$ rpki-client -vvf rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft File: cB88FPCtfu9l000APNwZJGSM3jc.mft (raw, json) Hash identifier: QfMPQFblC5ThjweJO2tGDjFTN3Dnx5PHoamPKg0RUQA= Subject key identifier: BC:B3:BD:97:8D:02:D1:64:0F:95:2E:30:B0:53:FE:3F:D4:3D:E2:D3 Authority key identifier: 70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 Certificate issuer: /CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Certificate serial: 02F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft Manifest number: 02E1 Signing time: Fri 03 May 2024 03:27:30 +0000 Manifest this update: Fri 03 May 2024 03:27:29 +0000 Manifest next update: Fri 10 May 2024 03:27:29 +0000 Files and hashes: 1: cB88FPCtfu9l000APNwZJGSM3jc.crl (hash: 2sgyogPF5LYM6Q+9bPMAYmSqzCbJ9rvzkGZkNz+Ml+Q=) 2: 7E16D3240B5011EE9A518C7BC4F9AE02.roa (hash: krhsFK4PFWTrjNJ4p9/c55q/gQAKBPQnFLQMSNIsQfk=) 3: CDDEC562011711EEB15FDD2AC4F9AE02.roa (hash: jcldHkQ5FFmg/MXlqtsVZ+VaudO8txN/6DH5hAk06uA=) 4: 2BF1D5F07E3511EE8CB63458C4F9AE02.roa (hash: FkQAfdMiMVRkFmDG7OCPPtDI1TM4+1FS9ZFrS9JgM34=) 5: DF49B4400B4B11EEBAD3047AC4F9AE02.roa (hash: 4ZluWaRFJyFeOP9xnmq3elh/rOt90VuN3X6ZFi8v76c=) 6: 513415BC400011EE88B66B4FC4F9AE02.roa (hash: 2xYkc0CBHJO1BA1IWYUatPbE+AVeAURXevuFcb34wYs=) 7: 86550F680B4311EE8ABEE820C4F9AE02.roa (hash: J+kNwKbZA9+MvDuLAMY45SZRzBH7dIz40cdBHlCeLTQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 758 (0x2f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Validity Not Before: May 3 03:27:29 2024 GMT Not After : May 10 03:27:29 2024 GMT Subject: CN=663459a2-1efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2d:40:84:4e:32:cb:0a:1c:6b:88:35:3b:49: 31:83:02:15:33:2d:c5:a5:c8:55:7a:85:6d:11:94: 93:64:fa:fe:fc:49:d9:1e:96:77:c6:3f:dd:b9:79: 07:43:2f:0e:71:67:b0:25:f2:2b:6e:64:73:9d:97: 5e:63:03:ec:d5:81:92:73:cf:fd:be:d8:57:39:ee: 76:07:0e:ff:97:c6:ea:28:77:e3:3d:8a:8e:f0:4b: f4:f3:52:5d:21:63:ce:57:2f:df:61:ca:76:24:29: b4:98:27:57:ce:2c:8e:19:06:79:9c:30:4c:c9:b4: 3f:2e:97:51:a4:ca:fc:af:c5:35:e3:a2:e2:29:9f: a1:eb:2f:4c:ef:e8:c3:50:f4:83:58:79:0e:81:5c: 30:ce:72:ab:b9:e8:96:d1:8f:6c:e7:74:25:8a:72: 25:05:76:f0:6b:ef:73:6d:74:98:db:ee:e6:22:15: fc:a2:b9:d6:ad:60:fa:93:17:ea:a2:de:a4:70:8a: 47:ab:a8:0d:d7:bd:23:b8:78:10:74:ac:c3:5f:e6: 4f:b3:97:50:65:34:e6:9c:e7:d4:27:22:93:ee:d1: bd:d4:92:75:c9:cf:8a:a1:0f:a2:cf:e4:ab:cd:8f: 43:44:9e:42:d3:10:46:ae:99:8d:23:d7:79:03:cb: 35:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B3:BD:97:8D:02:D1:64:0F:95:2E:30:B0:53:FE:3F:D4:3D:E2:D3 X509v3 Authority Key Identifier: keyid:70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:9b:12:46:56:d2:c7:2f:55:27:ef:3d:8e:b4:fd:aa:56:f4: 41:ba:27:68:7a:6f:ad:9d:b9:ab:9d:22:86:46:67:d1:07:1a: 70:f2:a5:5a:9d:71:2c:45:19:95:c4:55:7d:f2:5b:51:31:52: 55:b0:19:71:30:61:0e:bc:48:96:61:5a:7c:00:c0:19:96:ae: b2:5b:35:43:16:f4:8a:62:64:6f:63:b3:a0:9f:94:9f:e7:ba: 1f:15:b0:b3:10:9a:b2:5c:1b:88:c8:d0:ad:c8:a8:3e:91:b3: 19:17:58:5e:4e:28:4e:c2:ca:07:f2:72:5d:73:bb:51:02:8e: 68:60:7a:87:05:a9:99:7e:e1:b7:c7:eb:6c:b1:b5:83:65:74: b8:bd:22:b8:eb:6c:ba:ea:21:5b:84:76:36:54:b9:d5:f8:e8: d0:2c:2b:88:6d:70:4e:cf:20:40:26:7b:d7:ce:63:5c:16:d4: 6c:68:e5:fb:c3:60:9e:b7:cf:f8:b2:fe:f1:54:93:d2:69:25: 72:b4:9d:86:c7:98:b5:29:c8:4c:ea:c0:e0:35:5a:3d:57:29: b2:69:fd:e2:92:27:3a:53:8a:dc:d5:4e:5d:de:89:36:31:35: b1:5d:b7:d5:35:bc:7d:64:52:29:56:74:78:e3:02:da:84:f1: 96:7d:4d:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYzQTYxMTAvBgNVBAUTKDcwMUYzQzE0RjBBRDdFRUY2NUQzNEQwMDNDREMxOTI0 NjQ4Q0RFMzcwHhcNMjQwNTAzMDMyNzI5WhcNMjQwNTEwMDMyNzI5WjAYMRYwFAYD VQQDEw02NjM0NTlhMi0xZWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0i1AhE4yywoca4g1O0kxgwIVMy3FpchVeoVtEZSTZPr+/EnZHpZ3xj/duXkH Qy8OcWewJfIrbmRznZdeYwPs1YGSc8/9vthXOe52Bw7/l8bqKHfjPYqO8Ev081Jd IWPOVy/fYcp2JCm0mCdXziyOGQZ5nDBMybQ/LpdRpMr8r8U146LiKZ+h6y9M7+jD UPSDWHkOgVwwznKrueiW0Y9s53QlinIlBXbwa+9zbXSY2+7mIhX8ornWrWD6kxfq ot6kcIpHq6gN170juHgQdKzDX+ZPs5dQZTTmnOfUJyKT7tG91JJ1yc+KoQ+iz+Sr zY9DRJ5C0xBGrpmNI9d5A8s1/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLyzvZeN AtFkD5UuMLBT/j/UPeLTMB8GA1UdIwQYMBaAFHAfPBTwrX7vZdNNADzcGSRkjN43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjNBNi8wRDM5QzRFNDlB OUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1OWwwMDBBUE53WkpHU00z amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NCODhGUEN0ZnU5bDAwMEFQTndaSkdTTTNqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjNBNi8wRDM5QzRFNDlBOUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1 OWwwMDBBUE53WkpHU00zamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhmxJGVtLHL1Un7z2OtP2qVvRBuidoem+tnbmrnSKGRmfRBxpw8qVa nXEsRRmVxFV98ltRMVJVsBlxMGEOvEiWYVp8AMAZlq6yWzVDFvSKYmRvY7Ogn5Sf 57ofFbCzEJqyXBuIyNCtyKg+kbMZF1heTihOwsoH8nJdc7tRAo5oYHqHBamZfuG3 x+tssbWDZXS4vSK462y66iFbhHY2VLnV+OjQLCuIbXBOzyBAJnvXzmNcFtRsaOX7 w2Cet8/4sv7xVJPSaSVytJ2Gx5i1KchM6sDgNVo9Vymyaf3ikic6U4rc1U5d3ok2 MTWxXbfVNbx9ZFIpVnR44wLahPGWfU28 -----END CERTIFICATE-----Generated at Fri May 3 04:45:26 2024 by rpki-client on console-fra.rpki-client.org