$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft File: 0m38xFnFMcUEmANsxs5nBrgGF1I.mft (raw, json) Hash identifier: vjmIkT9enuZbPJH/EohcNK0W2Xgd3+fWddssixsQ0UA= Subject key identifier: AC:2D:E3:D3:6D:03:C2:26:3C:A6:6A:CE:BD:66:20:D1:B6:8A:A5:03 Authority key identifier: D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52 Certificate issuer: /CN=A91C1DA6/serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752 Certificate serial: 0C4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft Manifest number: 0C45 Signing time: Mon 06 May 2024 19:02:06 +0000 Manifest this update: Mon 06 May 2024 19:02:05 +0000 Manifest next update: Mon 13 May 2024 19:02:05 +0000 Files and hashes: 1: 0m38xFnFMcUEmANsxs5nBrgGF1I.crl (hash: f1RuVB7K2USOWoQ/AU/URiH+XjoKSieh2nUfcw2dQzY=) 2: 5563895C378911EABB08EC0EC4F9AE02.roa (hash: ZGlx2pnoKbRkPmKqlszuomlf6l7H23AsgoYIs72WYp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.crl rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 19:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3150 (0xc4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1DA6/serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752 Validity Not Before: May 6 19:02:05 2024 GMT Not After : May 13 19:02:05 2024 GMT Subject: CN=6639292e-4f03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1d:2c:af:c2:00:fd:4c:56:b6:da:e0:2e:e2: c8:0b:98:cb:42:8a:2a:c3:81:da:46:f8:f2:73:74: 5d:df:e0:32:f6:51:a1:f4:bb:b1:ed:ed:fc:ad:92: 12:c0:16:e8:a8:94:64:c3:9f:40:e2:75:7b:80:f0: df:0e:29:4b:1b:60:33:23:57:75:38:d6:d6:54:95: 68:38:e0:24:58:c0:32:e5:10:2f:d8:b6:73:ec:bd: 83:20:63:eb:30:1c:8e:90:d2:df:97:ea:72:a4:17: 79:4c:fc:ee:55:44:9e:6c:aa:31:6a:4d:8d:84:31: 95:04:c9:4f:fa:5a:b5:0a:51:63:cf:50:b7:d0:56: f5:84:51:10:cf:82:37:79:e2:5d:d4:84:08:f9:c8: 38:db:3a:b0:ae:61:34:6c:79:58:8a:32:4c:08:8e: 69:69:9d:a4:8f:47:cc:b4:8e:4a:af:bf:8d:f2:f2: 3c:a8:8b:9f:83:6c:b0:92:38:be:62:83:ca:db:a8: e8:ca:c4:9d:7e:5b:59:6f:c4:43:3c:71:f5:57:0c: 0a:b9:98:d3:4d:6a:a4:ac:fd:aa:f0:f2:51:be:6c: b2:41:2b:dd:7b:37:4c:93:f1:e4:5e:3c:47:f1:1e: b0:5f:1a:2f:59:f6:d6:be:8c:36:fa:da:27:90:42: da:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:2D:E3:D3:6D:03:C2:26:3C:A6:6A:CE:BD:66:20:D1:B6:8A:A5:03 X509v3 Authority Key Identifier: keyid:D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:d6:4e:0c:0e:7d:24:90:44:c3:1c:57:c3:ef:1d:e2:e0:62: 11:09:d6:41:88:ad:0d:c8:b5:03:30:e9:ce:ba:44:9b:bd:a4: a0:2c:3b:02:a9:ee:91:9a:a4:fb:37:fc:7f:4b:dd:e4:b1:47: 5a:33:da:76:ca:8c:71:10:d5:14:d4:16:db:d7:0f:7b:3d:09: 49:15:d8:c4:f2:12:e0:58:04:1a:c4:b8:20:c0:bd:d0:18:00: 68:ee:06:0f:b6:16:5d:fc:82:46:ce:2d:53:b8:95:01:93:a5: 2f:9c:0e:e1:9f:da:7b:a7:c3:d8:69:34:63:3e:30:fa:0b:aa: 6c:4e:c9:24:45:44:72:d3:02:da:c1:de:33:5d:87:f0:cf:60: 40:ef:f2:30:01:4f:57:89:95:df:38:fb:42:2a:97:26:95:a7: c2:68:40:8b:3c:ab:2a:d4:0e:00:a7:ca:0c:99:eb:43:9b:4c: 4e:3b:55:f8:1a:7b:46:34:7d:db:59:ef:98:2a:03:e1:06:eb: 4e:36:e8:59:63:c0:f8:31:b1:aa:aa:91:08:94:a2:78:74:89: 7b:11:92:4d:39:b6:02:4e:86:8f:f6:62:eb:a2:7e:2e:08:06: 96:21:ca:04:c4:0b:51:5c:c2:62:b6:23:64:e1:19:ed:c5:17: 68:e3:b0:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFEQTYxMTAvBgNVBAUTKEQyNkRGQ0M0NTlDNTMxQzUwNDk4MDM2Q0M2Q0U2NzA2 QjgwNjE3NTIwHhcNMjQwNTA2MTkwMjA1WhcNMjQwNTEzMTkwMjA1WjAYMRYwFAYD VQQDEw02NjM5MjkyZS00ZjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0R0sr8IA/UxWttrgLuLIC5jLQooqw4HaRvjyc3Rd3+Ay9lGh9Lux7e38rZIS wBboqJRkw59A4nV7gPDfDilLG2AzI1d1ONbWVJVoOOAkWMAy5RAv2LZz7L2DIGPr MByOkNLfl+pypBd5TPzuVUSebKoxak2NhDGVBMlP+lq1ClFjz1C30Fb1hFEQz4I3 eeJd1IQI+cg42zqwrmE0bHlYijJMCI5paZ2kj0fMtI5Kr7+N8vI8qIufg2ywkji+ YoPK26joysSdfltZb8RDPHH1VwwKuZjTTWqkrP2q8PJRvmyyQSvdezdMk/HkXjxH 8R6wXxovWfbWvow2+tonkELauQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKwt49Nt A8ImPKZqzr1mING2iqUDMB8GA1UdIwQYMBaAFNJt/MRZxTHFBJgDbMbOZwa4BhdS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMURBNi9EQjE4QjhFNkRE REYxMUU5OTkzQ0YyNjVDNEY5QUUwMi8wbTM4eEZuRk1jVUVtQU5zeHM1bkJyZ0dG MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBtMzh4Rm5GTWNVRW1BTnN4czVuQnJnR0YxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MURBNi9EQjE4QjhFNkREREYxMUU5OTkzQ0YyNjVDNEY5QUUwMi8wbTM4eEZuRk1j VUVtQU5zeHM1bkJyZ0dGMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJ1k4MDn0kkETDHFfD7x3i4GIRCdZBiK0NyLUDMOnOukSbvaSgLDsC qe6RmqT7N/x/S93ksUdaM9p2yoxxENUU1Bbb1w97PQlJFdjE8hLgWAQaxLggwL3Q GABo7gYPthZd/IJGzi1TuJUBk6UvnA7hn9p7p8PYaTRjPjD6C6psTskkRURy0wLa wd4zXYfwz2BA7/IwAU9XiZXfOPtCKpcmlafCaECLPKsq1A4Ap8oMmetDm0xOO1X4 GntGNH3bWe+YKgPhButONuhZY8D4MbGqqpEIlKJ4dIl7EZJNObYCToaP9mLron4u CAaWIcoExAtRXMJitiNk4RntxRdo47AV -----END CERTIFICATE-----Generated at Mon May 6 20:19:19 2024 by rpki-client on console-fra.rpki-client.org