$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft File: pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft (raw, json) Hash identifier: 6ijo14VUD0M7TlyEaUFiQeGyGsKTXt2rzU0Jv9s9A4o= Subject key identifier: 46:62:F8:FB:D4:E6:57:E6:4A:C6:73:0A:B8:75:CD:7D:D0:4F:A5:67 Authority key identifier: A4:8C:9B:D4:A5:DB:11:9E:15:43:32:41:36:E0:2E:EA:4B:CA:AF:38 Certificate issuer: /CN=A91A8475/serialNumber=A48C9BD4A5DB119E1543324136E02EEA4BCAAF38 Certificate serial: 013A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft Manifest number: 0134 Signing time: Wed 01 May 2024 05:19:13 +0000 Manifest this update: Wed 01 May 2024 05:19:12 +0000 Manifest next update: Wed 08 May 2024 05:19:12 +0000 Files and hashes: 1: pIyb1KXbEZ4VQzJBNuAu6kvKrzg.crl (hash: +G3HRNBZEc/o6YnEsh37kcQp0qtr0h8/J6a4yiFsJeM=) 2: A4E607B6B1C511EDA095B220C4F9AE02.roa (hash: qOEF1ePf+rsGuIXAluKRagPgusuZrEbcf2IdGRznjOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.crl rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 314 (0x13a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8475/serialNumber=A48C9BD4A5DB119E1543324136E02EEA4BCAAF38 Validity Not Before: May 1 05:19:12 2024 GMT Not After : May 8 05:19:12 2024 GMT Subject: CN=6631d0d1-cdfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:d3:18:60:4b:2e:3d:c7:87:dd:5f:fa:67:fb: 4e:91:ac:d6:26:3f:74:fe:d7:7b:44:03:d8:90:97: 1d:ae:57:d2:0e:05:4c:29:c5:7b:b2:82:24:25:e1: 50:cd:65:f7:67:b3:9c:f9:d4:1d:f0:cd:54:27:dd: 62:c3:48:30:2c:b3:66:fc:89:20:c6:ef:7c:ed:c9: 77:2a:ce:f5:84:3a:a7:92:d2:d3:77:e6:14:cd:6a: a9:69:71:04:f0:db:ee:d1:23:71:0c:d7:c8:02:6d: 47:4f:3b:3b:43:19:3f:26:ea:ad:39:e7:ab:c8:8b: f7:4a:db:62:d4:a5:ba:f6:ad:e6:6b:a4:30:c8:a9: 21:1a:d8:2b:48:fd:67:40:d6:01:9a:87:29:3d:5e: 26:be:35:17:75:1f:06:49:56:f2:2d:33:76:d8:69: 8a:05:07:05:06:65:8a:3c:40:2e:c1:d1:36:72:19: 3b:9d:7c:7e:9c:f0:77:93:f6:69:f1:6d:ea:85:41: 56:67:e6:3f:90:0e:3d:74:64:2b:24:4d:f2:98:b6: 6c:cc:a5:56:b8:94:3d:79:cf:f8:2e:58:d9:e6:78: d7:77:69:a2:09:c8:9d:a2:c5:13:d1:cc:d3:79:c4: 84:ed:29:6f:f3:99:4f:b7:59:c7:3f:a3:90:29:c8: 7e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:62:F8:FB:D4:E6:57:E6:4A:C6:73:0A:B8:75:CD:7D:D0:4F:A5:67 X509v3 Authority Key Identifier: keyid:A4:8C:9B:D4:A5:DB:11:9E:15:43:32:41:36:E0:2E:EA:4B:CA:AF:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:df:90:df:b8:72:3c:01:bd:62:37:26:ee:c5:f3:1c:06:a2: 96:73:9a:f7:b3:a8:f0:73:5e:61:43:5c:ab:a2:0e:a7:5f:9e: 4c:3f:5f:2b:de:da:bc:89:61:b4:2d:41:da:b0:02:0f:7b:d0: 6d:0d:f2:a2:a9:14:b7:63:55:8a:db:11:2b:d6:a3:cc:e6:9b: 5a:fa:10:e2:0a:e0:05:87:4a:b2:78:d1:d9:6d:4a:a6:ff:2f: dc:dc:d9:23:24:3e:6b:b0:ed:ae:c8:dd:28:ae:a8:13:ff:23: 20:11:8a:2b:81:b8:b5:5a:59:d4:40:04:12:d6:80:ba:92:bf: 50:75:16:ad:aa:80:49:54:ef:4d:e0:76:65:19:79:e1:38:c5: 8d:70:9c:ca:57:9e:a6:93:c4:cd:9f:a4:39:98:6e:bc:2b:a3: de:7c:24:f4:ab:e2:9e:2c:a4:11:07:f4:d2:04:93:8b:11:23: 57:0f:2c:a5:85:5b:2e:82:96:bb:65:03:3f:58:87:ed:01:f6: 8a:b1:85:ce:07:42:bb:c8:19:a5:2c:4c:b8:35:fb:61:cf:4e: fd:5a:a1:c4:b4:68:df:d2:59:6d:13:69:95:12:cf:07:a6:2e: 49:5c:88:81:56:50:7b:16:b0:8a:e9:35:7c:50:59:a3:ac:35: 3b:90:44:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg0NzUxMTAvBgNVBAUTKEE0OEM5QkQ0QTVEQjExOUUxNTQzMzI0MTM2RTAyRUVB NEJDQUFGMzgwHhcNMjQwNTAxMDUxOTEyWhcNMjQwNTA4MDUxOTEyWjAYMRYwFAYD VQQDEw02NjMxZDBkMS1jZGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9dMYYEsuPceH3V/6Z/tOkazWJj90/td7RAPYkJcdrlfSDgVMKcV7soIkJeFQ zWX3Z7Oc+dQd8M1UJ91iw0gwLLNm/Ikgxu987cl3Ks71hDqnktLTd+YUzWqpaXEE 8Nvu0SNxDNfIAm1HTzs7Qxk/JuqtOeeryIv3Stti1KW69q3ma6QwyKkhGtgrSP1n QNYBmocpPV4mvjUXdR8GSVbyLTN22GmKBQcFBmWKPEAuwdE2chk7nXx+nPB3k/Zp 8W3qhUFWZ+Y/kA49dGQrJE3ymLZszKVWuJQ9ec/4LljZ5njXd2miCcidosUT0czT ecSE7Slv85lPt1nHP6OQKch+4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZi+PvU 5lfmSsZzCrh1zX3QT6VnMB8GA1UdIwQYMBaAFKSMm9Sl2xGeFUMyQTbgLupLyq84 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODQ3NS82QjY1ODJGMjNF RjAxMUVEQTFGMzA1MUFDNEY5QUUwMi9wSXliMUtYYkVaNFZRekpCTnVBdTZrdkty emcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BJeWIxS1hiRVo0VlF6SkJOdUF1Nmt2S3J6Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODQ3NS82QjY1ODJGMjNFRjAxMUVEQTFGMzA1MUFDNEY5QUUwMi9wSXliMUtYYkVa NFZRekpCTnVBdTZrdktyemcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBS35DfuHI8Ab1iNybuxfMcBqKWc5r3s6jwc15hQ1yrog6nX55MP18r 3tq8iWG0LUHasAIPe9BtDfKiqRS3Y1WK2xEr1qPM5pta+hDiCuAFh0qyeNHZbUqm /y/c3NkjJD5rsO2uyN0orqgT/yMgEYorgbi1WlnUQAQS1oC6kr9QdRatqoBJVO9N 4HZlGXnhOMWNcJzKV56mk8TNn6Q5mG68K6PefCT0q+KeLKQRB/TSBJOLESNXDyyl hVsugpa7ZQM/WIftAfaKsYXOB0K7yBmlLEy4Nfthz079WqHEtGjf0lltE2mVEs8H pi5JXIiBVlB7FrCK6TV8UFmjrDU7kER2 -----END CERTIFICATE-----Generated at Wed May 1 05:59:09 2024 by rpki-client on console-fra.rpki-client.org