$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft File: A4qG82KyVX-Uvncu4MX9MYRf4mM.mft (raw, json) Hash identifier: r4RZbqxQsZkikEbvTKN/odlkNZoX1sVk6HfBoeHQ98A= Subject key identifier: D5:3E:6D:0E:10:AC:CA:B4:C7:14:8D:41:E2:69:6A:9B:A2:22:06:9B Authority key identifier: 03:8A:86:F3:62:B2:55:7F:94:BE:77:2E:E0:C5:FD:31:84:5F:E2:63 Certificate issuer: /CN=A91C4003/serialNumber=038A86F362B2557F94BE772EE0C5FD31845FE263 Certificate serial: 0B1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft Manifest number: 0B0E Signing time: Wed 24 Apr 2024 19:55:25 +0000 Manifest this update: Wed 24 Apr 2024 19:55:25 +0000 Manifest next update: Wed 01 May 2024 19:55:25 +0000 Files and hashes: 1: A4qG82KyVX-Uvncu4MX9MYRf4mM.crl (hash: p08YIj3R+QaY2d7Yv8iNiANClXiujQKJeCqBtRensGw=) 2: 711115241AD911EA97EF1C30C4F9AE02.roa (hash: GP8wxJbpu8lKGC5wHZVnan9DYdthwH9r41+dEhQM+OU=) 3: 71A7B3621AD911EA97EF1C30C4F9AE02.roa (hash: 9r153uKD9O+R7bkXsQuugQY1h1itvtGz1Qj2pvwl7UY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.crl rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 18:35:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2846 (0xb1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4003/serialNumber=038A86F362B2557F94BE772EE0C5FD31845FE263 Validity Not Before: Apr 24 19:55:25 2024 GMT Not After : May 1 19:55:25 2024 GMT Subject: CN=662963ad-66fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a1:e7:28:e2:f6:f5:36:1e:9f:b0:74:de:13: e0:67:45:e1:c5:0e:c2:11:9e:b9:74:db:aa:b8:00: 15:fc:65:49:f1:62:f2:05:22:df:df:77:6d:1a:ea: c2:2e:a0:b0:bd:23:46:67:8a:b3:17:d1:94:51:ed: da:62:24:34:60:a6:21:16:c5:aa:5b:89:06:74:73: 91:b5:4f:72:8a:21:05:90:de:77:3c:df:44:68:05: 5b:a5:d0:9f:5c:cc:12:b7:af:ae:1a:e9:3f:51:11: 34:f7:f4:e4:dc:e4:07:44:0e:16:eb:70:da:c4:c1: 9e:1f:a3:3e:2a:2d:22:22:08:98:c7:07:ab:e2:91: 91:d0:03:f3:2e:bc:68:1d:49:76:e0:3c:87:4f:98: db:dc:45:e3:7b:c6:e6:36:cb:54:f7:0d:80:72:ba: b4:c8:d5:ff:52:19:8c:ec:ff:c6:53:aa:8b:e6:f9: 83:11:6e:15:85:b1:6d:d4:17:4e:73:3f:46:64:64: ee:0d:1a:29:cd:70:2d:38:63:5e:7f:f7:01:8d:14: 05:1d:f0:c2:10:ae:ec:2e:6c:5f:82:a3:22:f8:d3: c6:3c:e1:7b:cc:39:18:1b:05:8d:8d:e4:43:36:55: 71:69:7c:a2:3d:f8:4f:21:67:0f:e3:5b:e6:10:59: d4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:3E:6D:0E:10:AC:CA:B4:C7:14:8D:41:E2:69:6A:9B:A2:22:06:9B X509v3 Authority Key Identifier: keyid:03:8A:86:F3:62:B2:55:7F:94:BE:77:2E:E0:C5:FD:31:84:5F:E2:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:b4:8c:b2:53:23:c5:ea:69:98:b7:02:f8:b8:33:a1:f9:64: 17:50:ff:76:35:73:8e:90:07:22:aa:e3:29:88:c1:5d:1b:00: d8:85:c9:ee:e0:bf:b7:26:05:2c:5d:df:d9:bb:58:65:17:88: 60:8d:4e:b6:e0:d9:21:ad:0c:21:f8:bf:29:e7:86:8b:67:a3: 1a:9d:06:d2:43:a7:a2:82:44:8c:58:45:7b:69:ec:77:be:69: 58:99:ba:67:d3:47:8a:19:f9:22:14:8a:26:47:63:16:d0:f3: b9:ea:cb:9a:cd:c2:51:fd:04:2f:c9:f2:f5:46:c0:60:c6:1f: c2:68:f2:f4:78:d5:2d:e0:fc:f2:83:7e:f6:bf:e4:2f:04:ce: 11:6a:d2:78:67:21:24:29:61:f6:0a:29:42:22:d7:be:89:9e: 45:65:0b:24:be:38:6c:2e:21:fd:28:47:19:bf:cf:9e:06:f7: 7d:cc:42:41:a8:f0:0f:10:1c:c3:d7:0c:24:34:50:18:17:c2: 74:fb:62:a7:85:35:e2:d0:85:c2:39:35:de:b3:f9:df:e0:f1: e8:02:53:6b:f8:11:57:88:0f:de:f6:c8:5a:e5:e8:64:d1:7c: 2b:6b:17:24:df:43:07:a8:bd:73:60:b1:80:05:38:12:e1:ed: 0a:57:ee:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQwMDMxMTAvBgNVBAUTKDAzOEE4NkYzNjJCMjU1N0Y5NEJFNzcyRUUwQzVGRDMx ODQ1RkUyNjMwHhcNMjQwNDI0MTk1NTI1WhcNMjQwNTAxMTk1NTI1WjAYMRYwFAYD VQQDEw02NjI5NjNhZC02NmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3KHnKOL29TYen7B03hPgZ0XhxQ7CEZ65dNuquAAV/GVJ8WLyBSLf33dtGurC LqCwvSNGZ4qzF9GUUe3aYiQ0YKYhFsWqW4kGdHORtU9yiiEFkN53PN9EaAVbpdCf XMwSt6+uGuk/URE09/Tk3OQHRA4W63DaxMGeH6M+Ki0iIgiYxwer4pGR0APzLrxo HUl24DyHT5jb3EXje8bmNstU9w2Acrq0yNX/UhmM7P/GU6qL5vmDEW4VhbFt1BdO cz9GZGTuDRopzXAtOGNef/cBjRQFHfDCEK7sLmxfgqMi+NPGPOF7zDkYGwWNjeRD NlVxaXyiPfhPIWcP41vmEFnUwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNU+bQ4Q rMq0xxSNQeJpapuiIgabMB8GA1UdIwQYMBaAFAOKhvNislV/lL53LuDF/TGEX+Jj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDAwMy9COEU4QUQ3MjFB RDgxMUVBODJFNzRCMkZDNEY5QUUwMi9BNHFHODJLeVZYLVV2bmN1NE1YOU1ZUmY0 bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E0cUc4Mkt5VlgtVXZuY3U0TVg5TVlSZjRtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDAwMy9COEU4QUQ3MjFBRDgxMUVBODJFNzRCMkZDNEY5QUUwMi9BNHFHODJLeVZY LVV2bmN1NE1YOU1ZUmY0bU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUtIyyUyPF6mmYtwL4uDOh+WQXUP92NXOOkAciquMpiMFdGwDYhcnu 4L+3JgUsXd/Zu1hlF4hgjU624NkhrQwh+L8p54aLZ6ManQbSQ6eigkSMWEV7aex3 vmlYmbpn00eKGfkiFIomR2MW0PO56suazcJR/QQvyfL1RsBgxh/CaPL0eNUt4Pzy g372v+QvBM4RatJ4ZyEkKWH2CilCIte+iZ5FZQskvjhsLiH9KEcZv8+eBvd9zEJB qPAPEBzD1wwkNFAYF8J0+2KnhTXi0IXCOTXes/nf4PHoAlNr+BFXiA/e9sha5ehk 0Xwraxck30MHqL1zYLGABTgS4e0KV+4g -----END CERTIFICATE-----Generated at Wed Apr 24 20:29:52 2024 by rpki-client on console-fra.rpki-client.org