$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft File: SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft (raw, json) Hash identifier: hHcpEqT6Sn9HXEF+D9Gw9U0Y1T+wuz9TBCTKEaURs9w= Subject key identifier: 29:65:56:A8:C8:08:0A:AE:D3:03:A7:FD:FE:24:B2:AC:E5:23:14:92 Authority key identifier: 4A:38:8D:AD:13:DF:69:C2:D0:E9:EA:16:B9:8B:0C:23:35:8F:DB:03 Certificate issuer: /CN=A91BE8F6/serialNumber=4A388DAD13DF69C2D0E9EA16B98B0C23358FDB03 Certificate serial: 1462 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft Manifest number: 145A Signing time: Thu 02 May 2024 17:26:56 +0000 Manifest this update: Thu 02 May 2024 17:26:55 +0000 Manifest next update: Thu 09 May 2024 17:26:55 +0000 Files and hashes: 1: SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl (hash: fdeHDdsKVcR2iK5RfKAiRX6q4CFLUAA/+wN7JJF3wbI=) 2: 8D9A6E1246CC11E8B5408617C4F9AE02.roa (hash: Yhfg4YvQQZjhY3KRsDWyz6hCLcA/Ph/uJc8vvKK428M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 17:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5218 (0x1462) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE8F6/serialNumber=4A388DAD13DF69C2D0E9EA16B98B0C23358FDB03 Validity Not Before: May 2 17:26:55 2024 GMT Not After : May 9 17:26:55 2024 GMT Subject: CN=6633cce0-abc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:85:46:88:b8:c1:8e:25:98:26:72:7b:08:69: 1a:6a:87:f8:32:50:73:fa:fb:df:f8:23:33:5b:d9: ed:5c:40:eb:51:70:a9:98:7c:df:aa:f3:d0:dc:a1: 87:ec:83:ff:93:94:35:db:be:6f:e8:8b:63:3d:25: 4b:9a:6c:1c:16:92:fb:04:02:c5:9b:45:ab:8f:6e: f9:23:37:a2:19:a3:e2:9c:90:a0:59:83:4c:3d:ab: 39:86:3e:18:d0:7f:3d:af:a2:74:91:a2:bb:02:3f: 72:f4:6d:08:fd:3f:ef:8a:fb:e0:fd:51:14:77:1c: 2f:33:fc:4d:51:65:24:5f:86:8c:e5:d3:71:a8:54: c9:9c:d9:43:4a:45:35:f5:21:ff:52:fc:5a:7a:cc: 79:9d:07:04:9e:f9:3e:ee:5d:a2:73:54:6e:96:49: be:5a:dd:54:cf:4b:de:5f:4d:f6:ac:be:d4:3c:4e: 89:40:94:af:b4:c4:56:fe:bf:ba:de:ff:6a:10:06: 19:6a:d4:f9:e1:23:70:b2:16:9b:0d:a3:76:66:d3: 6a:c8:eb:9f:fb:4b:88:33:e8:47:c9:fb:95:d0:c7: 24:47:37:c1:a4:31:ce:ac:fa:23:91:d7:62:e8:41: 5b:8e:cb:84:e5:c9:f4:17:2a:a3:d4:6d:eb:06:6c: 0e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:65:56:A8:C8:08:0A:AE:D3:03:A7:FD:FE:24:B2:AC:E5:23:14:92 X509v3 Authority Key Identifier: keyid:4A:38:8D:AD:13:DF:69:C2:D0:E9:EA:16:B9:8B:0C:23:35:8F:DB:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:a3:b1:bc:6a:cb:12:61:0f:5e:cc:2e:ed:95:84:69:2e:a5: 0f:03:e6:0b:55:b2:18:26:a8:52:4a:ca:67:dd:ad:52:dc:f7: b5:7f:46:87:63:39:e9:a4:18:b2:03:58:11:c1:a5:ad:d3:00: 41:bf:6f:bc:ff:dd:9a:98:04:dd:ef:b4:a1:aa:03:01:8a:49: 8a:50:c3:dd:fb:6b:48:19:a3:dc:4b:85:c5:82:c8:45:e0:6d: 6a:11:ba:46:6e:3c:2f:67:a0:26:64:4a:6f:53:f6:97:09:39: c2:b9:df:5a:64:ac:24:41:40:67:0f:bb:3d:51:3b:1b:db:a0: 02:50:8f:c7:6f:d1:f7:d5:f9:42:05:92:98:bc:cc:22:14:d2: 57:5d:2e:13:fe:32:65:0a:5d:ba:05:d1:f3:61:1a:f0:13:15: 7b:8b:95:40:37:21:8b:be:d8:a6:a7:31:6b:04:b7:7f:4e:a9: a5:cf:11:b1:0e:b7:47:f4:e7:f9:7b:97:75:e1:d0:f3:6b:38: 2b:90:fd:56:76:0e:33:1a:d3:e0:c1:4a:4b:e2:54:b8:09:29: 14:b3:90:7f:9c:c8:4e:d1:67:18:4c:2d:2d:7a:cf:e2:05:34: 71:03:a1:6f:63:69:c0:2c:2d:18:bf:96:5f:c3:fe:3f:82:54: 0a:ef:7b:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU4RjYxMTAvBgNVBAUTKDRBMzg4REFEMTNERjY5QzJEMEU5RUExNkI5OEIwQzIz MzU4RkRCMDMwHhcNMjQwNTAyMTcyNjU1WhcNMjQwNTA5MTcyNjU1WjAYMRYwFAYD VQQDEw02NjMzY2NlMC1hYmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1oVGiLjBjiWYJnJ7CGkaaof4MlBz+vvf+CMzW9ntXEDrUXCpmHzfqvPQ3KGH 7IP/k5Q1275v6ItjPSVLmmwcFpL7BALFm0Wrj275IzeiGaPinJCgWYNMPas5hj4Y 0H89r6J0kaK7Aj9y9G0I/T/vivvg/VEUdxwvM/xNUWUkX4aM5dNxqFTJnNlDSkU1 9SH/Uvxaesx5nQcEnvk+7l2ic1Rulkm+Wt1Uz0veX032rL7UPE6JQJSvtMRW/r+6 3v9qEAYZatT54SNwshabDaN2ZtNqyOuf+0uIM+hHyfuV0MckRzfBpDHOrPojkddi 6EFbjsuE5cn0Fyqj1G3rBmwOXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCllVqjI CAqu0wOn/f4ksqzlIxSSMB8GA1UdIwQYMBaAFEo4ja0T32nC0OnqFrmLDCM1j9sD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRThGNi9CMjZFNUYyRTQ2 Q0IxMUU4ODQyQjRCMTZDNEY5QUUwMi9TamlOclJQZmFjTFE2ZW9XdVlzTUl6V1Ay d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NqaU5yUlBmYWNMUTZlb1d1WXNNSXpXUDJ3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RThGNi9CMjZFNUYyRTQ2Q0IxMUU4ODQyQjRCMTZDNEY5QUUwMi9TamlOclJQZmFj TFE2ZW9XdVlzTUl6V1Ayd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABo7G8assSYQ9ezC7tlYRpLqUPA+YLVbIYJqhSSspn3a1S3Pe1f0aH YznppBiyA1gRwaWt0wBBv2+8/92amATd77ShqgMBikmKUMPd+2tIGaPcS4XFgshF 4G1qEbpGbjwvZ6AmZEpvU/aXCTnCud9aZKwkQUBnD7s9UTsb26ACUI/Hb9H31flC BZKYvMwiFNJXXS4T/jJlCl26BdHzYRrwExV7i5VANyGLvtimpzFrBLd/TqmlzxGx DrdH9Of5e5d14dDzazgrkP1Wdg4zGtPgwUpL4lS4CSkUs5B/nMhO0WcYTC0tes/i BTRxA6FvY2nALC0Yv5Zfw/4/glQK73t2 -----END CERTIFICATE-----Generated at Thu May 2 20:50:35 2024 by rpki-client on console-fra.rpki-client.org