$ rpki-client -vvf rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft File: a5tdFBgYlY1zBFgvJU6hddhD4_0.mft (raw, json) Hash identifier: PlUUOCev1xzkBkHAv0lrYQGGyZCtY6cWnPYU2tkjmsM= Subject key identifier: 39:92:AF:F5:45:52:88:F4:93:C7:C8:6A:34:55:D2:E4:04:DB:16:A1 Authority key identifier: 6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD Certificate issuer: /CN=A91359CD/serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD Certificate serial: 08FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft Manifest number: 08F7 Signing time: Sat 04 May 2024 21:27:47 +0000 Manifest this update: Sat 04 May 2024 21:27:47 +0000 Manifest next update: Sat 11 May 2024 21:27:47 +0000 Files and hashes: 1: a5tdFBgYlY1zBFgvJU6hddhD4_0.crl (hash: 07/hfdICe+7DnjecFEqi/rzs9FQsTsbhfhJ1TUtHQXQ=) 2: 8F467E0082DD11EABD325010C4F9AE02.roa (hash: 8UoETv43NCbg359unaKa056KSfIsJT8AiDvuudbYvko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2301 (0x8fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91359CD/serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD Validity Not Before: May 4 21:27:47 2024 GMT Not After : May 11 21:27:47 2024 GMT Subject: CN=6636a853-3e73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7d:30:35:0d:40:8a:de:c6:e3:13:86:f9:d6: 3b:b8:66:69:57:84:fc:6c:00:17:c7:6f:95:0d:17: 31:3e:bc:7a:4c:64:2f:67:f2:16:ac:15:52:54:17: c4:cd:9b:9c:b4:e4:e8:b1:43:c0:39:04:9a:b2:bb: 80:a3:f7:15:e2:0d:5d:91:29:f4:3c:bf:c4:aa:de: 15:b8:99:b2:09:d1:c7:62:6b:d5:b6:5b:39:e7:f0: 5a:70:5e:11:6e:b6:be:b0:9b:2c:8b:b6:d0:17:b9: 47:9a:c6:2b:30:8f:36:9a:c2:2b:5b:96:01:c1:17: 12:b0:be:a4:d3:08:c1:9d:bd:b0:dc:f0:8e:e6:f0: db:6b:40:ae:f1:4a:3c:69:42:81:c0:23:82:a4:bb: cb:13:79:d3:7f:e8:d8:7a:0b:c7:9e:bf:3d:31:41: 73:a6:82:39:1d:73:7f:eb:71:d2:51:fc:f6:2f:f6: f9:17:aa:3c:47:8c:ba:c3:3a:0c:4d:a3:45:5a:1a: 1e:f8:f2:03:17:75:7a:13:ac:60:01:a0:ad:97:bf: 23:02:b4:cd:e2:f2:ef:98:58:9b:7f:c2:bc:e5:fa: 11:65:f9:fc:a7:75:7c:e6:20:c5:5f:70:84:2c:9d: ec:e7:49:f0:15:43:78:80:ce:aa:3e:42:2a:cb:af: b3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:92:AF:F5:45:52:88:F4:93:C7:C8:6A:34:55:D2:E4:04:DB:16:A1 X509v3 Authority Key Identifier: keyid:6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:32:8f:48:62:3e:6b:1f:51:1b:de:f6:35:e1:c2:11:ff:fb: ee:a5:a1:b6:be:c8:84:c0:bd:27:80:2e:35:a1:d6:a7:3a:d5: 6e:15:4a:40:33:05:75:49:f1:09:0e:6f:82:9b:d0:2b:e4:c5: a8:c7:d4:c9:eb:a9:7d:01:9d:11:9f:09:35:3f:ee:cc:6c:5c: 89:85:54:85:25:c9:cb:69:aa:c3:03:99:95:33:b9:5e:05:00: 21:e6:6a:2b:2f:c8:5c:eb:48:50:35:82:12:a1:c2:64:1f:49: da:e5:9a:77:71:14:06:f9:01:07:48:50:cf:b3:c5:04:a0:07: c5:67:ca:f2:ac:0b:ff:ab:b9:1b:ee:a7:84:f6:d4:e3:44:2d: 3d:f6:e4:75:3c:1e:8e:ac:55:fb:44:5a:1a:0e:47:76:4a:70: a9:bc:ee:06:cd:d0:dc:83:65:a7:85:b9:e7:44:d5:0d:d2:f9: 72:08:b2:1f:5c:60:56:52:2a:86:fa:8b:56:7e:19:71:55:93: 46:6b:97:e1:8c:18:21:e2:ca:09:1d:00:27:27:45:d7:1a:f0: 89:21:cd:1b:eb:17:49:9a:cf:3d:49:c1:d6:75:62:4c:1f:17: a3:aa:88:06:d2:e3:bf:04:d3:66:b9:eb:4f:68:6d:5d:2d:1d: 16:7a:a0:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU5Q0QxMTAvBgNVBAUTKDZCOUI1RDE0MTgxODk1OEQ3MzA0NTgyRjI1NEVBMTc1 RDg0M0UzRkQwHhcNMjQwNTA0MjEyNzQ3WhcNMjQwNTExMjEyNzQ3WjAYMRYwFAYD VQQDEw02NjM2YTg1My0zZTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5H0wNQ1Ait7G4xOG+dY7uGZpV4T8bAAXx2+VDRcxPrx6TGQvZ/IWrBVSVBfE zZuctOTosUPAOQSasruAo/cV4g1dkSn0PL/Eqt4VuJmyCdHHYmvVtls55/BacF4R bra+sJssi7bQF7lHmsYrMI82msIrW5YBwRcSsL6k0wjBnb2w3PCO5vDba0Cu8Uo8 aUKBwCOCpLvLE3nTf+jYegvHnr89MUFzpoI5HXN/63HSUfz2L/b5F6o8R4y6wzoM TaNFWhoe+PIDF3V6E6xgAaCtl78jArTN4vLvmFibf8K85foRZfn8p3V85iDFX3CE LJ3s50nwFUN4gM6qPkIqy6+zBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmSr/VF Uoj0k8fIajRV0uQE2xahMB8GA1UdIwQYMBaAFGubXRQYGJWNcwRYLyVOoXXYQ+P9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTlDRC8xODVGRkMyODgy REIxMUVBQUMyQ0Q2MEFDNEY5QUUwMi9hNXRkRkJnWWxZMXpCRmd2SlU2aGRkaEQ0 XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E1dGRGQmdZbFkxekJGZ3ZKVTZoZGRoRDRfMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTlDRC8xODVGRkMyODgyREIxMUVBQUMyQ0Q2MEFDNEY5QUUwMi9hNXRkRkJnWWxZ MXpCRmd2SlU2aGRkaEQ0XzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABMo9IYj5rH1Eb3vY14cIR//vupaG2vsiEwL0ngC41odanOtVuFUpA MwV1SfEJDm+Cm9Ar5MWox9TJ66l9AZ0Rnwk1P+7MbFyJhVSFJcnLaarDA5mVM7le BQAh5morL8hc60hQNYISocJkH0na5Zp3cRQG+QEHSFDPs8UEoAfFZ8ryrAv/q7kb 7qeE9tTjRC099uR1PB6OrFX7RFoaDkd2SnCpvO4GzdDcg2WnhbnnRNUN0vlyCLIf XGBWUiqG+otWfhlxVZNGa5fhjBgh4soJHQAnJ0XXGvCJIc0b6xdJms89ScHWdWJM HxejqogG0uO/BNNmuetPaG1dLR0WeqD+ -----END CERTIFICATE-----Generated at Sun May 5 00:12:21 2024 by rpki-client on console-fra.rpki-client.org