$ rpki-client -vvf rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft File: -O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft (raw, json) Hash identifier: 98E1B6JyVzIgvpKsxO1wVlGzUr5NCFwqzkoFUTGINr0= Subject key identifier: C7:C4:85:E4:8A:B7:C5:EC:17:25:F7:4B:D2:50:69:47:8F:3D:85:3F Authority key identifier: F8:EE:CE:7D:3C:0C:F5:92:2E:A3:D8:03:55:36:38:82:3F:AE:EA:08 Certificate issuer: /CN=A91B268A/serialNumber=F8EECE7D3C0CF5922EA3D803553638823FAEEA08 Certificate serial: 1174 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft Manifest number: 1163 Signing time: Mon 06 May 2024 17:53:08 +0000 Manifest this update: Mon 06 May 2024 17:53:07 +0000 Manifest next update: Mon 13 May 2024 17:53:07 +0000 Files and hashes: 1: -O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl (hash: /mg7kVA6aWdGVXCqbO9SwMZ4rf8ctWumeCbd3jw39ec=) 2: 0AF12B12DDA411E88E25E96FC4F9AE02.roa (hash: meHsVMG/UsAGDgOcFaaDbCP72zPv3JQL3Q+3+fdFJ58=) 3: 6C368C72DDA511E8A2E85E73C4F9AE02.roa (hash: tlYFUEoyrCZFUhDmL/zvA++SrRNCKzW7D2xqcApny5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 17:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4468 (0x1174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B268A/serialNumber=F8EECE7D3C0CF5922EA3D803553638823FAEEA08 Validity Not Before: May 6 17:53:07 2024 GMT Not After : May 13 17:53:07 2024 GMT Subject: CN=66391903-8c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0a:63:ce:90:9c:95:e1:42:2a:c2:96:eb:85: 1e:c7:07:41:85:d4:9e:52:23:4d:f5:e1:62:68:8c: 33:a9:75:cf:24:a4:ba:d3:31:14:14:ba:35:08:56: 76:45:ad:eb:4f:3c:0c:dc:a1:43:80:08:28:31:75: 95:84:51:1f:34:de:73:52:c7:d4:76:31:02:37:bc: 37:37:9e:bf:1c:7f:73:e1:5a:d7:ba:26:1a:23:f7: 21:27:58:9a:5c:9b:77:64:98:d2:7d:0f:62:61:b9: c8:f6:ce:23:a4:b4:77:e6:4b:32:14:57:4d:21:bb: 5e:fc:8c:8c:d3:ae:6d:94:2f:c8:fa:a2:29:19:9a: 58:60:a2:3c:59:f2:38:f2:5b:15:e9:19:32:ad:e1: 71:e1:11:b2:dc:f9:90:04:49:25:9c:2c:0b:7a:8c: 17:77:68:0b:86:67:80:cf:e1:0e:75:d2:92:bb:e2: 99:ee:0f:e2:cb:8a:7c:30:22:e6:6a:9f:3e:6f:e8: 74:f5:8d:c8:08:c7:ee:85:19:38:18:ec:f0:f1:ec: 62:68:aa:b2:da:e8:55:0e:51:4d:b3:f7:09:06:e5: 3b:29:2d:fd:fb:e4:07:2c:2c:3f:9e:40:03:38:9c: b0:99:c4:4f:c1:5c:b8:d0:3b:5a:e3:4c:6e:f1:dd: e7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C4:85:E4:8A:B7:C5:EC:17:25:F7:4B:D2:50:69:47:8F:3D:85:3F X509v3 Authority Key Identifier: keyid:F8:EE:CE:7D:3C:0C:F5:92:2E:A3:D8:03:55:36:38:82:3F:AE:EA:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:17:2c:4a:7a:91:6f:5b:fa:fb:98:f4:97:eb:43:c0:96:e2: c6:d1:4b:a4:2a:09:35:7a:21:c5:6b:c9:00:8f:89:74:44:ef: 83:2d:be:e3:c7:df:46:8e:e0:8c:0a:65:ae:c5:3e:3c:c4:a3: 44:13:28:34:fa:21:56:a7:f5:8a:ca:6e:59:23:90:68:8f:7d: 45:15:82:fd:ff:64:4c:0d:8a:c7:f1:ff:96:73:5d:75:10:e5: f2:6c:52:6e:31:6d:8c:9e:0b:00:e4:5c:f4:91:22:3a:19:de: c5:ec:0d:78:2d:e7:16:ce:80:b3:d7:dd:32:07:7e:6f:16:55: f7:5d:58:82:44:28:86:57:78:ac:42:f2:9e:2e:f8:8a:05:b9: 44:63:bc:d1:7b:09:2a:b6:01:03:e0:3d:31:85:d4:34:04:57: 08:5d:9b:c5:d7:7e:9f:2b:da:8e:0d:b1:7f:bc:b0:c2:92:72: 7e:55:a1:2d:c4:13:dd:ec:40:bc:b0:be:84:d6:56:d3:05:d0: da:65:da:83:f7:7c:44:ca:2e:6c:6f:5a:5c:47:ed:91:98:fe: 9a:5e:f0:b9:6f:e5:48:b7:c9:aa:75:dc:11:36:e3:5c:d0:02: 98:c1:43:8d:8d:61:6f:48:96:16:cb:a5:fa:0f:23:4f:3a:2a: c4:da:44:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI2OEExMTAvBgNVBAUTKEY4RUVDRTdEM0MwQ0Y1OTIyRUEzRDgwMzU1MzYzODgy M0ZBRUVBMDgwHhcNMjQwNTA2MTc1MzA3WhcNMjQwNTEzMTc1MzA3WjAYMRYwFAYD VQQDEw02NjM5MTkwMy04Yzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsApjzpCcleFCKsKW64UexwdBhdSeUiNN9eFiaIwzqXXPJKS60zEUFLo1CFZ2 Ra3rTzwM3KFDgAgoMXWVhFEfNN5zUsfUdjECN7w3N56/HH9z4VrXuiYaI/chJ1ia XJt3ZJjSfQ9iYbnI9s4jpLR35ksyFFdNIbte/IyM065tlC/I+qIpGZpYYKI8WfI4 8lsV6RkyreFx4RGy3PmQBEklnCwLeowXd2gLhmeAz+EOddKSu+KZ7g/iy4p8MCLm ap8+b+h09Y3ICMfuhRk4GOzw8exiaKqy2uhVDlFNs/cJBuU7KS39++QHLCw/nkAD OJywmcRPwVy40Dta40xu8d3nQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMfEheSK t8XsFyX3S9JQaUePPYU/MB8GA1UdIwQYMBaAFPjuzn08DPWSLqPYA1U2OII/ruoI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjY4QS84NEZCNEM5Q0RE QTExMUU4QTJFNzhBNjlDNEY5QUUwMi8tTzdPZlR3TTlaSXVvOWdEVlRZNGdqLXU2 Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1PN09mVHdNOVpJdW85Z0RWVFk0Z2otdTZnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjY4QS84NEZCNEM5Q0REQTExMUU4QTJFNzhBNjlDNEY5QUUwMi8tTzdPZlR3TTla SXVvOWdEVlRZNGdqLXU2Z2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIFyxKepFvW/r7mPSX60PAluLG0UukKgk1eiHFa8kAj4l0RO+DLb7j x99GjuCMCmWuxT48xKNEEyg0+iFWp/WKym5ZI5Boj31FFYL9/2RMDYrH8f+Wc111 EOXybFJuMW2MngsA5Fz0kSI6Gd7F7A14LecWzoCz190yB35vFlX3XViCRCiGV3is QvKeLviKBblEY7zRewkqtgED4D0xhdQ0BFcIXZvF136fK9qODbF/vLDCknJ+VaEt xBPd7EC8sL6E1lbTBdDaZdqD93xEyi5sb1pcR+2RmP6aXvC5b+VIt8mqddwRNuNc 0AKYwUONjWFvSJYWy6X6DyNPOirE2kSB -----END CERTIFICATE-----Generated at Mon May 6 20:19:18 2024 by rpki-client on console-fra.rpki-client.org