$ rpki-client -vvf rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft File: rgDBosA0KnFSg1RO1ltGGGWC8mw.mft (raw, json) Hash identifier: LhrgubqkIQinyoxEcSEcFjKxKu3LD9pmImKKkYkuWkQ= Subject key identifier: 50:BA:70:B1:EA:E8:95:61:E1:D4:09:65:F7:C1:95:56:E5:05:3F:ED Authority key identifier: AE:00:C1:A2:C0:34:2A:71:52:83:54:4E:D6:5B:46:18:65:82:F2:6C Certificate issuer: /CN=A91866D6/serialNumber=AE00C1A2C0342A715283544ED65B46186582F26C Certificate serial: 0837 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft Manifest number: 082C Signing time: Thu 02 May 2024 21:54:26 +0000 Manifest this update: Thu 02 May 2024 21:54:26 +0000 Manifest next update: Thu 09 May 2024 21:54:26 +0000 Files and hashes: 1: rgDBosA0KnFSg1RO1ltGGGWC8mw.crl (hash: GqDiTT1km0q/tokPcLGI+na5F6CbeqQb6w+CnGuVHAA=) 2: F99F89E2AAC211EABF603A0BC4F9AE02.roa (hash: eQTh6mzluyryLv1k1vcNqfuU7PfF9NQSG/VlGMgRn/I=) 3: 84FDF6D0AABA11EABB84756CC4F9AE02.roa (hash: fpS/IAyugQMqJIWGwmXI8wOUbVOYobs6hKofuFnkQek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.crl rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 21:54:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2103 (0x837) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91866D6/serialNumber=AE00C1A2C0342A715283544ED65B46186582F26C Validity Not Before: May 2 21:54:26 2024 GMT Not After : May 9 21:54:26 2024 GMT Subject: CN=66340b92-5906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:be:41:ef:a8:8e:7d:9c:fd:2d:3a:f7:2c:52: 1c:58:4f:28:57:50:f5:bd:f2:b7:14:81:30:15:d9: 19:14:09:56:4d:ca:53:67:ab:2b:f6:f8:95:21:1a: 86:ed:97:de:4d:1f:1e:b8:f7:a1:94:92:69:14:61: b3:06:94:59:52:25:15:10:ed:2a:47:86:4d:c7:3d: 03:bb:7f:d1:5b:9f:c4:4e:4f:a2:3a:43:5e:fa:a1: 68:55:bd:ba:4d:43:1c:6a:9f:7d:86:95:2d:3e:5b: ac:b3:22:43:d2:5e:9a:91:f6:19:76:cd:4a:bc:5a: cd:fe:0a:7c:b5:ca:cc:34:08:a6:a2:3d:f4:1a:a1: 56:de:05:f0:62:58:ba:cc:9b:b3:18:da:7c:73:a3: 91:6c:ae:0a:ac:40:10:9f:c4:71:13:e7:ba:cb:2b: 12:50:92:9e:45:44:71:aa:2e:02:1f:82:d9:a9:b9: 88:01:90:e6:4b:ff:5a:f4:bf:17:eb:a2:57:b7:b7: fd:fa:33:e8:40:58:0b:9d:0e:ef:c8:8a:75:6b:aa: 5f:79:be:dc:ec:08:5e:83:27:2a:60:b5:3a:89:09: cb:d9:bb:c8:2e:09:69:ed:f3:4d:78:31:08:6b:d3: f0:74:45:fc:e1:96:1b:ad:01:e0:e1:a5:11:aa:35: 8f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:BA:70:B1:EA:E8:95:61:E1:D4:09:65:F7:C1:95:56:E5:05:3F:ED X509v3 Authority Key Identifier: keyid:AE:00:C1:A2:C0:34:2A:71:52:83:54:4E:D6:5B:46:18:65:82:F2:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:3a:97:41:00:47:61:0d:10:94:17:23:fd:34:01:48:dc:86: 06:3f:c7:41:ef:89:81:de:2c:85:59:43:ae:af:70:61:46:46: 45:5e:a0:78:fc:e3:44:4b:19:7a:3d:f9:83:38:08:f3:0d:51: 9e:9a:de:05:70:b4:59:fb:c3:cc:31:0b:9a:0a:39:6f:da:8f: e7:4a:ab:a9:ae:2a:bc:b1:a3:d3:39:b2:62:8e:f4:8d:31:d5: 85:c7:b4:d3:f4:67:ed:72:d8:98:cf:a3:00:a2:7d:29:e7:61: c8:a3:4b:88:15:a6:7f:54:20:85:6a:ae:0c:b1:35:3d:a1:ae: 68:26:12:2b:91:e4:ee:b7:0f:c8:5b:87:c4:cf:17:2f:ba:d9: dc:fc:6b:38:f1:c0:95:b5:0a:e8:03:28:ca:8b:83:03:b9:95: b1:3b:6d:f0:ca:9d:6c:5d:97:48:b9:0e:98:b9:db:e8:fb:b0: a9:b2:0b:86:37:e8:a1:f4:00:a8:ab:5f:e5:fb:aa:c0:98:ab: 52:29:92:3f:8c:af:d8:9a:86:38:04:01:8f:3e:46:2c:f5:64: 24:9b:ea:cd:2b:4e:4c:b3:d6:a3:a3:1f:3f:6f:d4:ef:e4:23: 9c:ba:36:b3:a1:df:b8:3d:d9:73:36:21:09:4b:62:7b:38:be: 41:b1:e1:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY2RDYxMTAvBgNVBAUTKEFFMDBDMUEyQzAzNDJBNzE1MjgzNTQ0RUQ2NUI0NjE4 NjU4MkYyNkMwHhcNMjQwNTAyMjE1NDI2WhcNMjQwNTA5MjE1NDI2WjAYMRYwFAYD VQQDEw02NjM0MGI5Mi01OTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqL5B76iOfZz9LTr3LFIcWE8oV1D1vfK3FIEwFdkZFAlWTcpTZ6sr9viVIRqG 7ZfeTR8euPehlJJpFGGzBpRZUiUVEO0qR4ZNxz0Du3/RW5/ETk+iOkNe+qFoVb26 TUMcap99hpUtPlussyJD0l6akfYZds1KvFrN/gp8tcrMNAimoj30GqFW3gXwYli6 zJuzGNp8c6ORbK4KrEAQn8RxE+e6yysSUJKeRURxqi4CH4LZqbmIAZDmS/9a9L8X 66JXt7f9+jPoQFgLnQ7vyIp1a6pfeb7c7AhegycqYLU6iQnL2bvILglp7fNNeDEI a9PwdEX84ZYbrQHg4aURqjWPpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFC6cLHq 6JVh4dQJZffBlVblBT/tMB8GA1UdIwQYMBaAFK4AwaLANCpxUoNUTtZbRhhlgvJs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjZENi85QTU2Q0MyRUFB QjkxMUVBOTRENjgxNkJDNEY5QUUwMi9yZ0RCb3NBMEtuRlNnMVJPMWx0R0dHV0M4 bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JnREJvc0EwS25GU2cxUk8xbHRHR0dXQzhtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjZENi85QTU2Q0MyRUFBQjkxMUVBOTRENjgxNkJDNEY5QUUwMi9yZ0RCb3NBMEtu RlNnMVJPMWx0R0dHV0M4bXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApOpdBAEdhDRCUFyP9NAFI3IYGP8dB74mB3iyFWUOur3BhRkZFXqB4 /ONESxl6PfmDOAjzDVGemt4FcLRZ+8PMMQuaCjlv2o/nSqupriq8saPTObJijvSN MdWFx7TT9GftctiYz6MAon0p52HIo0uIFaZ/VCCFaq4MsTU9oa5oJhIrkeTutw/I W4fEzxcvutnc/Gs48cCVtQroAyjKi4MDuZWxO23wyp1sXZdIuQ6Yudvo+7CpsguG N+ih9ACoq1/l+6rAmKtSKZI/jK/YmoY4BAGPPkYs9WQkm+rNK05Ms9ajox8/b9Tv 5COcujazod+4PdlzNiEJS2J7OL5BseFz -----END CERTIFICATE-----Generated at Thu May 2 23:03:12 2024 by rpki-client on console-fra.rpki-client.org