$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/o93avj1GtEgCYdq75SmgZrYgXYs.mft File: o93avj1GtEgCYdq75SmgZrYgXYs.mft (raw, json) Hash identifier: F66mhQBUfX7VZFPhrgmjRqzdRsmiXnGqUSET500mP8A= Subject key identifier: F2:D7:9A:76:E1:68:30:19:1A:09:F9:9A:48:07:0D:EE:65:4A:A4:26 Authority key identifier: A3:DD:DA:BE:3D:46:B4:48:02:61:DA:BB:E5:29:A0:66:B6:20:5D:8B Certificate issuer: /CN=A91FAFBA/serialNumber=A3DDDABE3D46B4480261DABBE529A066B6205D8B Certificate serial: 050B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o93avj1GtEgCYdq75SmgZrYgXYs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/o93avj1GtEgCYdq75SmgZrYgXYs.mft Manifest number: 0507 Signing time: Fri 31 May 2024 01:43:51 +0000 Manifest this update: Fri 31 May 2024 01:43:51 +0000 Manifest next update: Fri 07 Jun 2024 01:43:51 +0000 Files and hashes: 1: o93avj1GtEgCYdq75SmgZrYgXYs.crl (hash: QK2oNidsC7ilhOkSOOb+rphRZbHm23EzZ/40zTG6oiE=) 2: 416E569CC1F911EB91796381C4F9AE02.roa (hash: 5vQ2oiYzVHXdBsJ9DpcL2UsxvsKvGcybvYrqXzoGtt0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/o93avj1GtEgCYdq75SmgZrYgXYs.crl rsync://rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/o93avj1GtEgCYdq75SmgZrYgXYs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o93avj1GtEgCYdq75SmgZrYgXYs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1291 (0x50b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAFBA/serialNumber=A3DDDABE3D46B4480261DABBE529A066B6205D8B Validity Not Before: May 31 01:43:51 2024 GMT Not After : Jun 7 01:43:51 2024 GMT Subject: CN=66592b57-eaba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:3c:25:92:14:ab:21:b7:b1:d8:73:bd:1d:75: 80:97:ff:19:75:db:fc:fe:e1:ea:cc:ce:b1:8b:2d: ce:cf:90:11:cd:7c:73:60:c1:5c:f5:81:ac:ea:d4: 18:af:10:68:83:49:4c:ac:3b:bc:79:2d:35:b8:f9: 25:5b:87:50:e5:da:0c:70:f7:1f:4f:3d:03:48:e6: d7:06:83:65:47:a7:65:c2:72:6d:c3:f0:02:d0:0c: d7:f3:c9:ae:bf:c2:96:10:fa:f8:7c:dc:5b:ae:3f: b2:24:88:1a:45:93:e3:12:94:ae:2c:ca:c6:5e:17: cf:ce:98:56:5e:6d:97:72:e5:55:85:52:32:07:22: 4f:20:a0:21:ee:48:e5:5d:5b:e6:b1:34:6c:9b:23: 83:31:6e:2f:de:f7:4f:de:16:af:58:1a:98:88:57: 51:7c:2e:76:66:15:5c:af:39:93:c8:cf:4b:09:0f: dc:4e:aa:60:0d:ae:c8:b2:f1:94:a4:c1:48:55:ef: e6:c8:de:c9:d4:aa:9b:1b:6a:b9:90:30:04:d7:3e: 0e:20:c2:39:1e:03:62:6e:b4:ac:2c:34:b7:e4:14: 33:ba:0d:4b:35:c8:a4:35:b3:be:55:73:8b:8d:5e: c7:73:92:a2:6b:67:29:d0:b3:50:43:9b:d2:28:32: c4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:D7:9A:76:E1:68:30:19:1A:09:F9:9A:48:07:0D:EE:65:4A:A4:26 X509v3 Authority Key Identifier: keyid:A3:DD:DA:BE:3D:46:B4:48:02:61:DA:BB:E5:29:A0:66:B6:20:5D:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/o93avj1GtEgCYdq75SmgZrYgXYs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o93avj1GtEgCYdq75SmgZrYgXYs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/o93avj1GtEgCYdq75SmgZrYgXYs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:ed:dc:e9:46:8a:2e:8b:eb:cc:81:3e:3b:f4:73:10:e1:03: 41:2f:e4:03:29:97:96:e3:28:54:23:3f:14:55:ab:02:c3:cf: 4a:2d:81:56:de:19:2f:12:4f:ff:e0:80:08:52:84:5c:8d:38: 62:ad:47:48:ff:f3:f7:a1:29:30:af:07:ad:55:cf:aa:9e:78: 1a:d5:7d:b0:ce:ec:69:47:f6:06:d4:4d:e2:e9:db:1b:d5:d4: 30:a2:13:3e:51:91:b7:21:1c:d0:92:06:ef:c3:6b:01:e0:4a: ef:47:b7:a2:1a:72:12:9b:c1:2c:16:28:b5:bf:b7:1d:53:bd: 42:bc:d5:45:35:10:5b:2c:c9:c5:24:27:46:d8:45:86:63:bd: 13:48:b3:6b:96:93:d4:1d:23:4f:d7:7c:84:3e:3e:ca:a7:a7: b4:f2:33:b9:a4:7c:78:a6:69:4f:b4:67:dc:d9:06:be:9b:9b: 27:9b:1d:49:9a:83:35:37:30:6f:52:86:5c:f2:2c:b4:8d:5c: 03:1a:5b:24:46:2c:85:f8:bc:6a:ac:0b:9f:46:49:15:68:b2: 1f:f1:54:f4:b5:aa:51:cc:61:65:73:81:7f:e2:f3:25:7a:13: e0:90:13:14:82:d8:27:0a:a2:4c:01:9f:e2:e8:11:bf:17:b8: 42:1a:0e:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFGQkExMTAvBgNVBAUTKEEzREREQUJFM0Q0NkI0NDgwMjYxREFCQkU1MjlBMDY2 QjYyMDVEOEIwHhcNMjQwNTMxMDE0MzUxWhcNMjQwNjA3MDE0MzUxWjAYMRYwFAYD VQQDEw02NjU5MmI1Ny1lYWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6DwlkhSrIbex2HO9HXWAl/8Zddv8/uHqzM6xiy3Oz5ARzXxzYMFc9YGs6tQY rxBog0lMrDu8eS01uPklW4dQ5doMcPcfTz0DSObXBoNlR6dlwnJtw/AC0AzX88mu v8KWEPr4fNxbrj+yJIgaRZPjEpSuLMrGXhfPzphWXm2XcuVVhVIyByJPIKAh7kjl XVvmsTRsmyODMW4v3vdP3havWBqYiFdRfC52ZhVcrzmTyM9LCQ/cTqpgDa7IsvGU pMFIVe/myN7J1KqbG2q5kDAE1z4OIMI5HgNibrSsLDS35BQzug1LNcikNbO+VXOL jV7Hc5Kia2cp0LNQQ5vSKDLEwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLXmnbh aDAZGgn5mkgHDe5lSqQmMB8GA1UdIwQYMBaAFKPd2r49RrRIAmHau+UpoGa2IF2L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUZCQS9ENDQyMEU5MEMx RjUxMUVCQUI3Nzk3N0JDNEY5QUUwMi9vOTNhdmoxR3RFZ0NZZHE3NVNtZ1pyWWdY WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285M2F2ajFHdEVnQ1lkcTc1U21nWnJZZ1hZcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUZCQS9ENDQyMEU5MEMxRjUxMUVCQUI3Nzk3N0JDNEY5QUUwMi9vOTNhdmoxR3RF Z0NZZHE3NVNtZ1pyWWdYWXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA97dzpRooui+vMgT479HMQ4QNBL+QDKZeW4yhUIz8UVasCw89KLYFW 3hkvEk//4IAIUoRcjThirUdI//P3oSkwrwetVc+qnnga1X2wzuxpR/YG1E3i6dsb 1dQwohM+UZG3IRzQkgbvw2sB4ErvR7eiGnISm8EsFii1v7cdU71CvNVFNRBbLMnF JCdG2EWGY70TSLNrlpPUHSNP13yEPj7Kp6e08jO5pHx4pmlPtGfc2Qa+m5snmx1J moM1NzBvUoZc8iy0jVwDGlskRiyF+LxqrAufRkkVaLIf8VT0tapRzGFlc4F/4vMl ehPgkBMUgtgnCqJMAZ/i6BG/F7hCGg52 -----END CERTIFICATE-----Generated at Fri May 31 02:50:48 2024 by rpki-client on console-fra.rpki-client.org