$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft File: xCoYwre3JR8lBvX6J4oWLoRETaY.mft (raw, json) Hash identifier: 7Iko+TW9gVVBtYghByZ3+ct7mpVy7TKFiythQCFjntk= Subject key identifier: 79:85:5D:3B:6D:DD:9C:D2:23:57:19:CF:2D:E3:63:03:9A:1E:1B:16 Authority key identifier: C4:2A:18:C2:B7:B7:25:1F:25:06:F5:FA:27:8A:16:2E:84:44:4D:A6 Certificate issuer: /CN=A91B7740/serialNumber=C42A18C2B7B7251F2506F5FA278A162E84444DA6 Certificate serial: 03E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCoYwre3JR8lBvX6J4oWLoRETaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft Manifest number: 03E1 Signing time: Fri 03 May 2024 02:25:55 +0000 Manifest this update: Fri 03 May 2024 02:25:54 +0000 Manifest next update: Fri 10 May 2024 02:25:54 +0000 Files and hashes: 1: xCoYwre3JR8lBvX6J4oWLoRETaY.crl (hash: b7i4/+jMFThmhePyCgNwtNhQ51sbNCz+QGIkU2Lsuf8=) 2: 980E2450325111EC93E97C35C4F9AE02.roa (hash: xl0aXkUgSLZq37PZDGAWLTViCdCRJjkFnawxrIhMCz4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.crl rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCoYwre3JR8lBvX6J4oWLoRETaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 02:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 998 (0x3e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7740/serialNumber=C42A18C2B7B7251F2506F5FA278A162E84444DA6 Validity Not Before: May 3 02:25:54 2024 GMT Not After : May 10 02:25:54 2024 GMT Subject: CN=66344b33-e097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:50:ae:ce:4f:97:53:1c:e0:81:ab:1c:b5:97: 16:f2:8a:b7:9b:69:d6:17:90:9f:32:23:d0:d3:18: 70:22:39:56:c1:5b:72:c3:87:87:8e:21:d5:42:6f: f0:7c:18:78:d3:21:50:26:ef:0a:7a:9e:ef:86:88: 9d:6c:9d:a2:21:22:04:87:70:a1:13:f1:34:3c:5f: 84:d1:b8:67:0c:93:2c:6c:67:d8:49:f8:ae:5b:47: 2e:d1:e9:c5:bc:a0:17:ca:4e:98:1a:de:3b:27:df: fb:ae:55:b8:25:80:02:32:7f:a4:ad:ea:7e:18:19: a5:fd:36:87:d5:46:0f:9a:5d:ab:be:00:36:42:fa: fe:d0:61:cb:95:7a:62:eb:01:f6:12:cb:2f:52:ba: a5:6b:31:c4:33:43:33:d3:1f:7b:ff:91:24:75:04: b8:08:57:5c:7b:84:5d:4f:db:4e:46:36:0b:0d:c6: 0d:29:a9:1b:90:dc:25:15:94:9f:b1:01:8b:00:6c: 7e:be:ed:ac:ef:7a:f2:e9:81:3a:70:f9:27:ff:34: b3:d1:88:71:dc:1a:a6:9e:a7:fa:fd:53:5e:3a:12: a6:5a:03:95:fb:c1:ba:9f:19:46:02:85:d6:74:9b: aa:f5:5b:00:24:57:e1:ee:8a:ce:d7:d7:ea:2d:ec: f9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:85:5D:3B:6D:DD:9C:D2:23:57:19:CF:2D:E3:63:03:9A:1E:1B:16 X509v3 Authority Key Identifier: keyid:C4:2A:18:C2:B7:B7:25:1F:25:06:F5:FA:27:8A:16:2E:84:44:4D:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCoYwre3JR8lBvX6J4oWLoRETaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:1e:de:f4:50:4a:8d:c3:5b:6b:e5:fe:cf:e6:1f:96:4c:63: 29:6c:ef:db:93:e8:94:3f:5b:3c:04:9e:34:3a:dd:50:a6:85: 2e:44:b2:0e:86:15:bd:d5:57:08:62:e8:50:8f:d4:94:43:76: 79:27:e7:a5:6d:15:3c:58:1a:99:9a:2a:5a:18:20:15:fc:31: a5:bd:c1:41:89:2b:e4:14:5b:ce:15:f6:ec:4d:2e:8a:c7:c7: 76:15:62:09:7b:96:76:b3:bf:3e:f3:8e:e5:a7:39:2a:78:61: 68:57:62:17:e4:66:44:ff:5a:cd:51:3f:1e:9c:82:f3:e2:f1: 4e:d9:62:d8:e0:cf:f4:4f:74:6c:8b:2a:0b:c2:e4:52:48:a4: bb:5f:00:71:7f:fe:ab:ff:42:66:ec:ef:87:66:63:ff:2e:0f: e4:08:70:62:bb:a7:38:92:82:66:53:47:be:9d:28:ba:88:4b: 79:3c:a3:e8:7b:65:4d:7d:f6:92:d4:7e:7f:b6:83:81:3c:1a: 87:cc:b6:d4:73:8d:6e:17:b1:d8:d1:74:2f:04:81:cf:95:92: 5a:89:77:0d:fe:9c:58:6f:57:6e:9d:c3:f2:1b:0d:f7:25:f2: bc:8f:c2:e7:6d:58:ae:26:9c:a5:c2:61:49:0d:d4:86:59:06: 71:bc:5b:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3NDAxMTAvBgNVBAUTKEM0MkExOEMyQjdCNzI1MUYyNTA2RjVGQTI3OEExNjJF ODQ0NDREQTYwHhcNMjQwNTAzMDIyNTU0WhcNMjQwNTEwMDIyNTU0WjAYMRYwFAYD VQQDEw02NjM0NGIzMy1lMDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqVCuzk+XUxzggasctZcW8oq3m2nWF5CfMiPQ0xhwIjlWwVtyw4eHjiHVQm/w fBh40yFQJu8Kep7vhoidbJ2iISIEh3ChE/E0PF+E0bhnDJMsbGfYSfiuW0cu0enF vKAXyk6YGt47J9/7rlW4JYACMn+krep+GBml/TaH1UYPml2rvgA2Qvr+0GHLlXpi 6wH2EssvUrqlazHEM0Mz0x97/5EkdQS4CFdce4RdT9tORjYLDcYNKakbkNwlFZSf sQGLAGx+vu2s73ry6YE6cPkn/zSz0Yhx3Bqmnqf6/VNeOhKmWgOV+8G6nxlGAoXW dJuq9VsAJFfh7orO19fqLez5vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmFXTtt 3ZzSI1cZzy3jYwOaHhsWMB8GA1UdIwQYMBaAFMQqGMK3tyUfJQb1+ieKFi6ERE2m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc0MC9GM0E3MTlERTMy MzMxMUVDQjJCNDM0NjNDNEY5QUUwMi94Q29Zd3JlM0pSOGxCdlg2SjRvV0xvUkVU YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDb1l3cmUzSlI4bEJ2WDZKNG9XTG9SRVRhWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc0MC9GM0E3MTlERTMyMzMxMUVDQjJCNDM0NjNDNEY5QUUwMi94Q29Zd3JlM0pS OGxCdlg2SjRvV0xvUkVUYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1Ht70UEqNw1tr5f7P5h+WTGMpbO/bk+iUP1s8BJ40Ot1QpoUuRLIO hhW91VcIYuhQj9SUQ3Z5J+elbRU8WBqZmipaGCAV/DGlvcFBiSvkFFvOFfbsTS6K x8d2FWIJe5Z2s78+847lpzkqeGFoV2IX5GZE/1rNUT8enILz4vFO2WLY4M/0T3Rs iyoLwuRSSKS7XwBxf/6r/0Jm7O+HZmP/Lg/kCHBiu6c4koJmU0e+nSi6iEt5PKPo e2VNffaS1H5/toOBPBqHzLbUc41uF7HY0XQvBIHPlZJaiXcN/pxYb1duncPyGw33 JfK8j8LnbViuJpylwmFJDdSGWQZxvFsJ -----END CERTIFICATE-----Generated at Fri May 3 04:45:25 2024 by rpki-client on console-fra.rpki-client.org