$ rpki-client -vvf rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft File: B04WzKCA1UX-9PLYrcuQnw7LIKI.mft (raw, json) Hash identifier: p7Zl5sWB7Hev7kUqjdlBGBMZqXTy9Iwdx09kMSGjz7o= Subject key identifier: 8C:83:44:5E:90:EC:CD:BA:0C:DB:46:B2:A9:84:8C:B7:2D:2B:3C:43 Authority key identifier: 07:4E:16:CC:A0:80:D5:45:FE:F4:F2:D8:AD:CB:90:9F:0E:CB:20:A2 Certificate issuer: /CN=A91655EF/serialNumber=074E16CCA080D545FEF4F2D8ADCB909F0ECB20A2 Certificate serial: 10F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft Manifest number: 10D7 Signing time: Tue 30 Apr 2024 18:07:07 +0000 Manifest this update: Tue 30 Apr 2024 18:07:06 +0000 Manifest next update: Tue 07 May 2024 18:07:06 +0000 Files and hashes: 1: B04WzKCA1UX-9PLYrcuQnw7LIKI.crl (hash: JXCVnQ3MBA30uGR9eflX0u0uM1TczGQ/HtZ6SjGi7zw=) 2: 70F8E50039AF11EE8486453DC4F9AE02.roa (hash: P1PXKxb5YOY8BpDSu1o3skcs/Ukvr/AZNNjHU7y8sT8=) 3: BA1EA120E6FC11EE96775810C4F9AE02.roa (hash: A5fAuFOfiGUQaeu45xBTYCW02QdZE5mmyPLZM+zs/1w=) 4: FEDDF63AE6FC11EE8AD61644C4F9AE02.roa (hash: 7HrlYeJwAUge6HN9R5M1sm7+xrjvlVoJATUKHYifHl0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.crl rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 18:07:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4337 (0x10f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91655EF/serialNumber=074E16CCA080D545FEF4F2D8ADCB909F0ECB20A2 Validity Not Before: Apr 30 18:07:06 2024 GMT Not After : May 7 18:07:06 2024 GMT Subject: CN=6631334b-4e2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:78:0a:ce:14:76:38:d8:50:c6:cb:d7:2a:f6: 1a:54:3d:42:f0:5b:8c:fb:75:a5:78:e8:31:52:13: 13:d9:ca:37:da:59:fb:57:a5:9f:1d:19:88:20:49: 8a:7b:68:18:59:2c:55:2f:37:8d:3c:96:b5:f2:b0: 3f:eb:85:03:f6:33:86:21:30:06:90:cc:b7:33:32: a9:d9:c8:58:d0:5e:32:0f:74:7d:71:5c:41:29:71: c9:4c:10:95:bc:8e:eb:59:24:39:0d:31:ae:21:8e: 5f:77:ef:e4:97:e4:1c:e6:aa:3d:e0:71:1f:47:27: 83:0b:77:b6:89:bb:90:b1:b1:12:7b:5d:b5:1e:52: b7:e4:8d:a4:29:c4:5c:5d:5c:a3:3c:70:a5:0c:8f: 6e:71:9a:c1:97:23:00:f8:f9:49:06:d6:49:27:83: 88:1e:b6:8f:59:61:11:19:b6:9c:bc:39:e7:3a:40: 07:21:4a:d8:f8:48:d9:41:3c:24:f5:36:fa:b6:44: 43:13:3d:67:40:c2:48:32:7b:44:49:0a:07:c1:5b: cc:73:fe:07:17:8c:ac:5b:fb:ad:79:15:f2:91:df: 1d:6d:f5:00:a2:84:aa:97:47:5d:1c:ca:80:02:51: 9c:fe:e0:c4:c1:df:4e:2e:4d:7d:f9:9a:09:d6:2a: 2d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:83:44:5E:90:EC:CD:BA:0C:DB:46:B2:A9:84:8C:B7:2D:2B:3C:43 X509v3 Authority Key Identifier: keyid:07:4E:16:CC:A0:80:D5:45:FE:F4:F2:D8:AD:CB:90:9F:0E:CB:20:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:27:8c:53:37:63:3e:6f:0e:a9:a9:cc:fd:2a:0c:38:7b:9f: 42:a2:83:c1:19:ec:b9:c9:9e:57:d6:b5:15:fe:16:0b:3a:78: 02:09:f4:69:8a:e2:73:6f:82:4f:68:ad:60:52:ca:1c:56:e1: f6:4a:6b:e0:ea:26:55:90:f2:83:ba:c2:39:de:10:a4:f5:4f: bb:14:04:49:b4:c3:b4:e2:88:8f:c7:78:8e:ba:4d:86:39:21: 25:f3:37:f1:2c:1c:eb:c2:f0:fb:d5:42:28:cd:98:d5:29:37: 52:81:8e:a2:2d:d2:9f:85:e8:b6:6d:b7:5e:a1:7f:fc:e6:0d: 88:f5:56:dc:04:65:1b:42:95:54:92:8a:37:77:7f:da:79:ab: 3c:43:fb:a7:0f:fd:5f:a2:f7:72:7a:97:81:0d:c0:e2:66:cf: d2:17:cb:50:54:7d:5a:9e:a3:90:b0:d9:68:11:fb:98:70:2c: c1:25:fe:0c:75:5c:69:2a:b7:b8:07:08:91:ec:94:83:20:29: 8a:99:cc:11:34:04:fd:05:2b:33:03:a3:7f:c1:69:ff:79:14: f2:6c:b2:54:25:36:f6:d3:57:54:96:a6:51:37:dd:d9:91:fa: 53:06:7d:8e:af:7e:d4:a7:53:5d:f7:ca:d7:90:49:1a:01:6b: 02:fb:7e:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU1RUYxMTAvBgNVBAUTKDA3NEUxNkNDQTA4MEQ1NDVGRUY0RjJEOEFEQ0I5MDlG MEVDQjIwQTIwHhcNMjQwNDMwMTgwNzA2WhcNMjQwNTA3MTgwNzA2WjAYMRYwFAYD VQQDEw02NjMxMzM0Yi00ZTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq3gKzhR2ONhQxsvXKvYaVD1C8FuM+3WleOgxUhMT2co32ln7V6WfHRmIIEmK e2gYWSxVLzeNPJa18rA/64UD9jOGITAGkMy3MzKp2chY0F4yD3R9cVxBKXHJTBCV vI7rWSQ5DTGuIY5fd+/kl+Qc5qo94HEfRyeDC3e2ibuQsbESe121HlK35I2kKcRc XVyjPHClDI9ucZrBlyMA+PlJBtZJJ4OIHraPWWERGbacvDnnOkAHIUrY+EjZQTwk 9Tb6tkRDEz1nQMJIMntESQoHwVvMc/4HF4ysW/uteRXykd8dbfUAooSql0ddHMqA AlGc/uDEwd9OLk19+ZoJ1iotXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIyDRF6Q 7M26DNtGsqmEjLctKzxDMB8GA1UdIwQYMBaAFAdOFsyggNVF/vTy2K3LkJ8OyyCi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTVFRi82MDc3MjlEMEZB QzExMUU4QkM3NkQ2NzFDNEY5QUUwMi9CMDRXektDQTFVWC05UExZcmN1UW53N0xJ S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0IwNFd6S0NBMVVYLTlQTFlyY3VRbnc3TElLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTVFRi82MDc3MjlEMEZBQzExMUU4QkM3NkQ2NzFDNEY5QUUwMi9CMDRXektDQTFV WC05UExZcmN1UW53N0xJS0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjJ4xTN2M+bw6pqcz9Kgw4e59CooPBGey5yZ5X1rUV/hYLOngCCfRp iuJzb4JPaK1gUsocVuH2Smvg6iZVkPKDusI53hCk9U+7FARJtMO04oiPx3iOuk2G OSEl8zfxLBzrwvD71UIozZjVKTdSgY6iLdKfhei2bbdeoX/85g2I9VbcBGUbQpVU koo3d3/aeas8Q/unD/1fovdyepeBDcDiZs/SF8tQVH1anqOQsNloEfuYcCzBJf4M dVxpKre4BwiR7JSDICmKmcwRNAT9BSszA6N/wWn/eRTybLJUJTb201dUlqZRN93Z kfpTBn2Or37Up1Nd98rXkEkaAWsC+355 -----END CERTIFICATE-----Generated at Tue Apr 30 18:57:01 2024 by rpki-client on console-fra.rpki-client.org