$ rpki-client -vvf rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft File: 82dKiQfpsa6O4m-c88mcR_dUk0w.mft (raw, json) Hash identifier: TnJJjMaAyf1XfxS4bueM22Plm4DLNKSlzh2PLpK8RMo= Subject key identifier: 67:AD:48:5B:C8:53:B7:23:41:E8:74:54:61:4D:47:95:C2:12:5C:7F Authority key identifier: F3:67:4A:89:07:E9:B1:AE:8E:E2:6F:9C:F3:C9:9C:47:F7:54:93:4C Certificate issuer: /CN=A91910A8/serialNumber=F3674A8907E9B1AE8EE26F9CF3C99C47F754934C Certificate serial: 02E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft Manifest number: 02DA Signing time: Sun 05 May 2024 03:31:27 +0000 Manifest this update: Sun 05 May 2024 03:31:27 +0000 Manifest next update: Sun 12 May 2024 03:31:27 +0000 Files and hashes: 1: 82dKiQfpsa6O4m-c88mcR_dUk0w.crl (hash: FELRnoiBTQBcEy05mIwaEC1OrjvsZpRAd3QyIoB4lmM=) 2: F47320C4E04111EE8F798E3DC4F9AE02.roa (hash: UW7+nv4irITMLcDjMG0OJ/5kJqb/tQLhLog1jaQcizo=) 3: 5C27D4DCB0DB11EC87206C69C4F9AE02.roa (hash: 9QjIxLga5lr2tlfsedpHgDUExpH9szxPvAZ9GMbY2jU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.crl rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 741 (0x2e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91910A8/serialNumber=F3674A8907E9B1AE8EE26F9CF3C99C47F754934C Validity Not Before: May 5 03:31:27 2024 GMT Not After : May 12 03:31:27 2024 GMT Subject: CN=6636fd8f-02e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:08:7d:3b:17:32:8d:9b:e8:7c:7c:33:c0:20: e3:1f:0f:25:9b:7e:f2:d0:d3:10:49:d1:45:0e:32: ea:0c:34:6a:ac:8a:24:49:fb:09:71:af:e8:2e:79: 5b:42:93:f5:78:ca:bf:9c:c6:2e:9f:3d:20:5e:fc: 25:f1:b3:fa:cd:ee:65:64:cd:ea:bc:44:61:00:81: df:c0:8a:e7:24:f9:77:2a:e0:92:a4:03:29:d2:6c: c4:e6:77:cc:30:70:e8:b6:29:0c:90:5b:4c:8b:37: 43:98:23:f8:74:fa:22:49:bc:35:d1:f6:00:96:55: 6a:48:f8:a0:6c:a6:85:d0:0f:84:d0:46:e3:ea:45: 77:11:50:74:64:88:8a:6c:99:3d:01:36:8d:4a:34: 3d:62:e3:2e:47:f6:78:37:ed:10:ef:89:6f:d1:62: 07:d2:27:fb:35:cf:64:b3:9c:ea:a4:98:9d:9b:10: 32:57:04:b0:e4:4b:5f:f7:f9:75:c6:2f:3a:92:04: d9:69:b6:2e:89:f5:fa:c5:ac:1d:4e:41:8b:d5:17: ce:41:05:a2:35:25:85:28:ef:92:5c:40:fd:d6:25: b9:9f:5f:51:21:d7:2d:89:36:99:26:dd:8b:2a:66: bd:78:12:76:53:d7:ce:ed:35:51:6d:a3:81:8c:f4: a8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:AD:48:5B:C8:53:B7:23:41:E8:74:54:61:4D:47:95:C2:12:5C:7F X509v3 Authority Key Identifier: keyid:F3:67:4A:89:07:E9:B1:AE:8E:E2:6F:9C:F3:C9:9C:47:F7:54:93:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:b8:e5:51:bb:23:e0:41:d5:61:9d:0c:8e:c6:01:d0:16:64: 7b:e7:fc:ce:9c:b1:71:06:89:c0:2a:99:e4:2c:3a:15:9a:ec: e7:b1:38:d9:59:9b:18:07:54:7a:d0:93:68:23:49:b9:9d:c0: 13:f4:83:92:74:8b:a9:9d:81:b5:e9:7a:54:1d:ef:c9:91:f2: 6d:54:22:17:a1:9a:6e:91:cc:5f:74:19:a2:22:3e:e2:d2:82: 9b:b5:08:b3:b0:6f:3c:af:27:db:87:72:57:38:a0:1c:b4:8b: 9c:5f:01:7c:5c:78:47:cf:55:e7:8b:f0:c8:50:11:f4:cc:d9: 1e:75:88:30:d6:eb:d0:79:26:3e:81:20:bb:01:4d:cf:c4:e1: 3e:ae:bc:52:67:c4:85:45:5d:b7:2b:99:10:88:ae:33:11:fc: 39:8e:a7:98:b4:a5:b0:29:65:89:ec:55:bc:68:a8:85:4b:8d: 0d:33:38:26:69:2c:a3:50:e9:8a:f7:63:b2:88:d1:c4:ae:02: 26:c8:d5:00:47:86:bb:53:67:20:93:fa:fd:0b:c1:07:3c:e4: 1f:d0:ec:c3:06:a4:d7:b0:a2:86:a6:47:02:8e:13:39:b3:5d: 7b:8f:89:a8:1a:e3:99:ad:df:9c:25:20:75:6d:15:78:ce:ac: e7:af:b3:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEwQTgxMTAvBgNVBAUTKEYzNjc0QTg5MDdFOUIxQUU4RUUyNkY5Q0YzQzk5QzQ3 Rjc1NDkzNEMwHhcNMjQwNTA1MDMzMTI3WhcNMjQwNTEyMDMzMTI3WjAYMRYwFAYD VQQDEw02NjM2ZmQ4Zi0wMmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8gh9OxcyjZvofHwzwCDjHw8lm37y0NMQSdFFDjLqDDRqrIokSfsJca/oLnlb QpP1eMq/nMYunz0gXvwl8bP6ze5lZM3qvERhAIHfwIrnJPl3KuCSpAMp0mzE5nfM MHDotikMkFtMizdDmCP4dPoiSbw10fYAllVqSPigbKaF0A+E0Ebj6kV3EVB0ZIiK bJk9ATaNSjQ9YuMuR/Z4N+0Q74lv0WIH0if7Nc9ks5zqpJidmxAyVwSw5Etf9/l1 xi86kgTZabYuifX6xawdTkGL1RfOQQWiNSWFKO+SXED91iW5n19RIdctiTaZJt2L Kma9eBJ2U9fO7TVRbaOBjPSonwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGetSFvI U7cjQeh0VGFNR5XCElx/MB8GA1UdIwQYMBaAFPNnSokH6bGujuJvnPPJnEf3VJNM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTBBOC83QjIwMDczRTlD NEUxMUVDQjE3NDhCNjhDNEY5QUUwMi84MmRLaVFmcHNhNk80bS1jODhtY1JfZFVr MHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgyZEtpUWZwc2E2TzRtLWM4OG1jUl9kVWswdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTBBOC83QjIwMDczRTlDNEUxMUVDQjE3NDhCNjhDNEY5QUUwMi84MmRLaVFmcHNh Nk80bS1jODhtY1JfZFVrMHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIuOVRuyPgQdVhnQyOxgHQFmR75/zOnLFxBonAKpnkLDoVmuznsTjZ WZsYB1R60JNoI0m5ncAT9IOSdIupnYG16XpUHe/JkfJtVCIXoZpukcxfdBmiIj7i 0oKbtQizsG88ryfbh3JXOKActIucXwF8XHhHz1Xni/DIUBH0zNkedYgw1uvQeSY+ gSC7AU3PxOE+rrxSZ8SFRV23K5kQiK4zEfw5jqeYtKWwKWWJ7FW8aKiFS40NMzgm aSyjUOmK92OyiNHErgImyNUAR4a7U2cgk/r9C8EHPOQf0OzDBqTXsKKGpkcCjhM5 s117j4moGuOZrd+cJSB1bRV4zqznr7ND -----END CERTIFICATE-----Generated at Sun May 5 04:34:55 2024 by rpki-client on console-fra.rpki-client.org