$ rpki-client -vvf rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft File: US2b3oE8t7x3GQqE-bGNuOtOIl8.mft (raw, json) Hash identifier: kHTJJ3gjYbHp0gHOAdyXu3ZRfxqK3HaMF9AEAxLUJ40= Subject key identifier: 44:2D:23:A3:53:1E:98:18:67:89:3A:28:E1:15:DE:27:17:5C:35:05 Authority key identifier: 51:2D:9B:DE:81:3C:B7:BC:77:19:0A:84:F9:B1:8D:B8:EB:4E:22:5F Certificate issuer: /CN=A91C956C/serialNumber=512D9BDE813CB7BC77190A84F9B18DB8EB4E225F Certificate serial: 0445 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft Manifest number: 043E Signing time: Fri 03 May 2024 02:04:06 +0000 Manifest this update: Fri 03 May 2024 02:04:05 +0000 Manifest next update: Fri 10 May 2024 02:04:05 +0000 Files and hashes: 1: US2b3oE8t7x3GQqE-bGNuOtOIl8.crl (hash: x0E7KL1B0EPmGC9kPx5CsTxeg3DOWW8WxNJx1d7imfk=) 2: E1755B4E24D711EDBE2C660BC4F9AE02.roa (hash: OFjYFv8tLy2zQnIzsX4nCsQcZdp8BhHD9S3hqGHRqMo=) 3: 980FBF380C8E11EC899E3211C4F9AE02.roa (hash: 6PsJWrPCESS72Cgsphwc7pgkinbPzCBr6HjEWyJ7RGI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.crl rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 02:04:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1093 (0x445) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C956C/serialNumber=512D9BDE813CB7BC77190A84F9B18DB8EB4E225F Validity Not Before: May 3 02:04:05 2024 GMT Not After : May 10 02:04:05 2024 GMT Subject: CN=66344615-0fdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ec:24:df:19:93:55:03:67:28:9d:f9:5c:9a: ef:3b:16:57:0c:1b:f1:8f:73:18:ad:d8:e0:21:f9: ef:0a:0a:cc:b5:28:97:4e:85:73:5c:ad:00:a0:e9: 7c:86:92:14:55:7b:3b:33:d7:85:4b:c0:63:13:45: ab:3d:12:14:56:05:cd:6f:e4:1e:1e:c9:50:15:2f: cf:f8:a7:4c:09:07:c6:5e:e6:69:92:3d:46:b6:23: d0:1f:d3:3e:57:cc:27:c1:e9:23:41:3a:6d:7e:38: b7:0e:92:18:b2:35:aa:bf:a9:ec:e6:7f:72:00:72: 6f:3b:07:0b:c1:ee:55:31:ac:c2:f0:43:14:4c:17: 5c:a4:38:c7:5f:e3:5b:7d:09:68:56:f9:a5:c9:be: 32:31:f8:47:17:84:a4:79:5b:80:20:26:85:14:c5: 09:07:40:02:6c:b2:36:5f:6c:76:18:7b:4a:f0:68: 6e:b7:d2:7b:28:34:a0:6e:62:84:83:5d:95:fb:9e: 05:31:78:fe:5e:e8:7d:80:42:59:73:c5:4d:af:44: 51:5b:75:7c:4c:1a:b8:2d:a0:5b:2d:d3:69:2c:f1: 93:51:bf:42:cf:db:43:7a:97:eb:77:3f:6c:52:a3: 43:fe:b6:51:8f:ba:ed:d7:c1:d3:bb:e1:7d:4b:20: 73:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:2D:23:A3:53:1E:98:18:67:89:3A:28:E1:15:DE:27:17:5C:35:05 X509v3 Authority Key Identifier: keyid:51:2D:9B:DE:81:3C:B7:BC:77:19:0A:84:F9:B1:8D:B8:EB:4E:22:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:21:2b:a5:89:ef:2a:73:8e:ca:11:69:74:39:c9:3b:28:ef: 00:6a:d9:b5:df:19:b8:a5:1c:54:87:de:f9:f1:65:9d:c4:3e: 2d:eb:b2:1a:01:fd:ae:26:05:04:dc:39:9c:4e:56:cd:2d:16: de:f9:45:46:9c:eb:6a:20:41:a2:98:1e:1a:ea:0d:31:d3:1e: 35:b7:8b:79:ce:49:00:81:f2:6c:ca:5d:32:93:da:0d:13:b9: 9b:e3:88:6b:82:5d:1c:16:5b:e0:2e:eb:e7:35:80:a3:1d:36: a4:90:fc:9d:9e:ea:56:4e:f4:4e:e0:64:6f:92:99:2d:4d:41: 45:62:e3:88:1a:d5:09:83:ab:0a:48:b3:0c:60:3b:8f:3c:fd: 7e:be:bb:6e:0b:2c:d6:2d:b3:8f:bc:9c:73:65:c9:51:3e:f1: 3e:e3:06:9e:d8:f0:98:d8:a2:4c:f2:32:83:af:fb:a1:ff:49: a2:89:b2:4e:60:e1:d3:5f:0e:aa:98:99:76:25:91:ed:63:2e: a1:bd:02:b7:6d:5b:f0:bf:3e:25:5f:24:24:83:0a:b9:39:6d: d8:8e:bb:ed:5e:e0:9f:91:70:a3:c2:72:43:f2:50:47:73:42: 98:01:52:c9:fb:aa:b2:69:ab:84:71:ef:08:a6:4d:ac:af:94: 2e:d5:0d:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk1NkMxMTAvBgNVBAUTKDUxMkQ5QkRFODEzQ0I3QkM3NzE5MEE4NEY5QjE4REI4 RUI0RTIyNUYwHhcNMjQwNTAzMDIwNDA1WhcNMjQwNTEwMDIwNDA1WjAYMRYwFAYD VQQDEw02NjM0NDYxNS0wZmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzewk3xmTVQNnKJ35XJrvOxZXDBvxj3MYrdjgIfnvCgrMtSiXToVzXK0AoOl8 hpIUVXs7M9eFS8BjE0WrPRIUVgXNb+QeHslQFS/P+KdMCQfGXuZpkj1GtiPQH9M+ V8wnwekjQTptfji3DpIYsjWqv6ns5n9yAHJvOwcLwe5VMazC8EMUTBdcpDjHX+Nb fQloVvmlyb4yMfhHF4SkeVuAICaFFMUJB0ACbLI2X2x2GHtK8Ghut9J7KDSgbmKE g12V+54FMXj+Xuh9gEJZc8VNr0RRW3V8TBq4LaBbLdNpLPGTUb9Cz9tDepfrdz9s UqND/rZRj7rt18HTu+F9SyBzRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQtI6NT HpgYZ4k6KOEV3icXXDUFMB8GA1UdIwQYMBaAFFEtm96BPLe8dxkKhPmxjbjrTiJf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTU2Qy9GQjMwNUE1RTBD OEExMUVDQTMxOTFCMENDNEY5QUUwMi9VUzJiM29FOHQ3eDNHUXFFLWJHTnVPdE9J bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VTMmIzb0U4dDd4M0dRcUUtYkdOdU90T0lsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTU2Qy9GQjMwNUE1RTBDOEExMUVDQTMxOTFCMENDNEY5QUUwMi9VUzJiM29FOHQ3 eDNHUXFFLWJHTnVPdE9JbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaISulie8qc47KEWl0Ock7KO8Aatm13xm4pRxUh9758WWdxD4t67Ia Af2uJgUE3DmcTlbNLRbe+UVGnOtqIEGimB4a6g0x0x41t4t5zkkAgfJsyl0yk9oN E7mb44hrgl0cFlvgLuvnNYCjHTakkPydnupWTvRO4GRvkpktTUFFYuOIGtUJg6sK SLMMYDuPPP1+vrtuCyzWLbOPvJxzZclRPvE+4wae2PCY2KJM8jKDr/uh/0miibJO YOHTXw6qmJl2JZHtYy6hvQK3bVvwvz4lXyQkgwq5OW3YjrvtXuCfkXCjwnJD8lBH c0KYAVLJ+6qyaauEce8Ipk2sr5Qu1Q1z -----END CERTIFICATE-----Generated at Fri May 3 04:45:26 2024 by rpki-client on console-fra.rpki-client.org