$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft File: 1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft (raw, json) Hash identifier: AHhHmUqiw0SRqRD8BCGjaSA0Xaqoyy6tEYomBTrMk3M= Subject key identifier: 51:39:F0:C2:D7:0F:CA:35:F2:37:AD:3F:38:94:D0:1F:95:0C:74:BF Authority key identifier: D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2 Certificate issuer: /CN=A91CE959/serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft Manifest number: 1B Signing time: Wed 15 May 2024 08:52:50 +0000 Manifest this update: Wed 15 May 2024 08:52:50 +0000 Manifest next update: Wed 22 May 2024 08:52:50 +0000 Files and hashes: 1: 1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl (hash: vqFuU0yDAiQZTOcDDI2RhVZdVhSP1BPSQPj/Tlluums=) 2: 99244E94FE0211EEB1F40344C4F9AE02.roa (hash: Rg0JDlVpf5av9xgphUcwW8L/umN7c++X0aMQPmcAyBg=) 3: 03BA6992ED7711EE9998FC11C4F9AE02.roa (hash: pNXp/zitcEGKo6/gAz8K4qpjBS4Aa7CoWSI3NGsPSw8=) 4: 38556AC6ED7711EEA7B2AF12C4F9AE02.roa (hash: aGLy/8PjmHM9bBnjKLxACS5cFbKo+n0HrFlLFQU8ICc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE959/serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2 Validity Not Before: May 15 08:52:50 2024 GMT Not After : May 22 08:52:50 2024 GMT Subject: CN=664477e2-0fba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:42:de:db:43:09:b3:68:45:33:4c:69:57:a2: 55:a7:6a:f9:99:60:0a:04:9d:fa:2c:9b:9e:40:3c: d1:b0:65:22:21:f8:e6:5a:6b:12:eb:e5:94:d7:c2: 85:8f:96:ba:63:9b:d0:92:1d:bf:c4:f2:bd:ed:73: ce:1b:7e:8f:b7:33:f9:86:ca:ed:aa:56:f9:91:25: 3e:0e:05:03:cc:c7:22:aa:17:ee:43:1e:7c:16:d3: fc:d8:01:08:4b:29:83:7a:47:62:2a:3c:5e:60:ed: b8:09:95:34:69:2e:76:e4:14:a8:df:28:e4:60:d2: 98:49:39:c3:0f:e2:65:6c:c0:00:0e:89:95:a3:b4: 93:9f:bf:01:cc:6a:a0:ab:a4:7b:9c:8c:7a:c6:68: 48:61:92:3b:76:ed:f1:62:c2:60:0d:54:51:15:8f: 5a:a4:b6:4a:4f:86:a7:b8:4d:b3:63:6d:c3:b4:c3: eb:fb:93:00:7e:5c:68:6e:a6:a4:ce:ef:09:a4:6e: 4a:24:1c:9b:43:f7:4f:20:8a:a8:4a:f9:bb:fa:0d: 9b:7b:68:6d:8f:d2:5e:45:63:9a:dc:63:ce:d6:56: 19:0c:74:d4:71:50:39:6c:9a:0f:b2:f5:e5:5d:14: 81:0e:2e:72:a5:8d:79:24:6e:11:2a:a7:92:90:00: 3c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:39:F0:C2:D7:0F:CA:35:F2:37:AD:3F:38:94:D0:1F:95:0C:74:BF X509v3 Authority Key Identifier: keyid:D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:92:d8:10:0b:78:c0:04:4c:0b:ea:4f:4a:7f:72:5d:14:e8: f4:d4:78:fd:5e:e9:4c:c1:84:61:2a:3a:94:62:28:6d:f9:1e: c3:36:d4:fb:be:37:68:dc:87:74:23:f3:57:20:39:2c:42:9d: 76:55:44:51:92:fa:61:20:b6:68:55:9d:ac:27:ee:a4:60:a7: 64:e4:98:d9:91:cd:48:e2:68:67:f0:67:bf:d7:e2:f4:3b:a2: 5c:ee:d0:df:88:44:80:43:4f:90:4f:b3:ec:ee:b0:e1:d8:14: c9:8c:bd:88:22:44:78:3c:75:33:38:8d:ee:ef:27:b0:fb:87: b8:bf:f1:dd:b8:2d:ff:30:d9:8b:f9:7a:6b:41:c1:30:b1:5d: d5:f7:09:f0:38:2f:f7:7c:7c:5d:86:b5:07:d8:f3:5e:16:12: 31:22:fb:9c:13:50:ef:81:3d:d1:33:60:83:2d:d0:d1:7a:16: 25:e3:65:77:77:e1:e0:f1:44:b0:7c:d8:b1:8b:c5:d3:d1:11: e2:94:44:6c:4c:d3:01:46:c9:b9:8c:b6:0d:ca:33:a8:b2:8f: 70:9c:46:43:30:69:af:93:77:56:a2:fb:1a:64:d7:ca:dc:4b: 5f:59:2b:df:91:97:71:f7:fc:53:ac:8f:16:11:fd:c1:a8:e1: 6a:05:f2:21 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RTk1OTExMC8GA1UEBRMoRDZFQzIyQTczQTU5RDJBQTk1NTk5NzQ3MDI3OUM2NjJE MTEwODhGMjAeFw0yNDA1MTUwODUyNTBaFw0yNDA1MjIwODUyNTBaMBgxFjAUBgNV BAMTDTY2NDQ3N2UyLTBmYmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCXQt7bQwmzaEUzTGlXolWnavmZYAoEnfosm55APNGwZSIh+OZaaxLr5ZTXwoWP lrpjm9CSHb/E8r3tc84bfo+3M/mGyu2qVvmRJT4OBQPMxyKqF+5DHnwW0/zYAQhL KYN6R2IqPF5g7bgJlTRpLnbkFKjfKORg0phJOcMP4mVswAAOiZWjtJOfvwHMaqCr pHucjHrGaEhhkjt27fFiwmANVFEVj1qktkpPhqe4TbNjbcO0w+v7kwB+XGhupqTO 7wmkbkokHJtD908giqhK+bv6DZt7aG2P0l5FY5rcY87WVhkMdNRxUDlsmg+y9eVd FIEOLnKljXkkbhEqp5KQADz5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUTnwwtcP yjXyN60/OJTQH5UMdL8wHwYDVR0jBBgwFoAU1uwipzpZ0qqVWZdHAnnGYtEQiPIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFOTU5L0FBNEM3N0VDRUQ3 NjExRUVBRDg3MUExMUM0RjlBRTAyLzF1d2lwenBaMHFxVldaZEhBbm5HWXRFUWlQ SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMXV3aXB6cFowcXFWV1pkSEFubkdZdEVRaVBJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF OTU5L0FBNEM3N0VDRUQ3NjExRUVBRDg3MUExMUM0RjlBRTAyLzF1d2lwenBaMHFx VldaZEhBbm5HWXRFUWlQSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJiS2BALeMAETAvqT0p/cl0U6PTUeP1e6UzBhGEqOpRiKG35HsM21Pu+ N2jch3Qj81cgOSxCnXZVRFGS+mEgtmhVnawn7qRgp2TkmNmRzUjiaGfwZ7/X4vQ7 olzu0N+IRIBDT5BPs+zusOHYFMmMvYgiRHg8dTM4je7vJ7D7h7i/8d24Lf8w2Yv5 emtBwTCxXdX3CfA4L/d8fF2GtQfY814WEjEi+5wTUO+BPdEzYIMt0NF6FiXjZXd3 4eDxRLB82LGLxdPREeKURGxM0wFGybmMtg3KM6iyj3CcRkMwaa+Td1ai+xpk18rc S19ZK9+Rl3H3/FOsjxYR/cGo4WoF8iE= -----END CERTIFICATE-----Generated at Wed May 15 09:28:16 2024 by rpki-client on console-fra.rpki-client.org