$ rpki-client -vvf rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft File: povAkQ-DHeyBilCjIUX3Q1XOY8A.mft (raw, json) Hash identifier: j2IXsl9EJJL1N7sh31B4BtU6KJ1CB2DOs3kdJ1rPrJI= Subject key identifier: B9:01:20:15:AC:D8:10:D6:A3:6D:EB:DC:DC:AD:2E:E2:67:79:16:03 Authority key identifier: A6:8B:C0:91:0F:83:1D:EC:81:8A:50:A3:21:45:F7:43:55:CE:63:C0 Certificate issuer: /CN=A919B6FC/serialNumber=A68BC0910F831DEC818A50A32145F74355CE63C0 Certificate serial: 0561 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/povAkQ-DHeyBilCjIUX3Q1XOY8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft Manifest number: 055E Signing time: Wed 01 May 2024 01:05:18 +0000 Manifest this update: Wed 01 May 2024 01:05:17 +0000 Manifest next update: Wed 08 May 2024 01:05:17 +0000 Files and hashes: 1: povAkQ-DHeyBilCjIUX3Q1XOY8A.crl (hash: k2wk9/mjXd0u4EklBCZb491Gjq1JfnLhsgFmRXrxqF8=) 2: E6F39362983B11EBBDA9EC64C4F9AE02.roa (hash: LqInJoLezOMbo0JK+aVgFnQ/kodjYsQfg5Y/54M+GGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.crl rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/povAkQ-DHeyBilCjIUX3Q1XOY8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 00:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1377 (0x561) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B6FC/serialNumber=A68BC0910F831DEC818A50A32145F74355CE63C0 Validity Not Before: May 1 01:05:17 2024 GMT Not After : May 8 01:05:17 2024 GMT Subject: CN=6631954e-fb87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ca:3f:cc:17:b4:cd:c0:7a:35:0b:43:94:50: ad:52:55:78:2e:fe:a7:7a:23:6d:26:9b:bb:d1:0b: fa:70:c6:07:57:5d:ed:3f:0c:96:f1:d0:ca:7d:52: 75:7d:54:06:36:c4:5b:9a:0a:a1:ca:41:8b:94:be: e2:cb:c6:89:54:15:66:b8:72:cc:a9:a9:76:1d:8d: 7a:4c:dd:18:3c:c2:a2:cd:71:cc:82:7d:36:f8:92: e2:98:1a:ef:f1:30:4a:8d:7a:1f:cc:3c:30:30:7a: aa:6d:df:d0:ec:64:c3:7a:4f:66:93:ea:a7:fe:89: e2:fd:58:67:a2:4b:ea:b7:92:b0:96:18:21:44:2c: f5:27:88:9a:44:6d:a5:2b:e0:2f:51:5d:e9:da:51: bb:6d:71:29:61:66:82:8c:67:6f:5d:72:0d:81:05: b8:9e:62:a7:e0:78:92:76:08:a5:63:da:fc:7c:90: 53:d7:c8:a0:d8:95:61:e5:cb:7a:b5:4a:85:b2:e6: 34:19:3f:10:a6:38:34:62:6b:9b:1d:92:25:75:46: d7:85:8c:c1:4e:75:23:2d:cd:98:af:13:37:4c:7d: f7:0c:23:6f:25:73:03:fb:87:68:e2:78:a5:50:71: 5e:26:d9:8a:83:8b:ed:36:da:f1:25:cd:d4:9a:d6: 29:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:01:20:15:AC:D8:10:D6:A3:6D:EB:DC:DC:AD:2E:E2:67:79:16:03 X509v3 Authority Key Identifier: keyid:A6:8B:C0:91:0F:83:1D:EC:81:8A:50:A3:21:45:F7:43:55:CE:63:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/povAkQ-DHeyBilCjIUX3Q1XOY8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:b1:0b:f6:9f:6f:44:31:72:32:88:f8:f6:74:a3:e0:6c:e6: 6e:d7:91:aa:7e:34:6a:38:50:dd:74:e2:24:d0:fc:68:85:07: 78:a7:2b:25:34:b9:30:c4:6f:bc:f5:72:4a:04:cf:ac:0a:c9: 2c:b9:8e:72:a4:e3:09:62:81:87:a7:4c:0f:13:93:cf:bc:53: 9c:c4:be:6b:d9:26:30:ff:c9:d0:f2:44:63:fb:b1:9a:ff:14: 4c:cb:7d:0b:c5:6a:d1:b2:48:b7:55:70:3d:31:85:1b:81:84: be:f4:3b:ea:b6:31:26:18:91:2c:2f:9e:41:d7:b3:56:4e:f0: 91:71:59:68:bd:61:f5:0c:90:05:55:b0:dc:78:5a:bb:31:7b: 15:fd:ee:44:a9:78:5a:6d:7d:b5:62:6e:31:23:81:0d:03:27: 4f:69:b0:a2:ce:5f:35:69:87:05:ed:fd:a3:eb:b6:e3:05:83: c4:7c:88:31:1a:df:b6:b8:05:37:a7:bf:ff:36:ec:32:a2:99: 77:14:2f:f9:9b:2c:0d:1d:09:2b:da:46:d9:eb:9f:01:7c:9c: 46:16:49:13:23:df:89:24:44:a7:95:02:5a:bc:87:02:8d:37: 4c:31:d8:e9:8a:24:36:e2:67:ad:52:d2:86:48:2b:ff:dd:39: 4d:96:69:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI2RkMxMTAvBgNVBAUTKEE2OEJDMDkxMEY4MzFERUM4MThBNTBBMzIxNDVGNzQz NTVDRTYzQzAwHhcNMjQwNTAxMDEwNTE3WhcNMjQwNTA4MDEwNTE3WjAYMRYwFAYD VQQDEw02NjMxOTU0ZS1mYjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuso/zBe0zcB6NQtDlFCtUlV4Lv6neiNtJpu70Qv6cMYHV13tPwyW8dDKfVJ1 fVQGNsRbmgqhykGLlL7iy8aJVBVmuHLMqal2HY16TN0YPMKizXHMgn02+JLimBrv 8TBKjXofzDwwMHqqbd/Q7GTDek9mk+qn/oni/Vhnokvqt5KwlhghRCz1J4iaRG2l K+AvUV3p2lG7bXEpYWaCjGdvXXINgQW4nmKn4HiSdgilY9r8fJBT18ig2JVh5ct6 tUqFsuY0GT8Qpjg0YmubHZIldUbXhYzBTnUjLc2YrxM3TH33DCNvJXMD+4do4nil UHFeJtmKg4vtNtrxJc3UmtYpswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLkBIBWs 2BDWo23r3NytLuJneRYDMB8GA1UdIwQYMBaAFKaLwJEPgx3sgYpQoyFF90NVzmPA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjZGQy84ODkyQ0M0QTk4 MzkxMUVCQTE0MDk5NjBDNEY5QUUwMi9wb3ZBa1EtREhleUJpbENqSVVYM1ExWE9Z OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BvdkFrUS1ESGV5QmlsQ2pJVVgzUTFYT1k4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjZGQy84ODkyQ0M0QTk4MzkxMUVCQTE0MDk5NjBDNEY5QUUwMi9wb3ZBa1EtREhl eUJpbENqSVVYM1ExWE9ZOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTsQv2n29EMXIyiPj2dKPgbOZu15GqfjRqOFDddOIk0PxohQd4pysl NLkwxG+89XJKBM+sCsksuY5ypOMJYoGHp0wPE5PPvFOcxL5r2SYw/8nQ8kRj+7Ga /xRMy30LxWrRski3VXA9MYUbgYS+9DvqtjEmGJEsL55B17NWTvCRcVlovWH1DJAF VbDceFq7MXsV/e5EqXhabX21Ym4xI4ENAydPabCizl81aYcF7f2j67bjBYPEfIgx Gt+2uAU3p7//Nuwyopl3FC/5mywNHQkr2kbZ658BfJxGFkkTI9+JJESnlQJavIcC jTdMMdjpiiQ24metUtKGSCv/3TlNlmmj -----END CERTIFICATE-----Generated at Wed May 1 02:08:05 2024 by rpki-client on console-fra.rpki-client.org