$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft File: ShiOMYfOxdNsNowk6U9DHQQlO3s.mft (raw, json) Hash identifier: 6FXwp1BCfx0po/MmkiKxVeHRdm3nDWvi7pU0c1esnCg= Subject key identifier: 25:B3:F6:F0:FA:9B:88:AF:31:CA:0F:FD:89:14:5E:14:CA:EF:40:33 Authority key identifier: 4A:18:8E:31:87:CE:C5:D3:6C:36:8C:24:E9:4F:43:1D:04:25:3B:7B Certificate issuer: /CN=A91F5246/serialNumber=4A188E3187CEC5D36C368C24E94F431D04253B7B Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft Manifest number: F4 Signing time: Fri 31 May 2024 06:31:29 +0000 Manifest this update: Fri 31 May 2024 06:31:28 +0000 Manifest next update: Fri 07 Jun 2024 06:31:28 +0000 Files and hashes: 1: ShiOMYfOxdNsNowk6U9DHQQlO3s.crl (hash: aaQFa85rxiFxQ/jbQoDb7y9OtxjloAgJXw/l2vgbeBY=) 2: 87EEC61CCB4111ED8A4D796BC4F9AE02.roa (hash: qnHZ9BxY7BARIYnoZIbLGut+Ka0httnoVJLS138cfew=) 3: E284A4F8B10F11ED8AEF223CC4F9AE02.roa (hash: 0HC9dUgb0SpTQdvZR37mKp4h4NUxak02aO/l7tsG/44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.crl rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 06:31:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5246/serialNumber=4A188E3187CEC5D36C368C24E94F431D04253B7B Validity Not Before: May 31 06:31:28 2024 GMT Not After : Jun 7 06:31:28 2024 GMT Subject: CN=66596ec1-b543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a0:0c:6d:29:fc:a5:7d:97:e4:28:1c:a5:0a: 16:c3:13:4f:33:9d:e5:53:cf:74:5d:9c:a9:f5:07: 99:04:a1:67:96:08:7e:77:33:32:9d:74:80:f7:fd: 9d:bf:04:a8:91:11:4b:64:4b:8f:8f:bd:19:1c:85: 39:df:27:39:97:d5:08:ea:8f:29:a1:ca:24:7d:9a: 73:24:90:94:a4:1d:1b:17:d1:0d:16:0c:40:c8:8d: 2e:91:a9:84:90:7e:17:d1:2a:de:63:45:39:68:00: 93:1f:b3:84:a7:3e:77:87:25:ad:b4:14:f7:fd:ff: 4f:8d:44:64:6e:cc:10:f7:61:76:7f:b2:c3:f5:71: 64:c8:64:2d:9d:47:d7:a3:69:87:37:f4:64:f2:93: e6:6c:02:bd:b9:97:5e:3d:c1:93:83:0c:a8:43:ec: db:bf:a2:fb:da:2d:5c:dc:64:cc:2b:85:e0:56:92: 28:d2:17:cc:ef:99:fd:c1:31:6c:f8:a7:a8:d6:f0: eb:8a:a6:7c:f2:a8:cb:44:fe:be:e0:d2:0e:34:87: 51:09:62:30:72:f4:11:f2:88:f9:49:0f:e5:e3:28: d1:7e:da:d0:b2:59:cc:7d:b0:ed:e2:79:d7:78:03: 97:3d:e5:ba:33:8b:e0:18:3c:3c:a4:70:ca:1b:32: 10:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B3:F6:F0:FA:9B:88:AF:31:CA:0F:FD:89:14:5E:14:CA:EF:40:33 X509v3 Authority Key Identifier: keyid:4A:18:8E:31:87:CE:C5:D3:6C:36:8C:24:E9:4F:43:1D:04:25:3B:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:1c:f3:f5:c6:1e:1a:ec:eb:3d:ef:1e:71:44:fc:4f:f8:01: 5c:5d:66:b0:90:29:cf:d3:92:c8:42:70:5b:58:d4:72:ac:b3: 04:cf:56:b0:b5:bb:95:eb:ee:5b:fe:09:1c:4d:45:d4:d7:b9: 81:0a:23:43:9b:a2:97:be:fe:67:03:5b:5d:f5:64:e4:cb:e1: 47:0e:c3:6b:36:39:70:16:75:af:e1:24:ba:20:82:ff:ba:95: 51:38:40:1d:e8:d7:9f:b9:0c:e0:43:66:6e:c8:f2:05:38:85: 04:63:67:b3:79:0b:83:48:16:3d:82:c3:8f:8b:f3:98:97:94: c3:88:7d:64:36:12:c3:9e:5a:27:e7:dd:d9:b8:1f:2c:ce:b3: 1a:1b:70:bf:14:3a:e8:8b:87:12:77:f7:9e:7b:f9:18:59:fd: 23:29:d2:2c:e4:72:1c:60:ef:be:cb:84:b3:4c:8d:d5:cb:2e: 95:e8:bd:c2:bc:90:aa:aa:00:77:b4:59:fb:c6:cd:c9:ce:62: 6c:15:d7:e2:f5:7a:86:08:ba:2a:60:16:48:a0:a0:5b:af:39: 22:fc:89:77:61:60:6d:3c:8d:90:f6:18:a2:3e:6f:bd:e0:94: df:32:7b:26:68:1a:e1:c4:34:72:ae:dc:fe:67:50:df:ff:a1: ce:b2:b5:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyNDYxMTAvBgNVBAUTKDRBMTg4RTMxODdDRUM1RDM2QzM2OEMyNEU5NEY0MzFE MDQyNTNCN0IwHhcNMjQwNTMxMDYzMTI4WhcNMjQwNjA3MDYzMTI4WjAYMRYwFAYD VQQDEw02NjU5NmVjMS1iNTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqAMbSn8pX2X5CgcpQoWwxNPM53lU890XZyp9QeZBKFnlgh+dzMynXSA9/2d vwSokRFLZEuPj70ZHIU53yc5l9UI6o8pocokfZpzJJCUpB0bF9ENFgxAyI0ukamE kH4X0SreY0U5aACTH7OEpz53hyWttBT3/f9PjURkbswQ92F2f7LD9XFkyGQtnUfX o2mHN/Rk8pPmbAK9uZdePcGTgwyoQ+zbv6L72i1c3GTMK4XgVpIo0hfM75n9wTFs +Keo1vDriqZ88qjLRP6+4NIONIdRCWIwcvQR8oj5SQ/l4yjRftrQslnMfbDt4nnX eAOXPeW6M4vgGDw8pHDKGzIQZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCWz9vD6 m4ivMcoP/YkUXhTK70AzMB8GA1UdIwQYMBaAFEoYjjGHzsXTbDaMJOlPQx0EJTt7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTI0Ni8zOEM5NzA4QUIx MDgxMUVEQTg4NTQyMTdDNEY5QUUwMi9TaGlPTVlmT3hkTnNOb3drNlU5REhRUWxP M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoaU9NWWZPeGROc05vd2s2VTlESFFRbE8zcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTI0Ni8zOEM5NzA4QUIxMDgxMUVEQTg4NTQyMTdDNEY5QUUwMi9TaGlPTVlmT3hk TnNOb3drNlU5REhRUWxPM3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJHPP1xh4a7Os97x5xRPxP+AFcXWawkCnP05LIQnBbWNRyrLMEz1aw tbuV6+5b/gkcTUXU17mBCiNDm6KXvv5nA1td9WTky+FHDsNrNjlwFnWv4SS6IIL/ upVROEAd6NefuQzgQ2ZuyPIFOIUEY2ezeQuDSBY9gsOPi/OYl5TDiH1kNhLDnlon 593ZuB8szrMaG3C/FDroi4cSd/eee/kYWf0jKdIs5HIcYO++y4SzTI3Vyy6V6L3C vJCqqgB3tFn7xs3JzmJsFdfi9XqGCLoqYBZIoKBbrzki/Il3YWBtPI2Q9hiiPm+9 4JTfMnsmaBrhxDRyrtz+Z1Df/6HOsrVi -----END CERTIFICATE-----Generated at Fri May 31 08:39:02 2024 by rpki-client on console-fra.rpki-client.org