$ rpki-client -vvf rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft File: _nQHcdbqABLeOHBW-Iy-3TbEqGA.mft (raw, json) Hash identifier: 9UUyZmwY+vGzpv4uxRJtOOkUZo12FarX+RAzsUrrpz0= Subject key identifier: B4:2E:FC:97:C8:15:CE:D7:EB:75:BD:CE:CE:73:A0:12:40:FC:68:D4 Authority key identifier: FE:74:07:71:D6:EA:00:12:DE:38:70:56:F8:8C:BE:DD:36:C4:A8:60 Certificate issuer: /CN=A91889A4/serialNumber=FE740771D6EA0012DE387056F88CBEDD36C4A860 Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft Manifest number: B2 Signing time: Fri 17 May 2024 06:37:46 +0000 Manifest this update: Fri 17 May 2024 06:37:46 +0000 Manifest next update: Fri 24 May 2024 06:37:46 +0000 Files and hashes: 1: _nQHcdbqABLeOHBW-Iy-3TbEqGA.crl (hash: O6aj85mYFVmRXc/dtjt8v3uCL1Qmdf/y2LCBGKRL6wI=) 2: 37B318C0050111EEAFBCAE7EC4F9AE02.roa (hash: CyGmUXgqCRCPIjhYPOT0hWuMRz6TFMafnNdtCYirRYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.crl rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 06:37:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889A4/serialNumber=FE740771D6EA0012DE387056F88CBEDD36C4A860 Validity Not Before: May 17 06:37:46 2024 GMT Not After : May 24 06:37:46 2024 GMT Subject: CN=6646fb3a-414f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bf:71:0c:16:6e:70:b7:8b:78:76:7d:88:34: ac:26:e8:b5:52:d1:89:b6:04:99:08:bf:ed:d7:84: fc:cd:5e:ef:03:0e:bb:9b:c9:71:a0:ad:b7:30:8f: 81:64:7e:e1:e3:b6:1f:44:c4:1c:7f:2a:d8:7c:2f: 33:f9:8a:b6:df:c1:ed:66:c9:22:6a:b5:bd:09:b6: b5:9e:1f:3f:8d:e5:3c:45:96:e3:74:e6:b0:73:22: cb:a3:10:e5:0d:1d:5e:a9:84:59:5a:3c:f3:1c:45: 80:c9:7d:f6:4d:43:50:e0:1b:20:1a:99:b1:5f:9b: ef:ce:12:f6:26:7c:42:02:74:36:c5:41:bb:0b:76: 67:2c:c4:81:aa:91:0b:51:09:1c:3a:5f:ff:ad:08: 67:0a:6c:5a:26:12:bc:36:c4:fe:dc:60:86:a9:e7: dd:70:e0:29:3d:a1:f0:7f:8b:d5:8b:4a:d3:0f:aa: 29:1d:ff:14:e0:03:bb:3f:f1:8f:65:a8:7d:30:5f: 70:02:29:f9:78:54:f9:0f:e2:37:e4:11:8e:cd:47: b7:23:bc:72:75:3a:8f:41:64:2b:c9:c1:f1:1d:39: c5:0d:0d:ff:2c:66:7a:e2:ec:cb:7f:8e:fb:59:d0: 96:33:32:68:0f:6c:77:c2:b0:36:99:52:a4:90:13: 67:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:2E:FC:97:C8:15:CE:D7:EB:75:BD:CE:CE:73:A0:12:40:FC:68:D4 X509v3 Authority Key Identifier: keyid:FE:74:07:71:D6:EA:00:12:DE:38:70:56:F8:8C:BE:DD:36:C4:A8:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:5f:0b:5b:15:d7:ad:5a:4a:82:02:fc:25:eb:98:1a:42:85: 92:6d:0e:7e:b3:c0:24:b5:f9:0f:70:a2:4d:89:3a:c1:c2:4c: 54:2d:e9:f5:b5:a1:4e:bb:17:56:70:f0:ab:c6:d6:b5:55:03: 60:31:10:29:c0:4d:11:6c:c5:c3:49:a4:67:39:f8:ee:ac:11: a0:42:54:1e:f8:9a:56:4d:45:c4:d2:55:95:c2:e7:1f:c9:e9: cd:e9:99:19:d8:0c:62:29:db:b6:02:bb:58:84:d1:d6:7d:13: 19:13:bc:01:e4:c4:b5:6d:22:22:23:6d:b9:e5:d6:b2:44:06: 5b:6a:cc:22:96:25:69:b6:0b:0a:64:c7:2b:33:23:e1:4e:ba: b9:01:e8:a5:6c:98:9a:1a:f9:32:95:3e:f2:94:90:ab:e2:02: 9f:94:27:1f:41:4c:26:bc:d6:55:11:cd:a6:6c:17:5d:34:00: ff:33:22:dd:27:e2:eb:7d:7f:23:32:dd:3d:a2:54:c7:12:80: 91:d2:41:09:59:a4:9a:ff:83:91:90:c5:9b:3a:b8:29:e0:53: 5b:52:d5:c7:af:aa:2d:5c:fd:b0:cc:a2:a9:7c:9e:7b:d6:5c: 1e:27:9f:b1:da:bd:1a:21:5c:3e:44:6a:e1:72:2a:1d:c7:b3: 3f:72:a2:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QTQxMTAvBgNVBAUTKEZFNzQwNzcxRDZFQTAwMTJERTM4NzA1NkY4OENCRURE MzZDNEE4NjAwHhcNMjQwNTE3MDYzNzQ2WhcNMjQwNTI0MDYzNzQ2WjAYMRYwFAYD VQQDEw02NjQ2ZmIzYS00MTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwb9xDBZucLeLeHZ9iDSsJui1UtGJtgSZCL/t14T8zV7vAw67m8lxoK23MI+B ZH7h47YfRMQcfyrYfC8z+Yq238HtZskiarW9Cba1nh8/jeU8RZbjdOawcyLLoxDl DR1eqYRZWjzzHEWAyX32TUNQ4BsgGpmxX5vvzhL2JnxCAnQ2xUG7C3ZnLMSBqpEL UQkcOl//rQhnCmxaJhK8NsT+3GCGqefdcOApPaHwf4vVi0rTD6opHf8U4AO7P/GP Zah9MF9wAin5eFT5D+I35BGOzUe3I7xydTqPQWQrycHxHTnFDQ3/LGZ64uzLf477 WdCWMzJoD2x3wrA2mVKkkBNn+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQu/JfI Fc7X63W9zs5zoBJA/GjUMB8GA1UdIwQYMBaAFP50B3HW6gAS3jhwVviMvt02xKhg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlBNC8yN0EyNUE1NjA0 RkExMUVFOEQ0NkUyNDVDNEY5QUUwMi9fblFIY2RicUFCTGVPSEJXLUl5LTNUYkVx R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19uUUhjZGJxQUJMZU9IQlctSXktM1RiRXFHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlBNC8yN0EyNUE1NjA0RkExMUVFOEQ0NkUyNDVDNEY5QUUwMi9fblFIY2RicUFC TGVPSEJXLUl5LTNUYkVxR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzXwtbFdetWkqCAvwl65gaQoWSbQ5+s8AktfkPcKJNiTrBwkxULen1 taFOuxdWcPCrxta1VQNgMRApwE0RbMXDSaRnOfjurBGgQlQe+JpWTUXE0lWVwucf yenN6ZkZ2AxiKdu2ArtYhNHWfRMZE7wB5MS1bSIiI2255dayRAZbaswiliVptgsK ZMcrMyPhTrq5AeilbJiaGvkylT7ylJCr4gKflCcfQUwmvNZVEc2mbBddNAD/MyLd J+LrfX8jMt09olTHEoCR0kEJWaSa/4ORkMWbOrgp4FNbUtXHr6otXP2wzKKpfJ57 1lweJ5+x2r0aIVw+RGrhciodx7M/cqIg -----END CERTIFICATE-----Generated at Fri May 17 08:13:51 2024 by rpki-client on console-fra.rpki-client.org