$ rpki-client -vvf rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft File: hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft (raw, json) Hash identifier: ILeVH2V1/5ocTYHna5aXDlxKAU/sUuKC4/YL/8ggmgk= Subject key identifier: 77:77:02:67:52:33:65:99:13:D8:36:1E:64:24:46:85:09:B6:0B:63 Authority key identifier: 85:4F:E7:27:53:60:D0:78:10:AF:FB:A6:C2:8F:FF:23:58:2A:20:EB Certificate issuer: /CN=A91958BE/serialNumber=854FE7275360D07810AFFBA6C28FFF23582A20EB Certificate serial: DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft Manifest number: D9 Signing time: Sun 05 May 2024 06:07:55 +0000 Manifest this update: Sun 05 May 2024 06:07:54 +0000 Manifest next update: Sun 12 May 2024 06:07:54 +0000 Files and hashes: 1: hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl (hash: Kd9yLJUul/pXgi9j0ysCLCkh0FdN4itbS7ve/raGNIU=) 2: 54FB2C8CD61711EEB983D919C4F9AE02.roa (hash: yKcLsbx1IuVp0GKhmlBOaq3IPS7ZvYSWgHFOkDGnv+Y=) 3: 5576D030D61711EEB983D919C4F9AE02.roa (hash: GPWGbMrCh9nhUFFsTFy1v1Swe8iB5s0uxXd2oii56dc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 06:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91958BE/serialNumber=854FE7275360D07810AFFBA6C28FFF23582A20EB Validity Not Before: May 5 06:07:54 2024 GMT Not After : May 12 06:07:54 2024 GMT Subject: CN=6637223a-585d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3a:e6:84:6c:8b:62:00:cf:ba:35:53:94:c6: 6d:59:0c:e7:53:9a:22:96:c5:20:7a:42:84:3a:73: 99:9f:db:1a:ac:a3:48:cf:31:76:f3:d7:63:c6:72: 1d:ad:89:a4:b5:c2:df:19:46:31:5b:b1:b9:63:1d: 98:64:48:03:42:7e:16:1b:39:e7:1a:c7:6d:db:48: 8f:92:84:66:0a:08:10:60:5f:4b:08:39:6b:e9:8c: 7e:d0:10:15:55:76:3d:88:68:9e:a8:63:be:7c:fc: 07:12:56:c0:bd:5b:f2:03:81:cf:8e:a9:90:38:85: d6:33:d9:64:5f:21:53:1e:c6:ad:50:2a:50:4f:95: 6a:c6:0f:04:c7:ce:4c:37:fe:bb:2c:c7:1e:19:38: 77:d9:e3:b7:a6:b1:13:97:4d:24:a5:d1:4c:58:77: 55:98:d2:5f:04:17:09:89:29:c3:48:45:a4:b0:38: 74:aa:97:54:47:57:dc:87:78:a9:e0:a6:72:3d:52: 3a:4c:16:8c:15:2f:b0:c6:90:c0:59:b0:b2:df:11: 12:ae:f1:d7:2a:13:16:06:a6:95:86:02:a7:da:8b: a5:2a:bf:4f:42:f6:34:d8:8d:02:b2:85:b1:66:49: ad:23:e2:a0:8f:c4:9a:e3:95:25:ab:c8:a0:29:23: 77:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:77:02:67:52:33:65:99:13:D8:36:1E:64:24:46:85:09:B6:0B:63 X509v3 Authority Key Identifier: keyid:85:4F:E7:27:53:60:D0:78:10:AF:FB:A6:C2:8F:FF:23:58:2A:20:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:cb:07:08:c6:1b:ec:f3:78:00:68:e8:7a:96:7e:7c:e4:40: 23:4b:65:5d:27:50:14:f5:a3:e5:31:3f:fb:d6:63:84:8c:5e: 7a:e6:41:10:77:ab:64:b7:56:ec:30:38:4d:91:49:47:85:d7: 41:e5:d5:f4:c1:42:20:eb:01:48:76:14:da:45:b5:59:f8:ab: c9:2c:f7:ac:50:70:48:27:01:e5:c0:7e:dc:1f:ef:70:97:47: c5:05:16:8e:d4:ff:9e:78:cc:a3:19:a0:06:1a:31:84:a6:7a: 81:b2:59:c6:94:d4:73:52:e6:40:7c:51:17:c7:49:f6:e9:fa: a0:d0:13:61:2e:27:ff:ca:27:46:9f:b5:b5:cf:76:21:54:f1: 0c:37:98:1b:05:8e:ef:6f:c6:e6:eb:3a:84:9c:58:71:71:ad: 51:4e:94:4f:83:82:80:87:4d:a7:20:7e:a2:5a:54:59:fe:c8: c8:ef:81:41:be:2e:54:f9:d6:6e:22:67:52:07:2f:d5:39:9b: 48:2e:5f:21:9b:1d:3c:84:1f:46:e1:6b:32:50:ab:c9:21:c4: 8f:58:50:a1:3b:e2:33:f1:48:72:c5:ec:df:9e:9b:f0:83:90: 14:64:2c:30:66:4f:1b:40:78:6a:12:c8:3f:66:be:44:55:49: f5:dd:29:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU4QkUxMTAvBgNVBAUTKDg1NEZFNzI3NTM2MEQwNzgxMEFGRkJBNkMyOEZGRjIz NTgyQTIwRUIwHhcNMjQwNTA1MDYwNzU0WhcNMjQwNTEyMDYwNzU0WjAYMRYwFAYD VQQDEw02NjM3MjIzYS01ODVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzzrmhGyLYgDPujVTlMZtWQznU5oilsUgekKEOnOZn9sarKNIzzF289djxnId rYmktcLfGUYxW7G5Yx2YZEgDQn4WGznnGsdt20iPkoRmCggQYF9LCDlr6Yx+0BAV VXY9iGieqGO+fPwHElbAvVvyA4HPjqmQOIXWM9lkXyFTHsatUCpQT5Vqxg8Ex85M N/67LMceGTh32eO3prETl00kpdFMWHdVmNJfBBcJiSnDSEWksDh0qpdUR1fch3ip 4KZyPVI6TBaMFS+wxpDAWbCy3xESrvHXKhMWBqaVhgKn2oulKr9PQvY02I0CsoWx ZkmtI+Kgj8Sa45Ulq8igKSN3mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHd3AmdS M2WZE9g2HmQkRoUJtgtjMB8GA1UdIwQYMBaAFIVP5ydTYNB4EK/7psKP/yNYKiDr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NThCRS83QzdGQjJGRUMy MTkxMUVEODAyNTZGNEVDNEY5QUUwMi9oVV9uSjFOZzBIZ1FyX3Vtd29fX0kxZ3FJ T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hVX25KMU5nMEhnUXJfdW13b19fSTFncUlPcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NThCRS83QzdGQjJGRUMyMTkxMUVEODAyNTZGNEVDNEY5QUUwMi9oVV9uSjFOZzBI Z1FyX3Vtd29fX0kxZ3FJT3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsywcIxhvs83gAaOh6ln585EAjS2VdJ1AU9aPlMT/71mOEjF565kEQ d6tkt1bsMDhNkUlHhddB5dX0wUIg6wFIdhTaRbVZ+KvJLPesUHBIJwHlwH7cH+9w l0fFBRaO1P+eeMyjGaAGGjGEpnqBslnGlNRzUuZAfFEXx0n26fqg0BNhLif/yidG n7W1z3YhVPEMN5gbBY7vb8bm6zqEnFhxca1RTpRPg4KAh02nIH6iWlRZ/sjI74FB vi5U+dZuImdSBy/VOZtILl8hmx08hB9G4WsyUKvJIcSPWFChO+Iz8Uhyxezfnpvw g5AUZCwwZk8bQHhqEsg/Zr5EVUn13Sm1 -----END CERTIFICATE-----Generated at Sun May 5 08:39:08 2024 by rpki-client on console-fra.rpki-client.org