$ rpki-client -vvf rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft File: CROi4pwkcA4hQx4EweNJf9X5qAA.mft (raw, json) Hash identifier: N/YNo6lXPCz3M3cxBmRG50fx9sTZNuJbsJK999qjjTM= Subject key identifier: C8:34:28:D3:95:28:23:EB:73:40:7A:F7:E5:45:09:AF:2A:2B:48:A9 Authority key identifier: 09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 Certificate issuer: /CN=A91D65C2/serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft Manifest number: 48 Signing time: Wed 15 May 2024 08:13:44 +0000 Manifest this update: Wed 15 May 2024 08:13:44 +0000 Manifest next update: Wed 22 May 2024 08:13:44 +0000 Files and hashes: 1: CROi4pwkcA4hQx4EweNJf9X5qAA.crl (hash: wIkq02e9ZN23A/+1IDccjA8jSlBs5GlfyevuNLXqHb8=) 2: C3A53484B06011EEA1D18B7FC4F9AE02.roa (hash: BKT8mKOvtKDrwuLWmsCuesw/k4MktBnMTWfVhN9KpJk=) 3: AA134FD6BD1411EE95F45624C4F9AE02.roa (hash: Qk5WperL9Uyej6ohOzdzkfdTG/QX7gXEMdP5wBlxS2E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:13:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D65C2/serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Validity Not Before: May 15 08:13:44 2024 GMT Not After : May 22 08:13:44 2024 GMT Subject: CN=66446eb8-788a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:51:aa:6f:9a:00:f2:e8:02:89:08:31:49:62: fd:d7:d3:3e:90:5f:98:39:af:7a:ff:63:55:ab:19: 3c:37:b9:c4:83:9f:02:63:0f:51:56:c5:b4:b5:d9: 31:17:2d:d0:59:9b:f2:14:3b:9d:67:9a:2a:b5:f7: 2a:ec:00:e0:83:d5:45:13:d8:39:b4:f8:48:09:14: ed:dd:21:61:d2:c2:44:12:c2:4e:39:8d:1e:70:53: 4b:d0:fb:e5:7b:e6:a8:d8:8f:f4:dc:99:1f:f4:94: f9:3f:36:a0:60:71:ca:9c:63:ad:79:19:49:7b:43: a7:8b:8a:50:a2:64:9c:57:0c:92:2e:48:15:67:5a: 4d:15:8b:06:34:89:b6:bc:b9:b7:c8:8e:29:06:40: 38:e5:62:15:d6:b8:27:a2:d1:d2:c8:2e:92:54:2a: bc:98:08:56:49:36:af:fe:ee:e4:bd:8d:46:9a:a3: e4:93:84:2f:70:eb:ad:3e:19:c9:ff:19:f1:53:50: ab:d7:df:09:31:00:2e:80:6f:0a:8a:37:8d:77:11: 13:fd:d0:dd:70:c2:ca:13:fb:38:29:a6:95:af:f4: 52:2b:bd:29:b2:36:ae:31:de:35:a1:20:88:56:b1: 35:9b:dd:54:36:80:92:3c:91:85:59:77:c8:bc:7d: c0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:34:28:D3:95:28:23:EB:73:40:7A:F7:E5:45:09:AF:2A:2B:48:A9 X509v3 Authority Key Identifier: keyid:09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:7a:cf:59:dd:86:96:c4:54:ed:07:d7:68:f7:f7:52:b1:c4: 9e:29:bf:4e:bc:0c:36:59:7a:9c:e3:b7:0c:a2:dd:cc:84:b6: 65:c1:f2:34:e4:c3:3a:e2:88:ac:88:74:24:cd:99:64:e0:ad: a7:77:c6:f4:76:90:08:24:96:22:b1:42:a9:f4:e8:b3:e1:cc: 0e:be:0d:02:45:3f:f6:dd:bc:e8:5f:06:a2:29:10:a1:03:b7: 72:59:0c:04:a6:bb:1a:76:70:ce:9e:33:88:e3:5c:5f:a1:d8: df:d7:19:c1:61:ce:1f:46:c9:9e:94:85:04:c6:88:3a:4d:e4: 07:93:9c:d7:54:a8:b4:08:ac:31:fb:75:5f:33:17:e4:0b:86: ba:54:df:8a:89:f1:a3:e0:05:24:da:a4:16:66:14:50:95:b9: e9:83:ba:3e:6c:92:9b:11:16:30:9d:05:51:da:28:de:8f:90: 9c:02:b1:ca:a3:ca:64:07:df:ca:63:74:ef:75:95:a2:9e:ef: ee:8e:60:ad:c9:8f:5b:61:25:5a:10:d1:1f:90:20:8f:2f:b8: 52:2c:82:b5:2d:90:97:ac:53:c6:1f:af:59:c4:8e:39:78:ba: cf:dc:50:b1:90:46:6d:18:96:6d:b4:55:24:e1:8e:29:2b:bf: 40:3c:2c:03 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NjVDMjExMC8GA1UEBRMoMDkxM0EyRTI5QzI0NzAwRTIxNDMxRTA0QzFFMzQ5N0ZE NUY5QTgwMDAeFw0yNDA1MTUwODEzNDRaFw0yNDA1MjIwODEzNDRaMBgxFjAUBgNV BAMTDTY2NDQ2ZWI4LTc4OGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDrUapvmgDy6AKJCDFJYv3X0z6QX5g5r3r/Y1WrGTw3ucSDnwJjD1FWxbS12TEX LdBZm/IUO51nmiq19yrsAOCD1UUT2Dm0+EgJFO3dIWHSwkQSwk45jR5wU0vQ++V7 5qjYj/TcmR/0lPk/NqBgccqcY615GUl7Q6eLilCiZJxXDJIuSBVnWk0ViwY0iba8 ubfIjikGQDjlYhXWuCei0dLILpJUKryYCFZJNq/+7uS9jUaao+SThC9w660+Gcn/ GfFTUKvX3wkxAC6AbwqKN413ERP90N1wwsoT+zgpppWv9FIrvSmyNq4x3jWhIIhW sTWb3VQ2gJI8kYVZd8i8fcAHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyDQo05Uo I+tzQHr35UUJryorSKkwHwYDVR0jBBgwFoAUCROi4pwkcA4hQx4EweNJf9X5qAAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2NUMyLzc2RUU3OTVDQjA2 MDExRUVCQkJGNjU3Q0M0RjlBRTAyL0NST2k0cHdrY0E0aFF4NEV3ZU5KZjlYNXFB QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ1JPaTRwd2tjQTRoUXg0RXdlTkpmOVg1cUFBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2 NUMyLzc2RUU3OTVDQjA2MDExRUVCQkJGNjU3Q0M0RjlBRTAyL0NST2k0cHdrY0E0 aFF4NEV3ZU5KZjlYNXFBQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHx6z1ndhpbEVO0H12j391KxxJ4pv068DDZZepzjtwyi3cyEtmXB8jTk wzriiKyIdCTNmWTgrad3xvR2kAgkliKxQqn06LPhzA6+DQJFP/bdvOhfBqIpEKED t3JZDASmuxp2cM6eM4jjXF+h2N/XGcFhzh9GyZ6UhQTGiDpN5AeTnNdUqLQIrDH7 dV8zF+QLhrpU34qJ8aPgBSTapBZmFFCVuemDuj5skpsRFjCdBVHaKN6PkJwCscqj ymQH38pjdO91laKe7+6OYK3Jj1thJVoQ0R+QII8vuFIsgrUtkJesU8Yfr1nEjjl4 us/cULGQRm0Ylm20VSThjikrv0A8LAM= -----END CERTIFICATE-----Generated at Wed May 15 09:28:16 2024 by rpki-client on console-fra.rpki-client.org