$ rpki-client -vvf rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft File: H8Tf0A2sNKjrhGPTlRwio0WDesk.mft (raw, json) Hash identifier: IaS+DjrdYQJDOS5X/193fpA7tvEFEnlUeC8xfmEGpeE= Subject key identifier: 95:5F:76:AE:FC:5B:7D:A4:76:E2:31:38:59:63:8D:59:D4:D7:80:5A Authority key identifier: 1F:C4:DF:D0:0D:AC:34:A8:EB:84:63:D3:95:1C:22:A3:45:83:7A:C9 Certificate issuer: /CN=A91B477B/serialNumber=1FC4DFD00DAC34A8EB8463D3951C22A345837AC9 Certificate serial: 05D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft Manifest number: 05CC Signing time: Sun 05 May 2024 00:17:58 +0000 Manifest this update: Sun 05 May 2024 00:17:58 +0000 Manifest next update: Sun 12 May 2024 00:17:58 +0000 Files and hashes: 1: H8Tf0A2sNKjrhGPTlRwio0WDesk.crl (hash: wkeYch3bRd3JseMUFySjaZmvCwnllp8PK8nXpwaG3/0=) 2: 22F72E28725311EBA9C51756C4F9AE02.roa (hash: U8yOqqyinkGohtgaJVbN4ufpnUUgzbbWeO85VJ52bis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.crl rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1496 (0x5d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B477B/serialNumber=1FC4DFD00DAC34A8EB8463D3951C22A345837AC9 Validity Not Before: May 5 00:17:58 2024 GMT Not After : May 12 00:17:58 2024 GMT Subject: CN=6636d036-7a55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:31:8c:3f:25:68:7f:6b:63:f0:13:04:ba:55: 63:5f:b2:87:77:99:ed:ad:bc:be:3e:f7:7d:6b:a8: 02:da:80:f2:61:97:bb:d3:82:b6:a4:d4:da:69:4f: 51:59:d3:46:9e:e1:51:3d:26:e7:97:4f:df:b0:ea: 10:a7:e5:8c:07:16:c1:b7:89:b1:7d:d1:59:65:75: 27:94:77:4d:3f:03:48:d1:96:00:9f:92:b7:4d:05: 38:90:9b:da:4c:9e:65:f5:b6:e5:15:fe:3c:af:60: 8d:5f:e2:e3:9b:5f:66:36:c4:ff:07:0c:b6:09:7c: 42:30:c0:68:93:05:1a:84:08:f1:e1:07:be:53:5b: 1e:38:78:7f:66:ed:72:5f:f0:a4:16:c0:97:5f:08: 74:b0:8e:f6:41:94:db:fb:f2:73:81:65:b8:59:52: 05:a6:2a:17:db:43:80:11:a2:33:62:6d:98:08:8b: b1:57:46:04:3d:ea:83:bf:20:cb:26:72:57:39:5c: ed:08:5b:b0:10:ce:12:ee:e3:fa:ff:49:55:b0:05: 30:ec:70:ab:45:5a:17:7a:d1:34:dd:e5:4d:58:62: 19:94:83:a2:04:6e:28:b5:60:70:6a:42:d9:f9:47: 7d:c1:cb:6a:f5:cd:78:af:a6:80:b5:97:95:c5:22: f4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:5F:76:AE:FC:5B:7D:A4:76:E2:31:38:59:63:8D:59:D4:D7:80:5A X509v3 Authority Key Identifier: keyid:1F:C4:DF:D0:0D:AC:34:A8:EB:84:63:D3:95:1C:22:A3:45:83:7A:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:74:49:2a:cf:26:1d:cc:8e:cf:1b:16:83:7d:a1:48:9c:71: c2:db:37:9c:c9:7c:cb:cb:ca:c9:17:4f:ce:a5:c1:2a:77:0a: c8:54:52:b3:bb:9b:43:83:da:d8:5b:f8:3a:77:23:72:14:6d: f1:b8:b9:6c:b7:23:ee:d3:04:45:77:98:5e:92:69:dd:1f:0a: b6:ae:a2:1e:82:18:85:51:8b:bc:a1:76:d8:62:c5:f8:24:8c: b8:71:06:e4:dd:03:31:0a:d2:e1:89:31:cb:53:0e:88:76:8c: 79:ec:9c:c9:97:fc:ee:2a:45:a0:a6:01:18:3d:20:fd:78:3a: c1:dc:0d:be:92:d5:87:db:cc:eb:e5:62:49:47:1e:51:35:a0: 7f:85:5a:95:84:19:71:3d:b1:79:9d:14:73:ca:14:f2:1e:e7: 31:bb:89:fd:6d:c8:30:c4:22:9c:8d:96:e0:af:b0:51:f3:b3: e6:fb:2f:b6:ad:95:4e:fb:93:a3:7a:c6:9f:70:cd:23:d3:93: 68:cc:b3:1e:a3:25:ed:4d:e7:34:b6:7a:80:fe:b9:07:d8:99: e9:65:8c:58:48:09:b5:ca:80:bb:67:38:ad:a6:76:eb:bd:88: 70:f4:2c:53:87:6f:f3:6c:cd:16:b8:a0:69:cf:cb:83:1f:b4: f8:bc:1f:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ3N0IxMTAvBgNVBAUTKDFGQzRERkQwMERBQzM0QThFQjg0NjNEMzk1MUMyMkEz NDU4MzdBQzkwHhcNMjQwNTA1MDAxNzU4WhcNMjQwNTEyMDAxNzU4WjAYMRYwFAYD VQQDEw02NjM2ZDAzNi03YTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDGMPyVof2tj8BMEulVjX7KHd5ntrby+Pvd9a6gC2oDyYZe704K2pNTaaU9R WdNGnuFRPSbnl0/fsOoQp+WMBxbBt4mxfdFZZXUnlHdNPwNI0ZYAn5K3TQU4kJva TJ5l9bblFf48r2CNX+Ljm19mNsT/Bwy2CXxCMMBokwUahAjx4Qe+U1seOHh/Zu1y X/CkFsCXXwh0sI72QZTb+/JzgWW4WVIFpioX20OAEaIzYm2YCIuxV0YEPeqDvyDL JnJXOVztCFuwEM4S7uP6/0lVsAUw7HCrRVoXetE03eVNWGIZlIOiBG4otWBwakLZ +Ud9wctq9c14r6aAtZeVxSL0cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJVfdq78 W32kduIxOFljjVnU14BaMB8GA1UdIwQYMBaAFB/E39ANrDSo64Rj05UcIqNFg3rJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDc3Qi8xQzI1NjI3MDcy NTAxMUVCQjY0OEY4NEVDNEY5QUUwMi9IOFRmMEEyc05LanJoR1BUbFJ3aW8wV0Rl c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g4VGYwQTJzTktqcmhHUFRsUndpbzBXRGVzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDc3Qi8xQzI1NjI3MDcyNTAxMUVCQjY0OEY4NEVDNEY5QUUwMi9IOFRmMEEyc05L anJoR1BUbFJ3aW8wV0Rlc2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRdEkqzyYdzI7PGxaDfaFInHHC2zecyXzLy8rJF0/OpcEqdwrIVFKz u5tDg9rYW/g6dyNyFG3xuLlstyPu0wRFd5hekmndHwq2rqIeghiFUYu8oXbYYsX4 JIy4cQbk3QMxCtLhiTHLUw6Idox57JzJl/zuKkWgpgEYPSD9eDrB3A2+ktWH28zr 5WJJRx5RNaB/hVqVhBlxPbF5nRRzyhTyHucxu4n9bcgwxCKcjZbgr7BR87Pm+y+2 rZVO+5OjesafcM0j05NozLMeoyXtTec0tnqA/rkH2JnpZYxYSAm1yoC7Zzitpnbr vYhw9CxTh2/zbM0WuKBpz8uDH7T4vB8e -----END CERTIFICATE-----Generated at Sun May 5 01:22:23 2024 by rpki-client on console-fra.rpki-client.org