$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft File: ShevZqBI_IHa6FRffjXZ2qvUAnE.mft (raw, json) Hash identifier: ZEgDLLoKsOWpq8FGJ6KrEVU171vZSi3Kw1BtdhPHqDM= Subject key identifier: EF:D5:C8:9D:2F:27:D4:80:C2:38:17:CA:3B:94:5A:36:33:D5:C4:90 Authority key identifier: 4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71 Certificate issuer: /CN=A91B6E73/serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271 Certificate serial: 114E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft Manifest number: 1128 Signing time: Thu 02 May 2024 17:54:56 +0000 Manifest this update: Thu 02 May 2024 17:54:55 +0000 Manifest next update: Thu 09 May 2024 17:54:55 +0000 Files and hashes: 1: ShevZqBI_IHa6FRffjXZ2qvUAnE.crl (hash: 576X1zFvM3qWRr5tubJeyVS4XeoJPIy9q6WxeQlWx+o=) 2: E10FA0FCB52611EEB3487B5BC4F9AE02.roa (hash: wr5ztPmvZN7s4D2CvOqMN8VnTh99RrNwK0w18m5apNc=) 3: C0655836B3B511EA8BFADC14C4F9AE02.roa (hash: ESw9duBCReL8Wp+ONcz10sCJO+y/cVuwZOBDVu1HWH8=) 4: C16DCDDAB3B511EA8BFADC14C4F9AE02.roa (hash: 5BaIXlUklJBlXKeiwr0r+qNSQwgyfF8ibFZCw3svB+U=) 5: 273538D8CF7A11ECB4E21125C4F9AE02.roa (hash: pSOeVRU8/a8GqfVRku1xH+URO8tttyKC8jeMWDGPElQ=) 6: C37CCA126FE611EA9D9F5E67C4F9AE02.roa (hash: kt3Yk+E/EE3f1S73Kn5W6atQhH5e6Q2wDMxAcInFDQ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 17:54:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4430 (0x114e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6E73/serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271 Validity Not Before: May 2 17:54:55 2024 GMT Not After : May 9 17:54:55 2024 GMT Subject: CN=6633d370-2f85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ba:02:4f:b1:0f:d9:10:69:b9:e3:f5:c0:fd: 0b:b1:9e:32:83:87:17:67:23:ca:dd:86:ba:22:a2: 0e:8f:41:97:fb:ba:5f:79:63:a5:f9:3a:a9:41:06: 37:b3:1c:da:d2:88:6b:ac:cc:16:1b:5b:aa:01:42: 61:23:60:9a:10:c6:18:0e:a5:35:f9:e0:9e:98:5a: bd:fd:af:74:98:e6:ef:de:9b:e8:ea:d5:19:59:39: cb:fc:3e:87:a7:ea:3c:20:01:1b:5e:fb:5c:0b:17: 38:1b:62:4f:fb:37:79:1b:33:82:5a:24:e4:b5:7d: df:9d:99:10:df:f7:84:55:e9:2f:d8:d8:b6:bc:67: e3:be:d6:ea:60:db:26:75:f6:d6:75:04:de:66:f9: 79:54:17:f1:45:be:97:fb:34:4c:f5:60:92:ed:96: ef:29:9c:b3:1b:a0:91:a2:36:80:33:5d:29:ae:2a: ab:bb:21:9d:26:0d:0d:ba:60:c6:91:58:91:5e:bd: 58:6c:b5:d5:fa:d4:59:b6:53:5e:21:3a:2b:85:82: 7a:87:2c:ab:80:91:7f:0b:76:2a:49:7b:28:7e:7a: 62:41:52:1c:ee:97:c3:de:e8:74:85:c3:79:6f:fa: f0:ac:c8:b6:b3:d0:29:63:35:60:ce:2d:d0:92:72: 4d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D5:C8:9D:2F:27:D4:80:C2:38:17:CA:3B:94:5A:36:33:D5:C4:90 X509v3 Authority Key Identifier: keyid:4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:e8:75:9d:44:f7:56:32:8a:39:d1:f3:f8:7c:3b:23:c2:45: f3:85:2d:19:34:eb:70:a7:ee:05:c9:79:be:5d:1a:ac:e9:bb: 52:80:53:b0:42:2a:50:e0:66:d1:b7:e5:50:3d:f4:54:86:f5: 26:b5:2d:77:de:3a:dc:85:f7:96:0e:45:42:2a:ea:b4:1a:00: e1:39:e5:79:2f:5f:94:76:ae:ed:21:d7:cc:12:19:40:76:ec: 9f:57:ee:cb:5c:cb:32:80:72:a2:8c:93:01:46:73:ec:0c:c0: 72:82:5d:1d:19:ee:88:df:60:e7:24:4f:a6:d4:58:85:9e:30: 65:98:66:62:42:a9:11:75:5e:7e:90:5b:c0:69:46:4a:74:e6: 0c:3e:57:cf:30:dc:0f:ad:54:4f:6a:5d:3c:cb:09:c4:06:9d: fa:5b:b7:21:01:0e:eb:9c:33:c4:50:ae:5f:c5:63:e8:93:26: 95:bf:f1:86:cc:af:34:ac:15:ac:c3:e5:8e:d0:41:38:41:c8: 06:7b:15:e7:ba:bc:c8:ac:ed:f5:e8:c4:45:b5:e0:2c:2c:50: 0f:03:aa:64:89:3d:c4:b9:0d:57:e3:30:a7:8a:4c:fc:1d:8c: 6b:e8:ab:c5:fa:d3:51:f2:1f:e7:2e:96:a2:d1:f9:f2:57:90: c3:3e:ec:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZFNzMxMTAvBgNVBAUTKDRBMTdBRjY2QTA0OEZDODFEQUU4NTQ1RjdFMzVEOURB QUJENDAyNzEwHhcNMjQwNTAyMTc1NDU1WhcNMjQwNTA5MTc1NDU1WjAYMRYwFAYD VQQDEw02NjMzZDM3MC0yZjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7oCT7EP2RBpueP1wP0LsZ4yg4cXZyPK3Ya6IqIOj0GX+7pfeWOl+TqpQQY3 sxza0ohrrMwWG1uqAUJhI2CaEMYYDqU1+eCemFq9/a90mObv3pvo6tUZWTnL/D6H p+o8IAEbXvtcCxc4G2JP+zd5GzOCWiTktX3fnZkQ3/eEVekv2Ni2vGfjvtbqYNsm dfbWdQTeZvl5VBfxRb6X+zRM9WCS7ZbvKZyzG6CRojaAM10priqruyGdJg0NumDG kViRXr1YbLXV+tRZtlNeITorhYJ6hyyrgJF/C3YqSXsofnpiQVIc7pfD3uh0hcN5 b/rwrMi2s9ApYzVgzi3QknJNBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO/VyJ0v J9SAwjgXyjuUWjYz1cSQMB8GA1UdIwQYMBaAFEoXr2agSPyB2uhUX3412dqr1AJx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkU3My9GNDFENDBGMkVB MDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9JSGE2RlJmZmpYWjJxdlVB bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoZXZacUJJX0lIYTZGUmZmalhaMnF2VUFuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkU3My9GNDFENDBGMkVBMDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9J SGE2RlJmZmpYWjJxdlVBbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQ6HWdRPdWMoo50fP4fDsjwkXzhS0ZNOtwp+4FyXm+XRqs6btSgFOw QipQ4GbRt+VQPfRUhvUmtS133jrchfeWDkVCKuq0GgDhOeV5L1+Udq7tIdfMEhlA duyfV+7LXMsygHKijJMBRnPsDMBygl0dGe6I32DnJE+m1FiFnjBlmGZiQqkRdV5+ kFvAaUZKdOYMPlfPMNwPrVRPal08ywnEBp36W7chAQ7rnDPEUK5fxWPokyaVv/GG zK80rBWsw+WO0EE4QcgGexXnurzIrO316MRFteAsLFAPA6pkiT3EuQ1X4zCnikz8 HYxr6KvF+tNR8h/nLpai0fnyV5DDPuz+ -----END CERTIFICATE-----Generated at Thu May 2 20:50:34 2024 by rpki-client on console-fra.rpki-client.org