$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft File: -4BdU3nLB9UqQR7__QSRyjm3vyc.mft (raw, json) Hash identifier: U/1JWNsygAc4rwzm4NKTPGffxW89Jn4H8ENhNVZUcNg= Subject key identifier: 11:D6:49:93:C7:99:03:1B:E8:40:B6:7E:0F:DC:74:01:70:06:EA:09 Authority key identifier: FB:80:5D:53:79:CB:07:D5:2A:41:1E:FF:FD:04:91:CA:39:B7:BF:27 Certificate issuer: /CN=A91D5ECA/serialNumber=FB805D5379CB07D52A411EFFFD0491CA39B7BF27 Certificate serial: 0513 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft Manifest number: 050F Signing time: Wed 01 May 2024 01:25:18 +0000 Manifest this update: Wed 01 May 2024 01:25:17 +0000 Manifest next update: Wed 08 May 2024 01:25:17 +0000 Files and hashes: 1: -4BdU3nLB9UqQR7__QSRyjm3vyc.crl (hash: gb8pp7pRXAtRkGxVpryGnuUX3VNszNc21wLfevfnIcU=) 2: F4740B2CB92711EBA6B43A86C4F9AE02.roa (hash: NK+l5m2ta776fmuAwfuzwnZ0hG3yotAbqESNUgO6JqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.crl rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 00:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1299 (0x513) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5ECA/serialNumber=FB805D5379CB07D52A411EFFFD0491CA39B7BF27 Validity Not Before: May 1 01:25:17 2024 GMT Not After : May 8 01:25:17 2024 GMT Subject: CN=663199fd-55d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:91:00:e2:95:e9:78:e9:a4:0d:0b:c4:99:81: e4:82:85:49:36:c3:72:bc:11:4f:dc:4d:77:4b:de: 4d:24:cc:ef:be:79:fd:ee:8d:64:fc:1c:7b:fd:1d: c2:04:a2:57:01:fa:08:52:fb:f9:4d:d2:2c:48:54: 46:50:fb:a6:c1:22:df:9c:d5:25:14:ff:d9:1b:0a: cf:9f:bc:ed:53:fe:ca:1a:ee:dd:6a:a7:84:dd:5f: fc:1b:74:af:49:1d:11:55:49:35:4f:98:42:20:d4: 22:7d:ee:11:a0:c4:df:6a:a9:0e:4c:e2:43:c6:25: 26:86:54:dd:a5:54:a6:30:a8:d0:12:2a:b7:c1:db: fe:08:70:ed:97:d9:bb:4a:0c:2d:9a:95:c8:c4:f7: fd:7e:ac:38:89:14:6e:f6:92:b5:1b:b0:66:ac:c0: c1:fe:5e:dd:48:ed:5e:34:12:04:0b:7b:32:be:17: 03:a1:65:f1:b0:a7:a4:b1:cf:88:d6:77:0c:45:a3: 04:a7:a8:5c:c3:20:13:0e:bb:31:2b:ca:ce:e6:a4: b0:b5:01:1f:e2:cf:94:eb:a3:ba:3d:59:cc:c3:2a: 26:bc:b5:36:c3:e9:1b:cb:32:97:8c:98:8c:a6:53: 75:65:4e:77:7f:42:a0:80:ff:9b:f5:13:5d:05:d3: 12:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D6:49:93:C7:99:03:1B:E8:40:B6:7E:0F:DC:74:01:70:06:EA:09 X509v3 Authority Key Identifier: keyid:FB:80:5D:53:79:CB:07:D5:2A:41:1E:FF:FD:04:91:CA:39:B7:BF:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:83:f7:fe:00:c7:0d:54:b8:4a:91:dc:0d:5a:4f:8d:9a:d7: ee:e2:7a:2b:e1:37:9b:02:31:ff:20:46:a3:1f:9c:b6:40:09: 24:0a:47:72:da:9b:cc:d1:45:79:49:44:3c:7a:35:53:66:a5: 4e:23:aa:17:59:96:93:ca:e3:4b:ae:ec:0b:0d:54:5d:a7:3c: 2f:04:8f:1b:d3:8b:08:df:ba:ee:20:16:90:b5:05:0c:66:13: 2b:b1:e6:70:09:b2:cb:14:7e:67:3e:ff:77:df:54:5c:19:d5: 3e:7e:24:e9:4a:ad:28:b1:a0:17:2d:9c:f2:c5:93:29:e4:93: c5:3c:6f:71:14:e0:ef:12:6c:9b:b1:df:2c:3c:2d:01:04:df: 34:52:56:ac:a6:a3:6c:11:5c:16:f0:21:86:cd:99:6a:c7:3c: 56:ad:f6:b6:b9:40:85:47:c9:4d:fb:cd:3e:81:d4:9b:ac:4b: 20:3b:31:32:f2:a3:15:0a:bf:66:30:f5:51:52:95:dc:fa:9c: 38:77:2d:3a:2a:62:a8:f6:78:dc:71:c9:b7:f9:fd:12:15:0a: 3a:93:1a:d7:22:a8:55:13:b0:e2:a7:13:a2:2c:a4:14:8f:df: 7d:9d:e7:f2:9a:fe:54:46:87:6b:97:c6:d3:61:0b:1b:28:d2: 83:b6:d6:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVFQ0ExMTAvBgNVBAUTKEZCODA1RDUzNzlDQjA3RDUyQTQxMUVGRkZEMDQ5MUNB MzlCN0JGMjcwHhcNMjQwNTAxMDEyNTE3WhcNMjQwNTA4MDEyNTE3WjAYMRYwFAYD VQQDEw02NjMxOTlmZC01NWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZEA4pXpeOmkDQvEmYHkgoVJNsNyvBFP3E13S95NJMzvvnn97o1k/Bx7/R3C BKJXAfoIUvv5TdIsSFRGUPumwSLfnNUlFP/ZGwrPn7ztU/7KGu7daqeE3V/8G3Sv SR0RVUk1T5hCINQife4RoMTfaqkOTOJDxiUmhlTdpVSmMKjQEiq3wdv+CHDtl9m7 SgwtmpXIxPf9fqw4iRRu9pK1G7BmrMDB/l7dSO1eNBIEC3syvhcDoWXxsKeksc+I 1ncMRaMEp6hcwyATDrsxK8rO5qSwtQEf4s+U66O6PVnMwyomvLU2w+kbyzKXjJiM plN1ZU53f0KggP+b9RNdBdMSUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBHWSZPH mQMb6EC2fg/cdAFwBuoJMB8GA1UdIwQYMBaAFPuAXVN5ywfVKkEe//0Ekco5t78n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUVDQS9CRkQyMzIwNkI5 MjUxMUVCQjBFMkNCODJDNEY5QUUwMi8tNEJkVTNuTEI5VXFRUjdfX1FTUnlqbTN2 eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy00QmRVM25MQjlVcVFSN19fUVNSeWptM3Z5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUVDQS9CRkQyMzIwNkI5MjUxMUVCQjBFMkNCODJDNEY5QUUwMi8tNEJkVTNuTEI5 VXFRUjdfX1FTUnlqbTN2eWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKg/f+AMcNVLhKkdwNWk+Nmtfu4nor4TebAjH/IEajH5y2QAkkCkdy 2pvM0UV5SUQ8ejVTZqVOI6oXWZaTyuNLruwLDVRdpzwvBI8b04sI37ruIBaQtQUM ZhMrseZwCbLLFH5nPv9331RcGdU+fiTpSq0osaAXLZzyxZMp5JPFPG9xFODvEmyb sd8sPC0BBN80UlaspqNsEVwW8CGGzZlqxzxWrfa2uUCFR8lN+80+gdSbrEsgOzEy 8qMVCr9mMPVRUpXc+pw4dy06KmKo9njcccm3+f0SFQo6kxrXIqhVE7DipxOiLKQU j999nefymv5URodrl8bTYQsbKNKDttZH -----END CERTIFICATE-----Generated at Wed May 1 02:08:06 2024 by rpki-client on console-fra.rpki-client.org