$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft File: -SrbMNtsD5zpgLXbl3FF-MGcgks.mft (raw, json) Hash identifier: F/yDGgP1ocz+Ldc9TbNH5mGiASZMw0IQGEcL6TXZEkE= Subject key identifier: 8A:25:69:B7:56:21:7B:80:43:14:8F:F6:78:D7:30:49:65:AA:69:5E Authority key identifier: F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B Certificate issuer: /CN=A91C0FCC/serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B Certificate serial: 0850 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft Manifest number: 084B Signing time: Thu 02 May 2024 21:49:05 +0000 Manifest this update: Thu 02 May 2024 21:49:05 +0000 Manifest next update: Thu 09 May 2024 21:49:05 +0000 Files and hashes: 1: -SrbMNtsD5zpgLXbl3FF-MGcgks.crl (hash: Pgp+bSkZ78GleZAhe+wz5v0kg6HLjo4ZuCLrE3Q8KhA=) 2: A778AAF6A42111EAB3108934C4F9AE02.roa (hash: KrLKxlgxuN/aAluyKGiY4lRKWtTwVWsh/mderYtIlXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 21:49:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2128 (0x850) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0FCC/serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B Validity Not Before: May 2 21:49:05 2024 GMT Not After : May 9 21:49:05 2024 GMT Subject: CN=66340a51-4781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:61:95:18:0d:08:c8:a7:28:71:b1:07:17:25: 55:59:08:77:8b:17:7e:bb:45:7f:8a:73:8e:86:f3: 33:75:e6:5d:66:bd:c4:bd:f9:33:f3:aa:78:e9:a0: 78:51:ff:45:be:2c:ea:5c:b7:ca:0a:69:e0:0b:a4: f9:54:3e:a0:99:a2:8f:14:0d:ab:13:54:e3:09:3e: f8:66:e1:73:80:1d:28:2f:64:bb:70:a3:ec:73:f2: c2:16:fe:d6:e9:ab:d4:0a:95:f5:d7:ae:39:27:82: 4a:da:53:ce:f8:2f:7b:e1:52:0f:68:f4:13:24:4e: 2f:9f:65:48:aa:02:2c:4d:44:5b:e1:e8:1d:b2:df: dd:0d:7c:9c:a3:7a:77:82:10:d4:e0:2d:a5:03:f7: 00:23:dc:3c:65:0c:26:6b:35:5f:d9:e2:8e:00:23: 27:cd:75:9d:fc:31:0b:9d:aa:8f:20:ab:39:79:24: 4b:b2:17:ee:50:48:fe:ec:0d:9e:59:5b:8c:eb:02: ce:19:20:96:ff:3e:8a:43:77:d4:70:db:2b:f4:13: 42:cd:01:0d:d8:06:29:16:f5:34:af:b8:81:20:69: eb:62:dc:a7:31:c4:c0:93:9f:1e:3e:f3:b6:73:24: 4a:f3:ac:a1:87:58:53:5b:56:3d:f8:fe:fc:86:c3: 84:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:25:69:B7:56:21:7B:80:43:14:8F:F6:78:D7:30:49:65:AA:69:5E X509v3 Authority Key Identifier: keyid:F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:39:2d:a2:b7:42:22:f1:83:83:6c:2f:69:47:2f:bb:d8:d9: 39:94:89:3d:60:6a:bc:e8:96:1e:b5:40:5f:8d:a8:df:e1:93: 00:70:a7:55:83:00:cb:33:ae:76:c9:02:2b:25:a2:91:33:e7: 23:db:01:f1:b3:cf:4b:72:f4:30:8b:7a:ae:16:c5:b4:24:2a: 9d:ff:39:df:2c:7b:65:cc:4f:94:b2:e9:2c:00:13:a1:c2:ba: 6a:05:08:a9:c2:6e:f1:e8:bb:9c:0e:bf:1e:ad:ea:17:7f:50: 22:68:b3:e7:09:ff:1f:eb:95:14:e3:70:a7:7f:40:3b:56:8d: 4a:75:0e:d9:4d:b0:1e:60:42:6f:f3:63:d2:33:f0:79:02:ac: af:0e:ef:3c:5b:13:7c:e7:fe:96:69:81:15:cb:8f:05:a7:95: ee:a4:56:5e:56:7a:02:64:da:ff:2e:a3:bd:70:9d:6f:8a:a0: 3d:3e:66:e4:d5:22:4f:55:6e:6d:7d:94:3f:66:94:26:1e:ef: eb:44:7d:12:fc:f7:22:ee:e5:fb:58:cc:0f:b6:ff:16:5b:e2: 69:98:7c:13:b3:0f:97:b4:2e:44:c4:01:81:63:92:c3:c3:11: dc:38:18:1d:80:b3:4f:29:cb:d6:d0:e2:30:11:fd:84:8e:44: 08:ca:bb:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBGQ0MxMTAvBgNVBAUTKEY5MkFEQjMwREI2QzBGOUNFOTgwQjVEQjk3NzE0NUY4 QzE5QzgyNEIwHhcNMjQwNTAyMjE0OTA1WhcNMjQwNTA5MjE0OTA1WjAYMRYwFAYD VQQDEw02NjM0MGE1MS00NzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnWGVGA0IyKcocbEHFyVVWQh3ixd+u0V/inOOhvMzdeZdZr3Evfkz86p46aB4 Uf9FvizqXLfKCmngC6T5VD6gmaKPFA2rE1TjCT74ZuFzgB0oL2S7cKPsc/LCFv7W 6avUCpX11645J4JK2lPO+C974VIPaPQTJE4vn2VIqgIsTURb4egdst/dDXyco3p3 ghDU4C2lA/cAI9w8ZQwmazVf2eKOACMnzXWd/DELnaqPIKs5eSRLshfuUEj+7A2e WVuM6wLOGSCW/z6KQ3fUcNsr9BNCzQEN2AYpFvU0r7iBIGnrYtynMcTAk58ePvO2 cyRK86yhh1hTW1Y9+P78hsOESQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIolabdW IXuAQxSP9njXMEllqmleMB8GA1UdIwQYMBaAFPkq2zDbbA+c6YC125dxRfjBnIJL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEZDQy9GNUM0MjQwOEE0 MUYxMUVBQkRDMkY1MzFDNEY5QUUwMi8tU3JiTU50c0Q1enBnTFhibDNGRi1NR2Nn a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1TcmJNTnRzRDV6cGdMWGJsM0ZGLU1HY2drcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEZDQy9GNUM0MjQwOEE0MUYxMUVBQkRDMkY1MzFDNEY5QUUwMi8tU3JiTU50c0Q1 enBnTFhibDNGRi1NR2Nna3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOOS2it0Ii8YODbC9pRy+72Nk5lIk9YGq86JYetUBfjajf4ZMAcKdV gwDLM652yQIrJaKRM+cj2wHxs89LcvQwi3quFsW0JCqd/znfLHtlzE+UsuksABOh wrpqBQipwm7x6LucDr8ereoXf1AiaLPnCf8f65UU43Cnf0A7Vo1KdQ7ZTbAeYEJv 82PSM/B5AqyvDu88WxN85/6WaYEVy48Fp5XupFZeVnoCZNr/LqO9cJ1viqA9Pmbk 1SJPVW5tfZQ/ZpQmHu/rRH0S/Pci7uX7WMwPtv8WW+JpmHwTsw+XtC5ExAGBY5LD wxHcOBgdgLNPKcvW0OIwEf2EjkQIyrsV -----END CERTIFICATE-----Generated at Thu May 2 23:03:13 2024 by rpki-client on console-fra.rpki-client.org