Dp+bJLJVTk+74/mlek=) 2: 7934717A3BA611EC8737B534C4F9AE02.roa (hash: 4vsf8Wb5GZNfQuzk5ueb59N8mX6Ev5ag+kkwZpFI5OQ=) 3: 39D8CF1893EB11EEB45D3A32C4F9AE02.roa (hash: XywXcqM8LylZUO+8HhF5lXgoC53AhfoKIh2RM8hlEZY=) 4: 7879B24A3BA611EC8737B534C4F9AE02.roa (hash: /NNSrkw0/Mb+wg39zz0HMBaPlsqc85X/IL/r2mMHDUM=) 5: 3825A02A3BA911EC89976E3FC4F9AE02.roa (hash: LOP59tM7zvG4rac5bvNHTUfhEriiqncylji2xEoe7jE=) 6: B5960F8CB03111EEA45DE91DC4F9AE02.roa (hash: 9tERyJtujQlTZRu6RU3LUGmhwmpHHYqf5hqF9ChTO4o=) 7: 905F258E24F211EEA0863328C4F9AE02.roa (hash: vI4wCN8zHHpUwDdSCVBVfzEnFZc2gVGdk5XoB213poc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 03:07:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1162 (0x48a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Validity Not Before: Jun 1 03:07:31 2024 GMT Not After : Jun 8 03:07:31 2024 GMT Subject: CN=665a9073-7532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:20:9d:c2:e3:50:dd:16:93:5f:79:6d:8b:59: a4:54:d7:72:7b:e0:c8:91:d7:68:86:05:dd:86:d7: 0e:39:b3:be:5f:55:cd:4f:b7:b0:f5:0e:b3:0a:c8: e5:8e:65:6d:61:6d:cc:32:f8:8d:d8:66:53:bf:c0: 8b:c8:1a:71:22:5e:23:8a:e2:4d:1b:61:4e:64:96: ab:fb:4e:31:8b:87:68:44:0d:f5:a1:96:62:15:b5: 04:6b:16:90:c2:d7:ee:13:ba:b5:2a:3d:dd:6c:4b: 47:49:25:51:ce:09:bd:a4:3d:09:2a:02:c0:b3:35: de:11:64:1a:16:ba:c3:b3:d5:16:38:c6:37:4e:c5: eb:be:b3:d7:c8:25:17:af:32:af:2e:7a:01:7b:56: 22:6e:11:44:ad:c9:d0:07:1b:cc:a0:40:61:0d:54: 2f:d7:67:b0:7f:f2:11:d7:bb:91:ac:a3:ae:69:27: b1:9b:97:e3:97:fb:94:69:52:39:99:47:e2:e2:28: a2:53:fc:a8:c7:2f:ed:98:54:75:d6:d9:c1:9d:e1: b4:cd:77:d3:5e:9a:0b:8b:91:58:22:db:a5:55:ee: ce:0c:76:92:76:78:d9:ee:53:16:b3:9a:14:68:55: c8:73:b1:7d:bd:0c:81:2e:f9:47:50:58:b5:aa:5c: 0b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:FA:6B:72:BD:EE:7C:62:65:74:E2:B9:51:36:5B:32:4C:8D:D4:4B X509v3 Authority Key Identifier: keyid:93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:40:7b:33:b3:d5:c3:c8:9b:d2:40:68:71:f5:68:fa:a8:8a: 7c:1c:39:b3:1f:96:8b:a1:7f:1a:29:d6:2c:cc:4e:4f:72:46: 2f:72:91:40:6b:10:fb:f5:a5:cf:4d:c3:34:fd:22:51:e6:75: 84:7c:ac:14:68:9e:d0:8a:64:45:12:25:d0:be:4b:04:27:0f: 12:71:d0:74:c1:95:7a:3a:ff:29:da:e0:bc:4e:74:28:4a:a5: 6f:1d:3b:d6:91:ae:73:18:08:4c:d0:3e:0d:2e:48:a2:73:26: f4:7d:33:8a:d2:f3:fa:70:56:75:30:e4:90:f4:cc:58:02:32: d8:e1:72:62:47:d4:74:88:c9:a2:33:d3:cf:d9:d3:4b:43:ff: e9:29:c1:8b:0b:fb:21:83:7d:d6:48:d4:97:3c:68:83:8a:eb: ac:41:3d:ac:c1:97:55:73:e5:e5:b7:b1:95:e3:c2:8e:67:44: b0:5e:59:db:b2:a8:e4:c6:89:4c:69:b6:fb:2a:32:44:fc:4c: c0:2f:65:f3:94:99:12:ca:ac:7e:c9:49:ff:9c:6d:0e:dd:b0: 04:cd:41:e1:70:7c:88:06:5b:fd:50:bd:18:81:cd:ab:47:cf: f9:ef:b6:f8:4c:8f:be:3f:cb:38:bc:42:2d:d0:85:a1:d8:9f: cd:4f:a5:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyNjgxMTAvBgNVBAUTKDkzNzMyRjNGQzMxMzU5QkJCRjhCMzc5NjI0QkY5MTM1 MUNDQUQ4NTcwHhcNMjQwNjAxMDMwNzMxWhcNMjQwNjA4MDMwNzMxWjAYMRYwFAYD VQQDEw02NjVhOTA3My03NTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtSCdwuNQ3RaTX3lti1mkVNdye+DIkddohgXdhtcOObO+X1XNT7ew9Q6zCsjl jmVtYW3MMviN2GZTv8CLyBpxIl4jiuJNG2FOZJar+04xi4doRA31oZZiFbUEaxaQ wtfuE7q1Kj3dbEtHSSVRzgm9pD0JKgLAszXeEWQaFrrDs9UWOMY3TsXrvrPXyCUX rzKvLnoBe1YibhFErcnQBxvMoEBhDVQv12ewf/IR17uRrKOuaSexm5fjl/uUaVI5 mUfi4iiiU/yoxy/tmFR11tnBneG0zXfTXpoLi5FYItulVe7ODHaSdnjZ7lMWs5oU aFXIc7F9vQyBLvlHUFi1qlwLMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDH6a3K9 7nxiZXTiuVE2WzJMjdRLMB8GA1UdIwQYMBaAFJNzLz/DE1m7v4s3liS/kTUcythX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI2OC9DNzhFQkNFQTIx OTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdidV9pemVXSkwtUk5Seksy RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szTXZQOE1UV2J1X2l6ZVdKTC1STlJ6SzJGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI2OC9DNzhFQkNFQTIxOTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdi dV9pemVXSkwtUk5SeksyRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXQHszs9XDyJvSQGhx9Wj6qIp8HDmzH5aLoX8aKdYszE5PckYvcpFA axD79aXPTcM0/SJR5nWEfKwUaJ7QimRFEiXQvksEJw8ScdB0wZV6Ov8p2uC8TnQo SqVvHTvWka5zGAhM0D4NLkiicyb0fTOK0vP6cFZ1MOSQ9MxYAjLY4XJiR9R0iMmi M9PP2dNLQ//pKcGLC/shg33WSNSXPGiDiuusQT2swZdVc+Xlt7GV48KOZ0SwXlnb sqjkxolMabb7KjJE/EzAL2XzlJkSyqx+yUn/nG0O3bAEzUHhcHyIBlv9UL0Ygc2r R8/577b4TI++P8s4vEIt0IWh2J/NT6Un -----END CERTIFICATE-----Generated at Sat Jun 1 04:59:08 2024 by rpki-client on console-fra.rpki-client.org