$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft File: B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft (raw, json) Hash identifier: BxtACDFaFR9fMwWIzXX/sdkw1q2Gz2EsutQgyoCKw/Q= Subject key identifier: B4:A9:3B:50:AF:B3:0E:B6:AB:BD:F5:63:F9:09:5A:52:57:27:53:D9 Authority key identifier: 07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67 Certificate issuer: /CN=A91CDCB6/serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467 Certificate serial: 1D67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft Manifest number: 1D4D Signing time: Thu 02 May 2024 16:33:32 +0000 Manifest this update: Thu 02 May 2024 16:33:31 +0000 Manifest next update: Thu 09 May 2024 16:33:31 +0000 Files and hashes: 1: B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl (hash: e/KiSqq2SElSvzcacrqqKnsnxH4eePGUm+ELrjQDKbo=) 2: BD314CEA619711EE81211277C4F9AE02.roa (hash: y9bYv10Sj2SzJjf7aWhedeuMSKoXzsaYdKD0ELdpARk=) 3: 48471CAE611811EEB2B1C077C4F9AE02.roa (hash: bbgunNoeZwkmSm5GLmk8fdMF4Ue/kSTbRpGVK+vcIS8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 16:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7527 (0x1d67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDCB6/serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467 Validity Not Before: May 2 16:33:31 2024 GMT Not After : May 9 16:33:31 2024 GMT Subject: CN=6633c05c-d20f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4d:1f:51:f3:f6:62:f2:4a:d8:b2:51:53:5b: 97:03:5b:86:29:f5:08:ba:9a:d1:ce:79:72:b9:16: e9:40:59:d5:b4:8b:14:99:1f:4c:e4:64:74:f1:1a: 66:a4:10:ee:83:bf:d1:e2:3f:d7:91:17:9f:58:e6: 46:9d:0f:c3:47:3b:ae:30:8e:21:69:42:cf:20:97: a8:21:f0:2e:d7:ff:7a:1e:71:d4:3e:da:cc:37:aa: 8b:c6:28:74:b0:cf:ce:fe:3f:12:ab:bd:38:7f:97: 62:5a:10:55:e2:14:ce:1b:dc:dd:bf:18:77:04:ec: f4:6c:73:6c:58:e5:88:db:c9:c1:2c:e0:ef:fd:a6: b5:8e:c2:3a:c7:43:23:15:8a:7e:27:92:a9:6f:ea: 29:9f:b0:74:ea:fa:ba:b8:91:9b:a7:47:27:da:82: 1e:e8:97:79:be:ce:35:ec:5f:08:46:32:65:0f:40: 5b:06:5d:ce:6c:c6:4c:2e:8a:ed:f9:78:1c:4b:10: d4:7e:96:94:f6:f0:cb:c7:e4:ce:f9:45:fa:fb:e4: 0d:b9:53:39:5d:92:04:e1:00:91:79:d8:d5:49:8e: 40:b6:3a:8a:df:31:3d:57:b4:c7:36:e2:35:b9:27: 2f:62:e4:52:25:21:de:0f:88:78:47:3d:4d:cc:70: 3a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A9:3B:50:AF:B3:0E:B6:AB:BD:F5:63:F9:09:5A:52:57:27:53:D9 X509v3 Authority Key Identifier: keyid:07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:1e:e3:2c:1f:43:c8:1a:97:c0:41:2f:5e:ea:f3:13:db:8f: 81:f2:f0:ef:94:7d:fe:b8:04:f5:78:87:dc:89:e2:92:82:a8: 68:de:8a:b5:5e:8b:2d:98:76:7c:fe:02:9d:e7:48:ac:e7:64: 29:c0:d8:6f:27:fb:71:1e:df:63:94:a2:ba:57:b4:58:b9:20: 5d:b2:40:36:6a:1d:9e:44:84:84:b5:7a:a4:7b:3e:50:bc:ce: 88:0a:9e:03:fd:5c:a6:5a:95:a6:64:5c:96:8c:d9:c8:fe:77: 24:d7:a0:9a:9a:4e:e8:91:61:b3:8a:f5:51:17:5d:e0:a0:86: be:a4:57:35:9c:fb:94:8a:ee:29:ec:7a:1f:fb:6c:d3:e9:59: 1a:bb:45:e5:33:a9:6f:92:86:72:c8:ea:be:f8:23:7b:85:f8: 84:cc:66:5e:d5:83:e9:94:1a:ef:e0:82:64:57:0c:80:aa:8a: 68:18:04:3d:95:1f:b1:78:03:c6:d9:54:b2:a6:b7:11:3f:11: 8a:e5:f9:9a:d7:3e:c3:2b:65:6e:db:e5:f4:d3:4e:f4:3f:42: cd:52:f4:e5:e3:7b:41:3e:2e:c7:0d:9c:df:ba:3f:6c:0d:82: ec:d4:b1:0d:1a:2f:39:58:a2:8f:22:37:57:7c:4d:a4:2d:48: fa:95:1b:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RDQjYxMTAvBgNVBAUTKDA3ODE2NzVDQzY0RkFCMkI4NDVEQTdGNTExNTU0OTgw NDJFQ0U0NjcwHhcNMjQwNTAyMTYzMzMxWhcNMjQwNTA5MTYzMzMxWjAYMRYwFAYD VQQDEw02NjMzYzA1Yy1kMjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmk0fUfP2YvJK2LJRU1uXA1uGKfUIuprRznlyuRbpQFnVtIsUmR9M5GR08Rpm pBDug7/R4j/XkRefWOZGnQ/DRzuuMI4haULPIJeoIfAu1/96HnHUPtrMN6qLxih0 sM/O/j8Sq704f5diWhBV4hTOG9zdvxh3BOz0bHNsWOWI28nBLODv/aa1jsI6x0Mj FYp+J5Kpb+opn7B06vq6uJGbp0cn2oIe6Jd5vs417F8IRjJlD0BbBl3ObMZMLort +XgcSxDUfpaU9vDLx+TO+UX6++QNuVM5XZIE4QCRedjVSY5AtjqK3zE9V7THNuI1 uScvYuRSJSHeD4h4Rz1NzHA6swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLSpO1Cv sw62q731Y/kJWlJXJ1PZMB8GA1UdIwQYMBaAFAeBZ1zGT6srhF2n9RFVSYBC7ORn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRENCNi82N0M2QUE0QThB RjExMUU2OTgwNzgzNTVDNEY5QUUwMi9CNEZuWE1aUHF5dUVYYWYxRVZWSmdFTHM1 R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I0Rm5YTVpQcXl1RVhhZjFFVlZKZ0VMczVHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RENCNi82N0M2QUE0QThBRjExMUU2OTgwNzgzNTVDNEY5QUUwMi9CNEZuWE1aUHF5 dUVYYWYxRVZWSmdFTHM1R2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1HuMsH0PIGpfAQS9e6vMT24+B8vDvlH3+uAT1eIfcieKSgqho3oq1 XostmHZ8/gKd50is52QpwNhvJ/txHt9jlKK6V7RYuSBdskA2ah2eRISEtXqkez5Q vM6ICp4D/VymWpWmZFyWjNnI/nck16Camk7okWGzivVRF13goIa+pFc1nPuUiu4p 7Hof+2zT6Vkau0XlM6lvkoZyyOq++CN7hfiEzGZe1YPplBrv4IJkVwyAqopoGAQ9 lR+xeAPG2VSyprcRPxGK5fma1z7DK2Vu2+X00070P0LNUvTl43tBPi7HDZzfuj9s DYLs1LENGi85WKKPIjdXfE2kLUj6lRsr -----END CERTIFICATE-----Generated at Thu May 2 17:18:57 2024 by rpki-client on console-ams.rpki-client.org