$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft File: 4z23k7vv5Gy8912zTnCUJ6cu8PM.mft (raw, json) Hash identifier: qt2UNwIh7xStiNMq9sBNrEJiibNKI/LXMiQlWullpno= Subject key identifier: 6A:6F:19:CA:57:1C:F3:A6:AD:23:72:19:7A:46:C6:7F:C5:34:D8:2B Authority key identifier: E3:3D:B7:93:BB:EF:E4:6C:BC:F7:5D:B3:4E:70:94:27:A7:2E:F0:F3 Certificate issuer: /CN=A91C7F6A/serialNumber=E33DB793BBEFE46CBCF75DB34E709427A72EF0F3 Certificate serial: 0106 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft Manifest number: 0103 Signing time: Fri 03 May 2024 05:38:24 +0000 Manifest this update: Fri 03 May 2024 05:38:23 +0000 Manifest next update: Fri 10 May 2024 05:38:23 +0000 Files and hashes: 1: 4z23k7vv5Gy8912zTnCUJ6cu8PM.crl (hash: dWYkLJZ3LeYHwiXKCqoFwpgQgBdhBw+M+02X1LsoAfs=) 2: 81D5DEE47F5D11EDB4309B54C4F9AE02.roa (hash: AbtdISLsu7mUdEBBviyOeRBTKMew9+xPs+9REi1F8pA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.crl rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 04:52:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 262 (0x106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7F6A/serialNumber=E33DB793BBEFE46CBCF75DB34E709427A72EF0F3 Validity Not Before: May 3 05:38:23 2024 GMT Not After : May 10 05:38:23 2024 GMT Subject: CN=66347850-3d4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3e:a5:70:31:67:91:19:e3:09:26:c2:65:69: 66:08:a6:7e:9c:f0:25:f8:99:59:cf:96:e1:cf:8d: b6:3b:e2:f3:d4:6e:d5:e2:47:2c:75:ab:3f:e8:23: 14:8c:66:3e:4c:cb:28:b8:a5:39:b2:4f:69:3e:48: 0c:b6:26:5d:46:ec:60:56:d8:06:ee:b4:c2:dd:34: 4e:1f:64:9b:b8:2a:89:7a:9f:46:36:5f:46:25:00: 54:57:1f:9d:84:f2:be:c5:3a:37:2a:ca:93:86:87: ff:ef:be:c2:78:67:ce:83:95:df:f9:3d:5e:74:8c: cb:1a:7d:f0:5e:c9:a3:7f:85:86:1d:46:01:0a:49: bf:ac:b0:52:28:85:0e:31:71:f9:9d:2d:4d:56:11: 18:df:28:b6:b5:84:4a:2e:27:e6:cd:d0:f8:54:77: cd:68:91:f1:43:2f:de:5d:bd:35:cf:7a:dc:1c:3f: 9b:4b:c8:b4:11:4e:73:ea:f5:a8:77:bc:13:23:88: b7:67:0c:6c:1d:55:c5:db:3e:ed:05:ce:99:13:bb: f5:0b:fa:d8:c4:53:74:35:f7:70:7e:a5:9e:21:6f: 95:bb:e1:b9:fa:e8:98:a8:46:fe:ff:07:1a:34:8d: 20:b1:e1:ff:93:c1:85:30:74:35:ff:75:13:83:42: db:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:6F:19:CA:57:1C:F3:A6:AD:23:72:19:7A:46:C6:7F:C5:34:D8:2B X509v3 Authority Key Identifier: keyid:E3:3D:B7:93:BB:EF:E4:6C:BC:F7:5D:B3:4E:70:94:27:A7:2E:F0:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:13:2e:f3:a8:89:50:f9:bb:38:64:9a:1e:16:1f:fe:d6:2e: 6b:1a:68:dd:ce:2a:bf:e3:40:39:c1:4b:3b:f4:b6:e4:a4:00: 57:08:a0:6c:61:dd:2f:0b:2e:95:db:ce:e5:75:32:60:47:af: 16:ce:36:1b:81:b4:4b:d8:65:2c:da:9a:b1:94:f5:2a:6f:42: 1a:9d:b1:ff:ab:48:6e:8d:cc:4f:03:7f:60:74:30:a7:53:fe: 0d:4b:f8:d4:dd:b0:32:eb:6a:7a:99:70:4e:17:cf:d6:6b:de: db:50:5a:8c:7c:7d:dc:55:32:60:62:14:eb:ce:a5:44:06:fa: 77:41:9d:fb:24:ad:c0:1e:17:0d:04:3c:35:30:ac:e4:df:15: 60:22:2c:58:19:75:0e:03:e6:b8:ab:10:6f:16:07:ef:02:15: af:2a:73:9d:90:4f:2b:1d:4d:af:91:95:f5:a3:07:71:72:ed: db:56:96:60:b7:70:b9:b8:09:1b:b8:56:06:53:db:38:5f:6c: cb:14:64:ed:42:53:f5:63:4e:22:61:6a:43:22:45:3f:ab:89: 57:ff:af:83:80:d1:af:2d:00:bb:2c:9a:13:38:27:f2:18:73: 78:78:eb:c9:77:8f:4a:b5:96:9c:78:51:e8:49:62:de:e1:02: 87:8b:aa:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdGNkExMTAvBgNVBAUTKEUzM0RCNzkzQkJFRkU0NkNCQ0Y3NURCMzRFNzA5NDI3 QTcyRUYwRjMwHhcNMjQwNTAzMDUzODIzWhcNMjQwNTEwMDUzODIzWjAYMRYwFAYD VQQDEw02NjM0Nzg1MC0zZDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqj6lcDFnkRnjCSbCZWlmCKZ+nPAl+JlZz5bhz422O+Lz1G7V4kcsdas/6CMU jGY+TMsouKU5sk9pPkgMtiZdRuxgVtgG7rTC3TROH2SbuCqJep9GNl9GJQBUVx+d hPK+xTo3KsqThof/777CeGfOg5Xf+T1edIzLGn3wXsmjf4WGHUYBCkm/rLBSKIUO MXH5nS1NVhEY3yi2tYRKLifmzdD4VHfNaJHxQy/eXb01z3rcHD+bS8i0EU5z6vWo d7wTI4i3ZwxsHVXF2z7tBc6ZE7v1C/rYxFN0NfdwfqWeIW+Vu+G5+uiYqEb+/wca NI0gseH/k8GFMHQ1/3UTg0LbyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGpvGcpX HPOmrSNyGXpGxn/FNNgrMB8GA1UdIwQYMBaAFOM9t5O77+RsvPdds05wlCenLvDz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0Y2QS8wNjc5MjUwMDdG NDIxMUVEQjRFNzhDODZDNEY5QUUwMi80ejIzazd2djVHeTg5MTJ6VG5DVUo2Y3U4 UE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzR6MjNrN3Z2NUd5ODkxMnpUbkNVSjZjdThQTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0Y2QS8wNjc5MjUwMDdGNDIxMUVEQjRFNzhDODZDNEY5QUUwMi80ejIzazd2djVH eTg5MTJ6VG5DVUo2Y3U4UE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwEy7zqIlQ+bs4ZJoeFh/+1i5rGmjdziq/40A5wUs79LbkpABXCKBs Yd0vCy6V287ldTJgR68WzjYbgbRL2GUs2pqxlPUqb0IanbH/q0hujcxPA39gdDCn U/4NS/jU3bAy62p6mXBOF8/Wa97bUFqMfH3cVTJgYhTrzqVEBvp3QZ37JK3AHhcN BDw1MKzk3xVgIixYGXUOA+a4qxBvFgfvAhWvKnOdkE8rHU2vkZX1owdxcu3bVpZg t3C5uAkbuFYGU9s4X2zLFGTtQlP1Y04iYWpDIkU/q4lX/6+DgNGvLQC7LJoTOCfy GHN4eOvJd49KtZaceFHoSWLe4QKHi6oS -----END CERTIFICATE-----Generated at Fri May 3 06:29:23 2024 by rpki-client on console-fra.rpki-client.org