$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft File: s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft (raw, json) Hash identifier: QfQbrPklpu7/bEuD1usQVhal3Y4ROwczV7dRJpoTeSI= Subject key identifier: FC:B5:73:AE:D0:89:F1:7D:4E:46:ED:35:14:04:2B:6B:6D:8F:A0:14 Authority key identifier: B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 Certificate issuer: /CN=A91CAE04/serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft Manifest number: 80 Signing time: Fri 17 May 2024 07:26:41 +0000 Manifest this update: Fri 17 May 2024 07:26:41 +0000 Manifest next update: Fri 24 May 2024 07:26:41 +0000 Files and hashes: 1: s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl (hash: /5cqAVKAi2IZgoTwhHV6vrUMS3VJmU9AoWa9nd6Pvqs=) 2: ABA6DCF0030F11EFB12D8A18C4F9AE02.roa (hash: TZTlx2RN/i7twE4j8GF5P6E8ZxFuFcAjWja4o7wTH9A=) 3: 7E40FBBA09EF11EFAA24237EC4F9AE02.roa (hash: Cgp9en0Q6BHVXMQflfV3lofbK18U90dHeqvGCJYVzgQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:26:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAE04/serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Validity Not Before: May 17 07:26:41 2024 GMT Not After : May 24 07:26:41 2024 GMT Subject: CN=664706b1-811c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:33:ef:55:4a:5b:e0:46:a6:46:61:dd:f4:44: 92:9e:84:8b:e0:56:1f:5f:8c:15:f2:a8:34:70:a1: 50:16:74:ed:06:ea:84:51:17:d3:00:d9:1c:db:1d: 4b:cf:4b:cb:16:47:c8:38:05:40:7b:ea:e5:a4:d7: 59:8b:d7:14:3a:09:a9:c2:e3:99:ef:0d:dc:a7:75: f7:94:90:da:e7:42:ea:ac:8d:59:94:bb:b2:ce:56: 7d:92:06:a5:b1:ef:75:37:13:e3:a2:36:7e:dc:96: 59:3a:31:a8:85:02:3b:98:8c:66:9d:c7:10:94:e7: 4c:7a:1d:e3:b0:79:29:06:43:c7:04:61:d1:15:5f: 20:2e:9d:a4:03:85:11:4b:bf:39:2e:94:1e:63:51: 21:b8:b0:2e:df:e8:5c:66:6c:ed:5d:64:55:33:a2: 7e:e3:9a:3a:bc:4c:94:9a:31:25:5e:6a:62:4b:75: c6:da:f3:40:cb:e0:e5:30:08:0c:7a:d0:36:6c:72: db:ba:8f:84:ac:a6:95:71:8d:02:41:71:91:ae:98: 69:6a:b7:73:20:f7:ca:2c:db:44:67:fd:82:f7:d2: a3:8f:25:f6:c8:80:38:9c:48:5d:d8:22:59:5e:a7: 37:dc:d6:95:a5:0a:bb:e8:84:34:cb:59:ce:b9:01: a0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B5:73:AE:D0:89:F1:7D:4E:46:ED:35:14:04:2B:6B:6D:8F:A0:14 X509v3 Authority Key Identifier: keyid:B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:cb:a4:c5:5e:4f:3c:5f:0b:cc:aa:00:8b:a9:ce:6e:47:d8: de:f8:1c:4d:0f:d9:2e:f7:14:56:33:4a:1d:ee:c2:55:ac:44: f8:12:d8:92:cd:b4:bc:c8:c3:dc:d7:52:67:9d:1a:a3:c6:d1: 82:4e:9c:e2:79:2f:0b:95:ea:89:2f:19:40:8e:64:44:47:ea: 0e:a6:b7:b9:ca:d8:c7:8d:db:bd:a7:d9:6c:0f:de:88:40:c2: b6:58:4d:88:a9:20:a0:8d:e8:8a:3d:ae:42:1d:a0:3b:6c:85: 1f:7a:39:3c:68:a8:5a:e2:88:10:99:da:ab:1f:06:04:1f:1e: 4d:52:14:d0:26:54:65:02:61:e8:91:8e:16:e7:33:53:20:e2: e3:26:4f:de:1e:27:16:08:dc:61:31:63:f2:8f:3e:b5:11:a4: 7d:24:03:5d:7a:90:fb:cd:19:f7:43:71:53:c0:bd:a2:35:62: 3d:84:05:ce:74:23:79:0d:a1:46:28:13:08:8a:9e:69:46:62: 98:00:6c:19:03:94:a3:0c:68:b2:99:dd:b1:4e:b8:59:f6:28: fd:fb:cf:2f:79:df:9c:f1:13:e2:22:6f:5f:60:9b:2f:a7:fd: d9:1f:5a:a9:15:39:7a:a7:14:35:99:d1:47:fb:7e:59:b1:ea: ac:5f:20:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FFMDQxMTAvBgNVBAUTKEIzNjI0MzdBQjY3RDI5MEM1Q0RGRUYyRjYyQjc3RURE OEE5RkZBNDQwHhcNMjQwNTE3MDcyNjQxWhcNMjQwNTI0MDcyNjQxWjAYMRYwFAYD VQQDEw02NjQ3MDZiMS04MTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDPvVUpb4EamRmHd9ESSnoSL4FYfX4wV8qg0cKFQFnTtBuqEURfTANkc2x1L z0vLFkfIOAVAe+rlpNdZi9cUOgmpwuOZ7w3cp3X3lJDa50LqrI1ZlLuyzlZ9kgal se91NxPjojZ+3JZZOjGohQI7mIxmnccQlOdMeh3jsHkpBkPHBGHRFV8gLp2kA4UR S785LpQeY1EhuLAu3+hcZmztXWRVM6J+45o6vEyUmjElXmpiS3XG2vNAy+DlMAgM etA2bHLbuo+ErKaVcY0CQXGRrphpardzIPfKLNtEZ/2C99KjjyX2yIA4nEhd2CJZ Xqc33NaVpQq76IQ0y1nOuQGgKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPy1c67Q ifF9TkbtNRQEK2ttj6AUMB8GA1UdIwQYMBaAFLNiQ3q2fSkMXN/vL2K3ft2Kn/pE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUUwNC85RDhGNzcyQTVG OTYxMUVFODM2MzhGM0VDNEY5QUUwMi9zMkpEZXJaOUtReGMzLTh2WXJkLTNZcWYt a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MySkRlclo5S1F4YzMtOHZZcmQtM1lxZi1rUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUUwNC85RDhGNzcyQTVGOTYxMUVFODM2MzhGM0VDNEY5QUUwMi9zMkpEZXJaOUtR eGMzLTh2WXJkLTNZcWYta1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPy6TFXk88XwvMqgCLqc5uR9je+BxND9ku9xRWM0od7sJVrET4EtiS zbS8yMPc11JnnRqjxtGCTpzieS8LleqJLxlAjmRER+oOpre5ytjHjdu9p9lsD96I QMK2WE2IqSCgjeiKPa5CHaA7bIUfejk8aKha4ogQmdqrHwYEHx5NUhTQJlRlAmHo kY4W5zNTIOLjJk/eHicWCNxhMWPyjz61EaR9JANdepD7zRn3Q3FTwL2iNWI9hAXO dCN5DaFGKBMIip5pRmKYAGwZA5SjDGiymd2xTrhZ9ij9+88ved+c8RPiIm9fYJsv p/3ZH1qpFTl6pxQ1mdFH+35ZseqsXyAz -----END CERTIFICATE-----Generated at Fri May 17 08:13:54 2024 by rpki-client on console-fra.rpki-client.org