$ rpki-client -vvf rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft File: j3AW2iLylktW9Cz0bZ8SOvNoMas.mft (raw, json) Hash identifier: NvPvT8mvJjTJtuFHSHAVOGs7kjTAM9ZEcWBAeV/CnYo= Subject key identifier: 4A:41:88:87:67:20:8B:B3:B0:F5:6B:57:DB:BA:E8:70:33:01:36:25 Authority key identifier: 8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB Certificate issuer: /CN=A91884A1/serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft Manifest number: AD Signing time: Fri 17 May 2024 06:46:23 +0000 Manifest this update: Fri 17 May 2024 06:46:22 +0000 Manifest next update: Fri 24 May 2024 06:46:22 +0000 Files and hashes: 1: j3AW2iLylktW9Cz0bZ8SOvNoMas.crl (hash: aObV7TEatKOdyfXpLDiJZsCzGoZVvW1m+u02rb6TfHw=) 2: 87695D32591811EE973B1058C4F9AE02.roa (hash: YxWaHU+qrPcRs7TmM3bLBsiq6y6dfD3TlT4LschCGr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.crl rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 06:46:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91884A1/serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB Validity Not Before: May 17 06:46:22 2024 GMT Not After : May 24 06:46:22 2024 GMT Subject: CN=6646fd3f-446b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fc:13:30:4d:ad:6b:c6:36:9b:ea:5b:dd:bd: d2:25:39:6c:4f:b6:42:0c:91:e3:20:40:7f:21:4d: 2b:60:f1:c1:6a:1c:1e:0c:be:09:fb:11:8d:1f:c4: 9f:f6:fc:e9:ec:16:bd:3e:9b:8d:7f:0e:69:4e:9f: 93:cc:5a:31:45:1d:f3:cf:1a:bd:ef:17:66:27:e4: 16:cb:d9:17:c8:84:a0:24:7f:8b:5c:23:bc:d5:7f: 73:8f:bd:b9:cd:e4:06:13:61:3e:97:de:b6:aa:1b: fd:4d:7e:59:f3:bc:33:ba:52:3b:fa:0d:31:2a:1d: 09:ca:b7:bf:cb:84:d6:16:14:85:f0:b2:46:ed:a2: 27:e4:d5:a5:0d:bd:9b:7c:4b:05:99:77:84:db:87: c8:44:ac:ff:3f:db:64:26:44:61:a4:6b:d7:ca:55: f4:b2:07:97:61:42:f6:ec:e0:69:d5:ac:7a:e7:d9: 08:a4:ab:a3:48:80:18:5c:5c:9b:37:3b:c1:5a:83: 62:e0:c6:b9:42:64:da:92:be:42:9b:67:38:8c:7c: 9b:61:96:17:17:79:49:37:d8:49:12:24:2b:99:18: 0b:b5:19:cd:44:69:80:9e:b1:26:1b:cc:cb:e1:ae: 29:a0:b2:28:94:db:93:c2:8c:46:08:1f:56:f6:e0: 75:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:41:88:87:67:20:8B:B3:B0:F5:6B:57:DB:BA:E8:70:33:01:36:25 X509v3 Authority Key Identifier: keyid:8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:1e:c7:22:f9:7e:70:8a:93:f8:c5:2d:a2:18:c3:6b:05:e3: 25:95:63:f6:8e:42:25:22:81:80:b1:f8:24:93:c9:b9:3e:ee: a1:80:a8:65:17:dd:61:a2:79:2d:37:15:67:22:dc:3f:8f:e3: 39:a2:8e:24:02:bb:93:0c:a6:21:c4:71:00:aa:46:ed:a0:0a: 92:81:0c:60:ea:b4:ea:55:9b:a6:86:69:2b:08:5d:bc:02:03: e3:9a:ce:72:ec:ce:ca:9c:57:74:dd:90:e3:79:44:33:63:9e: bd:17:2f:75:75:a1:ac:c2:76:fa:f1:40:3b:e4:55:4a:6f:99: ca:fa:f7:92:9f:57:49:c7:a1:3f:df:77:dd:51:a9:fc:00:3d: b5:88:14:c9:50:98:7f:cb:68:a6:b4:78:99:21:e4:5f:b1:1f: a2:ad:56:3c:d5:1d:f5:5f:9a:e3:2d:34:7f:7f:ff:81:3d:e0: c1:3d:e7:6c:ad:fd:41:12:6d:18:70:3a:5d:d6:b4:db:11:f8: c0:77:af:8b:ca:a6:c0:13:ff:f6:17:84:fa:0b:ec:5d:65:48: 77:98:e4:66:ad:dd:0c:9f:31:72:b7:1d:26:ce:a1:aa:bc:4e: 56:5b:01:51:14:31:ec:ea:74:29:56:66:7d:44:e2:a7:23:95: f8:87:58:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg0QTExMTAvBgNVBAUTKDhGNzAxNkRBMjJGMjk2NEI1NkY0MkNGNDZEOUYxMjNB RjM2ODMxQUIwHhcNMjQwNTE3MDY0NjIyWhcNMjQwNTI0MDY0NjIyWjAYMRYwFAYD VQQDEw02NjQ2ZmQzZi00NDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPwTME2ta8Y2m+pb3b3SJTlsT7ZCDJHjIEB/IU0rYPHBahweDL4J+xGNH8Sf 9vzp7Ba9PpuNfw5pTp+TzFoxRR3zzxq97xdmJ+QWy9kXyISgJH+LXCO81X9zj725 zeQGE2E+l962qhv9TX5Z87wzulI7+g0xKh0Jyre/y4TWFhSF8LJG7aIn5NWlDb2b fEsFmXeE24fIRKz/P9tkJkRhpGvXylX0sgeXYUL27OBp1ax659kIpKujSIAYXFyb NzvBWoNi4Ma5QmTakr5Cm2c4jHybYZYXF3lJN9hJEiQrmRgLtRnNRGmAnrEmG8zL 4a4poLIolNuTwoxGCB9W9uB1swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEpBiIdn IIuzsPVrV9u66HAzATYlMB8GA1UdIwQYMBaAFI9wFtoi8pZLVvQs9G2fEjrzaDGr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODRBMS9EN0RCMUM2MDE0 OUUxMUVFQUJEQzc1MzJDNEY5QUUwMi9qM0FXMmlMeWxrdFc5Q3owYlo4U092Tm9N YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ozQVcyaUx5bGt0VzlDejBiWjhTT3ZOb01hcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODRBMS9EN0RCMUM2MDE0OUUxMUVFQUJEQzc1MzJDNEY5QUUwMi9qM0FXMmlMeWxr dFc5Q3owYlo4U092Tm9NYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/Hsci+X5wipP4xS2iGMNrBeMllWP2jkIlIoGAsfgkk8m5Pu6hgKhl F91honktNxVnItw/j+M5oo4kAruTDKYhxHEAqkbtoAqSgQxg6rTqVZumhmkrCF28 AgPjms5y7M7KnFd03ZDjeUQzY569Fy91daGswnb68UA75FVKb5nK+veSn1dJx6E/ 33fdUan8AD21iBTJUJh/y2imtHiZIeRfsR+irVY81R31X5rjLTR/f/+BPeDBPeds rf1BEm0YcDpd1rTbEfjAd6+LyqbAE//2F4T6C+xdZUh3mORmrd0MnzFytx0mzqGq vE5WWwFRFDHs6nQpVmZ9ROKnI5X4h1jl -----END CERTIFICATE-----Generated at Fri May 17 08:13:51 2024 by rpki-client on console-fra.rpki-client.org