$ rpki-client -vvf rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft File: s9eTeQ4RSsj43IK64zwdkr29tes.mft (raw, json) Hash identifier: Cys5vzS4DTjzYRv598pzoMW0dVuYQWlZeSK7wyd3mYs= Subject key identifier: 64:DE:05:61:CE:B8:0C:D4:AC:36:E8:73:5E:85:62:E0:59:7A:98:51 Authority key identifier: B3:D7:93:79:0E:11:4A:C8:F8:DC:82:BA:E3:3C:1D:92:BD:BD:B5:EB Certificate issuer: /CN=A91F71E8/serialNumber=B3D793790E114AC8F8DC82BAE33C1D92BDBDB5EB Certificate serial: 0788 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft Manifest number: 1884 Signing time: Sat 18 May 2024 17:50:57 +0000 Manifest this update: Sat 18 May 2024 17:50:57 +0000 Manifest next update: Sat 25 May 2024 17:50:57 +0000 Files and hashes: 1: s9eTeQ4RSsj43IK64zwdkr29tes.crl (hash: wMZBvErMW8wTFHJ4suKmZBrN8/8CNb9ecLmACy2cqZA=) 2: F87AC94C35BB11EDB0314E29C4F9AE02.roa (hash: 7HWChdbqFDlK6JpN1nMGu+HTwLQ/1PBTD2NalgxrXl0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.crl rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1928 (0x788) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F71E8/serialNumber=B3D793790E114AC8F8DC82BAE33C1D92BDBDB5EB Validity Not Before: May 18 17:50:57 2024 GMT Not After : May 25 17:50:57 2024 GMT Subject: CN=6648ea81-e44c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:7a:1c:3a:0a:c8:74:c4:be:20:10:8d:27:6e: b4:ff:d3:96:b1:6c:37:4b:7c:cb:a3:b9:82:0e:08: f3:4f:59:58:22:e0:48:51:73:62:3c:f2:c9:84:62: 6f:53:33:df:ea:5e:68:b8:0b:46:b9:3f:3c:c7:c1: f9:51:af:93:fe:68:0f:ee:fb:c4:86:16:2b:ed:58: b0:5d:b4:7b:70:9d:b1:13:b2:61:fa:1d:c4:c4:35: 00:21:09:be:b9:c7:3a:a5:d6:be:e4:51:7c:35:5c: 7f:f7:ae:15:6e:dc:c8:b1:24:8c:f7:46:24:b7:18: a8:bc:d7:03:64:5b:5b:a0:0d:34:12:90:62:cf:73: 5d:33:29:5e:e2:d2:ee:fc:dd:58:b5:e3:94:27:49: 3e:6e:6e:49:30:97:87:ae:d6:67:03:ae:00:18:6a: e2:29:aa:44:a9:74:a6:a9:2d:60:0e:e2:6b:86:4b: 12:47:aa:9d:cd:6b:cf:b0:0b:7a:a0:e6:63:36:88: a0:f2:24:f5:8d:59:73:e5:13:45:b2:14:0e:61:26: f5:b6:cc:6b:14:a4:02:55:8b:7e:35:86:f5:ea:76: eb:36:97:8c:56:b3:e9:a4:ac:a5:f9:15:b2:ce:05: be:f0:2a:76:eb:c1:a9:eb:4e:9d:d6:2c:ce:bc:83: 3a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:DE:05:61:CE:B8:0C:D4:AC:36:E8:73:5E:85:62:E0:59:7A:98:51 X509v3 Authority Key Identifier: keyid:B3:D7:93:79:0E:11:4A:C8:F8:DC:82:BA:E3:3C:1D:92:BD:BD:B5:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:43:25:a4:3d:99:df:38:ce:b2:ca:4d:3b:15:39:3f:4c:ce: 82:81:04:4e:43:d7:81:6b:47:0a:cc:91:20:22:db:3c:52:5e: 00:c9:aa:1b:41:45:b9:e9:a1:2a:bb:7e:c5:66:25:20:40:fa: e8:fb:71:3c:72:20:bf:ca:5b:8c:71:a6:8f:f7:29:22:b6:71: d5:3c:f3:98:b8:fd:df:15:a3:d3:bc:c7:11:06:44:d8:06:6b: 0a:42:67:de:cf:ab:cc:c1:36:19:48:33:65:e1:91:32:ec:30: 5a:16:a0:6a:3c:c6:58:6d:03:da:31:91:09:d8:34:75:18:c5: f6:9f:4d:20:81:ce:1c:65:1a:56:23:95:9a:cc:56:22:d9:d9: 3b:c6:b0:24:f2:47:bc:2f:d4:a2:6b:c3:f1:6e:27:f5:9b:51: 88:b1:c3:26:ad:37:83:0b:25:d1:44:7a:1c:a8:3b:53:9a:a1: 4f:b3:3e:76:38:47:99:06:d9:53:c9:8b:28:eb:13:37:45:e5: 47:0c:57:59:90:6e:69:e0:80:d9:16:bd:8f:4b:6b:f4:97:e2: 23:e7:2f:7d:96:63:ad:3c:0b:10:26:2d:53:ec:5b:df:de:65: 77:d1:63:ab:58:c3:9c:5d:cf:30:90:cf:06:c4:3e:b4:75:02: bc:60:91:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcxRTgxMTAvBgNVBAUTKEIzRDc5Mzc5MEUxMTRBQzhGOERDODJCQUUzM0MxRDky QkRCREI1RUIwHhcNMjQwNTE4MTc1MDU3WhcNMjQwNTI1MTc1MDU3WjAYMRYwFAYD VQQDEw02NjQ4ZWE4MS1lNDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7HocOgrIdMS+IBCNJ260/9OWsWw3S3zLo7mCDgjzT1lYIuBIUXNiPPLJhGJv UzPf6l5ouAtGuT88x8H5Ua+T/mgP7vvEhhYr7ViwXbR7cJ2xE7Jh+h3ExDUAIQm+ ucc6pda+5FF8NVx/964VbtzIsSSM90YktxiovNcDZFtboA00EpBiz3NdMyle4tLu /N1YteOUJ0k+bm5JMJeHrtZnA64AGGriKapEqXSmqS1gDuJrhksSR6qdzWvPsAt6 oOZjNoig8iT1jVlz5RNFshQOYSb1tsxrFKQCVYt+NYb16nbrNpeMVrPppKyl+RWy zgW+8Cp268Gp606d1izOvIM65QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGTeBWHO uAzUrDboc16FYuBZephRMB8GA1UdIwQYMBaAFLPXk3kOEUrI+NyCuuM8HZK9vbXr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzFFOC82MkI3ODdBMEVF RTQxMUU4OUU2NjVENERDNEY5QUUwMi9zOWVUZVE0UlNzajQzSUs2NHp3ZGtyMjl0 ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M5ZVRlUTRSU3NqNDNJSzY0endka3IyOXRlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzFFOC82MkI3ODdBMEVFRTQxMUU4OUU2NjVENERDNEY5QUUwMi9zOWVUZVE0UlNz ajQzSUs2NHp3ZGtyMjl0ZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQQyWkPZnfOM6yyk07FTk/TM6CgQROQ9eBa0cKzJEgIts8Ul4Ayaob QUW56aEqu37FZiUgQPro+3E8ciC/yluMcaaP9ykitnHVPPOYuP3fFaPTvMcRBkTY BmsKQmfez6vMwTYZSDNl4ZEy7DBaFqBqPMZYbQPaMZEJ2DR1GMX2n00ggc4cZRpW I5WazFYi2dk7xrAk8ke8L9Sia8Pxbif1m1GIscMmrTeDCyXRRHocqDtTmqFPsz52 OEeZBtlTyYso6xM3ReVHDFdZkG5p4IDZFr2PS2v0l+Ij5y99lmOtPAsQJi1T7Fvf 3mV30WOrWMOcXc8wkM8GxD60dQK8YJFJ -----END CERTIFICATE-----Generated at Sat May 18 18:46:47 2024 by rpki-client on console-fra.rpki-client.org