$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft File: XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft (raw, json) Hash identifier: scpQYDjkRie6a+uCpZRtkcqZ6HyuvypRb91ogQbtSC4= Subject key identifier: 90:35:2B:B2:53:A1:81:AF:3D:AF:57:9B:2F:B9:47:E3:4C:F2:3C:86 Authority key identifier: 5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1 Certificate issuer: /CN=A91B23B3/serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1 Certificate serial: 08E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft Manifest number: 08C3 Signing time: Tue 30 Apr 2024 21:48:02 +0000 Manifest this update: Tue 30 Apr 2024 21:48:01 +0000 Manifest next update: Tue 07 May 2024 21:48:01 +0000 Files and hashes: 1: XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl (hash: 1tdcw+PhmycH6Z9OcWRdtsTYZS9Znf5aLcmj/522mTE=) 2: 6569BF24997F11ECA6C7F481C4F9AE02.roa (hash: amqaY33SUGxMqxS4wOSnwnxZYO8ZLNJUE6wFt5kYkAE=) 3: 1FD8C94AEFBB11EC95A1FD0DC4F9AE02.roa (hash: FIn0kPD1C/xeAzqL5CC96V2ndMOoPa2kd5A8lLxYLu8=) 4: 2109DFF2EFBB11EC95A1FD0DC4F9AE02.roa (hash: pLGwpLrCF+V9AoOv8xuzFZ0zimW0/KF9iP/Nw6KgGv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 21:48:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2273 (0x8e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B23B3/serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1 Validity Not Before: Apr 30 21:48:01 2024 GMT Not After : May 7 21:48:01 2024 GMT Subject: CN=66316712-432e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:20:f0:c9:ce:5c:a0:db:f9:98:92:5e:5b:e3: 65:46:97:c5:4e:9e:ee:dc:39:70:bc:ee:08:63:f2: 58:4e:8f:2b:82:b0:ca:04:9c:32:96:0e:15:7e:f3: 88:3e:6c:ab:de:08:48:8b:97:92:79:eb:ab:a5:e6: 44:31:86:8d:1d:5e:9f:8d:d3:f7:37:a2:5c:05:1c: bf:67:8b:7a:a7:72:86:6c:37:af:48:08:31:6e:ba: f0:a5:fb:ec:61:e7:a6:d5:1b:da:e9:fc:9e:98:f3: 35:10:c4:74:f2:d9:3d:38:41:27:18:e2:f9:c6:3e: 0f:50:94:4d:dd:fd:d4:60:1c:5b:5b:da:9f:68:0e: 1d:9f:c7:15:17:1f:bb:75:f7:fc:87:4c:db:89:54: d2:46:1e:ba:e4:69:27:32:25:f5:f5:4e:44:eb:0c: 27:0b:f8:20:8c:3d:b6:65:93:7e:16:89:ef:ad:89: da:a7:4f:b6:b2:87:46:c0:17:a4:c9:0d:66:e1:59: f2:02:69:81:22:28:0c:3e:fe:96:d7:fd:ad:c8:0f: d4:62:15:a3:87:5c:11:5c:76:4a:fa:f4:16:f9:be: 14:62:28:a3:d5:23:db:c2:a9:cb:3c:b6:75:ac:3c: 8a:18:81:5f:75:fb:4c:db:ae:c6:23:87:27:56:7c: 5d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:35:2B:B2:53:A1:81:AF:3D:AF:57:9B:2F:B9:47:E3:4C:F2:3C:86 X509v3 Authority Key Identifier: keyid:5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:6d:50:d8:26:08:4b:2a:2b:47:66:d3:06:6a:5a:0f:1a:54: 8e:a0:45:b9:29:d6:66:e0:9e:48:c5:92:8d:07:f9:4a:2e:08: dd:95:59:4e:b2:29:11:6f:87:4a:7e:9e:68:a9:c6:61:3f:8e: 71:5a:b7:d5:03:18:3d:8c:de:7d:fb:e9:07:86:9f:0b:6d:18: b5:f3:52:55:76:2d:d7:25:78:b6:33:8e:db:49:75:3e:d1:15: 55:de:2e:78:10:09:bb:74:85:b8:2b:3b:3d:0a:9e:df:4c:12: 66:40:82:70:26:1d:b3:c5:48:00:a5:24:cd:37:19:cb:aa:0e: 3d:77:2d:26:f8:3c:e8:e6:54:9b:ad:b2:9c:4d:29:59:6c:6f: aa:db:14:ed:e1:71:be:33:a0:65:37:ec:6f:65:48:03:52:2f: 71:58:f6:bf:bc:bf:8e:16:f8:30:01:84:1d:26:97:b8:42:3e: 9f:69:3e:28:b6:5f:72:3e:95:2d:cc:90:6c:84:fc:69:f1:62: 81:55:f2:64:4b:34:99:99:49:ea:ae:5a:bb:82:05:b8:58:ee: 6e:80:4c:e4:c9:48:98:5a:13:e6:5a:06:af:15:9b:b1:fb:15: 25:c1:4a:e9:dc:34:25:d4:6c:ce:c4:e1:8b:12:d6:70:61:e8: 27:9c:01:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjIzQjMxMTAvBgNVBAUTKDVDMzY4NDM5Q0JDNUY1QTQ1NzE1RDY0NzZCRUFBNjY4 NkQwOTUxQjEwHhcNMjQwNDMwMjE0ODAxWhcNMjQwNTA3MjE0ODAxWjAYMRYwFAYD VQQDEw02NjMxNjcxMi00MzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/iDwyc5coNv5mJJeW+NlRpfFTp7u3DlwvO4IY/JYTo8rgrDKBJwylg4VfvOI Pmyr3ghIi5eSeeurpeZEMYaNHV6fjdP3N6JcBRy/Z4t6p3KGbDevSAgxbrrwpfvs Yeem1Rva6fyemPM1EMR08tk9OEEnGOL5xj4PUJRN3f3UYBxbW9qfaA4dn8cVFx+7 dff8h0zbiVTSRh665GknMiX19U5E6wwnC/ggjD22ZZN+FonvrYnap0+2sodGwBek yQ1m4VnyAmmBIigMPv6W1/2tyA/UYhWjh1wRXHZK+vQW+b4UYiij1SPbwqnLPLZ1 rDyKGIFfdftM267GI4cnVnxdPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJA1K7JT oYGvPa9Xmy+5R+NM8jyGMB8GA1UdIwQYMBaAFFw2hDnLxfWkVxXWR2vqpmhtCVGx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjNCMy9FNjQ2NUExMDhF OTgxMUVBQUI1OEJEM0FDNEY5QUUwMi9YRGFFT2N2RjlhUlhGZFpIYS1xbWFHMEpV YkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hEYUVPY3ZGOWFSWEZkWkhhLXFtYUcwSlViRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjNCMy9FNjQ2NUExMDhFOTgxMUVBQUI1OEJEM0FDNEY5QUUwMi9YRGFFT2N2Rjlh UlhGZFpIYS1xbWFHMEpVYkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANbVDYJghLKitHZtMGaloPGlSOoEW5KdZm4J5IxZKNB/lKLgjdlVlO sikRb4dKfp5oqcZhP45xWrfVAxg9jN59++kHhp8LbRi181JVdi3XJXi2M47bSXU+ 0RVV3i54EAm7dIW4Kzs9Cp7fTBJmQIJwJh2zxUgApSTNNxnLqg49dy0m+Dzo5lSb rbKcTSlZbG+q2xTt4XG+M6BlN+xvZUgDUi9xWPa/vL+OFvgwAYQdJpe4Qj6faT4o tl9yPpUtzJBshPxp8WKBVfJkSzSZmUnqrlq7ggW4WO5ugEzkyUiYWhPmWgavFZux +xUlwUrp3DQl1GzOxOGLEtZwYegnnAEf -----END CERTIFICATE-----Generated at Tue Apr 30 22:56:17 2024 by rpki-client on console-fra.rpki-client.org