$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft File: 1ABRvI3aYMky7gd2mrhnvvqNQvY.mft (raw, json) Hash identifier: hBbPdJUV51Gmc8ucA42WOgKzCq3uJCmlScSmJUmWQy0= Subject key identifier: E8:FB:50:BE:22:29:C1:FF:B8:2C:9F:D7:6E:87:EE:9B:76:C1:6E:E9 Authority key identifier: D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6 Certificate issuer: /CN=A91D3F8E/serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6 Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft Manifest number: A0 Signing time: Wed 15 May 2024 06:53:14 +0000 Manifest this update: Wed 15 May 2024 06:53:13 +0000 Manifest next update: Wed 22 May 2024 06:53:13 +0000 Files and hashes: 1: 1ABRvI3aYMky7gd2mrhnvvqNQvY.crl (hash: /uuiQaKCnGq3JRLvaT3GdfVWFoldza6SzfcOeJdaCts=) 2: 34E5737CF1B411EE93C5E46CC4F9AE02.roa (hash: DtJBXWW8MvqoUfrEjdfLST64f5XLqfxQMOvQrPHs1W8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 06:53:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3F8E/serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6 Validity Not Before: May 15 06:53:13 2024 GMT Not After : May 22 06:53:13 2024 GMT Subject: CN=66445bd9-3df9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9c:c1:53:b6:db:61:69:ce:99:f3:eb:db:90: 29:57:4d:7b:1e:5e:b2:ff:13:3f:77:d1:06:be:96: a5:c1:5c:9e:24:f7:3b:41:2d:83:6d:b1:3d:04:43: 6c:f8:ad:79:9b:38:9e:00:3f:d7:ac:a1:59:b3:b8: 62:c5:32:02:fa:08:dc:ab:95:fd:a8:38:b1:97:b9: 5c:e7:e8:d3:48:15:61:e9:a2:be:2e:c5:71:55:d9: 73:8e:23:74:2c:c3:f3:32:94:5f:40:67:95:27:4a: 8a:e2:b1:75:8d:0f:67:90:e8:1b:06:a4:2d:73:ac: ec:cf:cd:e7:93:df:48:90:97:4a:84:a3:44:cd:02: ba:13:d8:7f:58:98:1c:22:49:93:8d:ca:e6:2e:46: 7c:68:2f:48:0c:4a:fd:ca:75:42:18:5e:05:44:b8: 28:17:f3:1e:58:29:0d:9c:b4:58:3e:91:7c:d3:a7: f3:46:ab:8a:cf:cb:a6:69:85:3e:93:ff:51:03:90: 92:e3:f8:f3:ad:7b:10:89:4d:2a:d7:1f:e7:a1:56: 81:43:16:c4:8d:d7:14:0b:77:a5:19:37:e1:f4:90: e0:c3:90:1d:38:4f:62:16:15:d7:65:52:d2:33:fb: 3f:38:46:6e:d7:09:61:9a:f4:80:2f:83:df:00:57: 09:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:FB:50:BE:22:29:C1:FF:B8:2C:9F:D7:6E:87:EE:9B:76:C1:6E:E9 X509v3 Authority Key Identifier: keyid:D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:08:82:49:4d:41:7e:c1:e2:25:c4:61:be:9d:09:51:b2:c6: 0e:4e:b2:a1:2d:fc:c6:b6:48:35:43:17:eb:ed:03:f9:00:37: 1b:de:b4:95:95:46:42:75:15:4e:ed:67:f9:fa:28:3f:68:25: 51:51:17:ca:8d:ea:c6:8c:2b:94:00:6f:6d:30:72:10:5b:0e: 8a:d2:71:98:05:15:1c:21:ec:a9:4e:fb:45:dd:be:af:61:51: 97:a3:3f:cb:bc:e5:24:13:3c:6e:11:00:70:61:ed:37:f8:64: dd:da:a5:e1:6b:4b:9e:f4:df:43:2a:52:ce:01:3a:b6:07:fd: 67:7f:34:0f:56:4d:f9:d6:28:1d:8e:4f:b6:ad:8d:f0:16:44: 44:ee:64:bd:a0:33:dc:6f:06:07:5a:10:72:b5:c0:d1:f2:f9: e0:f2:63:6b:0b:9f:ee:08:fd:5d:ce:7c:8f:90:cc:da:3b:9f: eb:80:db:a0:2f:d6:a5:37:fd:73:ce:4d:77:d3:80:03:43:7c: 48:f7:f0:a6:48:e4:1d:54:9c:d7:90:eb:46:b6:94:1c:d1:82: 97:7d:72:91:d8:c6:5e:fe:6b:84:2f:d6:7c:d6:b0:e8:c5:d9: a2:b5:85:52:cd:7e:f5:53:5f:d3:f0:61:ef:e4:52:b3:f2:0e: 5e:88:06:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNGOEUxMTAvBgNVBAUTKEQ0MDA1MUJDOEREQTYwQzkzMkVFMDc3NjlBQjg2N0JF RkE4RDQyRjYwHhcNMjQwNTE1MDY1MzEzWhcNMjQwNTIyMDY1MzEzWjAYMRYwFAYD VQQDEw02NjQ0NWJkOS0zZGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpzBU7bbYWnOmfPr25ApV017Hl6y/xM/d9EGvpalwVyeJPc7QS2DbbE9BENs +K15mzieAD/XrKFZs7hixTIC+gjcq5X9qDixl7lc5+jTSBVh6aK+LsVxVdlzjiN0 LMPzMpRfQGeVJ0qK4rF1jQ9nkOgbBqQtc6zsz83nk99IkJdKhKNEzQK6E9h/WJgc IkmTjcrmLkZ8aC9IDEr9ynVCGF4FRLgoF/MeWCkNnLRYPpF806fzRquKz8umaYU+ k/9RA5CS4/jzrXsQiU0q1x/noVaBQxbEjdcUC3elGTfh9JDgw5AdOE9iFhXXZVLS M/s/OEZu1wlhmvSAL4PfAFcJfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOj7UL4i KcH/uCyf126H7pt2wW7pMB8GA1UdIwQYMBaAFNQAUbyN2mDJMu4Hdpq4Z776jUL2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Y4RS82QzQwODlCQTIx NkMxMUVFQjI4QkYyNENDNEY5QUUwMi8xQUJSdkkzYVlNa3k3Z2QybXJobnZ2cU5R dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFBQlJ2STNhWU1reTdnZDJtcmhudnZxTlF2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Y4RS82QzQwODlCQTIxNkMxMUVFQjI4QkYyNENDNEY5QUUwMi8xQUJSdkkzYVlN a3k3Z2QybXJobnZ2cU5RdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeCIJJTUF+weIlxGG+nQlRssYOTrKhLfzGtkg1Qxfr7QP5ADcb3rSV lUZCdRVO7Wf5+ig/aCVRURfKjerGjCuUAG9tMHIQWw6K0nGYBRUcIeypTvtF3b6v YVGXoz/LvOUkEzxuEQBwYe03+GTd2qXha0ue9N9DKlLOATq2B/1nfzQPVk351igd jk+2rY3wFkRE7mS9oDPcbwYHWhBytcDR8vng8mNrC5/uCP1dznyPkMzaO5/rgNug L9alN/1zzk1304ADQ3xI9/CmSOQdVJzXkOtGtpQc0YKXfXKR2MZe/muEL9Z81rDo xdmitYVSzX71U1/T8GHv5FKz8g5eiAaY -----END CERTIFICATE-----Generated at Wed May 15 09:28:16 2024 by rpki-client on console-fra.rpki-client.org