$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft File: -Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft (raw, json) Hash identifier: iQEnkVnghBJbpAcPlgJhkJCt8zLr2V5PQBgPo8+MrRI= Subject key identifier: 99:7C:5D:BE:FB:A4:C9:22:EF:F4:10:2E:50:49:1D:7B:E1:4F:26:8E Authority key identifier: F9:2A:75:0B:52:47:94:D4:FB:BF:21:88:5B:DA:F6:D0:78:F1:E8:81 Certificate issuer: /CN=A91AA053/serialNumber=F92A750B524794D4FBBF21885BDAF6D078F1E881 Certificate serial: 0665 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft Manifest number: 0661 Signing time: Thu 02 May 2024 23:41:53 +0000 Manifest this update: Thu 02 May 2024 23:41:53 +0000 Manifest next update: Thu 09 May 2024 23:41:53 +0000 Files and hashes: 1: -Sp1C1JHlNT7vyGIW9r20Hjx6IE.crl (hash: 84wGDaZRnRhkuROgvkISKXeNVt+lx6BDKyQF1DKKSGc=) 2: AD7A378C334411EB901EBB81C4F9AE02.roa (hash: S37wpIPSKlGYZDu3ywFrmoBX/a7GYNX3mN+QFGuswMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.crl rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 23:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1637 (0x665) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA053/serialNumber=F92A750B524794D4FBBF21885BDAF6D078F1E881 Validity Not Before: May 2 23:41:53 2024 GMT Not After : May 9 23:41:53 2024 GMT Subject: CN=663424c1-5f31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:02:8c:3f:e4:17:62:56:f2:60:a5:9f:be:cf: 3a:de:1c:b3:bd:0c:b7:0e:24:aa:ac:f0:5f:97:44: 9d:33:96:8b:aa:52:2d:82:25:bf:aa:2c:45:bc:5b: b8:46:89:0b:c8:44:9b:33:af:a8:f3:bb:8b:11:b0: f3:57:5c:0a:97:b0:00:d1:1e:95:fc:8c:e5:97:dc: 60:83:81:8c:80:05:53:1f:c9:ad:70:73:6b:25:1a: 5f:aa:08:6c:9a:57:dc:91:1a:25:01:19:cf:44:7a: 0b:b2:30:ae:d6:0a:42:d9:72:0d:2d:4c:be:2d:f9: 76:cd:3a:6b:37:bd:dc:1c:8d:c9:73:71:59:c0:a1: 4f:d9:00:21:0d:9c:77:87:2d:0d:f9:d0:43:d5:34: 23:0c:55:cb:d3:d1:d0:43:10:3d:f0:20:f4:dd:0b: b7:69:ce:ce:8b:7d:7c:ba:68:9f:ac:3e:0e:7d:06: ef:17:a9:df:c6:fa:fd:ec:87:6a:12:7f:ff:0f:6b: c3:5b:dc:a9:6d:1b:e0:96:f3:76:53:61:5f:7d:55: 15:70:c5:bb:a4:1d:38:bc:2e:4c:ec:f9:eb:44:c6: e1:1f:32:79:1c:ad:78:5a:1d:dc:11:c8:3e:58:08: 84:cb:18:44:97:37:0c:95:b4:7d:a0:fd:49:05:fd: 88:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:7C:5D:BE:FB:A4:C9:22:EF:F4:10:2E:50:49:1D:7B:E1:4F:26:8E X509v3 Authority Key Identifier: keyid:F9:2A:75:0B:52:47:94:D4:FB:BF:21:88:5B:DA:F6:D0:78:F1:E8:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:b4:15:fc:d0:ca:2a:a1:68:0d:44:42:93:c5:87:a2:6d:1a: 38:c1:cf:eb:37:d5:34:96:22:fe:47:f4:0b:94:83:f9:e1:88: aa:f6:50:10:ae:04:d4:47:28:5f:95:72:a3:97:62:85:72:9c: c8:6d:cd:e6:54:73:a0:03:b8:29:4e:41:fe:6e:6c:0f:30:46: 42:6d:c2:2c:e3:24:04:d5:83:73:96:71:3c:95:b7:c3:56:39: 10:07:82:a4:6f:8b:8c:e0:15:3f:04:e0:cb:93:7c:13:01:eb: 2a:52:dd:d4:41:13:97:80:ef:27:ea:75:33:9c:a4:0e:29:c3: e6:a8:a6:7f:e8:ed:ee:5b:c5:86:eb:5a:dc:7b:ea:1b:08:0c: 8d:59:f4:40:17:00:3e:53:20:87:41:30:5b:d0:11:c0:cc:2b: d7:b6:ec:f1:df:f8:bc:ae:ec:3f:a0:43:13:6d:f5:24:7c:c9: 15:dc:c9:9d:32:ce:dc:bc:c3:21:b9:c4:e0:fd:61:4b:12:84: d0:65:c1:52:00:b9:95:82:9d:8f:1f:09:e6:4f:d8:5b:ca:11: b6:cc:d2:bb:b4:dd:1d:f7:40:e5:44:23:b1:37:c3:40:47:04: d5:1c:49:55:86:67:40:a4:d7:ed:94:58:71:12:e7:20:a4:06: 86:c9:57:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUEwNTMxMTAvBgNVBAUTKEY5MkE3NTBCNTI0Nzk0RDRGQkJGMjE4ODVCREFGNkQw NzhGMUU4ODEwHhcNMjQwNTAyMjM0MTUzWhcNMjQwNTA5MjM0MTUzWjAYMRYwFAYD VQQDEw02NjM0MjRjMS01ZjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQKMP+QXYlbyYKWfvs863hyzvQy3DiSqrPBfl0SdM5aLqlItgiW/qixFvFu4 RokLyESbM6+o87uLEbDzV1wKl7AA0R6V/Izll9xgg4GMgAVTH8mtcHNrJRpfqghs mlfckRolARnPRHoLsjCu1gpC2XINLUy+Lfl2zTprN73cHI3Jc3FZwKFP2QAhDZx3 hy0N+dBD1TQjDFXL09HQQxA98CD03Qu3ac7Oi318umifrD4OfQbvF6nfxvr97Idq En//D2vDW9ypbRvglvN2U2FffVUVcMW7pB04vC5M7PnrRMbhHzJ5HK14Wh3cEcg+ WAiEyxhElzcMlbR9oP1JBf2IYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJl8Xb77 pMki7/QQLlBJHXvhTyaOMB8GA1UdIwQYMBaAFPkqdQtSR5TU+78hiFva9tB48eiB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTA1My9BRkI2QkY3NjMz NDMxMUVCQjUzNjVFODFDNEY5QUUwMi8tU3AxQzFKSGxOVDd2eUdJVzlyMjBIang2 SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1TcDFDMUpIbE5UN3Z5R0lXOXIyMEhqeDZJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTA1My9BRkI2QkY3NjMzNDMxMUVCQjUzNjVFODFDNEY5QUUwMi8tU3AxQzFKSGxO VDd2eUdJVzlyMjBIang2SUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBktBX80MoqoWgNREKTxYeibRo4wc/rN9U0liL+R/QLlIP54Yiq9lAQ rgTURyhflXKjl2KFcpzIbc3mVHOgA7gpTkH+bmwPMEZCbcIs4yQE1YNzlnE8lbfD VjkQB4Kkb4uM4BU/BODLk3wTAesqUt3UQROXgO8n6nUznKQOKcPmqKZ/6O3uW8WG 61rce+obCAyNWfRAFwA+UyCHQTBb0BHAzCvXtuzx3/i8ruw/oEMTbfUkfMkV3Mmd Ms7cvMMhucTg/WFLEoTQZcFSALmVgp2PHwnmT9hbyhG2zNK7tN0d90DlRCOxN8NA RwTVHElVhmdApNftlFhxEucgpAaGyVfe -----END CERTIFICATE-----Generated at Fri May 3 00:28:39 2024 by rpki-client on console-fra.rpki-client.org