$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft File: l85Wj2RoJWRz-Es4s84D6jVJ64k.mft (raw, json) Hash identifier: XAUxiyPNihJeMwGimddFZ2MXTj9oTYytc5r7jnvaAXo= Subject key identifier: 65:0D:D2:67:A6:F7:80:4B:F0:50:F3:42:41:E6:70:1B:1A:DC:34:F8 Authority key identifier: 97:CE:56:8F:64:68:25:64:73:F8:4B:38:B3:CE:03:EA:35:49:EB:89 Certificate issuer: /CN=A91FCABC/serialNumber=97CE568F6468256473F84B38B3CE03EA3549EB89 Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft Manifest number: B2 Signing time: Sun 19 May 2024 06:31:41 +0000 Manifest this update: Sun 19 May 2024 06:31:40 +0000 Manifest next update: Sun 26 May 2024 06:31:40 +0000 Files and hashes: 1: l85Wj2RoJWRz-Es4s84D6jVJ64k.crl (hash: 1ZB4mL6GqHIWyIsaulkGXDEQoS2PUJ2h1fGu+FGZ73c=) 2: 35BBCFB005C111EEA3A8584CC4F9AE02.roa (hash: Zj5KzXH90Eacni+/EF4/NifCxTnojynFkhBANYb65sQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.crl rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCABC/serialNumber=97CE568F6468256473F84B38B3CE03EA3549EB89 Validity Not Before: May 19 06:31:40 2024 GMT Not After : May 26 06:31:40 2024 GMT Subject: CN=66499ccd-65a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ec:39:67:9c:da:39:64:00:67:04:92:15:07: 71:08:ab:eb:ca:1c:1d:5d:97:80:05:49:ee:0b:1f: 40:9f:bb:5d:e0:ed:c0:b7:40:51:69:cd:ed:c3:63: 0b:1b:dc:f0:7c:27:15:83:c5:80:dd:e2:1e:78:f9: 5c:5b:60:ac:b5:4c:59:d1:50:4f:ec:c0:24:ea:d8: 8c:64:bd:06:ca:e5:c7:2a:3f:54:ee:d2:c9:6b:0d: 58:fe:e5:0e:b1:15:60:af:09:98:8c:72:0f:f6:dd: 14:38:70:9d:d7:f0:94:89:45:25:4d:e5:5e:cf:79: 1a:e9:b9:7a:3e:5c:91:24:49:ca:9f:39:91:a6:28: 1f:32:c9:08:68:ff:e7:ae:42:b8:0e:e6:f9:b9:44: 23:82:8f:63:9a:11:fd:78:13:2f:34:1d:c4:17:54: 35:b4:8f:74:cc:49:4f:20:0d:69:7a:b4:6f:b1:18: 8c:bd:56:6e:89:33:e4:c6:16:b8:3c:c3:0b:20:a1: 35:96:ac:43:fc:8a:03:7b:3d:f9:9f:d8:a6:b2:04: ff:cd:bf:a6:8b:cd:4f:84:ab:cd:1b:28:7a:d7:b0: 0b:ae:16:e5:99:cc:e3:3d:0b:76:b6:6d:c2:66:d7: 06:d7:d9:a7:af:5e:f5:f8:85:55:a6:73:90:c6:e3: fd:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:0D:D2:67:A6:F7:80:4B:F0:50:F3:42:41:E6:70:1B:1A:DC:34:F8 X509v3 Authority Key Identifier: keyid:97:CE:56:8F:64:68:25:64:73:F8:4B:38:B3:CE:03:EA:35:49:EB:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:03:4e:7d:b7:72:86:91:f8:b7:02:7f:02:38:26:32:3f:74: bd:3b:0c:85:5d:b5:b3:42:7b:a4:89:83:a9:09:07:e6:cf:7b: 8a:04:b0:ec:62:33:c6:9b:23:d1:87:9e:90:68:2a:5c:64:9c: 2f:63:21:06:d5:8f:0a:64:ce:6c:ec:06:a8:27:b4:fc:76:41: 12:63:fa:9e:ae:0b:e4:d6:25:ea:5a:14:a0:54:fb:fc:05:11: 7f:94:0e:d5:42:87:9f:9f:5a:64:10:50:8e:44:8c:75:06:c4: dc:e9:e2:9b:38:1f:ee:27:72:b1:c7:16:cc:1e:c3:e2:05:a3: d8:78:e8:7b:5f:57:dc:39:59:20:47:c3:55:8e:ea:a1:78:63: 44:f9:79:77:c8:aa:2d:e1:89:07:52:f5:48:06:90:71:91:87: eb:31:b9:91:87:21:83:66:2a:56:25:78:c7:2b:41:d0:6e:c4: c7:82:78:0e:d8:1b:05:f3:e1:c8:10:ad:3a:0b:6f:4e:e1:76: be:5b:e4:31:7b:dd:02:24:f4:4b:8c:e9:e1:94:f1:83:6b:7c: d0:1a:ed:de:55:52:33:48:b9:f9:66:80:03:ad:f6:6c:88:4f: 05:84:eb:05:99:1e:fc:5e:de:1e:03:63:be:4f:73:28:22:b2: 5c:03:8f:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNBQkMxMTAvBgNVBAUTKDk3Q0U1NjhGNjQ2ODI1NjQ3M0Y4NEIzOEIzQ0UwM0VB MzU0OUVCODkwHhcNMjQwNTE5MDYzMTQwWhcNMjQwNTI2MDYzMTQwWjAYMRYwFAYD VQQDEw02NjQ5OWNjZC02NWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuuw5Z5zaOWQAZwSSFQdxCKvryhwdXZeABUnuCx9An7td4O3At0BRac3tw2ML G9zwfCcVg8WA3eIeePlcW2CstUxZ0VBP7MAk6tiMZL0GyuXHKj9U7tLJaw1Y/uUO sRVgrwmYjHIP9t0UOHCd1/CUiUUlTeVez3ka6bl6PlyRJEnKnzmRpigfMskIaP/n rkK4Dub5uUQjgo9jmhH9eBMvNB3EF1Q1tI90zElPIA1perRvsRiMvVZuiTPkxha4 PMMLIKE1lqxD/IoDez35n9imsgT/zb+mi81PhKvNGyh617ALrhblmczjPQt2tm3C ZtcG19mnr171+IVVpnOQxuP9eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGUN0mem 94BL8FDzQkHmcBsa3DT4MB8GA1UdIwQYMBaAFJfOVo9kaCVkc/hLOLPOA+o1SeuJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0FCQy9DNTUxNjQxMjA1 QjkxMUVFQTkxMzBCMzdDNEY5QUUwMi9sODVXajJSb0pXUnotRXM0czg0RDZqVko2 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2w4NVdqMlJvSldSei1FczRzODRENmpWSjY0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0FCQy9DNTUxNjQxMjA1QjkxMUVFQTkxMzBCMzdDNEY5QUUwMi9sODVXajJSb0pX UnotRXM0czg0RDZqVko2NGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYA059t3KGkfi3An8COCYyP3S9OwyFXbWzQnukiYOpCQfmz3uKBLDs YjPGmyPRh56QaCpcZJwvYyEG1Y8KZM5s7AaoJ7T8dkESY/qergvk1iXqWhSgVPv8 BRF/lA7VQoefn1pkEFCORIx1BsTc6eKbOB/uJ3KxxxbMHsPiBaPYeOh7X1fcOVkg R8NVjuqheGNE+Xl3yKot4YkHUvVIBpBxkYfrMbmRhyGDZipWJXjHK0HQbsTHgngO 2BsF8+HIEK06C29O4Xa+W+Qxe90CJPRLjOnhlPGDa3zQGu3eVVIzSLn5ZoADrfZs iE8FhOsFmR78Xt4eA2O+T3MoIrJcA4/B -----END CERTIFICATE-----Generated at Sun May 19 07:40:46 2024 by rpki-client on console-fra.rpki-client.org