$ rpki-client -vvf rpki.apnic.net/member_repository/A91850E2/76A01640BF3411ED9FC02E87C4F9AE02/f4zGhHEilLZfAYtxngcvRCoBW9E.mft File: f4zGhHEilLZfAYtxngcvRCoBW9E.mft (raw, json) Hash identifier: kcrXYccBX0Mqr+gL4UZz47MntW57FK3n6eNK8vgiC4s= Subject key identifier: 71:D9:87:E0:8F:47:C4:75:F1:F5:CC:FE:D6:DC:F2:E2:60:5A:61:14 Authority key identifier: 7F:8C:C6:84:71:22:94:B6:5F:01:8B:71:9E:07:2F:44:2A:01:5B:D1 Certificate issuer: /CN=A91850E2/serialNumber=7F8CC684712294B65F018B719E072F442A015BD1 Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4zGhHEilLZfAYtxngcvRCoBW9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91850E2/76A01640BF3411ED9FC02E87C4F9AE02/f4zGhHEilLZfAYtxngcvRCoBW9E.mft Manifest number: D8 Signing time: Wed 01 May 2024 06:19:55 +0000 Manifest this update: Wed 01 May 2024 06:19:55 +0000 Manifest next update: Wed 08 May 2024 06:19:55 +0000 Files and hashes: 1: f4zGhHEilLZfAYtxngcvRCoBW9E.crl (hash: J3ylJ9ywtZSNSh4Ayz0An9DvdZsPRlCMjtaQiEoCK1Q=) 2: AC98F354BF3711ED8D820C0AC4F9AE02.roa (hash: rIXZUNADPz/ZzxU5UjwHuAFOjyepQR4f1rDPZOHAoTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91850E2/76A01640BF3411ED9FC02E87C4F9AE02/f4zGhHEilLZfAYtxngcvRCoBW9E.crl rsync://rpki.apnic.net/member_repository/A91850E2/76A01640BF3411ED9FC02E87C4F9AE02/f4zGhHEilLZfAYtxngcvRCoBW9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4zGhHEilLZfAYtxngcvRCoBW9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 06:19:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91850E2/serialNumber=7F8CC684712294B65F018B719E072F442A015BD1 Validity Not Before: May 1 06:19:55 2024 GMT Not After : May 8 06:19:55 2024 GMT Subject: CN=6631df0b-0f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2b:32:b3:98:06:1e:c4:78:2d:47:da:a0:79: 8d:bd:16:75:66:58:6f:27:e1:ef:82:0d:19:a1:d3: 1e:ae:f0:48:ad:54:9d:7f:6a:5e:55:d9:7b:f5:45: b0:cb:cd:cc:7a:22:d8:47:71:c4:23:1f:d5:9f:f9: 70:50:41:67:11:d3:b5:f1:8e:ea:89:94:ae:d2:f3: 21:e9:10:3c:69:4b:b2:d7:96:bf:62:09:0d:12:71: cf:0d:35:22:a4:61:c5:a1:d9:c2:25:5d:7b:43:b0: 3c:67:b5:5a:c0:9d:30:9a:77:a1:f4:f8:6f:50:bb: 3b:93:fb:08:07:0f:d8:14:af:5e:94:d1:4d:0c:85: 66:47:f2:38:c4:b0:08:67:31:d5:57:65:21:f0:9f: 88:d4:0e:e7:8e:d4:be:2b:53:61:8c:e8:0e:9d:6d: f7:7c:83:fd:74:80:d0:95:e2:97:6e:fc:03:e4:50: 9a:25:c5:e6:11:b9:4d:3c:a7:0a:b8:2c:6c:13:f1: 62:41:cc:99:67:f5:c4:3b:08:34:64:21:14:56:a2: 4d:72:01:cb:69:ea:09:99:89:86:0a:c4:38:d1:40: a7:ee:e3:4d:48:49:24:d8:8a:6d:ea:02:6b:35:7c: af:3d:6e:e5:17:cf:9e:ad:47:60:52:ea:6a:4d:3d: f1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D9:87:E0:8F:47:C4:75:F1:F5:CC:FE:D6:DC:F2:E2:60:5A:61:14 X509v3 Authority Key Identifier: keyid:7F:8C:C6:84:71:22:94:B6:5F:01:8B:71:9E:07:2F:44:2A:01:5B:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91850E2/76A01640BF3411ED9FC02E87C4F9AE02/f4zGhHEilLZfAYtxngcvRCoBW9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4zGhHEilLZfAYtxngcvRCoBW9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91850E2/76A01640BF3411ED9FC02E87C4F9AE02/f4zGhHEilLZfAYtxngcvRCoBW9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:1e:ad:11:b8:02:e5:b6:c2:95:0e:ae:87:ef:e6:9e:e2:ed: 02:f9:df:06:cc:20:0d:ab:04:91:69:1b:37:f1:25:59:2f:5a: d9:ea:01:f8:1d:dd:0e:63:46:20:71:74:56:7b:44:64:a9:3a: 48:92:3b:4c:bc:b9:1e:27:47:9d:eb:f7:d9:ce:37:a6:81:51: 2c:83:58:28:d0:11:1d:e0:35:12:ac:11:41:03:4e:a8:d4:f3: 67:ae:6d:02:9d:4c:00:62:b1:95:47:f5:e6:44:0d:c1:fb:87: b9:11:05:1d:0f:5b:46:23:f2:6e:81:80:92:da:6c:2d:e9:38: e9:8c:fe:92:33:d0:8b:2d:90:4c:cd:33:98:94:9d:e4:56:59: 97:a8:a4:2f:23:56:55:2d:47:b9:dc:9b:74:dd:41:dd:a3:cf: 1f:16:f2:74:eb:36:59:6e:c9:5a:43:66:e8:fb:a5:c3:de:02: 51:86:c6:c7:92:9d:0c:54:06:20:fc:85:98:18:3a:2e:72:85: 53:44:c0:41:12:5e:4a:c6:eb:51:78:8c:aa:5a:55:45:bd:a0: 55:df:4f:3b:5e:79:28:a0:6a:e1:bb:b6:d3:ad:75:c2:60:a8: 9d:63:f4:7c:f9:65:c1:46:96:88:ab:f3:03:d4:34:69:7e:21: ed:bd:78:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUwRTIxMTAvBgNVBAUTKDdGOENDNjg0NzEyMjk0QjY1RjAxOEI3MTlFMDcyRjQ0 MkEwMTVCRDEwHhcNMjQwNTAxMDYxOTU1WhcNMjQwNTA4MDYxOTU1WjAYMRYwFAYD VQQDEw02NjMxZGYwYi0wZjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Ssys5gGHsR4LUfaoHmNvRZ1ZlhvJ+Hvgg0ZodMervBIrVSdf2peVdl79UWw y83MeiLYR3HEIx/Vn/lwUEFnEdO18Y7qiZSu0vMh6RA8aUuy15a/YgkNEnHPDTUi pGHFodnCJV17Q7A8Z7VawJ0wmneh9PhvULs7k/sIBw/YFK9elNFNDIVmR/I4xLAI ZzHVV2Uh8J+I1A7njtS+K1NhjOgOnW33fIP9dIDQleKXbvwD5FCaJcXmEblNPKcK uCxsE/FiQcyZZ/XEOwg0ZCEUVqJNcgHLaeoJmYmGCsQ40UCn7uNNSEkk2Ipt6gJr NXyvPW7lF8+erUdgUupqTT3xgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHHZh+CP R8R18fXM/tbc8uJgWmEUMB8GA1UdIwQYMBaAFH+MxoRxIpS2XwGLcZ4HL0QqAVvR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTBFMi83NkEwMTY0MEJG MzQxMUVEOUZDMDJFODdDNEY5QUUwMi9mNHpHaEhFaWxMWmZBWXR4bmdjdlJDb0JX OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y0ekdoSEVpbExaZkFZdHhuZ2N2UkNvQlc5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTBFMi83NkEwMTY0MEJGMzQxMUVEOUZDMDJFODdDNEY5QUUwMi9mNHpHaEhFaWxM WmZBWXR4bmdjdlJDb0JXOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJHq0RuALltsKVDq6H7+ae4u0C+d8GzCANqwSRaRs38SVZL1rZ6gH4 Hd0OY0YgcXRWe0RkqTpIkjtMvLkeJ0ed6/fZzjemgVEsg1go0BEd4DUSrBFBA06o 1PNnrm0CnUwAYrGVR/XmRA3B+4e5EQUdD1tGI/JugYCS2mwt6TjpjP6SM9CLLZBM zTOYlJ3kVlmXqKQvI1ZVLUe53Jt03UHdo88fFvJ06zZZbslaQ2bo+6XD3gJRhsbH kp0MVAYg/IWYGDoucoVTRMBBEl5KxutReIyqWlVFvaBV3087XnkooGrhu7bTrXXC YKidY/R8+WXBRpaIq/MD1DRpfiHtvXgw -----END CERTIFICATE-----Generated at Wed May 1 07:06:29 2024 by rpki-client on console-fra.rpki-client.org