$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft File: _0lSk8tfFeXRS6zC2xBSsuLIJcg.mft (raw, json) Hash identifier: A71ZgZ7y2i68gZeh34FOWSjm4XVlTxLsEoCiCbjnpvI= Subject key identifier: 5A:36:C0:BA:5D:F3:FC:FF:A7:E5:40:89:EC:37:11:18:1B:D4:CE:FD Authority key identifier: FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 Certificate issuer: /CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Certificate serial: 33E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft Manifest number: 33CE Signing time: Wed 24 Apr 2024 15:04:47 +0000 Manifest this update: Wed 24 Apr 2024 15:04:47 +0000 Manifest next update: Wed 01 May 2024 15:04:47 +0000 Files and hashes: 1: _0lSk8tfFeXRS6zC2xBSsuLIJcg.crl (hash: 3RSB2LT+SyYzLoIeuokq50R1sq2jPGNAUg13pFWP/Dg=) 2: B2306182F3F911EAB9D11D26C4F9AE02.roa (hash: d8MN6d/wEfPVGkrREqWUL8KQe2jO4TyzwpNDYPU482o=) 3: 0DEF13D4FC1711EC919B6757C4F9AE02.roa (hash: vQzIZRiExesqoB3MmzOdTzbfWqh/j9Ux4vSsc9KHOuU=) 4: 75906378FC1F11ECAD09AF21C4F9AE02.roa (hash: bCe1ucptaaWPAXkhR5Cq8HI9H9bOhLd76hYHBtFEzAY=) 5: F2C1B32AD59511EC9A77CC14C4F9AE02.roa (hash: uhlffbcdYKcTTzZ4/rK2stZpIMJc+HDHstbtMJ9TZK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 15:04:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13283 (0x33e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Validity Not Before: Apr 24 15:04:47 2024 GMT Not After : May 1 15:04:47 2024 GMT Subject: CN=66291f8f-4617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:92:d2:68:6d:93:1e:18:f9:03:a7:7c:8c:fb: be:f0:bc:71:81:2e:4d:ae:6b:02:22:7e:03:d6:3e: ee:4f:e8:ef:7a:99:51:9c:38:89:3c:39:21:fc:32: d3:1a:7f:65:d3:b3:33:6d:85:87:d2:24:b3:6a:fc: 17:b3:2a:5f:82:16:2f:2a:0f:92:10:90:df:ce:e9: 6a:6b:71:29:81:f0:18:7e:66:97:a9:dc:38:de:6d: 3d:77:79:e9:60:ec:a9:65:b5:10:e9:91:cf:3a:d7: 1d:d1:f3:88:b0:26:da:78:5b:0a:cc:98:6b:e6:36: 73:1b:cc:ad:2d:69:d6:d9:35:f5:c0:f0:36:e9:cd: 4d:d7:88:2b:c2:f2:f0:42:62:01:34:82:e0:14:a1: df:8b:26:b7:a1:26:22:f4:36:e2:b1:b3:c6:de:75: 75:fe:11:94:b2:1c:cd:ed:55:35:b4:bf:51:18:ba: d0:3b:f2:53:69:ff:c7:2c:cc:47:e5:91:3a:96:8d: 4a:98:bb:63:47:75:3e:ea:a0:94:b8:8d:69:6d:d6: 57:ae:9d:14:e6:c8:66:06:ce:7f:77:a0:6d:65:a5: 4e:a9:95:b8:2c:78:97:40:ad:02:9f:74:37:38:7c: 74:a6:08:34:5f:7e:bf:d0:b9:eb:cc:94:3a:b7:03: 60:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:36:C0:BA:5D:F3:FC:FF:A7:E5:40:89:EC:37:11:18:1B:D4:CE:FD X509v3 Authority Key Identifier: keyid:FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:7e:5f:d1:de:2d:62:0d:87:ae:8b:9c:a1:51:9d:ae:39:0b: fd:e6:c8:d2:db:ac:2b:d3:5f:37:f6:02:f5:99:9f:39:89:8e: 2a:70:28:eb:b3:64:b9:ae:3f:cf:eb:2e:2d:76:11:a8:b5:4f: ec:ab:67:6e:b1:a0:a4:da:af:86:56:cf:df:7d:25:c5:d5:24: 6c:ab:af:23:6d:7a:bb:53:b5:20:53:bd:72:5b:6e:77:53:79: 56:34:1d:17:de:9e:11:7e:b2:cf:0e:88:28:d7:94:06:37:7d: dc:31:44:30:a7:cf:81:24:14:b6:5c:73:dd:79:99:f9:bd:0d: d3:b4:4d:fe:85:ec:27:a8:b1:d8:0b:5d:73:d0:19:1d:92:94: 17:a9:d7:4c:4c:f1:d2:2d:f5:3b:33:a7:cf:29:a6:10:8a:0b: 05:94:f7:ab:d9:50:d7:8d:64:2d:46:8a:5c:e2:d1:3b:5b:94: 93:74:99:47:a3:5f:67:eb:d3:17:ba:52:b2:46:c0:6f:f3:32: be:40:53:fc:bb:63:45:b4:a5:03:54:66:3b:7d:0d:25:83:de: d4:5e:a8:23:63:8f:e3:e3:5b:ad:45:1b:e0:f7:60:1e:c2:ea: 2d:0a:8e:17:73:55:37:29:b9:32:b5:11:30:8e:b9:a9:08:a0: 50:41:dc:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBQTIxMTAvBgNVBAUTKEZGNDk1MjkzQ0I1RjE1RTVEMTRCQUNDMkRCMTA1MkIy RTJDODI1QzgwHhcNMjQwNDI0MTUwNDQ3WhcNMjQwNTAxMTUwNDQ3WjAYMRYwFAYD VQQDEw02NjI5MWY4Zi00NjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypLSaG2THhj5A6d8jPu+8LxxgS5NrmsCIn4D1j7uT+jveplRnDiJPDkh/DLT Gn9l07MzbYWH0iSzavwXsypfghYvKg+SEJDfzulqa3EpgfAYfmaXqdw43m09d3np YOypZbUQ6ZHPOtcd0fOIsCbaeFsKzJhr5jZzG8ytLWnW2TX1wPA26c1N14grwvLw QmIBNILgFKHfiya3oSYi9DbisbPG3nV1/hGUshzN7VU1tL9RGLrQO/JTaf/HLMxH 5ZE6lo1KmLtjR3U+6qCUuI1pbdZXrp0U5shmBs5/d6BtZaVOqZW4LHiXQK0Cn3Q3 OHx0pgg0X36/0LnrzJQ6twNguQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFo2wLpd 8/z/p+VAiew3ERgb1M79MB8GA1UdIwQYMBaAFP9JUpPLXxXl0UuswtsQUrLiyCXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFBMi9EMkFCMjkyQzFE OTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZlWFJTNnpDMnhCU3N1TElK Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wbFNrOHRmRmVYUlM2ekMyeEJTc3VMSUpjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUFBMi9EMkFCMjkyQzFEOTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZl WFJTNnpDMnhCU3N1TElKY2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDfl/R3i1iDYeui5yhUZ2uOQv95sjS26wr01839gL1mZ85iY4qcCjr s2S5rj/P6y4tdhGotU/sq2dusaCk2q+GVs/ffSXF1SRsq68jbXq7U7UgU71yW253 U3lWNB0X3p4RfrLPDogo15QGN33cMUQwp8+BJBS2XHPdeZn5vQ3TtE3+hewnqLHY C11z0BkdkpQXqddMTPHSLfU7M6fPKaYQigsFlPer2VDXjWQtRopc4tE7W5STdJlH o19n69MXulKyRsBv8zK+QFP8u2NFtKUDVGY7fQ0lg97UXqgjY4/j41utRRvg92Ae wuotCo4Xc1U3KbkytREwjrmpCKBQQdzd -----END CERTIFICATE-----Generated at Wed Apr 24 16:36:14 2024 by rpki-client on console-fra.rpki-client.org