$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft File: 5VpZVzhbbPjKDASB1i3f_asSwfQ.mft (raw, json) Hash identifier: I1OYEmLAjt3w7HVA6WNRIWJuEb3djCsngn0hg6lViCM= Subject key identifier: 0B:A0:01:BC:AE:90:A5:2C:52:4E:93:20:2D:EC:EC:CB:85:DF:A8:E1 Authority key identifier: E5:5A:59:57:38:5B:6C:F8:CA:0C:04:81:D6:2D:DF:FD:AB:12:C1:F4 Certificate issuer: /CN=A91BD090/serialNumber=E55A5957385B6CF8CA0C0481D62DDFFDAB12C1F4 Certificate serial: 0844 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft Manifest number: 083E Signing time: Wed 24 Apr 2024 21:44:40 +0000 Manifest this update: Wed 24 Apr 2024 21:44:39 +0000 Manifest next update: Wed 01 May 2024 21:44:39 +0000 Files and hashes: 1: 5VpZVzhbbPjKDASB1i3f_asSwfQ.crl (hash: +GMzbSS/TUpw0lL9MyeUJ9JtMx/nOe9RuhSVsLwEViY=) 2: A1F46062A64611EAA24E1461C4F9AE02.roa (hash: YrnpZi3m8PFhcPzx8yyJW6kEGkbxejrCHTaF/Tb14LA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.crl rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 21:44:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2116 (0x844) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD090/serialNumber=E55A5957385B6CF8CA0C0481D62DDFFDAB12C1F4 Validity Not Before: Apr 24 21:44:39 2024 GMT Not After : May 1 21:44:39 2024 GMT Subject: CN=66297d48-37a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6a:44:7a:d8:01:39:45:7b:57:bc:af:25:50: c4:a4:cb:97:88:a7:ad:79:b2:6a:ae:c9:6f:d8:eb: ab:03:c9:83:f3:b2:cb:cf:2d:ae:08:54:83:42:00: a1:43:d5:a5:6a:3b:1d:8e:7d:04:6a:c4:bf:2e:aa: 49:b5:8a:bf:87:11:a6:45:51:bf:c3:4d:d2:5a:c5: 0f:69:76:d5:44:3d:74:a0:b3:bd:77:5e:0e:bd:ba: 86:ae:f6:31:29:e8:65:5e:1d:42:69:96:1c:ed:09: 4a:30:1b:35:23:bb:d1:6f:54:2b:52:a2:8e:68:5d: 63:ce:80:65:2e:50:72:6a:59:63:95:3c:e8:9a:3b: ed:19:f5:4d:12:60:9f:85:a4:97:c3:85:4a:16:bf: 2a:3b:0c:3e:4f:a8:c6:75:e9:4e:ae:a2:57:9e:21: a9:ba:d1:89:99:d2:d6:68:73:9b:d2:1d:4e:72:b5: a6:af:24:73:4d:da:6a:a4:57:5a:cd:53:20:9f:1d: 76:9c:52:e3:bc:ca:45:be:05:75:39:3f:0a:fd:9d: 85:87:0e:99:57:8d:37:05:0a:03:f7:85:0e:ef:9d: f8:df:b2:e7:d2:f4:da:b4:25:c9:5d:28:49:4e:5e: 73:f4:1d:a2:a9:c8:eb:a4:3e:98:da:d1:cc:24:67: d6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A0:01:BC:AE:90:A5:2C:52:4E:93:20:2D:EC:EC:CB:85:DF:A8:E1 X509v3 Authority Key Identifier: keyid:E5:5A:59:57:38:5B:6C:F8:CA:0C:04:81:D6:2D:DF:FD:AB:12:C1:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:f0:62:07:db:dd:21:1f:3b:70:dd:cf:30:b3:33:4c:9d:c2: 1a:8c:d4:b8:2c:cc:f9:15:8d:10:5b:25:ef:b1:15:f2:49:d2: 79:ff:b0:8f:4c:f3:71:33:22:84:78:4e:c0:b5:a4:7f:a8:3e: 2c:ed:66:3a:c5:c8:b7:51:22:92:75:2d:cd:74:71:d0:a7:9b: fc:86:28:d8:30:cb:76:9a:91:95:de:8c:17:a0:6a:ab:2f:46: ac:f1:30:13:76:27:b7:2b:78:4f:6a:7b:d0:c0:f9:88:96:88: a0:9a:cd:7d:07:5d:3e:cc:3a:86:fc:41:0e:94:e6:5a:8d:04: e1:ac:c9:d6:8d:42:04:60:20:f4:76:c2:e8:30:ca:33:3f:1d: a8:08:9e:e6:18:d2:4d:ff:ff:8f:f2:d8:8f:9b:ab:30:47:a2: 99:fb:2c:db:3b:57:9b:9c:e5:a3:15:3a:32:2f:49:5d:fb:9e: 9f:9a:56:59:30:4e:cb:f9:f1:61:cf:4b:d0:e9:6a:e3:3a:40: dc:3d:7b:a7:c7:20:47:d4:37:ee:51:e8:f1:8f:a1:71:21:f3: 3f:7b:b1:c0:9f:97:53:80:c1:93:5a:87:a5:a8:cb:8c:92:33: a0:50:04:1c:a3:5e:89:e8:41:c7:1e:2e:06:68:ac:41:05:b7: 94:d7:fa:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQwOTAxMTAvBgNVBAUTKEU1NUE1OTU3Mzg1QjZDRjhDQTBDMDQ4MUQ2MkRERkZE QUIxMkMxRjQwHhcNMjQwNDI0MjE0NDM5WhcNMjQwNTAxMjE0NDM5WjAYMRYwFAYD VQQDEw02NjI5N2Q0OC0zN2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmpEetgBOUV7V7yvJVDEpMuXiKetebJqrslv2OurA8mD87LLzy2uCFSDQgCh Q9Wlajsdjn0EasS/LqpJtYq/hxGmRVG/w03SWsUPaXbVRD10oLO9d14OvbqGrvYx KehlXh1CaZYc7QlKMBs1I7vRb1QrUqKOaF1jzoBlLlByalljlTzomjvtGfVNEmCf haSXw4VKFr8qOww+T6jGdelOrqJXniGputGJmdLWaHOb0h1OcrWmryRzTdpqpFda zVMgnx12nFLjvMpFvgV1OT8K/Z2Fhw6ZV403BQoD94UO753437Ln0vTatCXJXShJ Tl5z9B2iqcjrpD6Y2tHMJGfWYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAugAbyu kKUsUk6TIC3s7MuF36jhMB8GA1UdIwQYMBaAFOVaWVc4W2z4ygwEgdYt3/2rEsH0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDA5MC8yRENFMDQ4Q0E2 NDUxMUVBODYxQUQzNUVDNEY5QUUwMi81VnBaVnpoYmJQaktEQVNCMWkzZl9hc1N3 ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVWcFpWemhiYlBqS0RBU0IxaTNmX2FzU3dmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDA5MC8yRENFMDQ4Q0E2NDUxMUVBODYxQUQzNUVDNEY5QUUwMi81VnBaVnpoYmJQ aktEQVNCMWkzZl9hc1N3ZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCf8GIH290hHztw3c8wszNMncIajNS4LMz5FY0QWyXvsRXySdJ5/7CP TPNxMyKEeE7AtaR/qD4s7WY6xci3USKSdS3NdHHQp5v8hijYMMt2mpGV3owXoGqr L0as8TATdie3K3hPanvQwPmIloigms19B10+zDqG/EEOlOZajQThrMnWjUIEYCD0 dsLoMMozPx2oCJ7mGNJN//+P8tiPm6swR6KZ+yzbO1ebnOWjFToyL0ld+56fmlZZ ME7L+fFhz0vQ6WrjOkDcPXunxyBH1DfuUejxj6FxIfM/e7HAn5dTgMGTWoelqMuM kjOgUAQco16J6EHHHi4GaKxBBbeU1/oW -----END CERTIFICATE-----Generated at Wed Apr 24 22:30:04 2024 by rpki-client on console-fra.rpki-client.org