$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft File: S0QUrmheSI9CsbZH7qAd67DE86A.mft (raw, json) Hash identifier: V2rC4EMRfCC+2EHEuXddMZNKA6Maabh+fIfuErpkWLo= Subject key identifier: 76:E4:39:D9:03:47:BF:8F:6A:C3:91:0C:A0:C2:CC:4E:62:15:DE:DA Authority key identifier: 4B:44:14:AE:68:5E:48:8F:42:B1:B6:47:EE:A0:1D:EB:B0:C4:F3:A0 Certificate issuer: /CN=A91A9B1B/serialNumber=4B4414AE685E488F42B1B647EEA01DEBB0C4F3A0 Certificate serial: 01B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0QUrmheSI9CsbZH7qAd67DE86A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft Manifest number: 01AC Signing time: Wed 01 May 2024 04:53:14 +0000 Manifest this update: Wed 01 May 2024 04:53:14 +0000 Manifest next update: Wed 08 May 2024 04:53:14 +0000 Files and hashes: 1: S0QUrmheSI9CsbZH7qAd67DE86A.crl (hash: UqoKJTgjseAvJMqZkRa8/sQj43J0daY9gVbwZ0O3UAQ=) 2: B3F935160E0F11ED89E89675C4F9AE02.roa (hash: aihzmTn/zW7hDpXNCW/Xk7hDXJkvmBxtX6q3a04aqGs=) 3: B4A58FE60E0F11ED89E89675C4F9AE02.roa (hash: nvRg5zfmj0wPOwUQbq4o5CMd2jG2xy4ipdAcs+hABz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.crl rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0QUrmheSI9CsbZH7qAd67DE86A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9B1B/serialNumber=4B4414AE685E488F42B1B647EEA01DEBB0C4F3A0 Validity Not Before: May 1 04:53:14 2024 GMT Not After : May 8 04:53:14 2024 GMT Subject: CN=6631caba-cc85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bc:8a:cc:36:00:50:b0:b0:fc:ec:0c:a8:3f: d5:b8:7d:9e:5e:c7:ac:b4:81:fd:0f:06:cb:bc:15: 9d:25:a7:d5:e4:15:c1:21:93:b9:d8:39:d8:16:55: 37:5c:c3:1c:7a:52:fd:7b:37:ff:66:c8:ac:f8:be: bc:c0:9a:a9:68:de:61:01:73:ff:48:37:89:8e:3b: a7:5f:a7:f6:9e:b5:ee:80:33:18:44:a7:e0:74:67: a5:e4:5a:d3:53:06:06:08:40:07:c0:0e:fc:91:56: ea:df:7b:10:f0:c1:b7:8c:75:47:2a:44:e7:33:77: b2:ee:6f:7d:30:e7:95:17:8d:22:9d:1a:31:4a:20: b7:af:4a:28:ce:fd:13:91:90:b6:aa:4c:60:a8:79: 32:13:bc:3c:fe:95:56:0b:e4:77:44:7a:ca:14:65: 02:32:cb:28:32:95:4f:32:a3:de:32:4c:bf:3a:1f: 63:3c:35:e9:83:0b:05:b3:72:ff:77:bb:15:d4:3b: 9c:cf:81:a9:49:57:91:a6:48:9a:20:52:0c:85:82: cc:48:50:49:55:a0:55:60:14:a2:20:e0:08:5c:88: 7b:36:b3:d3:7c:85:8c:02:a2:00:b6:d1:10:20:61: 26:e4:11:5c:c8:a0:06:ba:bb:8e:80:2f:f8:7b:9f: cc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E4:39:D9:03:47:BF:8F:6A:C3:91:0C:A0:C2:CC:4E:62:15:DE:DA X509v3 Authority Key Identifier: keyid:4B:44:14:AE:68:5E:48:8F:42:B1:B6:47:EE:A0:1D:EB:B0:C4:F3:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0QUrmheSI9CsbZH7qAd67DE86A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:e9:1a:b5:12:83:f4:b3:e3:6d:d8:b4:17:86:9c:8f:da:d9: 68:ef:e0:e4:56:f2:6c:b4:db:db:85:ad:df:eb:83:c0:c9:ba: 86:1f:34:50:a6:d7:29:c9:ba:25:7d:db:bd:ca:be:73:13:36: 7b:70:88:78:c0:22:7f:93:54:55:a8:44:0a:df:e2:bb:88:2f: 5f:60:e5:be:08:45:01:8d:d0:45:79:bf:31:83:97:10:6a:e3: b1:99:9e:26:c2:d0:3e:fb:d2:9d:8a:8e:f9:63:10:54:fb:1a: a5:1a:26:7b:3b:4f:36:d0:e5:ed:c4:f8:b3:60:7e:62:cb:01: 1b:21:f7:b6:dd:fe:2f:b8:6d:65:1d:49:d4:25:2c:2a:39:e1: 54:14:77:e3:c5:b4:ae:9c:c1:7d:7b:a3:df:68:12:d6:ae:c3: 0b:76:27:50:3f:1c:58:93:37:90:6a:77:6b:02:57:5f:a8:99: 61:64:53:c5:67:5c:c5:fe:de:8b:68:7b:9a:48:23:aa:2c:22: bb:3a:fc:b5:ee:c1:8e:40:28:ff:3f:80:c5:34:35:9a:34:58: 5c:40:a2:7e:8c:9e:93:f1:b7:5a:ec:54:d1:10:2f:f0:b3:4a: b7:cc:a1:4e:2e:53:50:b2:d7:53:b9:50:05:e3:08:b9:3c:47: ef:36:15:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlCMUIxMTAvBgNVBAUTKDRCNDQxNEFFNjg1RTQ4OEY0MkIxQjY0N0VFQTAxREVC QjBDNEYzQTAwHhcNMjQwNTAxMDQ1MzE0WhcNMjQwNTA4MDQ1MzE0WjAYMRYwFAYD VQQDEw02NjMxY2FiYS1jYzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtryKzDYAULCw/OwMqD/VuH2eXsestIH9DwbLvBWdJafV5BXBIZO52DnYFlU3 XMMcelL9ezf/Zsis+L68wJqpaN5hAXP/SDeJjjunX6f2nrXugDMYRKfgdGel5FrT UwYGCEAHwA78kVbq33sQ8MG3jHVHKkTnM3ey7m99MOeVF40inRoxSiC3r0oozv0T kZC2qkxgqHkyE7w8/pVWC+R3RHrKFGUCMssoMpVPMqPeMky/Oh9jPDXpgwsFs3L/ d7sV1Ducz4GpSVeRpkiaIFIMhYLMSFBJVaBVYBSiIOAIXIh7NrPTfIWMAqIAttEQ IGEm5BFcyKAGuruOgC/4e5/MoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHbkOdkD R7+PasORDKDCzE5iFd7aMB8GA1UdIwQYMBaAFEtEFK5oXkiPQrG2R+6gHeuwxPOg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUIxQi80QjM4NjREODBF MEIxMUVEQThEMTJFNThDNEY5QUUwMi9TMFFVcm1oZVNJOUNzYlpIN3FBZDY3REU4 NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MwUVVybWhlU0k5Q3NiWkg3cUFkNjdERTg2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUIxQi80QjM4NjREODBFMEIxMUVEQThEMTJFNThDNEY5QUUwMi9TMFFVcm1oZVNJ OUNzYlpIN3FBZDY3REU4NkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ6Rq1EoP0s+Nt2LQXhpyP2tlo7+DkVvJstNvbha3f64PAybqGHzRQ ptcpybolfdu9yr5zEzZ7cIh4wCJ/k1RVqEQK3+K7iC9fYOW+CEUBjdBFeb8xg5cQ auOxmZ4mwtA++9Kdio75YxBU+xqlGiZ7O0820OXtxPizYH5iywEbIfe23f4vuG1l HUnUJSwqOeFUFHfjxbSunMF9e6PfaBLWrsMLdidQPxxYkzeQandrAldfqJlhZFPF Z1zF/t6LaHuaSCOqLCK7Ovy17sGOQCj/P4DFNDWaNFhcQKJ+jJ6T8bda7FTREC/w s0q3zKFOLlNQstdTuVAF4wi5PEfvNhXB -----END CERTIFICATE-----Generated at Wed May 1 05:59:09 2024 by rpki-client on console-fra.rpki-client.org