$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft File: xUK94Lg0fDed4d4dgkOpLLlMh00.mft (raw, json) Hash identifier: 2PcFDDsLd9b2Ts+hQAkGW6Lv8nr1WdlQLryshuKEWkc= Subject key identifier: 6D:EB:E2:9D:CE:5C:F0:4F:27:87:52:C9:B7:DF:45:F9:76:3C:16:A1 Authority key identifier: C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D Certificate issuer: /CN=A91FB297/serialNumber=C542BDE0B8347C379DE1DE1D8243A92CB94C874D Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft Manifest number: 41 Signing time: Sun 19 May 2024 08:09:32 +0000 Manifest this update: Sun 19 May 2024 08:09:31 +0000 Manifest next update: Sun 26 May 2024 08:09:31 +0000 Files and hashes: 1: xUK94Lg0fDed4d4dgkOpLLlMh00.crl (hash: 6A0lrsNiuYEL6nH20T6HnWz/S1HHdapyuQ2qL5KGkLQ=) 2: FE9EA8D4B67A11EEB24FA643C4F9AE02.roa (hash: yVJ5vVhcvh07DTWMIUUrXFoLzgDKRoP+ZXjLJb156dc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.crl rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB297/serialNumber=C542BDE0B8347C379DE1DE1D8243A92CB94C874D Validity Not Before: May 19 08:09:31 2024 GMT Not After : May 26 08:09:31 2024 GMT Subject: CN=6649b3bc-90fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:00:53:32:89:65:f6:5e:6e:b8:3a:cf:de:47: 83:10:db:61:08:27:b1:cf:e8:d6:59:44:50:43:9c: d7:22:88:51:cb:23:6e:45:ff:e8:05:2a:a5:62:4d: 4c:64:de:42:fd:77:b7:d6:87:95:ee:bc:7d:48:b7: 9a:9a:29:63:17:7d:16:31:05:06:93:e5:45:f2:8f: 0f:f4:92:78:b1:61:4e:38:bb:63:6f:97:d2:56:0f: 87:5c:d1:b0:87:e0:98:bf:b8:87:45:67:64:d8:bf: 9e:ed:a4:0d:2d:5a:23:78:08:89:3c:94:d3:6c:7f: 5d:e3:37:4f:ab:35:bf:24:fb:4d:1a:07:12:88:40: 72:47:95:ab:09:12:4a:d7:a4:22:46:8e:8d:8a:3f: 11:ec:82:c0:9b:77:eb:67:23:41:cb:b7:67:2b:27: cd:a7:4b:a9:e4:13:13:9e:32:fc:8d:fd:81:2b:13: 8f:ff:03:fb:e3:3f:ce:7d:37:12:34:d7:e6:4a:06: b2:84:89:bf:65:48:e9:7e:83:fc:db:df:ff:99:33: 9f:85:9c:9b:0d:2a:e7:c3:db:f5:3d:a0:37:68:f8: 9e:5c:97:81:23:00:6d:6a:dc:28:43:4b:0c:fe:59: 19:5d:65:c6:05:99:24:b4:7d:42:79:d9:55:ae:4e: fc:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:EB:E2:9D:CE:5C:F0:4F:27:87:52:C9:B7:DF:45:F9:76:3C:16:A1 X509v3 Authority Key Identifier: keyid:C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:90:7a:cc:9c:e0:6d:d7:fc:78:5c:3a:30:bc:9c:2a:7b:80: 60:8c:df:8b:36:24:c9:13:39:a9:55:7b:33:c2:37:97:46:34: 5c:52:b8:67:f7:08:75:f5:cf:37:d4:bd:86:b3:4f:23:ca:8d: d2:48:d5:26:72:99:7d:b7:20:93:e4:79:bf:57:22:a3:32:cf: 4f:3d:99:d2:cd:84:ea:e4:c7:5e:0f:07:67:3b:a6:35:14:37: 04:7d:83:e5:81:19:9d:08:88:86:c2:39:c2:a9:fb:26:a7:cc: 87:7c:0e:fa:4a:9c:96:a3:19:5e:1d:e3:18:44:f3:7d:34:49: 80:36:88:b8:39:87:4a:bf:19:13:b1:59:42:b8:e5:84:ad:22: 86:73:94:0d:48:82:1e:2f:eb:9d:51:1e:10:bd:7d:ef:00:94: 68:b7:58:02:98:07:55:f4:d5:c3:05:6e:b8:dc:b6:a2:a6:ed: a8:69:2b:85:d4:07:1a:b7:84:db:dc:ac:70:44:77:a3:66:b2: 2f:37:6a:91:f0:14:c6:67:d5:76:16:c9:70:89:ec:f1:3a:b6: ac:ed:ab:9c:67:59:f2:6f:b3:59:19:8a:21:af:b6:0e:5e:57: 9e:aa:00:5d:56:33:eb:3a:46:c9:f5:c0:e6:8a:11:ba:41:9e: 0d:9c:aa:9c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QjI5NzExMC8GA1UEBRMoQzU0MkJERTBCODM0N0MzNzlERTFERTFEODI0M0E5MkNC OTRDODc0RDAeFw0yNDA1MTkwODA5MzFaFw0yNDA1MjYwODA5MzFaMBgxFjAUBgNV BAMTDTY2NDliM2JjLTkwZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBAFMyiWX2Xm64Os/eR4MQ22EIJ7HP6NZZRFBDnNciiFHLI25F/+gFKqViTUxk 3kL9d7fWh5XuvH1It5qaKWMXfRYxBQaT5UXyjw/0knixYU44u2Nvl9JWD4dc0bCH 4Ji/uIdFZ2TYv57tpA0tWiN4CIk8lNNsf13jN0+rNb8k+00aBxKIQHJHlasJEkrX pCJGjo2KPxHsgsCbd+tnI0HLt2crJ82nS6nkExOeMvyN/YErE4//A/vjP859NxI0 1+ZKBrKEib9lSOl+g/zb3/+ZM5+FnJsNKufD2/U9oDdo+J5cl4EjAG1q3ChDSwz+ WRldZcYFmSS0fUJ52VWuTvxFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbevinc5c 8E8nh1LJt99F+XY8FqEwHwYDVR0jBBgwFoAUxUK94Lg0fDed4d4dgkOpLLlMh00w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCMjk3LzlBODkwRTZFQjVF MTExRUVBMEE2MTc2REM0RjlBRTAyL3hVSzk0TGcwZkRlZDRkNGRna09wTExsTWgw MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveFVLOTRMZzBmRGVkNGQ0ZGdrT3BMTGxNaDAwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC Mjk3LzlBODkwRTZFQjVFMTExRUVBMEE2MTc2REM0RjlBRTAyL3hVSzk0TGcwZkRl ZDRkNGRna09wTExsTWgwMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEuQesyc4G3X/HhcOjC8nCp7gGCM34s2JMkTOalVezPCN5dGNFxSuGf3 CHX1zzfUvYazTyPKjdJI1SZymX23IJPkeb9XIqMyz089mdLNhOrkx14PB2c7pjUU NwR9g+WBGZ0IiIbCOcKp+yanzId8DvpKnJajGV4d4xhE8300SYA2iLg5h0q/GROx WUK45YStIoZzlA1Igh4v651RHhC9fe8AlGi3WAKYB1X01cMFbrjctqKm7ahpK4XU Bxq3hNvcrHBEd6Nmsi83apHwFMZn1XYWyXCJ7PE6tqztq5xnWfJvs1kZiiGvtg5e V56qAF1WM+s6Rsn1wOaKEbpBng2cqpw= -----END CERTIFICATE-----Generated at Sun May 19 09:04:15 2024 by rpki-client on console-fra.rpki-client.org