$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft File: cS61otcGnxjunGXzsBMnGtvx9UA.mft (raw, json) Hash identifier: XLMejkehXHhdS0DxOCZwPc9oi7hQ5kZHuRY8iwkL7UY= Subject key identifier: 9F:DD:D5:B7:F0:20:4A:7C:3C:C7:73:A3:31:3C:E0:C0:71:D3:EC:B9 Authority key identifier: 71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40 Certificate issuer: /CN=A91A8A52/serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540 Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft Manifest number: 0111 Signing time: Fri 03 May 2024 05:30:37 +0000 Manifest this update: Fri 03 May 2024 05:30:36 +0000 Manifest next update: Fri 10 May 2024 05:30:36 +0000 Files and hashes: 1: cS61otcGnxjunGXzsBMnGtvx9UA.crl (hash: yRq2nQt6ScnqkZpqnJh7cYo6Sdy6eTUwJ9icacoMJX0=) 2: E5FC4584965E11EEBE3E0C54C4F9AE02.roa (hash: v7dLmK1CZLoLxUWjZWdMzn94e/qgfqNNjyJGBbnx3cE=) 3: B5AE4CBAB4E111EDABDE6465C4F9AE02.roa (hash: oIRC/aQgJAallAP6T7346kNwrc54H/9fYzZwh6vtxAk=) 4: 8F14EDAA70B911EDB6E1F81BC4F9AE02.roa (hash: krdX3E3FXGP80zr3le2cyVtnOC95WYTeNcCBOyjwLio=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8A52/serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540 Validity Not Before: May 3 05:30:36 2024 GMT Not After : May 10 05:30:36 2024 GMT Subject: CN=6634767c-1048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c3:77:72:6e:d1:5f:04:b8:48:0f:6b:36:e2: 48:4e:2d:64:0e:92:12:ad:4c:65:5a:a4:13:0e:a3: f1:e7:90:9f:0a:f2:d9:73:b4:05:5c:76:58:43:bd: 88:04:4f:63:4c:f3:ad:79:ad:ee:c6:b4:cd:72:b1: 9e:66:eb:fb:98:d8:d7:1a:ba:e4:c3:07:18:ac:0f: 67:76:f9:d3:c6:3a:83:c0:a5:50:bc:a2:d3:d0:80: 5b:c3:48:fb:39:d8:25:08:4f:1c:11:52:68:eb:70: 2b:39:28:b1:28:fd:99:3c:d1:a8:71:c8:70:39:41: 47:b5:66:5a:8d:78:06:ae:df:c9:db:5c:c5:a5:1a: d5:9a:56:c7:27:43:0f:d6:46:36:fa:3a:1f:c5:a4: 0d:6e:2e:3f:04:dc:7c:c5:0b:0e:91:2d:8b:53:74: b4:35:2a:91:2b:a4:3e:d7:b3:ff:4d:c0:49:2a:7f: 05:2b:ee:5b:18:91:0e:d9:e4:47:83:3b:3c:b5:a3: 3e:b7:cb:5e:0c:1c:2a:6c:3b:3a:d3:46:d8:3a:20: 8a:9f:1d:59:f8:e2:86:fd:35:eb:55:ce:41:62:c8: 13:f4:7f:bf:03:82:cd:45:a4:a5:e2:b2:f4:dc:d9: 04:23:8f:01:0d:23:cd:53:07:5c:f0:ec:7b:3c:ac: 72:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:DD:D5:B7:F0:20:4A:7C:3C:C7:73:A3:31:3C:E0:C0:71:D3:EC:B9 X509v3 Authority Key Identifier: keyid:71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:b5:f5:2f:73:36:f2:2a:1a:e0:05:c5:09:3f:fe:d8:68:40: ea:14:66:e0:50:6b:91:48:16:96:76:7d:be:f7:23:e9:e9:38: ce:e8:c1:42:32:14:a3:e6:92:31:df:be:a1:91:3a:f7:06:d3: 2b:2f:58:a9:3d:8a:72:b7:2d:4e:f0:9c:5c:b7:20:8f:1b:c9: 86:2c:bd:9f:15:0d:a1:e1:4e:d7:62:01:32:12:ad:79:cb:8a: f8:2a:73:fb:9b:0c:8e:8e:17:01:31:a9:86:55:19:b9:2b:c1: 8d:48:71:25:8e:6d:cf:3f:61:a4:97:4c:7d:1a:a1:25:d0:82: 09:fc:24:ba:0a:4b:09:ea:c9:ba:fd:cd:b0:66:d4:89:b1:fc: a6:95:15:9b:d0:35:ac:34:fb:f8:52:d0:e7:c9:5b:0a:12:8a: e6:82:e6:62:20:8b:06:a7:75:42:92:ab:27:6b:a1:40:86:2b: d5:e2:3f:b5:74:e0:52:89:1e:fb:43:cd:fb:91:5f:7e:c9:dd: 87:93:5c:8e:29:49:ca:a2:04:4c:b9:30:a5:70:07:1c:5c:ec: fe:c8:cd:98:4e:f5:4c:84:c3:01:1b:07:fb:21:b4:a2:57:f7: b7:bf:d4:77:c3:0b:f0:82:9f:73:53:67:49:fe:ee:c5:c8:95: e0:4d:12:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBNTIxMTAvBgNVBAUTKDcxMkVCNUEyRDcwNjlGMThFRTlDNjVGM0IwMTMyNzFB REJGMUY1NDAwHhcNMjQwNTAzMDUzMDM2WhcNMjQwNTEwMDUzMDM2WjAYMRYwFAYD VQQDEw02NjM0NzY3Yy0xMDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2MN3cm7RXwS4SA9rNuJITi1kDpISrUxlWqQTDqPx55CfCvLZc7QFXHZYQ72I BE9jTPOtea3uxrTNcrGeZuv7mNjXGrrkwwcYrA9ndvnTxjqDwKVQvKLT0IBbw0j7 OdglCE8cEVJo63ArOSixKP2ZPNGocchwOUFHtWZajXgGrt/J21zFpRrVmlbHJ0MP 1kY2+jofxaQNbi4/BNx8xQsOkS2LU3S0NSqRK6Q+17P/TcBJKn8FK+5bGJEO2eRH gzs8taM+t8teDBwqbDs600bYOiCKnx1Z+OKG/TXrVc5BYsgT9H+/A4LNRaSl4rL0 3NkEI48BDSPNUwdc8Ox7PKxyDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/d1bfw IEp8PMdzozE84MBx0+y5MB8GA1UdIwQYMBaAFHEutaLXBp8Y7pxl87ATJxrb8fVA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEE1Mi9GQjdFNEJERTcw QjUxMUVEOTNGMEREMTZDNEY5QUUwMi9jUzYxb3RjR254anVuR1h6c0JNbkd0dng5 VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NTNjFvdGNHbnhqdW5HWHpzQk1uR3R2eDlVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEE1Mi9GQjdFNEJERTcwQjUxMUVEOTNGMEREMTZDNEY5QUUwMi9jUzYxb3RjR254 anVuR1h6c0JNbkd0dng5VUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/tfUvczbyKhrgBcUJP/7YaEDqFGbgUGuRSBaWdn2+9yPp6TjO6MFC MhSj5pIx376hkTr3BtMrL1ipPYpyty1O8JxctyCPG8mGLL2fFQ2h4U7XYgEyEq15 y4r4KnP7mwyOjhcBMamGVRm5K8GNSHEljm3PP2Gkl0x9GqEl0IIJ/CS6CksJ6sm6 /c2wZtSJsfymlRWb0DWsNPv4UtDnyVsKEormguZiIIsGp3VCkqsna6FAhivV4j+1 dOBSiR77Q837kV9+yd2Hk1yOKUnKogRMuTClcAccXOz+yM2YTvVMhMMBGwf7IbSi V/e3v9R3wwvwgp9zU2dJ/u7FyJXgTRJZ -----END CERTIFICATE-----Generated at Fri May 3 06:29:21 2024 by rpki-client on console-fra.rpki-client.org