$ rpki-client -vvf rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft File: p1cNzzcgqNWohWpLtlg_G66uAJM.mft (raw, json) Hash identifier: oei1EWgXniZJY90HyXZCyV5heiObksM7dNtWiGXMPek= Subject key identifier: 62:6D:9A:4D:52:54:79:C4:15:E5:A2:BB:86:6F:A6:5D:3C:83:31:82 Authority key identifier: A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93 Certificate issuer: /CN=A91B37E3/serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093 Certificate serial: 0BBE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft Manifest number: 0B99 Signing time: Tue 30 Apr 2024 19:38:43 +0000 Manifest this update: Tue 30 Apr 2024 19:38:43 +0000 Manifest next update: Tue 07 May 2024 19:38:43 +0000 Files and hashes: 1: p1cNzzcgqNWohWpLtlg_G66uAJM.crl (hash: B0LOuvOb+SLP9zUDvoTXakSgVZzBGGE2SdIi/lvfQrY=) 2: 1994900403CE11EAA10C6A84C4F9AE02.roa (hash: iRXSCwbYvkB9N1oSkDNNM/sHFlWbk+W21qXorY3ggOs=) 3: 4F6721CEB84B11EAB6247B7AC4F9AE02.roa (hash: v5rqq+1vbD4A/BqKnkMqbNhWY+ZtznzjTbOL/bdSMTs=) 4: 24252532B84711EA8A7F036DC4F9AE02.roa (hash: xMmvJvlGe/uvnHVdxcMoD5TOuMIT+w9ZoofsAGfEJ0o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.crl rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 19:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3006 (0xbbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B37E3/serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093 Validity Not Before: Apr 30 19:38:43 2024 GMT Not After : May 7 19:38:43 2024 GMT Subject: CN=663148c3-16df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:42:b2:8b:26:0a:f2:23:60:42:26:28:33:38: b9:64:bb:84:0d:7f:2b:d9:31:ed:ce:0a:b1:27:56: 07:8a:a5:95:1b:eb:60:ed:d8:5e:1f:59:88:d5:96: dd:7c:53:52:03:73:57:ac:9a:59:07:86:60:e8:3e: a3:07:33:8c:d6:36:d7:58:59:1b:1e:6a:6e:70:ef: 2f:59:0d:6a:b4:60:3f:1b:8d:56:6d:8e:33:86:81: 03:3e:ab:1d:b3:ea:0c:6d:98:d5:d7:f6:2b:28:e9: 6c:92:f8:7c:01:a3:8c:0e:92:15:e7:1f:2a:91:21: f0:0d:f8:ef:75:7f:88:21:24:b2:5a:de:d7:36:f9: 51:e7:2b:57:5e:d5:a2:3d:d4:cb:03:5a:a8:e6:50: 1e:0c:03:d5:f7:f9:7e:f0:d8:db:0d:81:15:da:fb: 4c:79:3e:61:66:0e:13:45:5a:d7:90:9a:39:cd:05: 1b:b3:91:08:dd:5a:8e:ba:67:24:5e:7f:05:43:24: 41:aa:f8:e2:6a:a3:b6:f3:8c:e2:ed:64:c4:0c:ef: 07:83:79:74:4d:f9:a0:ce:d3:65:aa:46:76:9a:69: 29:e1:53:bc:e0:ee:f2:0a:3e:00:a5:cd:07:34:54: 28:83:d3:39:2d:bf:89:c2:ad:47:a4:4f:5e:fb:e7: 1d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:6D:9A:4D:52:54:79:C4:15:E5:A2:BB:86:6F:A6:5D:3C:83:31:82 X509v3 Authority Key Identifier: keyid:A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:9f:d7:0b:22:7d:0e:93:d9:68:ed:c8:06:7b:f7:5c:7e:a1: 2c:0d:04:91:8c:90:74:e5:b1:0d:f4:82:68:64:0e:ed:ce:fd: d4:d9:c1:ec:f1:f5:ea:15:fd:d1:17:73:b0:10:e0:0a:08:fe: 13:96:74:c7:4c:13:35:e6:54:3a:04:04:9d:85:db:8d:49:06: c6:d2:78:0b:aa:ab:d7:2e:fd:a3:3c:cd:ca:77:28:12:12:e1: 2a:59:71:c0:1b:a7:75:d3:10:9e:9c:77:94:07:a5:d5:6d:8a: 52:46:57:a7:1b:e8:ee:74:07:3f:fd:3c:ed:45:d4:a4:68:a8: af:22:e3:cc:c8:65:38:01:7c:bd:1c:eb:20:84:48:ad:12:57: db:41:9e:5a:bb:6e:af:ac:50:8b:6e:7c:f8:5e:d3:03:bc:b8: 4e:95:b2:d9:6b:43:47:08:04:36:7d:32:b7:a0:37:d5:31:3f: f0:1b:10:c3:eb:90:e8:85:11:80:7a:bc:c8:88:07:43:b4:b5: 19:8f:de:83:02:42:99:69:ad:21:c0:df:56:1b:d5:a9:aa:24: 1e:b7:83:bf:ba:1e:71:1f:19:35:0a:ed:e5:8a:4e:31:59:b3: 86:21:75:27:79:96:98:f9:da:91:e4:77:99:ec:5e:17:9a:e5: 79:02:fb:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM3RTMxMTAvBgNVBAUTKEE3NTcwRENGMzcyMEE4RDVBODg1NkE0QkI2NTgzRjFC QUVBRTAwOTMwHhcNMjQwNDMwMTkzODQzWhcNMjQwNTA3MTkzODQzWjAYMRYwFAYD VQQDEw02NjMxNDhjMy0xNmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAykKyiyYK8iNgQiYoMzi5ZLuEDX8r2THtzgqxJ1YHiqWVG+tg7dheH1mI1Zbd fFNSA3NXrJpZB4Zg6D6jBzOM1jbXWFkbHmpucO8vWQ1qtGA/G41WbY4zhoEDPqsd s+oMbZjV1/YrKOlskvh8AaOMDpIV5x8qkSHwDfjvdX+IISSyWt7XNvlR5ytXXtWi PdTLA1qo5lAeDAPV9/l+8NjbDYEV2vtMeT5hZg4TRVrXkJo5zQUbs5EI3VqOumck Xn8FQyRBqvjiaqO284zi7WTEDO8Hg3l0TfmgztNlqkZ2mmkp4VO84O7yCj4Apc0H NFQog9M5Lb+Jwq1HpE9e++cdsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGJtmk1S VHnEFeWiu4Zvpl08gzGCMB8GA1UdIwQYMBaAFKdXDc83IKjVqIVqS7ZYPxuurgCT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzdFMy8wQUZFQTdDRTAz QTAxMUVBQjRDNUQyN0NDNEY5QUUwMi9wMWNOenpjZ3FOV29oV3BMdGxnX0c2NnVB Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AxY056emNncU5Xb2hXcEx0bGdfRzY2dUFKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzdFMy8wQUZFQTdDRTAzQTAxMUVBQjRDNUQyN0NDNEY5QUUwMi9wMWNOenpjZ3FO V29oV3BMdGxnX0c2NnVBSk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCin9cLIn0Ok9lo7cgGe/dcfqEsDQSRjJB05bEN9IJoZA7tzv3U2cHs 8fXqFf3RF3OwEOAKCP4TlnTHTBM15lQ6BASdhduNSQbG0ngLqqvXLv2jPM3KdygS EuEqWXHAG6d10xCenHeUB6XVbYpSRlenG+judAc//TztRdSkaKivIuPMyGU4AXy9 HOsghEitElfbQZ5au26vrFCLbnz4XtMDvLhOlbLZa0NHCAQ2fTK3oDfVMT/wGxDD 65DohRGAerzIiAdDtLUZj96DAkKZaa0hwN9WG9WpqiQet4O/uh5xHxk1Cu3lik4x WbOGIXUneZaY+dqR5HeZ7F4XmuV5Avtz -----END CERTIFICATE-----Generated at Tue Apr 30 21:38:04 2024 by rpki-client on console-fra.rpki-client.org