$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft File: j11eWHmnUVjyz_syrdlEcfl0GD8.mft (raw, json) Hash identifier: LLVKwec/uSMSzTa2Ir6JNpcWcWJUHwt1x4BgdQfdCpo= Subject key identifier: 1F:8E:CA:E2:C3:CC:D2:1C:75:1D:A4:82:25:94:C0:5E:99:0C:AA:28 Authority key identifier: 8F:5D:5E:58:79:A7:51:58:F2:CF:FB:32:AD:D9:44:71:F9:74:18:3F Certificate issuer: /CN=A91ABEAC/serialNumber=8F5D5E5879A75158F2CFFB32ADD94471F974183F Certificate serial: 01DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft Manifest number: 01DB Signing time: Sun 05 May 2024 04:26:08 +0000 Manifest this update: Sun 05 May 2024 04:26:07 +0000 Manifest next update: Sun 12 May 2024 04:26:07 +0000 Files and hashes: 1: j11eWHmnUVjyz_syrdlEcfl0GD8.crl (hash: tqmrTuXmx8rwPITpdRpUoDANwTmg8WA0n2pYPDth0mA=) 2: 7F64C44645A511ED93E3C45BC4F9AE02.roa (hash: jgmJA/Q4HePnHB1tUDrrt29C9GKJ1/meaw2KgH9ecfU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.crl rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 478 (0x1de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABEAC/serialNumber=8F5D5E5879A75158F2CFFB32ADD94471F974183F Validity Not Before: May 5 04:26:07 2024 GMT Not After : May 12 04:26:07 2024 GMT Subject: CN=66370a5f-a912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a0:ea:79:01:c5:27:59:49:9f:00:05:ff:2d: e9:55:fc:a3:6c:cf:2b:7d:04:fc:35:f6:0c:b3:38: a7:f5:ce:2f:10:e7:9e:63:5c:ab:98:8f:34:b1:16: c5:95:23:d7:06:67:9f:cd:99:ad:ba:68:08:de:5a: ef:2c:49:91:58:aa:dd:35:98:81:fb:3b:74:2e:bb: 8a:60:6c:a8:dd:7c:a0:5f:c0:d0:b5:11:ae:10:7b: 1f:78:97:57:90:4f:5d:3d:82:93:b9:f2:c5:e0:0b: 39:9d:75:67:ca:18:03:56:f7:2c:54:4d:42:76:3a: ba:39:aa:bb:87:f6:5d:62:82:29:a0:f5:fc:a9:91: 39:29:5c:ab:88:96:18:22:07:6a:bc:1c:48:b0:ee: 51:eb:af:76:4e:0a:76:4f:60:88:86:15:a6:7f:0f: 45:e1:73:8e:09:d0:6c:22:0d:0e:06:9f:20:4e:0c: 9d:0f:83:69:71:ff:c1:99:7e:d1:da:6b:46:de:02: b2:d8:b2:ce:a1:a5:1d:8f:f3:ce:a6:e4:df:17:ef: 40:22:7f:94:ae:50:68:ec:3c:f8:9e:4a:0e:8d:77: 49:1f:22:d1:e0:ab:49:6c:af:de:dc:c7:ae:0c:92: 3e:15:a3:24:40:b2:37:aa:49:53:b5:fa:03:c1:74: 0c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:8E:CA:E2:C3:CC:D2:1C:75:1D:A4:82:25:94:C0:5E:99:0C:AA:28 X509v3 Authority Key Identifier: keyid:8F:5D:5E:58:79:A7:51:58:F2:CF:FB:32:AD:D9:44:71:F9:74:18:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:d9:a0:ba:eb:ab:b3:f6:e4:88:0f:41:6c:31:5c:1d:ea:a7: 51:99:2f:52:d5:db:d5:e7:19:76:0a:da:eb:15:87:45:d5:9f: cf:ca:db:c7:d8:53:8a:25:3b:3d:67:ac:b1:62:24:cb:7c:93: 2f:8e:b2:5f:5a:b7:c6:82:eb:ad:b3:e5:f8:7e:3f:ea:4a:28: cd:40:09:15:71:90:82:6e:8f:5e:74:a9:4e:a7:ba:0f:98:4b: 56:36:d2:fb:46:7d:f5:bc:bf:f6:0d:43:f8:4a:4e:cb:0b:5e: 40:f3:df:97:3d:4b:4a:91:78:44:e6:ac:35:e2:e0:57:1d:19: e5:fb:19:11:33:4e:0e:7e:a9:9a:68:b5:33:97:7d:55:32:ce: ac:2b:83:2f:8e:4a:c7:98:7d:ca:00:f3:04:b4:0e:27:d3:30: ad:9f:96:8e:71:0e:8a:73:5b:5a:8b:8e:1d:65:4f:2a:aa:b3: fd:9d:93:a7:66:ed:94:d5:4c:42:b9:92:ef:41:20:62:ff:b4: e2:2a:6b:8c:78:78:ec:3a:46:4b:b2:5e:7a:f7:36:30:23:66: da:28:ee:3d:62:c6:40:b8:eb:1f:8d:ef:89:0c:0e:e5:72:73: 7d:bc:a2:19:37:ee:15:0a:4f:14:71:76:27:5b:09:78:52:37: 8e:b0:f3:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJFQUMxMTAvBgNVBAUTKDhGNUQ1RTU4NzlBNzUxNThGMkNGRkIzMkFERDk0NDcx Rjk3NDE4M0YwHhcNMjQwNTA1MDQyNjA3WhcNMjQwNTEyMDQyNjA3WjAYMRYwFAYD VQQDEw02NjM3MGE1Zi1hOTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKDqeQHFJ1lJnwAF/y3pVfyjbM8rfQT8NfYMszin9c4vEOeeY1yrmI80sRbF lSPXBmefzZmtumgI3lrvLEmRWKrdNZiB+zt0LruKYGyo3XygX8DQtRGuEHsfeJdX kE9dPYKTufLF4As5nXVnyhgDVvcsVE1Cdjq6Oaq7h/ZdYoIpoPX8qZE5KVyriJYY IgdqvBxIsO5R6692Tgp2T2CIhhWmfw9F4XOOCdBsIg0OBp8gTgydD4Npcf/BmX7R 2mtG3gKy2LLOoaUdj/POpuTfF+9AIn+UrlBo7Dz4nkoOjXdJHyLR4KtJbK/e3Meu DJI+FaMkQLI3qklTtfoDwXQMOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+OyuLD zNIcdR2kgiWUwF6ZDKooMB8GA1UdIwQYMBaAFI9dXlh5p1FY8s/7Mq3ZRHH5dBg/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkVBQy8xQ0QxNDZCMEZE MTExMUVDQUQ4QjUyMjhDNEY5QUUwMi9qMTFlV0htblVWanl6X3N5cmRsRWNmbDBH RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2oxMWVXSG1uVVZqeXpfc3lyZGxFY2ZsMEdEOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkVBQy8xQ0QxNDZCMEZEMTExMUVDQUQ4QjUyMjhDNEY5QUUwMi9qMTFlV0htblVW anl6X3N5cmRsRWNmbDBHRDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAa2aC666uz9uSID0FsMVwd6qdRmS9S1dvV5xl2CtrrFYdF1Z/PytvH 2FOKJTs9Z6yxYiTLfJMvjrJfWrfGguuts+X4fj/qSijNQAkVcZCCbo9edKlOp7oP mEtWNtL7Rn31vL/2DUP4Sk7LC15A89+XPUtKkXhE5qw14uBXHRnl+xkRM04Ofqma aLUzl31VMs6sK4MvjkrHmH3KAPMEtA4n0zCtn5aOcQ6Kc1tai44dZU8qqrP9nZOn Zu2U1UxCuZLvQSBi/7TiKmuMeHjsOkZLsl569zYwI2baKO49YsZAuOsfje+JDA7l cnN9vKIZN+4VCk8UcXYnWwl4UjeOsPMf -----END CERTIFICATE-----Generated at Sun May 5 05:21:59 2024 by rpki-client on console-fra.rpki-client.org