$ rpki-client -vvf rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft File: iXCkAMzM8BCTPDMMN2Ch7F204K0.mft (raw, json) Hash identifier: OAYdYA7JaV4WDKnHsrBtaFqWetwF5Pieyu6nqB6ZqAA= Subject key identifier: E2:B2:2F:CC:5A:9B:D6:2B:12:A7:7A:7F:98:9F:6E:B5:94:1C:0E:1E Authority key identifier: 89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD Certificate issuer: /CN=A91C92DC/serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD Certificate serial: 0473 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft Manifest number: 046B Signing time: Fri 03 May 2024 01:51:02 +0000 Manifest this update: Fri 03 May 2024 01:51:01 +0000 Manifest next update: Fri 10 May 2024 01:51:01 +0000 Files and hashes: 1: iXCkAMzM8BCTPDMMN2Ch7F204K0.crl (hash: iyeA22HnRBii1GtA/0bkWIOGDeWzA7hZU+nx3Elmpqk=) 2: C3CE90CEF99A11EB936CCA1EC4F9AE02.roa (hash: EYQt/8SAtT2yfya66iD/IzQhRi5yeR34tj+YNhG2jwE=) 3: AD1469EC7A3911ECB5639D41C4F9AE02.roa (hash: CJBPVKPu4/HWA4ttck+OWTMR+32I+iIik/GupyNpX/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 01:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1139 (0x473) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C92DC/serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD Validity Not Before: May 3 01:51:01 2024 GMT Not After : May 10 01:51:01 2024 GMT Subject: CN=66344306-40ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:78:03:bc:f7:93:1e:c9:82:b9:bf:92:74:d2: bb:2a:86:f9:ef:75:71:13:97:b8:c4:22:a3:84:df: 9a:0d:d2:75:e6:30:35:b6:2d:a8:ee:fd:49:fb:0e: 77:a8:31:b9:c7:c8:58:55:d5:5d:4e:ee:77:f2:6b: 41:42:61:3d:1b:f3:5a:d1:9d:59:e7:15:9a:d0:a0: 3b:bc:b7:00:24:71:7c:dd:7f:27:f3:05:9f:4e:67: f6:b7:43:8d:4c:5a:06:47:fd:c9:12:fe:e1:32:f0: 4a:fe:db:37:e5:cd:f2:c3:e7:e8:ea:45:5e:e7:e1: 74:88:3c:1c:5e:41:36:21:17:69:13:48:28:2d:d7: cf:11:f3:ff:e3:f0:64:44:ff:d1:ac:89:d4:16:df: 95:bd:da:e5:75:83:d5:ae:cb:22:50:64:86:98:51: 61:15:10:43:9f:95:72:cc:6e:39:70:7e:15:14:7f: 4a:54:f3:53:c6:43:29:e5:60:50:fd:97:de:1f:8f: 2d:f6:1b:6f:c0:b6:54:d3:5c:85:c9:79:89:95:57: 14:db:38:11:63:8b:8f:e7:c1:17:23:8c:64:b8:a7: 0b:8b:f8:b2:6c:b4:34:f0:ad:7d:27:27:58:ec:20: 27:63:6b:ae:cb:71:89:e3:98:43:a5:e9:a5:5f:3c: 50:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B2:2F:CC:5A:9B:D6:2B:12:A7:7A:7F:98:9F:6E:B5:94:1C:0E:1E X509v3 Authority Key Identifier: keyid:89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:37:32:11:55:6b:bb:b1:56:10:dc:22:fb:46:5d:79:13:fa: b5:b6:9b:31:26:82:6d:a0:77:8c:00:97:8f:68:71:36:79:66: a0:8a:74:92:be:26:10:03:0b:31:4c:1d:92:6b:43:a2:fa:48: 2e:d5:b2:c1:82:e4:02:2a:4d:fa:5d:25:4e:92:64:83:12:fe: b0:00:4a:fa:6f:1d:bb:34:28:cb:6c:be:42:19:b7:cf:a2:86: fd:23:a1:38:f9:49:9f:14:ba:64:f8:18:ec:1e:56:1b:68:53: 30:31:6b:2e:ca:d0:5b:8a:66:0e:50:4a:81:dc:a5:3b:35:20: d2:f9:cf:90:35:23:3a:c4:2a:73:4b:3f:c8:dd:e8:da:ee:b9: 7d:f7:5f:42:76:8e:d9:64:67:21:f3:45:51:ec:6b:c1:f3:4a: b9:56:39:c9:d6:6b:dd:3d:7b:0e:bc:99:ce:2b:a4:13:1d:35: 6b:69:7d:45:ac:03:15:e4:7a:34:bc:1c:bb:8c:6d:70:d8:cd: 4e:2b:b3:56:3c:94:0f:f1:9d:da:85:55:5b:c9:f8:e0:6e:6f: 3c:43:f6:e8:03:b0:1b:a0:51:58:6a:47:19:60:e4:20:b9:3a: 80:cb:cd:fd:9e:00:f8:c5:74:b8:1d:c9:d5:98:d4:73:6a:86: 66:f5:bf:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkyREMxMTAvBgNVBAUTKDg5NzBBNDAwQ0NDQ0YwMTA5MzNDMzMwQzM3NjBBMUVD NURCNEUwQUQwHhcNMjQwNTAzMDE1MTAxWhcNMjQwNTEwMDE1MTAxWjAYMRYwFAYD VQQDEw02NjM0NDMwNi00MGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0XgDvPeTHsmCub+SdNK7Kob573VxE5e4xCKjhN+aDdJ15jA1ti2o7v1J+w53 qDG5x8hYVdVdTu538mtBQmE9G/Na0Z1Z5xWa0KA7vLcAJHF83X8n8wWfTmf2t0ON TFoGR/3JEv7hMvBK/ts35c3yw+fo6kVe5+F0iDwcXkE2IRdpE0goLdfPEfP/4/Bk RP/RrInUFt+VvdrldYPVrssiUGSGmFFhFRBDn5VyzG45cH4VFH9KVPNTxkMp5WBQ /ZfeH48t9htvwLZU01yFyXmJlVcU2zgRY4uP58EXI4xkuKcLi/iybLQ08K19JydY 7CAnY2uuy3GJ45hDpemlXzxQ8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOKyL8xa m9YrEqd6f5ifbrWUHA4eMB8GA1UdIwQYMBaAFIlwpADMzPAQkzwzDDdgoexdtOCt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTJEQy9DNjA1NzhBMEY5 OTgxMUVCOEFGNDlDMURDNEY5QUUwMi9pWENrQU16TThCQ1RQRE1NTjJDaDdGMjA0 SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYQ2tBTXpNOEJDVFBETU1OMkNoN0YyMDRLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTJEQy9DNjA1NzhBMEY5OTgxMUVCOEFGNDlDMURDNEY5QUUwMi9pWENrQU16TThC Q1RQRE1NTjJDaDdGMjA0SzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGNzIRVWu7sVYQ3CL7Rl15E/q1tpsxJoJtoHeMAJePaHE2eWaginSS viYQAwsxTB2Sa0Oi+kgu1bLBguQCKk36XSVOkmSDEv6wAEr6bx27NCjLbL5CGbfP oob9I6E4+UmfFLpk+BjsHlYbaFMwMWsuytBbimYOUEqB3KU7NSDS+c+QNSM6xCpz Sz/I3eja7rl9919Cdo7ZZGch80VR7GvB80q5VjnJ1mvdPXsOvJnOK6QTHTVraX1F rAMV5Ho0vBy7jG1w2M1OK7NWPJQP8Z3ahVVbyfjgbm88Q/boA7AboFFYakcZYOQg uTqAy839ngD4xXS4HcnVmNRzaoZm9b/T -----END CERTIFICATE-----Generated at Fri May 3 04:45:26 2024 by rpki-client on console-fra.rpki-client.org