$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft File: N3hUTiRpVIvwm1Td2APX19kPfmI.mft (raw, json) Hash identifier: LnNh3bplFABTsGiI6MbZm291IGQ7SBkVIDRCUS/SdjQ= Subject key identifier: B4:76:A2:D5:9C:42:22:A3:E0:E4:A4:57:44:A5:6E:DC:0B:78:88:A6 Authority key identifier: 37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 Certificate issuer: /CN=A91F8CAA/serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft Manifest number: 23 Signing time: Sun 19 May 2024 08:33:48 +0000 Manifest this update: Sun 19 May 2024 08:33:47 +0000 Manifest next update: Sun 26 May 2024 08:33:47 +0000 Files and hashes: 1: N3hUTiRpVIvwm1Td2APX19kPfmI.crl (hash: bjfCMOBCidSUNpl+vjO1/KtjvugZGNjKD0lgC3DGs/g=) 2: 1EC90968E1F211EEA360BE22C4F9AE02.roa (hash: t0a6+ZrtHXGmxUqi5+aimNkuYhnbf00cWYtVmydfQ2I=) 3: 1E4548E4E1F211EEA360BE22C4F9AE02.roa (hash: yQ1FIIFonh7cCfLctJ8d+Ls3IWEwlpiHbaUt9UxU1rY=) 4: 1DDBD99AE1F211EEA360BE22C4F9AE02.roa (hash: arm7UtKLc4xYXM+k/6yKC2LRVE/77rycSyZpvfnJw88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8CAA/serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Validity Not Before: May 19 08:33:47 2024 GMT Not After : May 26 08:33:47 2024 GMT Subject: CN=6649b96b-662f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ad:ee:f3:3e:90:d9:7d:0d:de:ad:ed:de:4c: 13:dc:fa:11:87:91:de:cd:cd:ed:1c:7e:81:9e:75: 6f:d0:15:c8:a8:64:2f:df:e2:4e:0b:75:ae:f7:2d: f3:fc:1d:c3:5d:ad:92:a3:f3:4c:c4:1b:35:80:5f: df:dd:75:91:2a:3a:bf:10:28:e1:e9:0c:76:59:ca: 08:6a:bc:5c:be:72:48:6e:bf:fe:2f:66:a5:df:ac: e3:fd:2c:a5:21:2c:df:9a:8c:a5:e2:cc:c0:ec:fe: 3b:02:2e:19:57:b9:dc:4d:2b:65:c6:00:55:65:13: be:c4:d3:6a:22:a5:53:0d:54:15:e3:28:49:ad:9b: ee:d0:74:6e:60:41:64:9d:09:b8:c3:20:f7:f3:83: 1a:e3:fe:c5:dc:e8:8d:5c:bb:9a:fd:4c:c7:3c:4e: 28:50:6a:e1:40:e7:47:2d:9e:2e:cf:2b:dd:a9:03: 4a:19:c6:c0:cd:eb:38:ba:fd:f8:b1:d4:cf:ea:69: 83:ff:7d:ae:a4:c8:b6:12:37:47:8f:c8:a2:05:b9: c9:e4:b6:5f:f4:29:43:2f:4a:ca:87:1c:f7:1d:08: 93:8e:ec:c0:c5:26:c6:be:34:43:37:d2:a4:0a:8d: 1a:b2:e3:78:47:74:d6:23:eb:a7:3d:d4:01:23:7b: f3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:76:A2:D5:9C:42:22:A3:E0:E4:A4:57:44:A5:6E:DC:0B:78:88:A6 X509v3 Authority Key Identifier: keyid:37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:5b:8c:fd:23:d0:96:92:76:c1:48:de:99:1f:5c:98:65:be: c0:00:dc:cc:86:48:42:03:c9:33:f0:71:6c:fc:06:07:bd:a4: 00:be:ce:f8:74:db:a4:b1:43:0e:42:f4:ad:9d:9c:e6:1c:52: b4:66:44:85:8a:01:17:4e:58:08:21:d5:9a:11:3e:53:1f:c4: 14:8b:a0:a6:35:9b:4b:7f:9f:1a:ba:4c:20:49:11:41:9d:7b: 59:86:8c:19:e3:1f:00:7f:c3:a1:bf:ba:ac:a9:86:65:ce:49: 90:58:6c:36:60:c4:4c:f6:64:a2:85:1e:5a:1f:b1:0b:3c:b2: 33:57:5e:08:48:a1:72:99:43:3e:1c:a9:c1:ce:33:45:3d:e1: 7f:f9:df:78:c1:d5:b0:cc:5b:a9:96:cd:42:b8:e9:eb:3e:41: 9d:08:2e:11:08:0c:01:82:e2:6c:d9:21:ed:73:b2:80:19:32: db:bf:90:39:cb:a5:ee:bb:a5:63:04:7d:d4:3c:e5:67:64:45: 81:31:f7:00:69:dd:a2:c8:8a:03:c2:47:0c:bf:4d:3c:17:aa: ad:4d:98:46:59:bd:7a:51:3d:45:ad:37:3c:9f:2f:7e:7e:8f: e0:5e:66:aa:91:e3:56:05:eb:37:22:e4:17:81:86:05:80:f0: 07:29:ba:28 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OENBQTExMC8GA1UEBRMoMzc3ODU0NEUyNDY5NTQ4QkYwOUI1NERERDgwM0Q3RDdE OTBGN0U2MjAeFw0yNDA1MTkwODMzNDdaFw0yNDA1MjYwODMzNDdaMBgxFjAUBgNV BAMTDTY2NDliOTZiLTY2MmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmre7zPpDZfQ3ere3eTBPc+hGHkd7Nze0cfoGedW/QFcioZC/f4k4Lda73LfP8 HcNdrZKj80zEGzWAX9/ddZEqOr8QKOHpDHZZyghqvFy+ckhuv/4vZqXfrOP9LKUh LN+ajKXizMDs/jsCLhlXudxNK2XGAFVlE77E02oipVMNVBXjKEmtm+7QdG5gQWSd CbjDIPfzgxrj/sXc6I1cu5r9TMc8TihQauFA50ctni7PK92pA0oZxsDN6zi6/fix 1M/qaYP/fa6kyLYSN0ePyKIFucnktl/0KUMvSsqHHPcdCJOO7MDFJsa+NEM30qQK jRqy43hHdNYj66c91AEje/ORAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtHai1ZxC IqPg5KRXRKVu3At4iKYwHwYDVR0jBBgwFoAUN3hUTiRpVIvwm1Td2APX19kPfmIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4Q0FBL0RDRDAyQTIwRTFF QTExRUU5OTlDNzAyQUM0RjlBRTAyL04zaFVUaVJwVkl2d20xVGQyQVBYMTlrUGZt SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTjNoVVRpUnBWSXZ3bTFUZDJBUFgxOWtQZm1JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4 Q0FBL0RDRDAyQTIwRTFFQTExRUU5OTlDNzAyQUM0RjlBRTAyL04zaFVUaVJwVkl2 d20xVGQyQVBYMTlrUGZtSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ9bjP0j0JaSdsFI3pkfXJhlvsAA3MyGSEIDyTPwcWz8Bge9pAC+zvh0 26SxQw5C9K2dnOYcUrRmRIWKARdOWAgh1ZoRPlMfxBSLoKY1m0t/nxq6TCBJEUGd e1mGjBnjHwB/w6G/uqyphmXOSZBYbDZgxEz2ZKKFHlofsQs8sjNXXghIoXKZQz4c qcHOM0U94X/533jB1bDMW6mWzUK46es+QZ0ILhEIDAGC4mzZIe1zsoAZMtu/kDnL pe67pWMEfdQ85WdkRYEx9wBp3aLIigPCRwy/TTwXqq1NmEZZvXpRPUWtNzyfL35+ j+BeZqqR41YF6zci5BeBhgWA8Acpuig= -----END CERTIFICATE-----Generated at Sun May 19 09:04:15 2024 by rpki-client on console-fra.rpki-client.org