$ rpki-client -vvf rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft File: SyWxRyDwREuz1mj5Y1hDVPf6whM.mft (raw, json) Hash identifier: /C+cHkqzurVeg+XPEnNfJ8raAn1sPG8juWysJp8bLMU= Subject key identifier: 21:2B:4A:82:87:13:36:15:38:20:AD:2E:A0:91:66:E0:E0:35:53:F1 Authority key identifier: 4B:25:B1:47:20:F0:44:4B:B3:D6:68:F9:63:58:43:54:F7:FA:C2:13 Certificate issuer: /CN=A91650EA/serialNumber=4B25B14720F0444BB3D668F963584354F7FAC213 Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyWxRyDwREuz1mj5Y1hDVPf6whM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft Manifest number: 26 Signing time: Wed 15 May 2024 08:40:36 +0000 Manifest this update: Wed 15 May 2024 08:40:35 +0000 Manifest next update: Wed 22 May 2024 08:40:35 +0000 Files and hashes: 1: SyWxRyDwREuz1mj5Y1hDVPf6whM.crl (hash: mBi0PiMYpASbAzcKO0svtQWV737PqPoZ1Mq5aXJW/cY=) 2: D0F245E0D76711EE99C72C29C4F9AE02.roa (hash: JK0bPzT8yakMMRyYc7JiDFGO+FB67qkctv2hOGSnM1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.crl rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyWxRyDwREuz1mj5Y1hDVPf6whM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91650EA/serialNumber=4B25B14720F0444BB3D668F963584354F7FAC213 Validity Not Before: May 15 08:40:35 2024 GMT Not After : May 22 08:40:35 2024 GMT Subject: CN=66447503-e695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1e:aa:2c:a9:f9:7e:02:6c:33:bb:d4:f7:ef: ea:cf:e1:d3:6e:06:fa:97:d0:46:37:c9:b8:32:39: 9d:0c:78:10:a7:cd:fa:c7:dd:43:d4:9b:1e:5f:87: a5:a9:56:85:be:fd:d3:0f:3b:56:3d:4b:a2:a1:67: 1b:19:f8:a5:34:13:5f:66:f2:d2:33:15:26:37:59: 9c:22:64:d9:ae:31:69:18:7c:ac:c9:ff:f4:6e:ba: a2:48:cd:59:41:d4:b5:96:a1:cb:d1:5e:1e:97:c1: 79:dc:a8:69:75:79:7b:d0:43:ba:5b:c1:17:c8:a7: ea:9d:6f:cd:30:f6:d6:43:91:8c:6c:fc:db:df:b3: 8d:e8:a0:6f:e4:fb:2e:0e:7e:de:9f:e8:1d:27:9c: f1:30:33:86:e4:a9:a9:28:45:cd:c5:75:bf:58:ab: 4e:0c:98:b2:e0:5f:31:5f:98:25:a3:6c:2b:1a:38: e5:0b:df:96:10:5e:a6:68:57:dd:9c:24:d5:e7:85: 81:3b:f2:73:fb:92:4c:1c:31:e8:c2:ee:69:fb:ce: 9c:fe:fb:3c:3f:4f:e9:71:44:db:ef:c2:7b:ab:8a: 0f:11:9e:be:d0:52:3a:a1:11:1c:d2:c3:4a:44:0d: 08:a2:95:9a:b3:db:f3:2d:3a:a1:8e:a8:20:51:e2: ac:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:2B:4A:82:87:13:36:15:38:20:AD:2E:A0:91:66:E0:E0:35:53:F1 X509v3 Authority Key Identifier: keyid:4B:25:B1:47:20:F0:44:4B:B3:D6:68:F9:63:58:43:54:F7:FA:C2:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyWxRyDwREuz1mj5Y1hDVPf6whM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:ec:45:a5:cc:7f:15:88:52:23:5d:41:80:2e:59:a4:0c:04: ed:1c:7a:90:78:57:ab:f8:38:13:c9:9f:f3:74:98:f1:07:e6: 86:ae:4d:b9:04:b0:cc:f3:8a:09:e2:82:cb:a4:5b:be:5c:a9: eb:49:28:d6:64:a6:8a:f8:1a:74:0d:9b:97:3b:4d:78:9d:f7: 9f:56:9b:74:35:a1:6f:26:29:16:f7:df:cf:85:e6:3e:ac:73: 84:40:87:5e:c7:67:21:f1:22:fb:68:d3:89:e0:24:82:e8:10: 17:17:a4:31:0c:c1:2e:19:48:b1:f5:a1:25:da:cb:39:c0:ad: b8:12:14:b6:9f:81:76:66:05:03:b6:a1:4c:7e:0f:f0:79:d7: a1:1e:1f:5a:6b:c0:63:99:ff:61:d4:a2:d9:9a:95:6a:5e:75: dd:92:24:26:b4:c4:c8:01:d4:bf:fb:6b:e8:52:4f:b2:98:58: a3:2b:19:d3:73:04:e1:a8:2e:54:30:98:3c:d2:b1:fd:02:16: 69:c1:23:4a:05:64:9c:9b:53:64:2c:ef:79:7b:77:be:39:a6: ed:29:6d:d5:41:a6:54:eb:0a:86:54:91:8b:a7:ee:fd:d1:66: 81:0a:46:cf:02:e9:e5:87:e3:ef:1c:c7:f0:ac:26:c2:d1:aa: 02:83:3c:52 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NTBFQTExMC8GA1UEBRMoNEIyNUIxNDcyMEYwNDQ0QkIzRDY2OEY5NjM1ODQzNTRG N0ZBQzIxMzAeFw0yNDA1MTUwODQwMzVaFw0yNDA1MjIwODQwMzVaMBgxFjAUBgNV BAMTDTY2NDQ3NTAzLWU2OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHHqosqfl+Amwzu9T37+rP4dNuBvqX0EY3ybgyOZ0MeBCnzfrH3UPUmx5fh6Wp VoW+/dMPO1Y9S6KhZxsZ+KU0E19m8tIzFSY3WZwiZNmuMWkYfKzJ//RuuqJIzVlB 1LWWocvRXh6XwXncqGl1eXvQQ7pbwRfIp+qdb80w9tZDkYxs/Nvfs43ooG/k+y4O ft6f6B0nnPEwM4bkqakoRc3Fdb9Yq04MmLLgXzFfmCWjbCsaOOUL35YQXqZoV92c JNXnhYE78nP7kkwcMejC7mn7zpz++zw/T+lxRNvvwnurig8Rnr7QUjqhERzSw0pE DQiilZqz2/MtOqGOqCBR4qxDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIStKgocT NhU4IK0uoJFm4OA1U/EwHwYDVR0jBBgwFoAUSyWxRyDwREuz1mj5Y1hDVPf6whMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1MEVBLzUyMUQxQUQ4RDc2 NzExRUVBRjIyQzA2NkM0RjlBRTAyL1N5V3hSeUR3UkV1ejFtajVZMWhEVlBmNndo TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU3lXeFJ5RHdSRXV6MW1qNVkxaERWUGY2d2hNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 MEVBLzUyMUQxQUQ4RDc2NzExRUVBRjIyQzA2NkM0RjlBRTAyL1N5V3hSeUR3UkV1 ejFtajVZMWhEVlBmNndoTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL3sRaXMfxWIUiNdQYAuWaQMBO0cepB4V6v4OBPJn/N0mPEH5oauTbkE sMzzignigsukW75cqetJKNZkpor4GnQNm5c7TXid959Wm3Q1oW8mKRb338+F5j6s c4RAh17HZyHxIvto04ngJILoEBcXpDEMwS4ZSLH1oSXayznArbgSFLafgXZmBQO2 oUx+D/B516EeH1prwGOZ/2HUotmalWpedd2SJCa0xMgB1L/7a+hST7KYWKMrGdNz BOGoLlQwmDzSsf0CFmnBI0oFZJybU2Qs73l7d745pu0pbdVBplTrCoZUkYun7v3R ZoEKRs8C6eWH4+8cx/CsJsLRqgKDPFI= -----END CERTIFICATE-----Generated at Wed May 15 09:27:33 2024 by rpki-client on console-fra.rpki-client.org