$ rpki-client -vvf rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft File: 64sK0sB2YghSy8N4kOZK1Aa0ieg.mft (raw, json) Hash identifier: LPmnkDSkbywy0eKOBRYQjJSGcGp8lQeySjmpt7aiUBw= Subject key identifier: 3C:2E:03:DF:80:AC:53:3D:A3:07:E4:92:BE:B1:47:F7:10:69:DD:3B Authority key identifier: EB:8B:0A:D2:C0:76:62:08:52:CB:C3:78:90:E6:4A:D4:06:B4:89:E8 Certificate issuer: /CN=A91C72B1/serialNumber=EB8B0AD2C076620852CBC37890E64AD406B489E8 Certificate serial: 0C4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft Manifest number: 0C42 Signing time: Sat 04 May 2024 19:06:52 +0000 Manifest this update: Sat 04 May 2024 19:06:52 +0000 Manifest next update: Sat 11 May 2024 19:06:52 +0000 Files and hashes: 1: 64sK0sB2YghSy8N4kOZK1Aa0ieg.crl (hash: ginJycTSZJcUzJL/r7DYP9i8RSwtqIXDa9flH7RDbyc=) 2: 6714424C3C9111EA9416CA78C4F9AE02.roa (hash: mY4rF8hK1zZU5SgCuKB7ywQBLhRSO9nn0rrF7lxwDOk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.crl rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3147 (0xc4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C72B1/serialNumber=EB8B0AD2C076620852CBC37890E64AD406B489E8 Validity Not Before: May 4 19:06:52 2024 GMT Not After : May 11 19:06:52 2024 GMT Subject: CN=6636874c-d52b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:82:41:d9:46:4a:6e:1a:b3:2a:7c:4b:71:f3: c8:35:f3:ea:50:f7:c6:ac:c0:e0:10:ee:92:23:c6: ef:4b:af:aa:db:0f:a3:b3:2d:30:29:1b:3e:9d:87: a3:88:e8:be:da:d8:50:f9:b8:b2:15:5b:ec:32:1f: 78:35:9f:41:cf:f1:db:13:a6:fa:46:40:d1:e8:b2: 6f:87:24:c1:69:94:9e:22:e6:23:9e:d1:6d:5e:c0: ca:ca:d5:43:48:e4:97:0d:4b:c3:fc:d9:e2:d6:d1: 63:6a:93:6a:4b:73:61:93:54:ef:1e:65:08:d8:f6: bb:ec:fd:d5:9f:12:f9:cf:0c:3b:53:08:32:19:b9: 79:b8:75:52:af:0a:f8:4d:49:6f:10:ef:c8:8b:5f: 0c:83:e1:3b:4a:af:33:88:5c:2d:3a:5b:4e:ef:98: 14:9d:84:2b:a4:2e:82:6d:50:f8:45:19:6b:a7:03: 3a:04:40:0c:a6:c9:cf:6f:0d:98:c9:f2:48:a2:f0: 48:32:77:31:9d:a1:dd:f6:b9:fb:26:68:c1:35:ed: 62:31:71:e9:86:8f:8c:54:2b:d6:a1:44:1a:a9:c0: 8e:c3:d9:b0:27:80:9a:85:9e:9d:b5:28:1a:85:08: b5:73:28:13:7b:e0:48:05:f8:96:13:d0:e3:eb:1d: 99:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:2E:03:DF:80:AC:53:3D:A3:07:E4:92:BE:B1:47:F7:10:69:DD:3B X509v3 Authority Key Identifier: keyid:EB:8B:0A:D2:C0:76:62:08:52:CB:C3:78:90:E6:4A:D4:06:B4:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:86:54:50:3a:db:9e:3d:3d:74:7f:b8:b7:63:0c:34:70:0e: 26:10:ff:78:86:85:5c:19:b1:47:32:26:bb:a0:d6:44:7a:07: 0b:41:15:f4:e9:e9:6f:19:5c:e2:dd:fd:d1:02:23:8e:b7:c3: 58:3e:0a:3a:e1:21:49:4d:49:dd:c6:e4:5a:79:6c:54:6c:87: fd:1a:dd:bd:6a:46:6d:11:fd:42:e1:4b:8d:93:95:2b:83:50: c7:95:35:ad:8e:8d:51:2e:b4:67:b5:2f:71:6a:e2:0f:b1:31: f8:3f:4b:c2:9d:01:f4:e5:1a:c6:06:14:18:10:5f:ad:89:21: 46:34:f6:bd:c6:fb:69:1e:fe:17:39:75:92:79:74:53:f2:8c: df:b1:93:40:92:be:c8:c5:24:0a:04:7a:99:5f:8d:73:64:96: f7:ed:b5:b7:27:e2:a2:bc:0b:ad:ea:ee:4c:87:69:a9:10:7a: 09:ec:cf:2c:e9:fc:57:4a:73:9e:2c:9c:76:cf:2e:fa:f7:fb: db:b9:90:ec:27:50:93:49:94:80:fb:70:a6:fc:95:1e:6b:d7: ea:b6:3e:db:a3:e9:d8:c3:b6:93:62:6f:02:0d:44:67:dd:4a: e0:dc:ca:87:06:ac:47:7b:25:ff:73:6e:c9:31:94:69:7f:3e: ab:06:d1:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcyQjExMTAvBgNVBAUTKEVCOEIwQUQyQzA3NjYyMDg1MkNCQzM3ODkwRTY0QUQ0 MDZCNDg5RTgwHhcNMjQwNTA0MTkwNjUyWhcNMjQwNTExMTkwNjUyWjAYMRYwFAYD VQQDEw02NjM2ODc0Yy1kNTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4JB2UZKbhqzKnxLcfPINfPqUPfGrMDgEO6SI8bvS6+q2w+jsy0wKRs+nYej iOi+2thQ+biyFVvsMh94NZ9Bz/HbE6b6RkDR6LJvhyTBaZSeIuYjntFtXsDKytVD SOSXDUvD/Nni1tFjapNqS3Nhk1TvHmUI2Pa77P3VnxL5zww7UwgyGbl5uHVSrwr4 TUlvEO/Ii18Mg+E7Sq8ziFwtOltO75gUnYQrpC6CbVD4RRlrpwM6BEAMpsnPbw2Y yfJIovBIMncxnaHd9rn7JmjBNe1iMXHpho+MVCvWoUQaqcCOw9mwJ4CahZ6dtSga hQi1cygTe+BIBfiWE9Dj6x2ZpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDwuA9+A rFM9owfkkr6xR/cQad07MB8GA1UdIwQYMBaAFOuLCtLAdmIIUsvDeJDmStQGtIno MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzJCMS8yQTQ1Rjk4MERF QzkxMUU5QUFBN0VDMzNDNEY5QUUwMi82NHNLMHNCMllnaFN5OE40a09aSzFBYTBp ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY0c0swc0IyWWdoU3k4TjRrT1pLMUFhMGllZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzJCMS8yQTQ1Rjk4MERFQzkxMUU5QUFBN0VDMzNDNEY5QUUwMi82NHNLMHNCMlln aFN5OE40a09aSzFBYTBpZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDhlRQOtuePT10f7i3Yww0cA4mEP94hoVcGbFHMia7oNZEegcLQRX0 6elvGVzi3f3RAiOOt8NYPgo64SFJTUndxuRaeWxUbIf9Gt29akZtEf1C4UuNk5Ur g1DHlTWtjo1RLrRntS9xauIPsTH4P0vCnQH05RrGBhQYEF+tiSFGNPa9xvtpHv4X OXWSeXRT8ozfsZNAkr7IxSQKBHqZX41zZJb37bW3J+KivAut6u5Mh2mpEHoJ7M8s 6fxXSnOeLJx2zy769/vbuZDsJ1CTSZSA+3Cm/JUea9fqtj7bo+nYw7aTYm8CDURn 3Urg3MqHBqxHeyX/c27JMZRpfz6rBtGS -----END CERTIFICATE-----Generated at Sat May 4 20:37:17 2024 by rpki-client on console-fra.rpki-client.org