$ rpki-client -vvf rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft File: 0dZcikMk4of26pFbOfXTYC0eN6Y.mft (raw, json) Hash identifier: GVs1IBYxHJL2yudvS3VP8qpjUD6RegUQTa/h+OUUuwQ= Subject key identifier: CE:FC:56:D7:FD:B4:C9:1E:82:29:E2:A3:C9:C9:FD:D0:60:8B:D6:F1 Authority key identifier: D1:D6:5C:8A:43:24:E2:87:F6:EA:91:5B:39:F5:D3:60:2D:1E:37:A6 Certificate issuer: /CN=A91743EF/serialNumber=D1D65C8A4324E287F6EA915B39F5D3602D1E37A6 Certificate serial: 1744 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft Manifest number: 1734 Signing time: Thu 02 May 2024 17:07:47 +0000 Manifest this update: Thu 02 May 2024 17:07:46 +0000 Manifest next update: Thu 09 May 2024 17:07:46 +0000 Files and hashes: 1: 0dZcikMk4of26pFbOfXTYC0eN6Y.crl (hash: 91X1R5nGx+qg1hBG1Q0gwJSrzBBbZ6yzgDbjHZ34LTg=) 2: 8B2EE9667A0911EE934F1262C4F9AE02.roa (hash: k9iCQXzhjwfzVaU7vow/nBOXFL+lk5IPY/l7RxNnfPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.crl rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 16:51:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5956 (0x1744) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91743EF/serialNumber=D1D65C8A4324E287F6EA915B39F5D3602D1E37A6 Validity Not Before: May 2 17:07:46 2024 GMT Not After : May 9 17:07:46 2024 GMT Subject: CN=6633c863-9e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:60:55:bb:d4:04:d1:42:e5:d0:d4:2b:51:4d: 16:cc:89:92:7a:ae:2a:cf:5e:23:63:42:76:c3:55: 5b:ae:0c:09:a8:e2:44:13:bb:c0:df:a3:a1:1e:c7: b0:fd:42:96:ed:c1:fd:f8:f4:4a:28:55:2d:e7:4e: 32:0a:ec:51:8a:6a:b6:f4:9e:5d:bf:13:e0:b0:bb: 9b:97:8c:21:b1:0f:31:ff:86:9b:5b:0e:ce:99:ea: 23:8f:99:aa:fa:62:25:1a:8b:49:c8:9e:8d:b1:34: 6d:d3:a3:ec:05:b1:a9:15:42:f4:e4:25:be:59:b0: d8:55:81:54:4b:66:87:c4:e7:96:c9:bf:e0:8a:2c: 81:80:f9:64:97:67:40:3c:2f:7a:1d:df:a3:dd:f2: c7:17:e7:04:a4:6d:1c:39:9b:20:e2:eb:b1:f3:16: 2f:be:2f:99:72:f4:53:9e:e6:6e:4a:97:4a:b7:1b: 74:81:97:32:43:7b:5b:f5:5c:d6:6d:ac:63:fe:35: d7:cc:ba:86:60:ce:ff:16:c4:22:a4:95:58:05:6f: 7f:b7:4a:e3:0e:a5:64:8b:bc:69:e5:12:e6:88:0e: e4:f0:9a:5f:b2:b8:aa:ce:3c:fb:e3:8d:fe:f3:d9: 2b:74:20:29:6f:ca:35:2f:9f:20:7e:de:b9:e9:9e: c0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:FC:56:D7:FD:B4:C9:1E:82:29:E2:A3:C9:C9:FD:D0:60:8B:D6:F1 X509v3 Authority Key Identifier: keyid:D1:D6:5C:8A:43:24:E2:87:F6:EA:91:5B:39:F5:D3:60:2D:1E:37:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:dc:9b:b3:39:57:f7:70:18:64:70:47:3b:82:c9:3c:e8:9e: 99:37:67:23:46:fe:3e:b7:6c:37:ee:47:e3:86:a6:ac:9d:b4: 80:c0:2c:fd:83:99:a4:4c:9c:6c:a7:ff:fc:86:82:59:45:f2: fb:2b:bd:33:3e:50:41:fd:08:ff:b5:79:81:1d:30:ba:0b:73: 02:96:a6:35:f3:14:7f:0b:e4:eb:75:f6:9c:b4:4a:f6:75:fa: 48:ad:65:87:2a:13:ec:94:42:6a:00:96:09:01:7b:0e:6d:79: af:ba:1d:c6:b9:aa:7d:09:d9:52:9c:d4:fe:06:3f:62:69:23: eb:4e:90:a3:af:73:8f:1a:ca:2f:61:f8:33:85:a5:a5:a9:ff: bf:0a:fd:7b:3a:6d:df:42:4d:77:6c:9e:41:02:2e:e0:75:fa: 79:81:6d:cf:f7:0f:f7:f4:cf:a0:8c:1c:75:b4:6d:99:0b:08: 6e:0a:d3:1e:55:aa:73:4a:8d:97:29:2e:af:37:50:fe:98:cf: c5:f6:5e:99:94:e0:a2:df:05:d0:27:7f:2b:1a:31:e4:4e:2e: 0c:83:cb:1e:01:09:af:47:ad:97:77:cd:09:d0:93:c2:0b:de: 91:a5:00:e3:72:cf:36:8b:64:f4:2f:18:6d:f6:02:fa:12:f0: cc:22:2a:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQzRUYxMTAvBgNVBAUTKEQxRDY1QzhBNDMyNEUyODdGNkVBOTE1QjM5RjVEMzYw MkQxRTM3QTYwHhcNMjQwNTAyMTcwNzQ2WhcNMjQwNTA5MTcwNzQ2WjAYMRYwFAYD VQQDEw02NjMzYzg2My05ZTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnGBVu9QE0ULl0NQrUU0WzImSeq4qz14jY0J2w1VbrgwJqOJEE7vA36OhHsew /UKW7cH9+PRKKFUt504yCuxRimq29J5dvxPgsLubl4whsQ8x/4abWw7Omeojj5mq +mIlGotJyJ6NsTRt06PsBbGpFUL05CW+WbDYVYFUS2aHxOeWyb/giiyBgPlkl2dA PC96Hd+j3fLHF+cEpG0cOZsg4uux8xYvvi+ZcvRTnuZuSpdKtxt0gZcyQ3tb9VzW baxj/jXXzLqGYM7/FsQipJVYBW9/t0rjDqVki7xp5RLmiA7k8Jpfsriqzjz7443+ 89krdCApb8o1L58gft656Z7AEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM78Vtf9 tMkeginio8nJ/dBgi9bxMB8GA1UdIwQYMBaAFNHWXIpDJOKH9uqRWzn102AtHjem MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDNFRi9FNkFCQjAxMEJB NDAxMUU3QTA4RDI2NkZDNEY5QUUwMi8wZFpjaWtNazRvZjI2cEZiT2ZYVFlDMGVO NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBkWmNpa01rNG9mMjZwRmJPZlhUWUMwZU42WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDNFRi9FNkFCQjAxMEJBNDAxMUU3QTA4RDI2NkZDNEY5QUUwMi8wZFpjaWtNazRv ZjI2cEZiT2ZYVFlDMGVONlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO3JuzOVf3cBhkcEc7gsk86J6ZN2cjRv4+t2w37kfjhqasnbSAwCz9 g5mkTJxsp//8hoJZRfL7K70zPlBB/Qj/tXmBHTC6C3MClqY18xR/C+TrdfactEr2 dfpIrWWHKhPslEJqAJYJAXsObXmvuh3Guap9CdlSnNT+Bj9iaSPrTpCjr3OPGsov YfgzhaWlqf+/Cv17Om3fQk13bJ5BAi7gdfp5gW3P9w/39M+gjBx1tG2ZCwhuCtMe VapzSo2XKS6vN1D+mM/F9l6ZlOCi3wXQJ38rGjHkTi4Mg8seAQmvR62Xd80J0JPC C96RpQDjcs82i2T0Lxht9gL6EvDMIiqM -----END CERTIFICATE-----Generated at Thu May 2 17:43:10 2024 by rpki-client on console-fra.rpki-client.org