$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft File: 8XD1e07KEpakIh1wemTkKYk7h9Q.mft (raw, json) Hash identifier: Y+P9zzHMyRemjqQc7dBLW4YTo/6m8+vKqnT4D6CGVgU= Subject key identifier: B4:D7:1C:D1:CC:3F:31:0A:DF:43:BB:C3:BE:27:39:44:81:24:C2:4F Authority key identifier: F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4 Certificate issuer: /CN=A91C4F28/serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4 Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft Manifest number: 58 Signing time: Wed 15 May 2024 07:52:32 +0000 Manifest this update: Wed 15 May 2024 07:52:31 +0000 Manifest next update: Wed 22 May 2024 07:52:31 +0000 Files and hashes: 1: 8XD1e07KEpakIh1wemTkKYk7h9Q.crl (hash: n3UH8oExOsUFBorswEvMUff9YdJy/4+qLCUL3N+ElD4=) 2: B59362A28D5C11EEADDC522EC4F9AE02.roa (hash: U1iKIhn+RPx+rD5AgF1tzZvG20IRrHp9nRZuh3D7zzQ=) 3: 6DAB109E8DF111EEA5BB4A1BC4F9AE02.roa (hash: P51d+Bkf7r+1HRm8wiTQGVSP6FQQzYCf10d/cp8/V38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:52:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F28/serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4 Validity Not Before: May 15 07:52:31 2024 GMT Not After : May 22 07:52:31 2024 GMT Subject: CN=664469c0-67a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:3f:83:a6:89:51:99:f2:58:7b:34:3b:3f:cb: 0d:ab:cc:52:29:b1:6a:2f:b4:bf:a6:e5:50:9e:83: a9:9d:2b:a3:9f:38:c3:94:14:74:02:b2:df:76:9a: 29:73:b2:5d:29:a5:80:8c:0b:d1:33:1a:d2:0c:e6: 92:7f:60:79:16:4f:15:54:b2:42:ba:a6:a4:9d:32: de:1a:e7:28:ac:e0:a5:a2:3f:59:05:6a:a9:73:fb: e9:8a:76:48:af:17:dd:88:26:5f:fe:63:e7:84:b5: 5a:a3:79:03:08:d1:f4:06:50:5d:4f:fb:b8:98:ca: 53:e7:8b:fd:7d:98:e8:00:d7:8d:e5:3c:da:04:ad: eb:c9:74:ea:aa:ac:e7:8e:05:8c:86:6c:b0:1f:77: 4e:88:0d:0b:26:27:d2:e5:21:b6:fb:37:36:76:e3: 63:c1:45:9c:16:d0:3c:84:c2:88:07:c9:3d:d5:98: 9a:fe:77:da:f6:2b:ab:24:26:41:df:a5:5f:b1:7b: 04:15:b5:4f:fc:59:6a:5d:04:98:9d:51:c4:99:11: e1:f9:84:e4:3e:a8:4e:8e:fd:40:31:8b:1d:a9:d3: e5:06:7e:dd:6f:d4:f8:7c:02:64:7c:d5:81:98:27: 7d:67:0f:62:70:6d:39:72:9e:d4:a7:eb:03:ca:1b: d4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D7:1C:D1:CC:3F:31:0A:DF:43:BB:C3:BE:27:39:44:81:24:C2:4F X509v3 Authority Key Identifier: keyid:F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:b8:4d:4e:7a:d6:b8:b7:63:18:bd:59:81:14:ee:4d:d2:3e: f9:fa:57:ec:e4:c4:85:88:5b:d9:10:3c:1b:27:08:ae:7f:09: b8:7b:13:41:23:8e:7a:d8:d4:48:cd:9c:9f:9f:15:99:a5:ca: f7:a8:37:83:bf:97:15:dc:11:b8:f3:dc:ee:0b:ee:88:93:28: e0:6b:1a:e7:92:76:13:1e:6d:85:80:d8:89:75:14:25:24:f3: 9d:6b:db:50:f0:7d:82:2d:ac:a3:0e:54:75:f7:4f:2d:cc:e5: 75:db:95:67:7b:39:7d:3a:be:40:b7:45:b8:4b:b4:14:ae:db: 12:7a:49:3f:44:b6:0d:67:df:f9:87:a8:ea:72:b8:f9:40:76: ef:a3:bf:0d:81:5f:49:93:44:d2:8e:e7:f0:1d:77:e1:ee:d2: c8:ee:99:87:da:93:30:3e:e8:19:f4:97:5b:45:66:39:e9:ac: 26:f7:38:70:1d:78:5a:64:0b:37:f7:f6:35:e7:95:99:fc:e7: 30:d7:d3:8b:a9:41:46:51:c2:6a:da:4a:4e:c4:23:d0:53:18: a1:0a:cd:22:82:58:64:ac:6f:9d:90:13:07:ad:a0:2c:a6:1d: ac:fa:a7:ff:8d:13:ff:d1:f8:cb:88:76:b1:c5:b6:93:4c:db: 1f:39:f9:17 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NEYyODExMC8GA1UEBRMoRjE3MEY1N0I0RUNBMTI5NkE0MjIxRDcwN0E2NEU0Mjk4 OTNCODdENDAeFw0yNDA1MTUwNzUyMzFaFw0yNDA1MjIwNzUyMzFaMBgxFjAUBgNV BAMTDTY2NDQ2OWMwLTY3YTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkP4OmiVGZ8lh7NDs/yw2rzFIpsWovtL+m5VCeg6mdK6OfOMOUFHQCst92milz sl0ppYCMC9EzGtIM5pJ/YHkWTxVUskK6pqSdMt4a5yis4KWiP1kFaqlz++mKdkiv F92IJl/+Y+eEtVqjeQMI0fQGUF1P+7iYylPni/19mOgA143lPNoErevJdOqqrOeO BYyGbLAfd06IDQsmJ9LlIbb7NzZ242PBRZwW0DyEwogHyT3VmJr+d9r2K6skJkHf pV+xewQVtU/8WWpdBJidUcSZEeH5hOQ+qE6O/UAxix2p0+UGft1v1Ph8AmR81YGY J31nD2JwbTlyntSn6wPKG9T9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtNcc0cw/ MQrfQ7vDvic5RIEkwk8wHwYDVR0jBBgwFoAU8XD1e07KEpakIh1wemTkKYk7h9Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0RjI4L0Y1N0ZEMEI4OEQ1 NjExRUU5Nzg3RTc4M0M0RjlBRTAyLzhYRDFlMDdLRXBha0loMXdlbVRrS1lrN2g5 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOFhEMWUwN0tFcGFrSWgxd2VtVGtLWWs3aDlRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0 RjI4L0Y1N0ZEMEI4OEQ1NjExRUU5Nzg3RTc4M0M0RjlBRTAyLzhYRDFlMDdLRXBh a0loMXdlbVRrS1lrN2g5US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEO4TU561ri3Yxi9WYEU7k3SPvn6V+zkxIWIW9kQPBsnCK5/Cbh7E0Ej jnrY1EjNnJ+fFZmlyveoN4O/lxXcEbjz3O4L7oiTKOBrGueSdhMebYWA2Il1FCUk 851r21DwfYItrKMOVHX3Ty3M5XXblWd7OX06vkC3RbhLtBSu2xJ6ST9Etg1n3/mH qOpyuPlAdu+jvw2BX0mTRNKO5/Add+Hu0sjumYfakzA+6Bn0l1tFZjnprCb3OHAd eFpkCzf39jXnlZn85zDX04upQUZRwmraSk7EI9BTGKEKzSKCWGSsb52QEwetoCym Haz6p/+NE//R+MuIdrHFtpNM2x85+Rc= -----END CERTIFICATE-----Generated at Wed May 15 09:28:15 2024 by rpki-client on console-fra.rpki-client.org