$ rpki-client -vvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft File: nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft (raw, json) Hash identifier: nbYgMcSNhMJbBQVS0BbzGHPXBpKF4VX6DGrpEXgA7Fo= Subject key identifier: C5:71:05:9D:03:72:6F:C4:54:97:2A:1F:F0:B8:84:6D:40:6C:C7:58 Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82 Certificate issuer: /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82 Certificate serial: 03F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft Manifest number: 03E9 Signing time: Wed 01 May 2024 02:34:17 +0000 Manifest this update: Wed 01 May 2024 02:34:16 +0000 Manifest next update: Wed 08 May 2024 02:34:16 +0000 Files and hashes: 1: nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl (hash: tsXFpWx4gyX2K7/p0FFIiWl//oQgsb3QppgMZuUVOOQ=) 2: 0204FD5A2E5311EC9FD3C928C4F9AE02.roa (hash: 7PE7DYYa7meRaR1aaNr3FRKTsIxNAK1UDss4nQGKt8k=) 3: 014716782E5311EC9FD3C928C4F9AE02.roa (hash: vYX/mXqW7tRyk42X98q6fB7ee7kEQJjYwejvp7KCkiM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 02:34:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1008 (0x3f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82 Validity Not Before: May 1 02:34:16 2024 GMT Not After : May 8 02:34:16 2024 GMT Subject: CN=6631aa28-373d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fd:e0:0f:a4:54:3c:91:31:45:ea:1e:3c:ba: d9:63:00:a7:3b:02:21:e2:b2:19:98:a8:8e:d0:ee: 48:5b:24:df:f0:b0:f4:bd:b4:8d:b4:ae:42:1b:1d: 98:c4:45:bc:a1:26:11:78:17:b9:6f:86:11:93:95: 5b:d2:bc:e1:e1:8f:92:05:8d:df:9b:b0:f5:dc:65: f8:9b:c1:c8:4f:a8:81:a6:f0:f9:4e:a1:54:d9:38: 25:5c:41:7d:f2:32:86:c8:77:9c:35:85:77:87:da: 76:7d:65:0a:b1:12:f7:c7:67:4a:6d:e1:82:1f:11: e5:b8:3e:d9:d3:d1:bb:f0:96:67:63:7b:0e:07:0a: 8f:66:c2:53:37:32:f7:95:67:8c:ef:7c:68:92:9b: 08:e4:5b:1e:aa:8a:96:62:5e:43:fe:ec:d3:be:03: 35:f3:c9:d7:5b:f3:6f:bb:69:19:54:01:4b:e8:16: a2:50:5c:52:45:4a:f9:47:1e:01:0e:d6:c1:b4:2c: fe:b3:48:27:b6:96:68:8d:53:26:5c:f7:60:d0:07: fa:4e:8e:c3:2b:1b:6a:14:cd:5e:c2:17:a7:d8:4a: e5:2a:bc:28:59:e1:39:21:9b:9e:83:08:13:18:19: af:fa:4c:75:9b:26:7c:41:23:97:d2:04:e8:97:4f: 18:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:71:05:9D:03:72:6F:C4:54:97:2A:1F:F0:B8:84:6D:40:6C:C7:58 X509v3 Authority Key Identifier: keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:0e:b3:de:83:48:e3:de:92:7e:0b:eb:85:03:51:6f:13:3d: cd:f5:fa:bf:60:c6:e9:23:0c:86:76:d5:58:bb:d1:ec:52:33: b4:ca:8c:6d:42:be:97:b5:c4:a6:70:d3:52:5a:bb:40:40:25: aa:74:5b:26:b9:13:04:65:21:c0:76:7b:77:34:1d:45:cb:35: 39:44:ed:69:ef:94:a0:46:2a:fe:77:df:6a:22:68:69:e0:64: c2:10:73:f7:78:df:ba:bf:ce:86:84:dc:96:e3:cb:b0:39:ec: ce:e8:59:04:64:f4:dd:ce:d3:ca:82:fc:cb:51:39:46:b7:ad: db:68:bd:79:65:8c:01:6c:85:b7:4d:22:b1:58:28:78:e9:e3: a0:86:00:6c:6c:f9:37:51:d4:66:ed:fc:cc:3d:e5:89:36:a0: ac:fb:11:f6:17:05:56:20:84:3a:a1:4a:f2:98:6c:12:3a:82: 53:c3:c9:20:2a:46:ac:c1:55:39:e5:06:b8:61:d7:2c:02:85: e8:d9:3a:66:41:de:9f:3f:04:b5:77:65:da:fa:b1:f6:15:b7: 4a:70:1f:6e:93:94:0e:37:98:04:fb:9e:62:74:e7:1f:f5:f6: 31:0c:d9:4e:e5:d5:33:8f:37:bc:e2:14:14:7c:8c:f5:a8:01: 2d:3a:3d:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg4RDQxMTAvBgNVBAUTKDlDOEFFM0RDN0IwNUIzODUzOTY3OTBDQTczMjNEM0Ew OTA2RkVEODIwHhcNMjQwNTAxMDIzNDE2WhcNMjQwNTA4MDIzNDE2WjAYMRYwFAYD VQQDEw02NjMxYWEyOC0zNzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzv3gD6RUPJExReoePLrZYwCnOwIh4rIZmKiO0O5IWyTf8LD0vbSNtK5CGx2Y xEW8oSYReBe5b4YRk5Vb0rzh4Y+SBY3fm7D13GX4m8HIT6iBpvD5TqFU2TglXEF9 8jKGyHecNYV3h9p2fWUKsRL3x2dKbeGCHxHluD7Z09G78JZnY3sOBwqPZsJTNzL3 lWeM73xokpsI5FseqoqWYl5D/uzTvgM188nXW/Nvu2kZVAFL6BaiUFxSRUr5Rx4B DtbBtCz+s0gntpZojVMmXPdg0Af6To7DKxtqFM1ewhen2ErlKrwoWeE5IZuegwgT GBmv+kx1myZ8QSOX0gTol08YeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMVxBZ0D cm/EVJcqH/C4hG1AbMdYMB8GA1UdIwQYMBaAFJyK49x7BbOFOWeQynMj06CQb+2C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODhENC8yRjU4RTQ3MjJF NTAxMUVDQTA0QjZDMjVDNEY5QUUwMi9uSXJqM0hzRnM0VTVaNURLY3lQVG9KQnY3 WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25JcmozSHNGczRVNVo1REtjeVBUb0pCdjdZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODhENC8yRjU4RTQ3MjJFNTAxMUVDQTA0QjZDMjVDNEY5QUUwMi9uSXJqM0hzRnM0 VTVaNURLY3lQVG9KQnY3WUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6DrPeg0jj3pJ+C+uFA1FvEz3N9fq/YMbpIwyGdtVYu9HsUjO0yoxt Qr6XtcSmcNNSWrtAQCWqdFsmuRMEZSHAdnt3NB1FyzU5RO1p75SgRir+d99qImhp 4GTCEHP3eN+6v86GhNyW48uwOezO6FkEZPTdztPKgvzLUTlGt63baL15ZYwBbIW3 TSKxWCh46eOghgBsbPk3UdRm7fzMPeWJNqCs+xH2FwVWIIQ6oUrymGwSOoJTw8kg KkaswVU55Qa4YdcsAoXo2TpmQd6fPwS1d2Xa+rH2FbdKcB9uk5QON5gE+55idOcf 9fYxDNlO5dUzjze84hQUfIz1qAEtOj2H -----END CERTIFICATE-----Generated at Wed May 1 03:20:32 2024 by rpki-client on console-fra.rpki-client.org