$ rpki-client -vvf rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft File: dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft (raw, json) Hash identifier: UY/R4PJR8WbmdRhqWVGNPu/GwWYzvfDI3J4vH4meXZE= Subject key identifier: 8B:C2:46:4D:BE:2C:49:84:97:03:36:96:EC:65:F2:DA:0A:7F:07:ED Authority key identifier: 75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94 Certificate issuer: /CN=A91C72E6/serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94 Certificate serial: C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft Manifest number: C4 Signing time: Sat 01 Jun 2024 07:38:37 +0000 Manifest this update: Sat 01 Jun 2024 07:38:37 +0000 Manifest next update: Sat 08 Jun 2024 07:38:37 +0000 Files and hashes: 1: dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl (hash: RyRTjPGaa7BTPDeZ4KZ6oHItaZtHoBeIthk1nrNrMKQ=) 2: 2340D07AF2F111ED91F08A4FC4F9AE02.roa (hash: NJPA2ug9v7ULpxFpnIiqCWjxYfxy+oFyEisS40VIQIg=) 3: 23EE2B76F2F111ED91F08A4FC4F9AE02.roa (hash: 4D2wEEASuC+DaTGly/YjUPgX8hODTmCI2sIITWQ6fMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 07:38:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C72E6/serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94 Validity Not Before: Jun 1 07:38:37 2024 GMT Not After : Jun 8 07:38:37 2024 GMT Subject: CN=665acffd-fcaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b0:7e:9d:c8:07:a3:21:52:b0:3c:78:bf:63: 9e:50:1a:b5:c6:c4:b3:d2:26:21:61:67:15:40:c5: 52:ed:0e:05:8f:2c:59:4b:55:52:85:ce:58:01:fb: 46:41:38:fd:83:fa:34:86:2f:24:3b:16:4a:3e:3a: 3b:4a:58:a3:2e:eb:38:60:4a:35:b1:77:2c:b3:7f: 01:ba:f9:6b:d4:fe:1c:c5:22:d4:38:93:fe:85:b0: e2:48:a7:b7:88:42:d3:f1:12:ee:33:38:a8:8e:18: 58:69:82:2f:15:2b:ab:d4:d0:17:98:4f:72:67:45: 8c:d0:d2:b7:7c:01:37:74:51:1e:1a:2f:51:ed:7b: d2:f7:bf:5d:26:32:cd:22:b1:a4:b5:0a:7d:37:da: f0:c6:36:67:5c:0b:d9:8a:65:02:fb:62:7c:5c:10: 14:5e:51:ec:16:03:c9:77:90:80:91:c5:c2:74:56: de:35:22:2e:fd:bd:2f:88:ea:98:31:51:83:71:8f: 5e:d5:8c:c7:98:b3:5d:a2:3f:d2:8b:a2:7c:90:b4: c5:31:61:25:af:88:e4:29:c2:08:db:c1:d3:04:fc: 4b:7f:db:af:99:15:36:94:dd:c8:a4:ba:a3:7e:51: 8f:96:21:35:f0:12:d4:66:43:c6:4b:ab:03:ed:34: 76:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C2:46:4D:BE:2C:49:84:97:03:36:96:EC:65:F2:DA:0A:7F:07:ED X509v3 Authority Key Identifier: keyid:75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:bd:a5:ac:39:99:a5:c5:22:d4:b3:10:00:48:b7:56:26:5c: cf:e8:d3:63:29:3e:b2:a7:d9:65:9c:2d:1f:fe:00:b0:8b:4b: fe:2f:5b:21:a1:99:bf:58:d4:7b:fb:f3:f2:fc:eb:40:7f:df: 32:d6:70:30:e8:e8:4e:6f:7c:a0:b8:98:3c:78:c6:ed:f3:69: d7:39:fd:a8:60:64:06:f6:a6:fe:2a:ce:c7:b7:d7:dd:ef:40: f4:7b:6a:f9:e8:c1:88:b4:6a:6b:b7:6b:96:69:ce:93:a6:0a: b9:d6:cb:66:e1:73:b0:7e:0c:15:85:9a:10:27:e1:3f:78:94: bb:1b:db:c2:9c:1d:19:00:d5:c7:67:4f:94:da:20:03:ab:46: 4d:ec:35:8b:04:c3:83:c6:da:9c:f0:34:48:f8:6d:10:64:20: 3d:bb:76:93:ae:d8:01:5f:07:18:7d:db:77:96:55:f3:57:fe: 8e:32:78:81:45:aa:2a:5d:25:b1:e0:9e:92:49:af:b1:07:00: 7f:a4:e5:a6:9c:6b:a4:eb:95:fe:68:b8:bd:ca:6a:98:bf:f8: 5e:08:66:90:8f:d1:bd:9e:4d:ac:57:ff:a7:04:4c:b3:ce:a1: f7:18:b7:fb:ed:d8:d2:da:3e:72:47:86:21:e9:11:c2:48:3f: f1:d8:af:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcyRTYxMTAvBgNVBAUTKDc1MjUzM0IxODUyRjdEMkFDNkU3MERDREVCRkQ1NDdE REM0MzhGOTQwHhcNMjQwNjAxMDczODM3WhcNMjQwNjA4MDczODM3WjAYMRYwFAYD VQQDEw02NjVhY2ZmZC1mY2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4LB+ncgHoyFSsDx4v2OeUBq1xsSz0iYhYWcVQMVS7Q4FjyxZS1VShc5YAftG QTj9g/o0hi8kOxZKPjo7SlijLus4YEo1sXcss38Buvlr1P4cxSLUOJP+hbDiSKe3 iELT8RLuMziojhhYaYIvFSur1NAXmE9yZ0WM0NK3fAE3dFEeGi9R7XvS979dJjLN IrGktQp9N9rwxjZnXAvZimUC+2J8XBAUXlHsFgPJd5CAkcXCdFbeNSIu/b0viOqY MVGDcY9e1YzHmLNdoj/Si6J8kLTFMWElr4jkKcII28HTBPxLf9uvmRU2lN3IpLqj flGPliE18BLUZkPGS6sD7TR23wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIvCRk2+ LEmElwM2luxl8toKfwftMB8GA1UdIwQYMBaAFHUlM7GFL30qxucNzev9VH3cQ4+U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzJFNi9FNkU2RkIzMkYy RUExMUVEOTA5OTAwNEFDNEY5QUUwMi9kU1V6c1lVdmZTckc1dzNONl8xVWZkeERq NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RTVXpzWVV2ZlNyRzV3M042XzFVZmR4RGo1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzJFNi9FNkU2RkIzMkYyRUExMUVEOTA5OTAwNEFDNEY5QUUwMi9kU1V6c1lVdmZT ckc1dzNONl8xVWZkeERqNVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALvaWsOZmlxSLUsxAASLdWJlzP6NNjKT6yp9llnC0f/gCwi0v+L1sh oZm/WNR7+/Py/OtAf98y1nAw6OhOb3yguJg8eMbt82nXOf2oYGQG9qb+Ks7Ht9fd 70D0e2r56MGItGprt2uWac6Tpgq51stm4XOwfgwVhZoQJ+E/eJS7G9vCnB0ZANXH Z0+U2iADq0ZN7DWLBMODxtqc8DRI+G0QZCA9u3aTrtgBXwcYfdt3llXzV/6OMniB RaoqXSWx4J6SSa+xBwB/pOWmnGuk65X+aLi9ymqYv/heCGaQj9G9nk2sV/+nBEyz zqH3GLf77djS2j5yR4Yh6RHCSD/x2K99 -----END CERTIFICATE-----Generated at Sat Jun 1 09:10:37 2024 by rpki-client on console-fra.rpki-client.org