$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft File: REDuIbNImmUKYWsSDY5b5Xku4Es.mft (raw, json) Hash identifier: 2qLyWrd+7mhHCNU437e1e1Z6KPw38e7RuSnlK6S6kT8= Subject key identifier: 60:14:9E:8A:BA:72:14:95:86:B6:6E:B5:52:DA:65:58:C8:63:A6:C0 Authority key identifier: 44:40:EE:21:B3:48:9A:65:0A:61:6B:12:0D:8E:5B:E5:79:2E:E0:4B Certificate issuer: /CN=A91CE3A3/serialNumber=4440EE21B3489A650A616B120D8E5BE5792EE04B Certificate serial: 0B80 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft Manifest number: 0B7A Signing time: Sat 04 May 2024 19:33:54 +0000 Manifest this update: Sat 04 May 2024 19:33:54 +0000 Manifest next update: Sat 11 May 2024 19:33:54 +0000 Files and hashes: 1: REDuIbNImmUKYWsSDY5b5Xku4Es.crl (hash: 5DAavAQKmxWbyaUm6JDHPWgav81nOGUI4LxC5gp38Wg=) 2: 7155C8563E5E11EAB043A522C4F9AE02.roa (hash: k6sGGBqap/sIKFAHLNp8Q2sefwLXnpkMc2C/TD2oq0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.crl rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2944 (0xb80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE3A3/serialNumber=4440EE21B3489A650A616B120D8E5BE5792EE04B Validity Not Before: May 4 19:33:54 2024 GMT Not After : May 11 19:33:54 2024 GMT Subject: CN=66368da2-1702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:27:95:59:52:10:38:ce:98:22:bf:c1:0f:86: 51:39:6d:90:a6:b3:2e:33:ff:56:0c:a1:50:ef:f6: b4:11:36:21:48:52:91:58:b6:ae:f1:66:a8:3e:d9: 51:b2:44:b4:4d:d2:77:33:3d:2a:80:d4:fc:9a:ca: dd:7d:6f:4c:e3:e6:f7:ad:35:9f:f0:11:c2:5a:76: 2c:1c:2a:6b:ba:08:7d:51:4b:29:0b:84:7b:8c:49: ec:43:cd:a9:f5:80:f6:17:6d:87:bc:a9:86:1b:d4: df:f3:81:11:a9:4f:d3:47:30:c1:c2:6f:99:c3:fc: 73:8a:09:28:92:3a:33:fd:63:67:37:05:88:ec:4f: 1f:b4:3f:4e:26:44:ba:bc:fd:9f:57:88:d2:19:0a: b8:6b:46:20:95:46:95:5a:2d:9f:81:73:bd:dd:dc: 8f:a6:62:96:53:e8:44:58:63:33:63:f1:48:80:f8: cc:6a:04:e8:82:3e:8d:fb:51:c2:a8:84:47:a7:65: 97:4f:d9:9a:f2:91:be:52:b2:1b:7d:ed:70:eb:21: 67:8b:53:d9:4c:82:85:76:6d:bc:a4:f4:00:91:83: 5f:3f:4f:53:73:bf:c2:ee:6c:05:cf:de:63:a8:46: 63:9e:45:d3:64:01:70:3d:cb:ca:59:43:04:b4:1e: dc:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:14:9E:8A:BA:72:14:95:86:B6:6E:B5:52:DA:65:58:C8:63:A6:C0 X509v3 Authority Key Identifier: keyid:44:40:EE:21:B3:48:9A:65:0A:61:6B:12:0D:8E:5B:E5:79:2E:E0:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:50:58:46:74:22:90:8d:e7:7b:ed:fd:ed:ca:8b:3a:39:2f: 83:6d:5d:04:0d:93:5b:73:b0:3e:56:c1:bc:d0:40:0a:92:64: d6:d6:b8:5e:8a:3f:c6:2b:07:c8:9b:0e:75:84:0e:31:d7:e3: 36:0b:5d:f6:6d:e2:e7:77:8e:7e:00:97:b5:fc:29:53:18:2a: 98:11:b4:d7:ab:8e:10:b3:99:ce:be:50:a6:58:8b:d7:4b:a8: d9:bc:8e:90:9f:a8:f6:66:5b:bd:73:49:60:92:05:8b:42:54: 7c:d7:e1:a3:1c:d5:47:8f:a2:f2:87:d9:b9:80:91:94:15:90: 28:e8:69:3c:69:b8:b7:7f:0a:25:7e:68:ba:a3:da:88:4b:79: 8e:50:0e:b1:eb:55:d4:a9:77:53:49:ab:14:bd:de:02:9f:5d: 3a:3d:2d:30:dc:4b:ef:92:00:07:cf:62:93:8f:e3:d5:62:0c: 41:1d:02:c2:d3:eb:b4:53:9b:97:36:c0:41:5d:e4:5e:b5:96: f4:b4:cc:6a:65:42:7c:78:4d:4b:f9:3c:d2:ff:64:b7:20:11: 8c:a6:a5:b2:ad:97:b2:bb:f0:1e:67:c3:b9:6f:93:0d:23:b9: c2:bd:05:8f:02:1a:7f:49:f7:4f:b5:2d:0b:95:98:0e:e9:84: e5:39:aa:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzQTMxMTAvBgNVBAUTKDQ0NDBFRTIxQjM0ODlBNjUwQTYxNkIxMjBEOEU1QkU1 NzkyRUUwNEIwHhcNMjQwNTA0MTkzMzU0WhcNMjQwNTExMTkzMzU0WjAYMRYwFAYD VQQDEw02NjM2OGRhMi0xNzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9ieVWVIQOM6YIr/BD4ZROW2QprMuM/9WDKFQ7/a0ETYhSFKRWLau8WaoPtlR skS0TdJ3Mz0qgNT8msrdfW9M4+b3rTWf8BHCWnYsHCprugh9UUspC4R7jEnsQ82p 9YD2F22HvKmGG9Tf84ERqU/TRzDBwm+Zw/xzigkokjoz/WNnNwWI7E8ftD9OJkS6 vP2fV4jSGQq4a0YglUaVWi2fgXO93dyPpmKWU+hEWGMzY/FIgPjMagTogj6N+1HC qIRHp2WXT9ma8pG+UrIbfe1w6yFni1PZTIKFdm28pPQAkYNfP09Tc7/C7mwFz95j qEZjnkXTZAFwPcvKWUMEtB7cUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGAUnoq6 chSVhrZutVLaZVjIY6bAMB8GA1UdIwQYMBaAFERA7iGzSJplCmFrEg2OW+V5LuBL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNBMy8xODgyM0M4QzA1 MDExMUVBQkQ5QjIwMkNDNEY5QUUwMi9SRUR1SWJOSW1tVUtZV3NTRFk1YjVYa3U0 RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JFRHVJYk5JbW1VS1lXc1NEWTViNVhrdTRFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTNBMy8xODgyM0M4QzA1MDExMUVBQkQ5QjIwMkNDNEY5QUUwMi9SRUR1SWJOSW1t VUtZV3NTRFk1YjVYa3U0RXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACUFhGdCKQjed77f3tyos6OS+DbV0EDZNbc7A+VsG80EAKkmTW1rhe ij/GKwfImw51hA4x1+M2C132beLnd45+AJe1/ClTGCqYEbTXq44Qs5nOvlCmWIvX S6jZvI6Qn6j2Zlu9c0lgkgWLQlR81+GjHNVHj6Lyh9m5gJGUFZAo6Gk8abi3fwol fmi6o9qIS3mOUA6x61XUqXdTSasUvd4Cn106PS0w3EvvkgAHz2KTj+PVYgxBHQLC 0+u0U5uXNsBBXeRetZb0tMxqZUJ8eE1L+TzS/2S3IBGMpqWyrZeyu/AeZ8O5b5MN I7nCvQWPAhp/SfdPtS0LlZgO6YTlOaqZ -----END CERTIFICATE-----Generated at Sat May 4 20:37:18 2024 by rpki-client on console-fra.rpki-client.org