$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft File: g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft (raw, json) Hash identifier: H61xPr7bByD9/JUpW+hW5/cBGK45VTsjvwZO78cP3eQ= Subject key identifier: F1:7F:F8:CF:CE:ED:00:99:61:CC:80:CA:34:8A:4A:18:33:A1:4C:2F Authority key identifier: 83:B6:E7:EA:23:BD:C3:A3:8D:60:B4:FF:A2:EF:F5:A1:8F:1D:CD:68 Certificate issuer: /CN=A91AB4BA/serialNumber=83B6E7EA23BDC3A38D60B4FFA2EFF5A18F1DCD68 Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7bn6iO9w6ONYLT_ou_1oY8dzWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft Manifest number: F0 Signing time: Fri 03 May 2024 05:52:07 +0000 Manifest this update: Fri 03 May 2024 05:52:06 +0000 Manifest next update: Fri 10 May 2024 05:52:06 +0000 Files and hashes: 1: g7bn6iO9w6ONYLT_ou_1oY8dzWg.crl (hash: 0GSKPEleuif46jYwIhXXQdgsfFzfGch2ta6VkRzbu1M=) 2: 93E8AC909CA111ED97E7FC20C4F9AE02.roa (hash: zju4K/C7v4F1RhA6Xn7FNtNsJOBeW7+E9YT9HJNBEfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.crl rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7bn6iO9w6ONYLT_ou_1oY8dzWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB4BA/serialNumber=83B6E7EA23BDC3A38D60B4FFA2EFF5A18F1DCD68 Validity Not Before: May 3 05:52:06 2024 GMT Not After : May 10 05:52:06 2024 GMT Subject: CN=66347b87-0045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b7:b6:75:7c:17:7c:96:ce:73:45:6f:57:f1: 49:83:a9:1a:91:78:96:1e:db:27:42:d4:a2:78:fe: ea:e8:eb:66:ad:75:6a:ee:47:b4:9a:34:dc:d7:c2: 01:98:c5:70:d0:a7:19:8b:0d:25:b0:66:f4:80:e4: ea:38:bd:ba:e7:33:0e:ab:06:df:58:f7:bb:7b:69: 23:42:c8:1c:54:7e:c0:c5:47:eb:17:77:b7:39:37: 8b:b9:f8:7a:4f:45:af:9c:a3:49:03:69:ed:3a:55: 31:9c:db:66:4b:ad:f1:7d:31:8a:df:30:ee:18:d5: a2:6a:cb:7e:b1:6e:59:a8:63:62:7f:1d:fc:6e:fd: 07:1a:fd:bd:35:64:db:81:07:f9:6a:ad:64:3a:e4: 7a:ad:bf:a2:ad:bd:ee:c4:6c:96:4a:b6:4d:4f:c0: 5a:f7:94:6c:7b:13:66:12:4e:e4:3e:c0:e7:b4:3f: 28:f9:68:f3:39:5b:23:23:99:74:da:4a:47:c1:48: a4:eb:95:e9:88:ae:68:1f:75:73:58:33:76:00:dd: 7c:b7:49:e8:98:f0:74:ad:8f:bc:4a:02:08:4d:8d: ce:1e:3f:ef:5d:ff:45:68:85:a1:aa:74:1d:57:37: 9b:ba:4c:3f:f4:e3:cd:69:1e:1f:9f:67:9e:94:42: 13:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:7F:F8:CF:CE:ED:00:99:61:CC:80:CA:34:8A:4A:18:33:A1:4C:2F X509v3 Authority Key Identifier: keyid:83:B6:E7:EA:23:BD:C3:A3:8D:60:B4:FF:A2:EF:F5:A1:8F:1D:CD:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7bn6iO9w6ONYLT_ou_1oY8dzWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:99:c3:c9:38:89:e6:77:40:a0:f1:ae:f6:3c:9f:eb:d1:c5: 93:6e:80:fe:ad:f5:7f:e4:6a:fb:07:b3:0a:03:1b:7c:d3:46: 28:f7:e4:6c:f4:a1:89:5d:7b:2c:d8:4c:8b:e5:9f:8f:e1:c4: 36:e2:c2:dd:fb:c5:18:b5:16:23:3d:2e:01:9b:98:3a:60:0d: dd:67:de:b6:fc:7c:d0:f1:00:84:93:15:bc:44:f5:94:0a:df: 1e:14:46:f4:3d:1d:43:75:1c:5a:f9:a0:1a:93:c1:4f:d2:61: 3c:8b:08:be:5c:7a:07:1b:1a:92:c9:53:31:ba:54:a1:97:92: d5:99:24:be:ff:d8:6c:e2:bb:6d:a2:dc:64:80:f4:c5:88:2e: e2:e2:42:eb:e8:9f:2f:ae:d2:57:08:35:93:aa:27:58:16:73: 65:bf:87:96:18:02:b5:25:c6:8a:a1:0d:78:14:d7:24:9a:13: e5:b7:09:51:70:42:37:8b:8e:a9:2d:0c:65:b9:01:bc:f2:31: b6:69:b5:c9:ff:57:5b:66:02:1f:72:8e:e3:ca:4a:34:16:cf: 55:35:f9:bb:fe:d3:c0:6a:25:51:64:b1:1a:be:a5:02:5e:ca: 09:71:a2:92:a4:c3:2d:d1:f1:c2:5b:2e:6c:77:78:4e:d6:65: d0:d5:f4:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI0QkExMTAvBgNVBAUTKDgzQjZFN0VBMjNCREMzQTM4RDYwQjRGRkEyRUZGNUEx OEYxRENENjgwHhcNMjQwNTAzMDU1MjA2WhcNMjQwNTEwMDU1MjA2WjAYMRYwFAYD VQQDEw02NjM0N2I4Ny0wMDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm7e2dXwXfJbOc0VvV/FJg6kakXiWHtsnQtSieP7q6OtmrXVq7ke0mjTc18IB mMVw0KcZiw0lsGb0gOTqOL265zMOqwbfWPe7e2kjQsgcVH7AxUfrF3e3OTeLufh6 T0WvnKNJA2ntOlUxnNtmS63xfTGK3zDuGNWiast+sW5ZqGNifx38bv0HGv29NWTb gQf5aq1kOuR6rb+irb3uxGyWSrZNT8Ba95RsexNmEk7kPsDntD8o+WjzOVsjI5l0 2kpHwUik65XpiK5oH3VzWDN2AN18t0nomPB0rY+8SgIITY3OHj/vXf9FaIWhqnQd Vzebukw/9OPNaR4fn2eelEITGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPF/+M/O 7QCZYcyAyjSKShgzoUwvMB8GA1UdIwQYMBaAFIO25+ojvcOjjWC0/6Lv9aGPHc1o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjRCQS9DNzNFMTg0NDlD OUUxMUVEOTFCNzE2MURDNEY5QUUwMi9nN2JuNmlPOXc2T05ZTFRfb3VfMW9ZOGR6 V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c3Ym42aU85dzZPTllMVF9vdV8xb1k4ZHpXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjRCQS9DNzNFMTg0NDlDOUUxMUVEOTFCNzE2MURDNEY5QUUwMi9nN2JuNmlPOXc2 T05ZTFRfb3VfMW9ZOGR6V2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsmcPJOInmd0Cg8a72PJ/r0cWTboD+rfV/5Gr7B7MKAxt800Yo9+Rs 9KGJXXss2EyL5Z+P4cQ24sLd+8UYtRYjPS4Bm5g6YA3dZ962/HzQ8QCEkxW8RPWU Ct8eFEb0PR1DdRxa+aAak8FP0mE8iwi+XHoHGxqSyVMxulShl5LVmSS+/9hs4rtt otxkgPTFiC7i4kLr6J8vrtJXCDWTqidYFnNlv4eWGAK1JcaKoQ14FNckmhPltwlR cEI3i46pLQxluQG88jG2abXJ/1dbZgIfco7jyko0Fs9VNfm7/tPAaiVRZLEavqUC XsoJcaKSpMMt0fHCWy5sd3hO1mXQ1fQp -----END CERTIFICATE-----Generated at Fri May 3 06:29:21 2024 by rpki-client on console-fra.rpki-client.org