$ rpki-client -vvf rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft File: 1cBKCsLVKt_nBVZHjcsOHYHtENo.mft (raw, json) Hash identifier: PdXhtHvXvmZp9ShWiz+7BiRJyx+XHq7kfV2HZSAGzTg= Subject key identifier: A8:3A:35:6C:DC:3E:75:A3:D9:2D:4F:27:40:05:DA:83:0C:3A:4C:C1 Authority key identifier: D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA Certificate issuer: /CN=A91284EC/serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA Certificate serial: 03AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft Manifest number: 03A8 Signing time: Wed 01 May 2024 02:51:58 +0000 Manifest this update: Wed 01 May 2024 02:51:57 +0000 Manifest next update: Wed 08 May 2024 02:51:57 +0000 Files and hashes: 1: 1cBKCsLVKt_nBVZHjcsOHYHtENo.crl (hash: xlGFiOzMhtyEzdPrUSZsucylGwHxmVuN88zIq3F7IXA=) 2: F11B4C14E40111ECBD78E571C4F9AE02.roa (hash: B6bsAdjQpVZ8XXCOdbfvTf1Rwb2VTQvhx2gqi0eSWHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 02:39:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 941 (0x3ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91284EC/serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA Validity Not Before: May 1 02:51:57 2024 GMT Not After : May 8 02:51:57 2024 GMT Subject: CN=6631ae4d-b4a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:48:11:26:e1:b4:53:6b:73:0d:f9:3b:6a:20: a3:74:9a:7e:29:3b:96:52:6f:e7:63:f1:42:93:43: 7d:06:b9:04:69:83:02:4b:05:80:b7:86:4f:f4:b7: 9d:f9:a5:8b:f6:92:1b:bb:eb:48:84:e8:fa:39:90: 5a:e3:73:06:ec:0e:9f:59:fd:17:04:4a:f0:71:3d: 7d:39:82:ae:24:2a:07:61:46:7d:0c:10:2e:14:8e: 63:18:80:8e:f8:71:f9:18:cf:55:08:a2:f1:ab:5c: b9:13:dd:a8:68:14:f0:12:93:2f:49:07:f7:16:96: 7d:f7:77:79:39:53:85:b4:81:94:23:d0:4d:8a:65: 23:ec:21:f2:af:4a:be:01:a6:a9:55:ec:c1:aa:a4: 04:e2:a8:af:a1:62:03:5a:7f:52:e6:b1:0d:59:90: 9f:99:2b:fd:5e:3a:3c:aa:3a:97:ff:ee:3f:38:27: d6:ce:a7:fd:da:d3:81:95:6e:8c:f3:61:cb:3d:7b: 49:c9:25:68:1b:5b:1d:c6:53:fa:78:fa:a5:35:c7: 78:f5:01:94:67:0b:34:bf:92:02:96:68:fb:68:4e: 09:96:c4:45:68:61:36:67:00:78:63:29:b2:dc:ef: 67:5b:99:fd:98:d4:17:b2:e9:3d:62:8f:57:09:39: 1d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:3A:35:6C:DC:3E:75:A3:D9:2D:4F:27:40:05:DA:83:0C:3A:4C:C1 X509v3 Authority Key Identifier: keyid:D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:fd:87:87:d5:3a:46:80:fe:eb:0e:38:5e:d3:b5:9b:34:2b: 39:fa:65:6d:fe:c8:8e:09:32:aa:94:8e:78:83:59:cf:8d:49: 39:82:00:19:13:1a:a3:c5:a4:db:7b:a5:4d:3d:68:ab:a2:a7: 06:58:b6:29:5a:64:1e:6e:68:ee:e8:8b:27:6e:4a:fc:06:17: 59:e9:5d:9f:43:94:be:90:69:1a:c7:75:4c:51:17:f9:89:a8: b7:28:e7:3f:25:b1:00:44:73:51:aa:4d:c0:c2:1f:97:62:00: 23:56:f1:cf:c3:6d:81:39:e0:71:ae:ce:38:44:cb:e8:6c:03: c1:e9:e6:09:a2:79:47:9e:c7:7e:ad:fc:86:84:e5:7a:6d:f9: 66:4e:b6:5c:76:2f:e6:b5:c2:4f:4d:f6:ff:77:3e:ef:18:ad: 6c:9b:f2:8c:0c:09:03:98:65:b7:de:57:c6:21:94:f2:f4:d2: 26:58:00:b6:79:7b:26:fd:01:32:85:ac:87:fe:6d:c8:3c:d2: de:f3:36:3e:7b:79:9e:d7:10:2a:a2:20:b9:3b:fd:fd:57:e4: 01:88:27:3d:30:96:38:60:21:ad:e4:8f:78:b1:8a:65:4a:82: bc:8d:dd:45:b8:11:dc:84:a2:84:0f:89:26:db:83:ad:bd:6f: cc:e9:5d:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg0RUMxMTAvBgNVBAUTKEQ1QzA0QTBBQzJENTJBREZFNzA1NTY0NzhEQ0IwRTFE ODFFRDEwREEwHhcNMjQwNTAxMDI1MTU3WhcNMjQwNTA4MDI1MTU3WjAYMRYwFAYD VQQDEw02NjMxYWU0ZC1iNGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAykgRJuG0U2tzDfk7aiCjdJp+KTuWUm/nY/FCk0N9BrkEaYMCSwWAt4ZP9Led +aWL9pIbu+tIhOj6OZBa43MG7A6fWf0XBErwcT19OYKuJCoHYUZ9DBAuFI5jGICO +HH5GM9VCKLxq1y5E92oaBTwEpMvSQf3FpZ993d5OVOFtIGUI9BNimUj7CHyr0q+ AaapVezBqqQE4qivoWIDWn9S5rENWZCfmSv9Xjo8qjqX/+4/OCfWzqf92tOBlW6M 82HLPXtJySVoG1sdxlP6ePqlNcd49QGUZws0v5IClmj7aE4JlsRFaGE2ZwB4Yymy 3O9nW5n9mNQXsuk9Yo9XCTkdvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKg6NWzc PnWj2S1PJ0AF2oMMOkzBMB8GA1UdIwQYMBaAFNXASgrC1Srf5wVWR43LDh2B7RDa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODRFQy9FQkY2MDFGQzQ4 Q0YxMUVDQTY2NkIwM0VDNEY5QUUwMi8xY0JLQ3NMVkt0X25CVlpIamNzT0hZSHRF Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFjQktDc0xWS3RfbkJWWkhqY3NPSFlIdEVOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODRFQy9FQkY2MDFGQzQ4Q0YxMUVDQTY2NkIwM0VDNEY5QUUwMi8xY0JLQ3NMVkt0 X25CVlpIamNzT0hZSHRFTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBT/YeH1TpGgP7rDjhe07WbNCs5+mVt/siOCTKqlI54g1nPjUk5ggAZ ExqjxaTbe6VNPWiroqcGWLYpWmQebmju6Isnbkr8BhdZ6V2fQ5S+kGkax3VMURf5 iai3KOc/JbEARHNRqk3Awh+XYgAjVvHPw22BOeBxrs44RMvobAPB6eYJonlHnsd+ rfyGhOV6bflmTrZcdi/mtcJPTfb/dz7vGK1sm/KMDAkDmGW33lfGIZTy9NImWAC2 eXsm/QEyhayH/m3IPNLe8zY+e3me1xAqoiC5O/39V+QBiCc9MJY4YCGt5I94sYpl SoK8jd1FuBHchKKED4km24OtvW/M6V27 -----END CERTIFICATE-----Generated at Wed May 1 03:20:30 2024 by rpki-client on console-fra.rpki-client.org