$ rpki-client -vvf rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft File: k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft (raw, json) Hash identifier: ue8L19O4WsaSIha9iTwrFvEw3yR2SlsqA0BsEOxH3CQ= Subject key identifier: 7A:AD:4E:EA:B1:B8:41:BF:5F:B5:DE:F4:69:AF:85:B6:41:3F:A3:7F Authority key identifier: 93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5 Certificate issuer: /CN=A91D73BB/serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft Manifest number: 25 Signing time: Fri 17 May 2024 08:42:19 +0000 Manifest this update: Fri 17 May 2024 08:42:18 +0000 Manifest next update: Fri 24 May 2024 08:42:18 +0000 Files and hashes: 1: k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl (hash: 9WIrg7SqN4tL19/OJOSBjVsbaBv0KIawaR+YrQx/QDo=) 2: CFE87CFEE74911EE9E36BA2AC4F9AE02.roa (hash: PUjVsLMakoeiQgCADxJ0sNiMuXuae7hB49f6/P7jIFA=) 3: E0C47044E18D11EE82E6CE22C4F9AE02.roa (hash: ESyGYyt9wkH29mEF4NUVln1nHsyONlF4S3DRKcZSsQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D73BB/serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5 Validity Not Before: May 17 08:42:18 2024 GMT Not After : May 24 08:42:18 2024 GMT Subject: CN=6647186b-6382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:56:bf:93:6b:61:8c:a5:69:28:88:df:da:44: f1:d2:9c:bc:44:fe:c2:6a:3d:f9:72:21:bb:55:cf: 95:89:cd:b9:69:73:d9:91:dc:9e:c7:fa:e1:33:09: 29:86:30:f2:05:90:85:03:a2:e1:94:2c:e2:ad:26: 80:fd:76:81:48:45:27:5e:84:4d:b5:76:a3:ce:06: 9f:83:74:1d:60:8d:c5:83:b8:75:80:95:64:34:fd: 05:e5:e4:f3:29:32:6f:28:ad:75:d4:4a:10:6b:de: b4:95:3d:10:1d:80:54:a1:7a:22:10:e9:10:e7:e2: 74:97:c0:4a:a3:d7:b5:9d:2d:0a:f3:93:8d:8e:29: a6:e4:dd:13:16:3f:d1:32:4a:a4:30:79:99:f2:49: b8:a4:9c:9a:72:64:a6:24:63:88:06:4f:82:6c:93: ed:05:8d:06:29:15:6d:d8:43:7d:1a:5f:c6:c1:a0: 32:33:2a:96:01:3b:ba:10:0c:25:c1:54:be:c4:70: be:7a:a0:60:b6:dd:7c:b5:30:c7:f4:26:1c:15:a4: 4d:99:08:70:c1:d1:a2:a5:19:e7:a7:a0:0d:f0:cf: 5d:ce:c3:e9:5a:98:26:94:9c:9e:95:9b:8f:86:bf: 63:03:a0:a9:ee:c9:f1:4e:2b:11:ec:b3:29:03:df: 7b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:AD:4E:EA:B1:B8:41:BF:5F:B5:DE:F4:69:AF:85:B6:41:3F:A3:7F X509v3 Authority Key Identifier: keyid:93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:5e:2c:83:bd:05:cb:e5:c3:0a:09:96:e6:a2:6d:a5:65:19: 51:4c:76:41:6f:8d:f7:f8:5b:6b:d9:92:8b:73:3c:8a:be:6b: 09:7c:11:b1:c4:61:fe:b0:ac:a1:38:ae:07:dc:6b:d2:ee:9d: b9:a4:fa:f5:c8:24:f2:1f:4c:9a:fe:ca:cb:fd:06:4b:4b:aa: 36:d8:b5:ed:26:98:4a:8b:e8:79:a5:ec:5a:c1:48:1d:ac:fc: 9d:b2:51:02:26:8d:5c:7f:3f:72:38:9f:e3:17:5b:7d:c0:2f: 77:14:5f:e0:90:49:49:54:7f:01:53:f1:a8:cb:c8:2e:9d:88: 89:54:a2:ec:a4:7d:4f:58:d5:72:f1:82:9e:44:e5:b4:89:f4: 49:97:ea:b1:88:df:25:39:eb:0b:0f:79:44:e6:3e:0a:40:84: 38:8a:89:be:e1:5a:43:43:cc:eb:f8:59:97:f9:d8:6e:38:48: 99:43:c6:c4:fb:11:a7:54:6d:2b:f5:18:67:e7:67:47:1f:6c: 59:42:9e:6c:f0:43:cb:1e:2a:63:1a:52:14:2c:f2:c1:6a:0b: 13:c0:16:f9:42:be:59:f4:4f:a3:48:37:96:4f:bc:2d:43:21: 8a:ed:50:b6:5a:26:19:b2:f6:7a:ba:b6:8a:f2:0b:b3:d1:58: 4a:49:78:69 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NzNCQjExMC8GA1UEBRMoOTM3QTFCNUZFQjBBMjkzMzYwRUE0RTg4NDczNTJFN0ZE MzZDQzdBNTAeFw0yNDA1MTcwODQyMThaFw0yNDA1MjQwODQyMThaMBgxFjAUBgNV BAMTDTY2NDcxODZiLTYzODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYVr+Ta2GMpWkoiN/aRPHSnLxE/sJqPflyIbtVz5WJzblpc9mR3J7H+uEzCSmG MPIFkIUDouGULOKtJoD9doFIRSdehE21dqPOBp+DdB1gjcWDuHWAlWQ0/QXl5PMp Mm8orXXUShBr3rSVPRAdgFSheiIQ6RDn4nSXwEqj17WdLQrzk42OKabk3RMWP9Ey SqQweZnySbiknJpyZKYkY4gGT4Jsk+0FjQYpFW3YQ30aX8bBoDIzKpYBO7oQDCXB VL7EcL56oGC23Xy1MMf0JhwVpE2ZCHDB0aKlGeenoA3wz13Ow+lamCaUnJ6Vm4+G v2MDoKnuyfFOKxHssykD33srAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeq1O6rG4 Qb9ftd70aa+FtkE/o38wHwYDVR0jBBgwFoAUk3obX+sKKTNg6k6IRzUuf9Nsx6Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ3M0JCLzdFRDU3NTg2RTE4 RDExRUU5OTBGRUM0RkM0RjlBRTAyL2szb2JYLXNLS1ROZzZrNklSelV1ZjlOc3g2 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvazNvYlgtc0tLVE5nNms2SVJ6VXVmOU5zeDZVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ3 M0JCLzdFRDU3NTg2RTE4RDExRUU5OTBGRUM0RkM0RjlBRTAyL2szb2JYLXNLS1RO ZzZrNklSelV1ZjlOc3g2VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFReLIO9BcvlwwoJluaibaVlGVFMdkFvjff4W2vZkotzPIq+awl8EbHE Yf6wrKE4rgfca9Lunbmk+vXIJPIfTJr+ysv9BktLqjbYte0mmEqL6Hml7FrBSB2s /J2yUQImjVx/P3I4n+MXW33AL3cUX+CQSUlUfwFT8ajLyC6diIlUouykfU9Y1XLx gp5E5bSJ9EmX6rGI3yU56wsPeUTmPgpAhDiKib7hWkNDzOv4WZf52G44SJlDxsT7 EadUbSv1GGfnZ0cfbFlCnmzwQ8seKmMaUhQs8sFqCxPAFvlCvln0T6NIN5ZPvC1D IYrtULZaJhmy9nq6toryC7PRWEpJeGk= -----END CERTIFICATE-----Generated at Fri May 17 10:10:53 2024 by rpki-client on console-fra.rpki-client.org