$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft File: SrvXMBz_f7SstqBKFPCjbM6FYRw.mft (raw, json) Hash identifier: 22mvbdYu8BvwLgxTGvp5BwtLw1H6GLC4PK0h/Bpnjn4= Subject key identifier: DA:BA:E8:50:AE:FB:ED:23:D3:1B:59:BB:5C:EF:8E:B7:C9:47:8F:F0 Authority key identifier: 4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C Certificate issuer: /CN=A91FA9BC/serialNumber=4ABBD7301CFF7FB4ACB6A04A14F0A36CCE85611C Certificate serial: 010C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft Manifest number: FE Signing time: Sun 19 May 2024 05:52:23 +0000 Manifest this update: Sun 19 May 2024 05:52:22 +0000 Manifest next update: Sun 26 May 2024 05:52:22 +0000 Files and hashes: 1: SrvXMBz_f7SstqBKFPCjbM6FYRw.crl (hash: Yv+2ItjTvO65tooKOyvsGoo/cg42jXMv+m1U4cUHKP0=) 2: 106F283CB74311EDB0C38030C4F9AE02.roa (hash: 2ess2+aqjcLPy2+BGdLHTuvI+dzY0+eD7HCX2k3smvc=) 3: 4014542AED7D11ED8302706AC4F9AE02.roa (hash: zD9nEEeJbLqL6PpRHEJS0ZOHFslLXEVcLH+yPO4OeY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.crl rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA9BC/serialNumber=4ABBD7301CFF7FB4ACB6A04A14F0A36CCE85611C Validity Not Before: May 19 05:52:22 2024 GMT Not After : May 26 05:52:22 2024 GMT Subject: CN=66499397-60e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3c:6b:b2:cf:e5:68:bd:d5:55:ed:fa:db:38: e6:54:71:df:53:2c:e1:85:12:8b:20:c8:44:ff:7b: b7:a1:9e:67:74:63:82:35:b5:fc:76:69:08:34:5e: 06:f2:f9:d2:0b:ab:b1:3e:51:b2:d3:31:9c:37:be: 57:f3:e6:35:02:14:77:83:de:cf:c5:1a:18:f4:e9: 73:20:7a:43:73:82:d5:b3:0d:d8:7a:83:00:50:32: 60:4c:97:ee:c9:f5:7a:c3:8e:bf:20:da:38:43:ae: 4d:44:99:c3:db:73:2f:1e:0c:53:c2:6a:e9:7b:41: ea:f3:4f:c3:7b:fa:57:88:e3:04:51:d8:2c:1d:7b: 32:dd:d1:db:63:e0:6b:c5:66:66:eb:22:e8:11:59: 76:8f:0e:d9:c9:2c:16:41:19:4d:72:b0:71:ff:58: 6f:c8:ab:48:1c:4c:e1:97:af:a3:3f:c6:a6:82:c4: e1:46:a6:e8:a7:18:68:d9:6f:69:7f:43:b9:22:c7: 27:47:e3:1c:a0:ec:0e:50:b0:ec:17:bb:75:86:7b: 30:f2:75:0c:6e:fb:47:d6:cd:bf:b7:73:e2:6c:2a: 1c:d4:92:6d:86:bb:52:07:47:33:af:17:4d:42:21: 12:51:c6:3b:0e:0f:31:65:98:80:c5:70:a7:be:44: b2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:BA:E8:50:AE:FB:ED:23:D3:1B:59:BB:5C:EF:8E:B7:C9:47:8F:F0 X509v3 Authority Key Identifier: keyid:4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:45:86:29:69:0a:68:73:83:b0:80:81:22:13:75:04:25:e1: 90:88:40:a0:cc:00:e6:8a:37:59:39:d2:b9:29:45:a3:4d:2b: 8b:33:99:95:74:ab:33:47:42:41:d0:e4:b8:15:92:b7:48:56: ef:5c:c0:f2:bb:4f:73:16:fa:91:ff:a7:a5:d5:a4:d7:8a:21: 6d:30:1a:6f:98:3f:dd:88:ea:60:26:54:04:ab:5d:78:b1:b4: 42:a2:7d:64:51:f2:34:db:d4:9d:50:a4:eb:c3:d9:f3:7b:ae: e8:a4:49:a2:01:11:10:c8:33:20:1a:03:25:71:f8:b1:bd:6e: 3b:a8:f9:25:69:de:2b:65:1d:d6:12:0c:47:f0:7e:25:e3:ac: fd:02:5c:44:5a:86:80:4b:03:4d:2b:98:68:ea:70:19:7c:80: 4e:e0:65:e7:fb:20:3a:8e:0e:99:14:36:06:cb:44:2d:dc:15: 52:25:30:d5:7a:f5:70:c3:cd:f0:0f:aa:16:f8:a8:dd:6e:b4: 43:5e:70:45:66:8f:cc:d5:ce:e8:92:41:e7:a0:0a:34:4a:d5: c1:ac:d3:a8:99:c3:ee:90:ba:14:fc:1e:4d:42:33:25:0e:42: fa:4a:2a:bd:0a:87:8f:60:d7:f2:4f:24:dc:9f:36:9e:10:52: ba:57:a7:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE5QkMxMTAvBgNVBAUTKDRBQkJENzMwMUNGRjdGQjRBQ0I2QTA0QTE0RjBBMzZD Q0U4NTYxMUMwHhcNMjQwNTE5MDU1MjIyWhcNMjQwNTI2MDU1MjIyWjAYMRYwFAYD VQQDEw02NjQ5OTM5Ny02MGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTxrss/laL3VVe362zjmVHHfUyzhhRKLIMhE/3u3oZ5ndGOCNbX8dmkINF4G 8vnSC6uxPlGy0zGcN75X8+Y1AhR3g97PxRoY9OlzIHpDc4LVsw3YeoMAUDJgTJfu yfV6w46/INo4Q65NRJnD23MvHgxTwmrpe0Hq80/De/pXiOMEUdgsHXsy3dHbY+Br xWZm6yLoEVl2jw7ZySwWQRlNcrBx/1hvyKtIHEzhl6+jP8amgsThRqbopxho2W9p f0O5IscnR+McoOwOULDsF7t1hnsw8nUMbvtH1s2/t3PibCoc1JJthrtSB0czrxdN QiESUcY7Dg8xZZiAxXCnvkSyGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNq66FCu ++0j0xtZu1zvjrfJR4/wMB8GA1UdIwQYMBaAFEq71zAc/3+0rLagShTwo2zOhWEc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTlCQy9CRTJDRUZGMEIz QUExMUVEQUYzMTYyM0ZDNEY5QUUwMi9TcnZYTUJ6X2Y3U3N0cUJLRlBDamJNNkZZ UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NydlhNQnpfZjdTc3RxQktGUENqYk02RllSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTlCQy9CRTJDRUZGMEIzQUExMUVEQUYzMTYyM0ZDNEY5QUUwMi9TcnZYTUJ6X2Y3 U3N0cUJLRlBDamJNNkZZUncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0RYYpaQpoc4OwgIEiE3UEJeGQiECgzADmijdZOdK5KUWjTSuLM5mV dKszR0JB0OS4FZK3SFbvXMDyu09zFvqR/6el1aTXiiFtMBpvmD/diOpgJlQEq114 sbRCon1kUfI029SdUKTrw9nze67opEmiAREQyDMgGgMlcfixvW47qPklad4rZR3W EgxH8H4l46z9AlxEWoaASwNNK5ho6nAZfIBO4GXn+yA6jg6ZFDYGy0Qt3BVSJTDV evVww83wD6oW+KjdbrRDXnBFZo/M1c7okkHnoAo0StXBrNOomcPukLoU/B5NQjMl DkL6Siq9CoePYNfyTyTcnzaeEFK6V6e0 -----END CERTIFICATE-----Generated at Sun May 19 07:40:46 2024 by rpki-client on console-fra.rpki-client.org