$ rpki-client -vvf rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.mft File: SXppmDQJrXDCF1ZAccz1vjTFG8c.mft (raw, json) Hash identifier: MdwO+8Ft0ChmYdJoFdHmAmlCj1bkPFHjJIzefZRwwLg= Subject key identifier: C8:11:B3:84:28:36:2A:C9:B1:B4:70:34:4E:4A:C6:76:B2:F3:EE:72 Authority key identifier: 49:7A:69:98:34:09:AD:70:C2:17:56:40:71:CC:F5:BE:34:C5:1B:C7 Certificate issuer: /CN=A91C751F/serialNumber=497A69983409AD70C217564071CCF5BE34C51BC7 Certificate serial: 03A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXppmDQJrXDCF1ZAccz1vjTFG8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.mft Manifest number: 039A Signing time: Wed 01 May 2024 02:56:17 +0000 Manifest this update: Wed 01 May 2024 02:56:16 +0000 Manifest next update: Wed 08 May 2024 02:56:16 +0000 Files and hashes: 1: SXppmDQJrXDCF1ZAccz1vjTFG8c.crl (hash: rUvJOjd1uuls7YBzBd6zs71Ejzyj9XFUT+Kcm/ovMhE=) 2: E9237B16683211EDA8B5DD35C4F9AE02.roa (hash: u6N988rOXwSrao9nTYCkqomFLJnF8Cy8KWfBMr9sYio=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.crl rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXppmDQJrXDCF1ZAccz1vjTFG8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 02:56:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 934 (0x3a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C751F/serialNumber=497A69983409AD70C217564071CCF5BE34C51BC7 Validity Not Before: May 1 02:56:16 2024 GMT Not After : May 8 02:56:16 2024 GMT Subject: CN=6631af50-b24b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:b2:7b:52:7d:9d:dc:22:a1:82:19:9f:34:32: 08:a6:09:d5:53:e2:fe:63:1b:0e:65:cf:08:99:99: d1:50:6a:40:9b:a9:6b:00:89:4c:6d:ec:75:00:9b: 47:71:bc:29:7e:8c:bb:e7:37:7c:a3:71:56:37:34: fe:a1:6a:60:c0:5b:c7:42:24:43:c6:a7:18:04:10: 4a:7c:ee:cc:85:05:28:04:09:90:80:4b:6d:fd:3b: ac:77:f6:bc:d2:a0:89:45:11:6f:d2:c9:1a:6b:85: 0d:db:5e:ad:51:16:9e:d0:1a:6b:19:5f:80:a7:2a: ff:22:01:3c:4f:ba:46:24:84:d0:79:ba:4d:5f:ff: 6a:6c:3f:eb:6e:23:c2:41:83:08:1c:b5:1d:e1:52: 90:9a:4e:08:82:9f:e1:9c:5a:9b:f9:43:d5:73:57: 8d:e2:d7:6d:a2:ad:73:8e:65:66:b1:63:de:b6:18: 60:3b:1e:34:f5:d0:93:7f:9d:e4:92:b2:e3:68:c0: 9d:99:3d:55:b3:a0:c4:0e:4c:03:d7:0f:ad:ce:3c: 70:e5:a6:eb:02:96:eb:d9:c2:df:d0:a1:a1:4b:7d: 48:8f:38:ca:f7:7a:94:2e:43:99:3c:3f:da:82:1f: 9c:ed:56:f4:e1:d4:80:a5:40:c5:c3:a9:03:61:a6: ec:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:11:B3:84:28:36:2A:C9:B1:B4:70:34:4E:4A:C6:76:B2:F3:EE:72 X509v3 Authority Key Identifier: keyid:49:7A:69:98:34:09:AD:70:C2:17:56:40:71:CC:F5:BE:34:C5:1B:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXppmDQJrXDCF1ZAccz1vjTFG8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:8d:a0:9c:07:e6:96:a3:59:5a:cd:d1:7c:bf:d1:2e:93:04: 00:19:86:c6:89:8a:57:3d:3f:7e:2a:e5:17:91:fb:12:8d:f7: 7d:db:d5:8e:1f:b1:fb:15:3b:2e:96:26:f6:fd:f4:20:a7:38: 79:22:d1:8f:bc:42:e3:25:db:0f:8b:7f:ac:37:a6:70:1b:2a: 64:3b:1e:75:55:75:cc:3e:2c:69:51:e6:64:3b:29:65:93:e2: 8e:85:01:8a:52:ad:bc:7f:71:b4:11:91:34:44:84:5e:51:2c: 8b:a6:3f:ec:f9:7d:ed:83:03:10:b8:a9:a4:f1:48:3b:6c:f1: 68:4b:c6:4e:fd:02:e3:62:62:4e:09:62:f5:b9:1e:46:78:c7: 4f:6e:09:f4:cf:34:2b:2a:17:03:cb:f6:10:3d:b1:4f:a4:ff: 0b:cf:06:d2:74:c9:0b:ad:9a:40:a4:9b:b9:86:9a:0b:ec:1c: ee:54:3c:6a:3b:a8:4d:a8:dd:6f:6c:3c:f0:0c:2f:d7:ed:5c: dc:08:d6:6c:cb:9e:17:91:a1:6a:6c:63:b6:a1:19:3d:7b:73: 17:d8:11:e2:f8:1a:0a:ed:0c:10:40:a7:3d:d7:ee:bd:26:b1: 1a:7a:69:32:e7:56:a7:72:40:3c:34:95:fd:b9:3b:cc:fe:35: 3f:4c:75:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc1MUYxMTAvBgNVBAUTKDQ5N0E2OTk4MzQwOUFENzBDMjE3NTY0MDcxQ0NGNUJF MzRDNTFCQzcwHhcNMjQwNTAxMDI1NjE2WhcNMjQwNTA4MDI1NjE2WjAYMRYwFAYD VQQDEw02NjMxYWY1MC1iMjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA87J7Un2d3CKhghmfNDIIpgnVU+L+YxsOZc8ImZnRUGpAm6lrAIlMbex1AJtH cbwpfoy75zd8o3FWNzT+oWpgwFvHQiRDxqcYBBBKfO7MhQUoBAmQgEtt/Tusd/a8 0qCJRRFv0skaa4UN216tURae0BprGV+Apyr/IgE8T7pGJITQebpNX/9qbD/rbiPC QYMIHLUd4VKQmk4Igp/hnFqb+UPVc1eN4tdtoq1zjmVmsWPethhgOx409dCTf53k krLjaMCdmT1Vs6DEDkwD1w+tzjxw5abrApbr2cLf0KGhS31IjzjK93qULkOZPD/a gh+c7Vb04dSApUDFw6kDYabsFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMgRs4Qo NirJsbRwNE5Kxnay8+5yMB8GA1UdIwQYMBaAFEl6aZg0Ca1wwhdWQHHM9b40xRvH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzUxRi8xODM5ODFEMjUx ODQxMUVDOTYxMjA2NDBDNEY5QUUwMi9TWHBwbURRSnJYRENGMVpBY2N6MXZqVEZH OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NYcHBtRFFKclhEQ0YxWkFjY3oxdmpURkc4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzUxRi8xODM5ODFEMjUxODQxMUVDOTYxMjA2NDBDNEY5QUUwMi9TWHBwbURRSnJY RENGMVpBY2N6MXZqVEZHOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9jaCcB+aWo1lazdF8v9EukwQAGYbGiYpXPT9+KuUXkfsSjfd929WO H7H7FTsulib2/fQgpzh5ItGPvELjJdsPi3+sN6ZwGypkOx51VXXMPixpUeZkOyll k+KOhQGKUq28f3G0EZE0RIReUSyLpj/s+X3tgwMQuKmk8Ug7bPFoS8ZO/QLjYmJO CWL1uR5GeMdPbgn0zzQrKhcDy/YQPbFPpP8LzwbSdMkLrZpApJu5hpoL7BzuVDxq O6hNqN1vbDzwDC/X7VzcCNZsy54XkaFqbGO2oRk9e3MX2BHi+BoK7QwQQKc91+69 JrEaemky51anckA8NJX9uTvM/jU/THVC -----END CERTIFICATE-----Generated at Wed May 1 05:59:11 2024 by rpki-client on console-fra.rpki-client.org