$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft File: U2v43c6AJmc3j0e9SVSpC3xwCcE.mft (raw, json) Hash identifier: L6bbPHGKf2ZGMnbcSrhsLJfYfx/Dmx2cE0jyi987P1w= Subject key identifier: F9:76:14:E3:5C:A0:4A:AA:E0:B8:A0:34:F6:5C:37:08:42:FD:28:E1 Authority key identifier: 53:6B:F8:DD:CE:80:26:67:37:8F:47:BD:49:54:A9:0B:7C:70:09:C1 Certificate issuer: /CN=A91A5849/serialNumber=536BF8DDCE802667378F47BD4954A90B7C7009C1 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2v43c6AJmc3j0e9SVSpC3xwCcE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft Manifest number: 14 Signing time: Fri 17 May 2024 08:55:46 +0000 Manifest this update: Fri 17 May 2024 08:55:45 +0000 Manifest next update: Fri 24 May 2024 08:55:45 +0000 Files and hashes: 1: U2v43c6AJmc3j0e9SVSpC3xwCcE.crl (hash: Ybsu4KHZ26Vk4IGxzz8vTwsIQ2FGahGNyk3QjT7EpFg=) 2: D8346320F7A011EE8BE8843BC4F9AE02.roa (hash: 8W+xFxZgciOpBXooHDbzzZTklV4cRzIRaTe2EGYo2G4=) 3: FA3B5DCAF7A011EEBAC1E03BC4F9AE02.roa (hash: SiXu7T2X5Ai2mQId/ZQnSVGAYrsHoSW8pzAzpHcsuBY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.crl rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2v43c6AJmc3j0e9SVSpC3xwCcE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5849/serialNumber=536BF8DDCE802667378F47BD4954A90B7C7009C1 Validity Not Before: May 17 08:55:45 2024 GMT Not After : May 24 08:55:45 2024 GMT Subject: CN=66471b91-2903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:61:3d:12:d9:5f:52:01:c7:d3:94:f8:9e:d9: da:96:e9:a0:62:6d:fb:b7:a0:31:de:61:0d:77:52: b3:fd:5e:70:53:15:c8:56:b7:aa:18:62:c5:ea:db: a9:50:39:aa:ee:55:3e:68:95:d6:6d:7e:7d:fb:06: 5c:f7:54:40:cd:7e:42:4c:ef:bc:b3:8c:0d:b9:e7: 21:02:2f:c3:1b:68:ac:06:5e:2f:fa:71:57:39:62: 3a:20:ff:40:76:b8:d0:60:cd:d9:33:45:30:94:f8: d4:bd:f9:f5:a7:af:b7:76:0e:09:a6:50:78:02:ee: 51:e7:9f:f8:9b:18:1d:ff:f5:20:61:2c:ef:0f:bc: d3:ed:51:56:f7:24:37:fd:82:28:df:6e:a7:6e:45: 11:85:7d:7f:6e:73:a3:ee:0a:4c:fa:fe:ab:4d:b1: aa:f9:45:b1:a4:e6:ed:e7:32:66:f7:9a:d0:60:1b: ee:a9:39:80:09:b0:8a:3e:14:9e:f7:1f:ce:89:1d: 91:e6:ab:13:95:40:e6:97:20:e5:47:f4:13:a2:74: 24:fd:b6:ab:4b:d6:03:3e:a1:db:2c:df:6f:85:3c: 6a:b6:51:1a:92:97:0c:e3:44:2c:1e:3c:9f:56:b1: 4a:99:b8:8d:8c:06:79:fd:5d:d1:81:a8:6c:86:6e: 4c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:76:14:E3:5C:A0:4A:AA:E0:B8:A0:34:F6:5C:37:08:42:FD:28:E1 X509v3 Authority Key Identifier: keyid:53:6B:F8:DD:CE:80:26:67:37:8F:47:BD:49:54:A9:0B:7C:70:09:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2v43c6AJmc3j0e9SVSpC3xwCcE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:53:76:da:96:53:27:e5:05:05:c2:a7:3e:95:60:e5:d1:c1: bb:3d:d6:f0:7e:bb:75:c8:a0:17:92:84:b0:2d:fe:12:2d:50: 1b:24:c5:3c:b0:2a:37:b8:45:4b:3b:50:c9:88:aa:67:d4:65: 23:33:b8:d9:ee:5d:42:29:6d:dc:00:f2:0e:49:76:7c:56:e3: 05:62:c4:63:35:69:5e:b1:7e:42:04:60:6a:27:f8:46:72:97: c3:01:30:f7:75:d7:f6:33:31:5b:13:f0:49:2c:6e:ab:0b:aa: 48:b8:18:2f:db:7e:c1:bc:aa:f5:18:dd:1f:2e:be:32:be:0c: 9a:17:97:e2:61:47:e4:98:69:41:7d:8f:72:96:5f:35:eb:78: 2f:16:c0:e1:7e:e9:e8:06:e1:58:eb:08:4c:6a:57:18:11:75: 1d:d0:e5:57:a6:a5:f9:83:d2:ee:e8:0c:ef:e6:99:0d:01:56: cf:b9:ee:ac:10:7a:df:f6:22:2f:96:dd:5c:34:52:a3:fb:13: 66:76:40:a8:c5:51:b7:80:fc:5e:a9:46:f8:d5:07:d3:4a:ce: e3:3e:c9:da:80:6b:7d:0d:2a:ec:85:7b:8d:7f:38:0f:f1:71: e3:5f:4e:7e:b3:94:56:5e:eb:74:8b:4a:01:89:b8:bc:0a:62: 94:f4:a0:75 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NTg0OTExMC8GA1UEBRMoNTM2QkY4RERDRTgwMjY2NzM3OEY0N0JENDk1NEE5MEI3 QzcwMDlDMTAeFw0yNDA1MTcwODU1NDVaFw0yNDA1MjQwODU1NDVaMBgxFjAUBgNV BAMTDTY2NDcxYjkxLTI5MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLYT0S2V9SAcfTlPie2dqW6aBibfu3oDHeYQ13UrP9XnBTFchWt6oYYsXq26lQ OaruVT5oldZtfn37Blz3VEDNfkJM77yzjA255yECL8MbaKwGXi/6cVc5Yjog/0B2 uNBgzdkzRTCU+NS9+fWnr7d2DgmmUHgC7lHnn/ibGB3/9SBhLO8PvNPtUVb3JDf9 gijfbqduRRGFfX9uc6PuCkz6/qtNsar5RbGk5u3nMmb3mtBgG+6pOYAJsIo+FJ73 H86JHZHmqxOVQOaXIOVH9BOidCT9tqtL1gM+odss32+FPGq2URqSlwzjRCwePJ9W sUqZuI2MBnn9XdGBqGyGbkwFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+XYU41yg SqrguKA09lw3CEL9KOEwHwYDVR0jBBgwFoAUU2v43c6AJmc3j0e9SVSpC3xwCcEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1ODQ5L0RCQUQzODRFRjc5 RTExRUVBNDVBQUUyQ0M0RjlBRTAyL1UydjQzYzZBSm1jM2owZTlTVlNwQzN4d0Nj RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVTJ2NDNjNkFKbWMzajBlOVNWU3BDM3h3Q2NFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1 ODQ5L0RCQUQzODRFRjc5RTExRUVBNDVBQUUyQ0M0RjlBRTAyL1UydjQzYzZBSm1j M2owZTlTVlNwQzN4d0NjRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFpTdtqWUyflBQXCpz6VYOXRwbs91vB+u3XIoBeShLAt/hItUBskxTyw Kje4RUs7UMmIqmfUZSMzuNnuXUIpbdwA8g5JdnxW4wVixGM1aV6xfkIEYGon+EZy l8MBMPd11/YzMVsT8EksbqsLqki4GC/bfsG8qvUY3R8uvjK+DJoXl+JhR+SYaUF9 j3KWXzXreC8WwOF+6egG4VjrCExqVxgRdR3Q5VempfmD0u7oDO/mmQ0BVs+57qwQ et/2Ii+W3Vw0UqP7E2Z2QKjFUbeA/F6pRvjVB9NKzuM+ydqAa30NKuyFe41/OA/x ceNfTn6zlFZe63SLSgGJuLwKYpT0oHU= -----END CERTIFICATE-----Generated at Fri May 17 10:10:52 2024 by rpki-client on console-fra.rpki-client.org