$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB07D/E9B4853C4AC411EE9839386FC4F9AE02/1DEGkNzrfuShjaNXmsrRdIGGRqM.mft File: 1DEGkNzrfuShjaNXmsrRdIGGRqM.mft (raw, json) Hash identifier: ZSN41flkDR4wx5iokYKNw/beCfb4tCGGTlvX1ynfh9Q= Subject key identifier: 7E:ED:49:05:01:24:35:60:A3:74:1F:BB:CE:47:F9:AC:F7:19:93:2C Authority key identifier: D4:31:06:90:DC:EB:7E:E4:A1:8D:A3:57:9A:CA:D1:74:81:86:46:A3 Certificate issuer: /CN=A91BB07D/serialNumber=D4310690DCEB7EE4A18DA3579ACAD174818646A3 Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DEGkNzrfuShjaNXmsrRdIGGRqM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB07D/E9B4853C4AC411EE9839386FC4F9AE02/1DEGkNzrfuShjaNXmsrRdIGGRqM.mft Manifest number: 8E Signing time: Wed 15 May 2024 07:14:13 +0000 Manifest this update: Wed 15 May 2024 07:14:13 +0000 Manifest next update: Wed 22 May 2024 07:14:13 +0000 Files and hashes: 1: 1DEGkNzrfuShjaNXmsrRdIGGRqM.crl (hash: 8+37x7wUd7GmY0avZXWxiXRmUZRByH5/CccHoN7VjmQ=) 2: DF7D72D28A8811EE986F3825C4F9AE02.roa (hash: RGr8hXQMjJdFndE7Gzhb7d7xv7E7MbpTwlhT5BeLBfE=) 3: D73C120C6D6111EE89A8734AC4F9AE02.roa (hash: 70f3c4+RlBu+YEYGG+fFi4ke/TLB2V48M54+7TFhHfA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB07D/E9B4853C4AC411EE9839386FC4F9AE02/1DEGkNzrfuShjaNXmsrRdIGGRqM.crl rsync://rpki.apnic.net/member_repository/A91BB07D/E9B4853C4AC411EE9839386FC4F9AE02/1DEGkNzrfuShjaNXmsrRdIGGRqM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DEGkNzrfuShjaNXmsrRdIGGRqM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:14:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB07D/serialNumber=D4310690DCEB7EE4A18DA3579ACAD174818646A3 Validity Not Before: May 15 07:14:13 2024 GMT Not After : May 22 07:14:13 2024 GMT Subject: CN=664460c5-3f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4f:9c:7f:27:41:a1:10:82:63:da:26:14:3b: 22:27:53:0f:7a:ec:6c:f9:f0:76:44:68:51:65:5b: 11:7b:2d:c9:fb:e0:4c:2b:51:e0:2c:ff:ee:40:60: 27:be:34:b1:09:34:15:48:0d:2d:db:7c:fb:9a:8a: 36:ee:22:02:74:f9:fb:a9:ef:e3:90:f6:0d:b1:fd: cf:46:20:cf:b4:30:7b:9e:1e:36:34:82:db:12:4d: ee:b0:b1:7d:7b:e6:5f:03:45:10:1a:0e:17:05:88: 31:e1:82:62:c8:d6:da:f3:f7:27:c9:bb:9b:9d:08: 02:d7:b2:df:4b:68:89:98:7b:20:43:7e:f1:18:17: 82:d7:ef:bb:4c:a8:f5:90:1c:9d:4e:1a:ca:1a:ee: 84:88:f5:19:f7:0e:d7:4a:ec:e2:8a:40:d7:56:74: 07:6f:1e:38:95:69:30:f7:67:af:78:92:9f:f4:e9: c1:f9:0d:a7:51:61:13:86:79:5d:06:1e:10:02:f7: a4:36:0b:df:03:90:b2:8f:d2:69:82:db:1f:a4:d9: 7b:65:85:fb:da:ec:ae:bf:e8:82:f0:3d:93:3f:ec: ae:8d:09:93:f3:74:ef:94:df:a5:a5:f4:2c:86:b9: 48:cb:2f:3e:e2:9a:c5:7e:b7:d6:26:6f:21:56:c0: 84:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:ED:49:05:01:24:35:60:A3:74:1F:BB:CE:47:F9:AC:F7:19:93:2C X509v3 Authority Key Identifier: keyid:D4:31:06:90:DC:EB:7E:E4:A1:8D:A3:57:9A:CA:D1:74:81:86:46:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB07D/E9B4853C4AC411EE9839386FC4F9AE02/1DEGkNzrfuShjaNXmsrRdIGGRqM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DEGkNzrfuShjaNXmsrRdIGGRqM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB07D/E9B4853C4AC411EE9839386FC4F9AE02/1DEGkNzrfuShjaNXmsrRdIGGRqM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:24:e8:8e:70:cd:be:bb:7a:1a:e1:5a:b6:df:58:a2:61:9f: 78:e2:df:a4:06:af:42:e5:ae:4f:fd:2f:d8:91:4c:51:16:b8: bc:19:91:a5:5a:f0:06:50:6b:4a:aa:20:f6:c1:5f:f1:75:78: 0d:1a:92:17:9a:dc:77:32:83:d6:e1:d2:7b:eb:ba:e7:d3:da: 68:35:f8:c8:e9:6d:45:ce:aa:30:cd:40:e1:a3:f8:a6:7f:d8: 7f:f8:83:ff:2d:68:ff:f5:64:6a:a5:4f:5f:06:d8:7f:18:e2: eb:86:34:32:58:d6:c1:3f:3e:30:c2:70:cc:ff:40:74:7d:78: 03:e6:88:eb:cc:d6:3b:d8:86:80:b9:5a:43:ed:66:d7:86:01: c0:7b:e9:37:1d:f0:96:46:b4:19:e6:4d:cd:b9:f6:eb:06:6a: 0a:c3:5f:f8:8e:5d:c6:fa:e0:1d:f8:5a:ea:6a:e9:af:29:aa: 62:d6:b3:e2:65:09:27:81:02:6c:67:ec:f7:75:8b:57:cc:84: 32:c3:59:02:a7:bb:58:bb:25:38:12:a2:59:2a:9a:7c:4a:1e: 23:3a:08:d6:4e:91:b6:79:31:e5:ec:97:78:44:7f:88:40:78: 95:be:e2:f3:bd:5a:75:25:c5:5c:03:0f:c9:9c:23:cf:f1:ec: 33:0a:8d:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkIwN0QxMTAvBgNVBAUTKEQ0MzEwNjkwRENFQjdFRTRBMThEQTM1NzlBQ0FEMTc0 ODE4NjQ2QTMwHhcNMjQwNTE1MDcxNDEzWhcNMjQwNTIyMDcxNDEzWjAYMRYwFAYD VQQDEw02NjQ0NjBjNS0zZjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA20+cfydBoRCCY9omFDsiJ1MPeuxs+fB2RGhRZVsRey3J++BMK1HgLP/uQGAn vjSxCTQVSA0t23z7moo27iICdPn7qe/jkPYNsf3PRiDPtDB7nh42NILbEk3usLF9 e+ZfA0UQGg4XBYgx4YJiyNba8/cnybubnQgC17LfS2iJmHsgQ37xGBeC1++7TKj1 kBydThrKGu6EiPUZ9w7XSuziikDXVnQHbx44lWkw92eveJKf9OnB+Q2nUWEThnld Bh4QAvekNgvfA5Cyj9JpgtsfpNl7ZYX72uyuv+iC8D2TP+yujQmT83TvlN+lpfQs hrlIyy8+4prFfrfWJm8hVsCE6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7tSQUB JDVgo3Qfu85H+az3GZMsMB8GA1UdIwQYMBaAFNQxBpDc637koY2jV5rK0XSBhkaj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjA3RC9FOUI0ODUzQzRB QzQxMUVFOTgzOTM4NkZDNEY5QUUwMi8xREVHa056cmZ1U2hqYU5YbXNyUmRJR0dS cU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFERUdrTnpyZnVTaGphTlhtc3JSZElHR1JxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjA3RC9FOUI0ODUzQzRBQzQxMUVFOTgzOTM4NkZDNEY5QUUwMi8xREVHa056cmZ1 U2hqYU5YbXNyUmRJR0dScU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWJOiOcM2+u3oa4Vq231iiYZ944t+kBq9C5a5P/S/YkUxRFri8GZGl WvAGUGtKqiD2wV/xdXgNGpIXmtx3MoPW4dJ767rn09poNfjI6W1FzqowzUDho/im f9h/+IP/LWj/9WRqpU9fBth/GOLrhjQyWNbBPz4wwnDM/0B0fXgD5ojrzNY72IaA uVpD7WbXhgHAe+k3HfCWRrQZ5k3NufbrBmoKw1/4jl3G+uAd+FrqaumvKapi1rPi ZQkngQJsZ+z3dYtXzIQyw1kCp7tYuyU4EqJZKpp8Sh4jOgjWTpG2eTHl7Jd4RH+I QHiVvuLzvVp1JcVcAw/JnCPP8ewzCo1r -----END CERTIFICATE-----Generated at Wed May 15 09:28:14 2024 by rpki-client on console-fra.rpki-client.org