$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft File: ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft (raw, json) Hash identifier: Bw1b3FTyKaIgBaEYjXWKPcuJ7pSb1QMX3zdmcLmkQ38= Subject key identifier: 87:23:F0:A5:AF:6B:61:6E:77:78:AE:D8:05:41:5B:76:7D:B0:69:FE Authority key identifier: 8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7 Certificate issuer: /CN=A91AC4FA/serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7 Certificate serial: 011C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft Manifest number: 0114 Signing time: Sun 05 May 2024 05:27:36 +0000 Manifest this update: Sun 05 May 2024 05:27:35 +0000 Manifest next update: Sun 12 May 2024 05:27:35 +0000 Files and hashes: 1: ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl (hash: 6LIpI7LdtGDtHqM7HOjmcm1IYMQsxjGfSpRwGsjv0fA=) 2: 0B1C46B26C8E11EDA1402673C4F9AE02.roa (hash: Ocs9fY1y4Dml47WlHW8ZQXXWYhVC6xPKMA75wdQOmZ4=) 3: 2A40C41C6EC511ED9672CB40C4F9AE02.roa (hash: 5ACArxlK+Iiq2w4atQzrcIkaGeaDW2uYXfK1DQWLUTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 284 (0x11c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC4FA/serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7 Validity Not Before: May 5 05:27:35 2024 GMT Not After : May 12 05:27:35 2024 GMT Subject: CN=663718c7-1d14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:68:81:05:c0:1d:46:ba:3e:f1:95:df:38:41: 24:84:d2:6d:cb:bd:7d:81:6d:3a:d9:32:aa:76:2c: 8a:bf:86:45:5a:96:f7:6b:e1:b7:ed:3b:24:94:64: ac:7a:69:3d:09:3a:3e:86:2f:cb:d2:82:61:36:fb: ee:1d:25:69:57:23:0e:9a:ca:2e:ce:8e:79:4e:1e: c8:c5:97:8a:ac:f2:87:60:5d:b5:14:c7:ed:ab:26: c0:e0:06:a0:64:17:69:65:29:32:af:ce:82:06:9f: d5:e4:64:b0:fd:44:74:52:8b:72:9d:2b:d6:b7:13: 9e:4b:44:7f:f7:d9:90:84:36:43:7f:2e:02:d1:b7: c6:f8:dc:dd:d5:55:33:37:ea:4a:d3:ca:2c:00:01: 72:45:d6:bd:94:0e:d3:99:cc:c2:c8:7d:f3:34:83: a5:e0:77:07:fe:1b:4c:85:10:fe:ff:32:85:d1:5f: 74:50:03:72:66:29:cc:8a:2c:c8:39:ee:9d:93:75: 87:eb:ff:e8:46:b5:57:c1:56:6d:4b:f4:93:a1:c2: 65:60:66:33:6d:51:6f:3a:fb:d2:b7:60:a1:ec:2c: 27:6c:58:a6:dc:a5:84:a5:51:41:03:34:61:c4:29: 08:62:9d:d6:6a:3c:ea:7b:e0:7c:9a:0d:6e:c9:78: cd:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:23:F0:A5:AF:6B:61:6E:77:78:AE:D8:05:41:5B:76:7D:B0:69:FE X509v3 Authority Key Identifier: keyid:8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:9f:5d:a0:20:a3:fb:44:27:10:91:dc:e7:8e:b9:19:13:a9: 9b:c1:7b:da:36:ff:d2:86:b1:63:7b:96:e1:e0:66:a7:39:39: a2:e0:62:49:99:fa:02:29:cd:fe:d2:4d:41:47:40:33:3b:24: d1:26:5e:dc:4c:ed:16:a9:f7:81:81:eb:62:5f:6f:4d:d7:97: 5d:fc:b7:2b:45:6d:a1:51:de:e5:4e:5b:2b:f0:5d:6d:25:2d: c6:81:be:95:15:5d:bc:6a:6e:f2:ae:ee:6e:1c:99:c6:85:7b: 93:34:73:8f:58:2f:3d:47:05:bd:83:b3:a4:9c:48:1f:72:40: 55:ff:b2:05:ed:a3:a3:58:d4:75:98:4e:b0:05:24:13:22:28: 8a:6b:cb:2f:2a:74:b6:48:27:bc:04:ce:a5:95:27:92:87:87: 49:42:02:07:ad:40:8f:78:92:47:7d:00:42:ba:c0:74:1e:c8: e0:32:bc:3a:4a:f5:4a:35:4b:69:4d:2b:0e:bc:ef:0e:b7:c0: 5d:a6:4c:28:bd:41:cc:92:b5:2d:66:7c:67:d9:59:65:30:ba: e4:77:15:9b:89:63:55:0a:ff:5d:1e:bd:d2:09:5c:0f:e8:df: 46:79:75:5b:0a:05:54:e3:61:16:64:e5:fb:2d:cc:25:bb:aa: 4b:13:d0:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM0RkExMTAvBgNVBAUTKDhBRjdEOEI4NjRGRDkwNDUyRkZENkRFOTNCNTE0NTZD NzlFRkIzQzcwHhcNMjQwNTA1MDUyNzM1WhcNMjQwNTEyMDUyNzM1WjAYMRYwFAYD VQQDEw02NjM3MThjNy0xZDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqGiBBcAdRro+8ZXfOEEkhNJty719gW062TKqdiyKv4ZFWpb3a+G37TsklGSs emk9CTo+hi/L0oJhNvvuHSVpVyMOmsouzo55Th7IxZeKrPKHYF21FMftqybA4Aag ZBdpZSkyr86CBp/V5GSw/UR0UotynSvWtxOeS0R/99mQhDZDfy4C0bfG+Nzd1VUz N+pK08osAAFyRda9lA7TmczCyH3zNIOl4HcH/htMhRD+/zKF0V90UANyZinMiizI Oe6dk3WH6//oRrVXwVZtS/STocJlYGYzbVFvOvvSt2Ch7CwnbFim3KWEpVFBAzRh xCkIYp3Wajzqe+B8mg1uyXjNNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIcj8KWv a2Fud3iu2AVBW3Z9sGn+MB8GA1UdIwQYMBaAFIr32Lhk/ZBFL/1t6TtRRWx577PH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzRGQS8zN0NCODc5ODZD OEIxMUVEODdBRkY1NzFDNEY5QUUwMi9pdmZZdUdUOWtFVXZfVzNwTzFGRmJIbnZz OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l2Zll1R1Q5a0VVdl9XM3BPMUZGYkhudnM4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzRGQS8zN0NCODc5ODZDOEIxMUVEODdBRkY1NzFDNEY5QUUwMi9pdmZZdUdUOWtF VXZfVzNwTzFGRmJIbnZzOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLn12gIKP7RCcQkdznjrkZE6mbwXvaNv/ShrFje5bh4GanOTmi4GJJ mfoCKc3+0k1BR0AzOyTRJl7cTO0WqfeBgetiX29N15dd/LcrRW2hUd7lTlsr8F1t JS3Ggb6VFV28am7yru5uHJnGhXuTNHOPWC89RwW9g7OknEgfckBV/7IF7aOjWNR1 mE6wBSQTIiiKa8svKnS2SCe8BM6llSeSh4dJQgIHrUCPeJJHfQBCusB0HsjgMrw6 SvVKNUtpTSsOvO8Ot8BdpkwovUHMkrUtZnxn2VllMLrkdxWbiWNVCv9dHr3SCVwP 6N9GeXVbCgVU42EWZOX7Lcwlu6pLE9Cx -----END CERTIFICATE-----Generated at Sun May 5 06:01:19 2024 by rpki-client on console-fra.rpki-client.org