$ rpki-client -vvf rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft File: vK5XMu8hlzK0msgoTbGBTpLIaxE.mft (raw, json) Hash identifier: BEuZmmv0GplI3KqBMYZLEbsNbzqp1OWbWEdkY0bxzEk= Subject key identifier: 9E:CA:1A:DD:F5:A7:30:2C:B3:0B:E4:17:71:C2:D0:8C:B3:34:B0:25 Authority key identifier: BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11 Certificate issuer: /CN=A91B653B/serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11 Certificate serial: 07BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft Manifest number: 07B1 Signing time: Thu 02 May 2024 22:14:42 +0000 Manifest this update: Thu 02 May 2024 22:14:41 +0000 Manifest next update: Thu 09 May 2024 22:14:41 +0000 Files and hashes: 1: vK5XMu8hlzK0msgoTbGBTpLIaxE.crl (hash: mGHdvx8aRoHgt6d9m0JiJRxwp1bYsEnSWMr+Y+4jgyE=) 2: 2015E6B2C66F11EAA0B1B019C4F9AE02.roa (hash: UR1VNNIL2Jtpf585UHu33VQKoA2N0pYarJyInownUiU=) 3: 1F99EBD4C66F11EAA0B1B019C4F9AE02.roa (hash: aS2kJAIgKwjVL628c62JVjCg9McuhuvLe2rzzSlBMa8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:14:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1979 (0x7bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B653B/serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11 Validity Not Before: May 2 22:14:41 2024 GMT Not After : May 9 22:14:41 2024 GMT Subject: CN=66341052-0fea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8b:4a:93:00:11:98:7b:17:44:ca:a0:14:20: be:9d:ad:a1:e1:2b:b2:9a:d4:ec:b0:95:f9:7f:bf: 0d:13:65:f7:1a:0c:1c:97:c0:d7:82:74:eb:b0:cf: 53:2b:e4:72:e1:ff:83:7f:aa:b6:a8:64:63:2e:71: 51:d2:44:bd:16:b3:70:1c:85:44:4a:bb:b3:08:1e: 71:1f:26:d1:44:4e:52:30:dd:3f:65:04:30:59:0b: 57:f3:6a:56:c4:35:74:e3:09:b7:69:a7:ec:6c:4c: 4e:05:28:50:d3:fd:f2:c7:8d:75:53:a0:cf:a2:22: 06:9a:67:95:45:56:e7:eb:f0:b6:f2:9f:1d:6a:aa: 4b:43:b2:7c:8b:ae:56:6d:1b:28:05:e9:da:91:be: 9c:68:ed:4b:28:ec:2c:af:90:26:2d:ec:c1:1f:c3: ea:d5:23:3f:e6:b8:1f:dd:e9:0f:b8:2d:e8:21:d0: 71:41:33:75:45:2b:f8:80:b7:17:65:20:a9:91:d6: 59:0d:6d:b6:1c:cf:e3:93:fb:b2:79:72:1b:ec:52: 01:69:e1:76:65:9b:cc:c3:dd:fc:f9:2f:f6:bb:89: d4:6d:ba:3d:92:90:6d:89:eb:a0:53:1a:37:dc:77: 9b:67:15:9d:f2:f0:7e:78:70:e7:b2:0e:5a:fa:1a: d1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:CA:1A:DD:F5:A7:30:2C:B3:0B:E4:17:71:C2:D0:8C:B3:34:B0:25 X509v3 Authority Key Identifier: keyid:BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:4c:e1:eb:4e:7d:d3:b7:04:31:22:7f:18:e2:6e:6d:f6:f2: 4d:b6:a3:54:4e:bc:9d:07:f0:2c:bd:5e:b6:7f:92:11:f2:ad: 4e:9a:86:b8:0d:02:17:0e:11:72:27:f1:c7:ec:35:18:f3:32: 0a:3f:87:2a:2c:88:c9:70:4e:6d:a2:27:5f:b7:86:70:df:df: d4:04:95:1d:7a:40:d1:5e:9e:25:56:c5:0f:b8:9e:82:b3:af: c7:19:c9:d5:f4:f7:6f:a5:eb:2e:36:21:6c:c4:5e:6d:da:2c: 3c:cc:02:a2:fb:81:95:89:55:9a:75:a2:98:d0:b9:96:ad:d1: 6a:4f:38:4f:47:0e:a8:7b:95:60:1a:f2:bd:3f:b2:4b:6e:0f: 02:29:9f:d5:4a:5d:a4:91:93:cb:f9:ea:fe:cf:77:9f:4d:a9: f8:03:a0:29:14:09:56:c4:0d:8b:a4:f0:9d:8d:b0:4e:f2:51: af:6c:47:7d:bf:95:96:91:13:15:ee:e0:90:89:82:4f:10:75: f6:55:43:80:b4:f8:91:03:49:c2:84:a5:c2:d6:d5:e4:24:60: 13:93:87:d5:7a:20:11:25:cb:71:de:b6:89:86:c7:a3:ec:8f: 48:6e:86:9f:06:38:68:d2:61:1c:71:29:99:6d:54:6e:8f:1e: 44:72:53:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1M0IxMTAvBgNVBAUTKEJDQUU1NzMyRUYyMTk3MzJCNDlBQzgyODREQjE4MTRF OTJDODZCMTEwHhcNMjQwNTAyMjIxNDQxWhcNMjQwNTA5MjIxNDQxWjAYMRYwFAYD VQQDEw02NjM0MTA1Mi0wZmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzotKkwARmHsXRMqgFCC+na2h4SuymtTssJX5f78NE2X3Ggwcl8DXgnTrsM9T K+Ry4f+Df6q2qGRjLnFR0kS9FrNwHIVESruzCB5xHybRRE5SMN0/ZQQwWQtX82pW xDV04wm3aafsbExOBShQ0/3yx411U6DPoiIGmmeVRVbn6/C28p8daqpLQ7J8i65W bRsoBenakb6caO1LKOwsr5AmLezBH8Pq1SM/5rgf3ekPuC3oIdBxQTN1RSv4gLcX ZSCpkdZZDW22HM/jk/uyeXIb7FIBaeF2ZZvMw938+S/2u4nUbbo9kpBtieugUxo3 3HebZxWd8vB+eHDnsg5a+hrRUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ7KGt31 pzAsswvkF3HC0IyzNLAlMB8GA1UdIwQYMBaAFLyuVzLvIZcytJrIKE2xgU6SyGsR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjUzQi8yOTM4M0NERUMy MEMxMUVBQjgxMkEwMUFDNEY5QUUwMi92SzVYTXU4aGx6SzBtc2dvVGJHQlRwTElh eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZLNVhNdThobHpLMG1zZ29UYkdCVHBMSWF4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjUzQi8yOTM4M0NERUMyMEMxMUVBQjgxMkEwMUFDNEY5QUUwMi92SzVYTXU4aGx6 SzBtc2dvVGJHQlRwTElheEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRTOHrTn3TtwQxIn8Y4m5t9vJNtqNUTrydB/AsvV62f5IR8q1Omoa4 DQIXDhFyJ/HH7DUY8zIKP4cqLIjJcE5toidft4Zw39/UBJUdekDRXp4lVsUPuJ6C s6/HGcnV9PdvpesuNiFsxF5t2iw8zAKi+4GViVWadaKY0LmWrdFqTzhPRw6oe5Vg GvK9P7JLbg8CKZ/VSl2kkZPL+er+z3efTan4A6ApFAlWxA2LpPCdjbBO8lGvbEd9 v5WWkRMV7uCQiYJPEHX2VUOAtPiRA0nChKXC1tXkJGATk4fVeiARJctx3raJhsej 7I9IboafBjho0mEccSmZbVRujx5EclMB -----END CERTIFICATE-----Generated at Thu May 2 23:03:13 2024 by rpki-client on console-fra.rpki-client.org