$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.mft File: RbsZfeuTYVmBFWU_lwiean9iv5o.mft (raw, json) Hash identifier: /XhwBlrRrJ2fXRpr8biROq/Zex5ZEGzAcPgqJVzHf5w= Subject key identifier: 4A:B4:8F:43:E7:4E:13:E7:18:10:5A:6E:74:DE:6B:CE:B4:12:D9:D2 Authority key identifier: 45:BB:19:7D:EB:93:61:59:81:15:65:3F:97:08:9E:6A:7F:62:BF:9A Certificate issuer: /CN=A91BD68B/serialNumber=45BB197DEB9361598115653F97089E6A7F62BF9A Certificate serial: 1B0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RbsZfeuTYVmBFWU_lwiean9iv5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.mft Manifest number: 1AFC Signing time: Sat 04 May 2024 16:45:39 +0000 Manifest this update: Sat 04 May 2024 16:45:39 +0000 Manifest next update: Sat 11 May 2024 16:45:39 +0000 Files and hashes: 1: RbsZfeuTYVmBFWU_lwiean9iv5o.crl (hash: mfSVtAXYu4Hdue3zfRaQUzHJ22Cc7QfGvhuh6yGRgZM=) 2: 421AC870FA3C11E68E9D3C2EC4F9AE02.roa (hash: APQuOD189P2WLXKDbcTFy8VmQKW6ddcKXL/ZIs4T+KA=) 3: 575AA83EC89611EDB6E9F849C4F9AE02.roa (hash: xdUwobRmMyqONaYepOUp99NTMp1t/rtEjPA5JvX/k1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.crl rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RbsZfeuTYVmBFWU_lwiean9iv5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 16:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6925 (0x1b0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD68B/serialNumber=45BB197DEB9361598115653F97089E6A7F62BF9A Validity Not Before: May 4 16:45:39 2024 GMT Not After : May 11 16:45:39 2024 GMT Subject: CN=66366633-dacd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:82:ee:1e:a5:b7:0b:e3:41:e6:f5:ba:b3:46: 15:f2:9c:fa:71:87:e1:de:dd:54:7a:02:58:d1:2f: 22:d5:99:ce:6f:0f:c6:8a:40:f2:d2:41:3f:ea:40: 20:f0:5e:17:f7:24:a6:55:79:21:85:f6:57:de:33: 58:e8:ff:41:5c:82:51:4c:33:2c:20:9f:92:bc:b4: 87:a1:0c:d0:40:e0:4c:bb:b1:5c:90:cc:3e:63:c8: a0:6e:cf:88:af:56:57:74:64:80:e1:99:b3:8f:1c: 86:80:00:1d:4b:6b:3c:a1:a3:e2:d0:85:cb:df:5e: a3:c7:ea:5a:88:60:19:38:f5:61:7d:3e:07:57:f7: 64:5e:a8:db:05:8a:23:87:d2:13:6a:08:05:89:3e: ca:3d:e7:05:63:85:7e:3a:f5:6b:5e:cf:9a:43:44: 09:8d:40:11:62:cb:00:65:d6:06:e7:be:47:aa:72: a3:f8:83:4c:3b:60:e5:9e:10:0e:b5:80:6e:1f:0c: 4d:e3:df:93:4f:f3:ee:f4:a3:6b:3a:5b:77:c7:60: be:cf:df:f8:ee:96:a5:15:c8:91:9c:43:0c:0d:10: ba:9b:15:7c:e8:df:0f:9c:21:a6:b4:e7:82:1a:41: 42:43:b9:52:8e:bf:84:1d:e3:88:06:b8:0e:ef:16: 44:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B4:8F:43:E7:4E:13:E7:18:10:5A:6E:74:DE:6B:CE:B4:12:D9:D2 X509v3 Authority Key Identifier: keyid:45:BB:19:7D:EB:93:61:59:81:15:65:3F:97:08:9E:6A:7F:62:BF:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RbsZfeuTYVmBFWU_lwiean9iv5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:f8:01:32:3b:91:5f:c3:59:9b:14:48:ad:74:3d:da:42:20: 9b:02:a9:cf:4e:f0:e8:92:23:50:6b:f1:19:f4:f9:d5:53:54: bc:1c:89:3d:3d:21:49:e8:13:fb:69:94:ae:40:8b:30:9f:59: ed:5c:d1:e7:35:09:02:c1:4b:a1:cf:06:6a:f2:88:87:9c:e7: b3:b1:9d:3c:ef:3f:b0:5f:93:2c:a4:5a:50:40:b4:ca:e1:67: 24:33:50:9d:c1:e3:e8:67:93:91:05:7e:2e:04:99:35:bf:6a: 1e:fd:44:6a:a4:ef:94:c5:84:fb:b5:84:49:a1:3e:b3:39:59: c8:95:7b:e4:db:bb:40:fc:8a:6e:85:3c:0c:be:bb:2e:17:49: 36:e6:cc:60:34:c8:ce:2e:42:d6:03:62:43:d0:ef:d7:be:a6: b3:9b:c8:06:ec:44:5a:0c:ac:e9:94:6d:43:fc:a0:a7:74:35: 15:a7:0e:f6:e5:f1:0c:b4:59:d1:f9:c1:96:fa:39:08:56:1d: 8a:51:97:ac:4b:a4:13:65:18:4a:0d:df:94:a4:84:d7:9c:66: dc:36:4d:81:60:bf:5d:20:f5:7d:1f:e1:16:f3:b4:3e:4d:a0: 49:08:fd:46:9b:b2:82:4c:5a:22:c8:03:63:d8:e9:3d:97:01: d3:7c:03:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ2OEIxMTAvBgNVBAUTKDQ1QkIxOTdERUI5MzYxNTk4MTE1NjUzRjk3MDg5RTZB N0Y2MkJGOUEwHhcNMjQwNTA0MTY0NTM5WhcNMjQwNTExMTY0NTM5WjAYMRYwFAYD VQQDEw02NjM2NjYzMy1kYWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYLuHqW3C+NB5vW6s0YV8pz6cYfh3t1UegJY0S8i1ZnObw/GikDy0kE/6kAg 8F4X9ySmVXkhhfZX3jNY6P9BXIJRTDMsIJ+SvLSHoQzQQOBMu7FckMw+Y8igbs+I r1ZXdGSA4ZmzjxyGgAAdS2s8oaPi0IXL316jx+paiGAZOPVhfT4HV/dkXqjbBYoj h9ITaggFiT7KPecFY4V+OvVrXs+aQ0QJjUARYssAZdYG575HqnKj+INMO2DlnhAO tYBuHwxN49+TT/Pu9KNrOlt3x2C+z9/47palFciRnEMMDRC6mxV86N8PnCGmtOeC GkFCQ7lSjr+EHeOIBrgO7xZErwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEq0j0Pn ThPnGBBabnTea860EtnSMB8GA1UdIwQYMBaAFEW7GX3rk2FZgRVlP5cInmp/Yr+a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDY4Qi9CMERGNTVFQ0ZB M0IxMUU2QjhBNkFFMkRDNEY5QUUwMi9SYnNaZmV1VFlWbUJGV1VfbHdpZWFuOWl2 NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Jic1pmZXVUWVZtQkZXVV9sd2llYW45aXY1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDY4Qi9CMERGNTVFQ0ZBM0IxMUU2QjhBNkFFMkRDNEY5QUUwMi9SYnNaZmV1VFlW bUJGV1VfbHdpZWFuOWl2NW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb+AEyO5Ffw1mbFEitdD3aQiCbAqnPTvDokiNQa/EZ9PnVU1S8HIk9 PSFJ6BP7aZSuQIswn1ntXNHnNQkCwUuhzwZq8oiHnOezsZ087z+wX5MspFpQQLTK 4WckM1CdwePoZ5ORBX4uBJk1v2oe/URqpO+UxYT7tYRJoT6zOVnIlXvk27tA/Ipu hTwMvrsuF0k25sxgNMjOLkLWA2JD0O/Xvqazm8gG7ERaDKzplG1D/KCndDUVpw72 5fEMtFnR+cGW+jkIVh2KUZesS6QTZRhKDd+UpITXnGbcNk2BYL9dIPV9H+EW87Q+ TaBJCP1Gm7KCTFoiyANj2Ok9lwHTfAOO -----END CERTIFICATE-----Generated at Sat May 4 17:19:49 2024 by rpki-client on console-fra.rpki-client.org