$ rpki-client -vvf rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft File: AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft (raw, json) Hash identifier: ksDyP6UDDM4vRTFb+eQ5OWAUJ95iQ2dv9pBSYJj8cF0= Subject key identifier: 4E:7F:79:1E:5E:56:8A:56:4C:FF:F0:F0:9D:1D:7E:6B:91:7E:1E:C9 Authority key identifier: 02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16 Certificate issuer: /CN=A91147EF/serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016 Certificate serial: 0891 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft Manifest number: 0884 Signing time: Tue 30 Apr 2024 21:54:43 +0000 Manifest this update: Tue 30 Apr 2024 21:54:42 +0000 Manifest next update: Tue 07 May 2024 21:54:42 +0000 Files and hashes: 1: AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl (hash: xmW/R7nfjSh4Qkkoni+gWMX+A8eEmhxdmToIvv0Qr1E=) 2: 84D32F2AE32411EA800C6724C4F9AE02.roa (hash: QM6yiuNN4HsQC994z+CdWb6oLYSKQw2/aCC7nDolw/E=) 3: 38EC4D321F2711EB93A71042C4F9AE02.roa (hash: OKqVFD1uZroQnXYiHQdFbraVnh1GYUqvC3EFoMwpZqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 21:54:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2193 (0x891) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91147EF/serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016 Validity Not Before: Apr 30 21:54:42 2024 GMT Not After : May 7 21:54:42 2024 GMT Subject: CN=663168a3-a024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:75:f6:e2:47:c2:6f:7f:38:d7:c6:62:0f:0f: e3:5e:e8:9e:50:86:24:6f:ce:80:60:75:97:37:6b: 73:b9:6e:e6:8a:fa:2a:07:a4:1b:41:4b:60:5c:0f: 4d:92:ee:d8:3b:5a:10:4e:9a:21:d1:15:5f:4d:5f: 33:a8:73:ec:91:90:78:9a:05:59:4b:97:c9:93:2f: 9e:46:dc:b3:d6:0f:91:6c:0d:43:b4:aa:1b:46:be: 56:23:9d:4d:55:32:72:da:e7:1f:64:55:dc:75:f0: 4b:1e:45:e8:20:bd:cf:4c:65:5a:86:30:a1:51:50: ee:03:0d:3c:1d:97:74:50:28:bf:9e:7e:f7:54:c5: 3f:28:9d:32:6e:44:c0:e7:4e:ae:8a:e9:43:6d:8e: 18:39:cb:5c:e3:d6:5d:9d:eb:c6:30:ca:05:4e:39: 04:a7:1c:2c:c8:28:f0:57:cc:56:fa:1c:0d:17:6b: 73:12:99:4a:eb:62:c6:7b:e0:cf:e5:4d:b0:28:84: fc:61:03:73:5b:5d:2a:16:af:d6:3e:51:86:26:32: de:3e:99:5f:33:f8:eb:09:01:a2:2c:4f:8d:ba:af: 07:70:75:bc:ab:c0:2e:64:cc:7f:db:d4:d6:41:3d: 14:22:9b:ae:fb:27:f1:43:c6:d3:bb:0f:b2:35:5c: fe:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:7F:79:1E:5E:56:8A:56:4C:FF:F0:F0:9D:1D:7E:6B:91:7E:1E:C9 X509v3 Authority Key Identifier: keyid:02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:a0:5d:86:48:40:30:95:bb:91:6d:1c:cc:1c:bf:4d:a9:74: ca:26:91:8e:d2:74:d6:a5:f5:a0:35:4e:00:ff:08:28:65:bb: f7:da:21:c9:26:35:2d:cd:30:5e:62:93:4d:f7:5b:fd:fd:50: 51:0a:ac:ac:1f:d5:eb:20:eb:e2:41:1c:47:73:11:40:68:d9: 56:0a:af:0b:7c:5c:b1:a9:81:00:7a:04:11:ff:fc:97:a4:de: 26:b8:b0:fd:b7:5f:db:63:3e:c9:89:27:f9:fe:d8:51:53:8a: 87:49:07:69:2b:69:14:92:35:12:37:59:ae:f6:0c:6e:a2:8d: a1:3c:91:61:fe:2d:ad:57:e5:60:ac:b3:1a:89:d7:31:6e:c2: 0a:77:c6:d3:23:56:0b:ef:f2:af:32:9e:75:e6:12:4c:08:d9: b8:5d:c1:b8:88:55:b2:26:d0:34:07:88:68:89:a1:01:ce:e3: bd:f2:3c:66:4c:74:03:19:14:90:c2:7b:9f:0f:30:f1:d1:0c: 2f:a3:a0:08:a0:47:7b:f0:87:4c:e3:88:f7:5e:b5:c6:10:c7: 02:bc:82:10:51:c6:1b:a4:95:2d:d2:f7:03:99:b2:1f:02:cb: df:6a:ca:f9:55:d6:7c:e6:45:5f:38:0c:61:9b:f1:4b:e7:49: 6f:75:e4:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ3RUYxMTAvBgNVBAUTKDAyMTU1MDJBQThGRkRDNzIxRDdGODRGNzRDRDA3MEI3 NTYzOTAwMTYwHhcNMjQwNDMwMjE1NDQyWhcNMjQwNTA3MjE1NDQyWjAYMRYwFAYD VQQDEw02NjMxNjhhMy1hMDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9HX24kfCb38418ZiDw/jXuieUIYkb86AYHWXN2tzuW7mivoqB6QbQUtgXA9N ku7YO1oQTpoh0RVfTV8zqHPskZB4mgVZS5fJky+eRtyz1g+RbA1DtKobRr5WI51N VTJy2ucfZFXcdfBLHkXoIL3PTGVahjChUVDuAw08HZd0UCi/nn73VMU/KJ0ybkTA 506uiulDbY4YOctc49ZdnevGMMoFTjkEpxwsyCjwV8xW+hwNF2tzEplK62LGe+DP 5U2wKIT8YQNzW10qFq/WPlGGJjLePplfM/jrCQGiLE+Nuq8HcHW8q8AuZMx/29TW QT0UIpuu+yfxQ8bTuw+yNVz+CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE5/eR5e VopWTP/w8J0dfmuRfh7JMB8GA1UdIwQYMBaAFAIVUCqo/9xyHX+E90zQcLdWOQAW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDdFRi84QTI5MTA0Njk5 MTYxMUVBOTk1NUQ1MEJDNEY5QUUwMi9BaFZRS3FqXzNISWRmNFQzVE5Cd3QxWTVB QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FoVlFLcWpfM0hJZGY0VDNUTkJ3dDFZNUFCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDdFRi84QTI5MTA0Njk5MTYxMUVBOTk1NUQ1MEJDNEY5QUUwMi9BaFZRS3FqXzNI SWRmNFQzVE5Cd3QxWTVBQlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxoF2GSEAwlbuRbRzMHL9NqXTKJpGO0nTWpfWgNU4A/wgoZbv32iHJ JjUtzTBeYpNN91v9/VBRCqysH9XrIOviQRxHcxFAaNlWCq8LfFyxqYEAegQR//yX pN4muLD9t1/bYz7JiSf5/thRU4qHSQdpK2kUkjUSN1mu9gxuoo2hPJFh/i2tV+Vg rLMaidcxbsIKd8bTI1YL7/KvMp515hJMCNm4XcG4iFWyJtA0B4hoiaEBzuO98jxm THQDGRSQwnufDzDx0Qwvo6AIoEd78IdM44j3XrXGEMcCvIIQUcYbpJUt0vcDmbIf Asvfasr5VdZ85kVfOAxhm/FL50lvdeTi -----END CERTIFICATE-----Generated at Tue Apr 30 22:56:11 2024 by rpki-client on console-fra.rpki-client.org