$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft File: RxDk3mQVxI6LUxtZzUekHNeTRV4.mft (raw, json) Hash identifier: GkOkfVva+24QOKQEbYGHluHOAfwaAvhqj10bIXhVjCE= Subject key identifier: 4D:F4:B1:54:E8:1E:7C:95:FF:21:B4:3A:B5:63:90:99:F0:CF:02:B3 Authority key identifier: 47:10:E4:DE:64:15:C4:8E:8B:53:1B:59:CD:47:A4:1C:D7:93:45:5E Certificate issuer: /CN=A91D9A24/serialNumber=4710E4DE6415C48E8B531B59CD47A41CD793455E Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft Manifest number: 1F Signing time: Wed 15 May 2024 08:47:37 +0000 Manifest this update: Wed 15 May 2024 08:47:37 +0000 Manifest next update: Wed 22 May 2024 08:47:37 +0000 Files and hashes: 1: RxDk3mQVxI6LUxtZzUekHNeTRV4.crl (hash: gJJ10ZBLnqCyedYp+UUlVzgmMwRTkjErrVVfx92FD88=) 2: A18158C6E64611EE95C0CE78C4F9AE02.roa (hash: OhwAMmDXpoUwiIlu+NNwWEG2Mjf5q973vVgDZWZTt/I=) 3: FE2FF9B0E64611EEA8AE7979C4F9AE02.roa (hash: zTFWSulVee4Ly8DKhZ3WsgppSiRMvqo0mmrNlUemSBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.crl rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9A24/serialNumber=4710E4DE6415C48E8B531B59CD47A41CD793455E Validity Not Before: May 15 08:47:37 2024 GMT Not After : May 22 08:47:37 2024 GMT Subject: CN=664476a9-3fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:51:94:17:b5:6d:c7:83:fa:18:62:53:15:76: ba:01:64:66:19:8b:ab:e7:a0:62:43:0d:ab:d8:55: 8c:2e:24:7e:f1:9f:4f:b7:ca:09:2d:de:e4:cb:55: a8:b1:90:bf:66:6c:00:4d:13:73:14:79:c9:50:b1: 20:16:39:0c:9a:bd:5c:31:0c:e2:da:09:c5:bc:f6: 57:ce:e9:26:4c:83:9c:c7:b0:bf:51:4a:f4:df:1d: 0d:0a:40:35:12:7f:5d:fa:b3:56:82:c0:fd:a3:27: 89:d8:f0:06:f4:f3:29:ab:59:ad:72:f2:cc:6b:e5: 12:b9:9a:66:42:ef:75:d5:c0:e6:e6:2b:94:24:e2: e9:e4:33:75:cb:fb:09:bd:8a:61:53:d2:23:6d:3a: 47:c8:70:9d:a1:a4:9a:f3:04:93:32:8c:29:63:ff: ce:ab:c2:6e:c1:4a:8c:47:22:63:c4:ff:07:79:fd: cd:6e:31:38:64:84:b5:56:c6:16:5c:e1:32:13:10: 9d:20:7f:86:ad:99:b8:5e:da:30:94:3a:43:d0:57: 0c:3c:8c:2a:fb:46:2e:0e:ce:f3:c8:35:c7:98:b2: a0:11:59:68:10:b7:8e:a1:c2:9d:3c:f2:1a:3c:5e: 74:f7:d0:ca:ad:72:fb:19:c8:2a:5b:5e:2f:6b:01: 1e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F4:B1:54:E8:1E:7C:95:FF:21:B4:3A:B5:63:90:99:F0:CF:02:B3 X509v3 Authority Key Identifier: keyid:47:10:E4:DE:64:15:C4:8E:8B:53:1B:59:CD:47:A4:1C:D7:93:45:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:f1:fb:54:6e:96:60:5f:d3:da:a8:9d:8a:78:30:3b:7d:b7: 54:95:c2:68:07:55:a0:3a:3b:b1:5e:cf:b3:c6:3c:53:cb:51: 9c:79:e2:50:2b:cd:58:73:19:51:be:a6:9d:25:8e:4a:b0:78: 04:55:26:00:7d:d5:18:12:d7:d6:3a:2a:41:73:85:3b:3e:d1: f8:17:42:0f:28:69:1d:3c:5c:4d:6b:06:f6:91:6c:24:38:64: 75:ff:79:a6:92:4d:de:8c:a0:d4:c3:a2:ab:85:c0:9d:81:3d: a1:d5:31:a5:83:bb:2d:15:b5:5f:48:1d:24:98:ac:c2:9e:1b: a5:8a:df:1e:bd:05:cd:4d:21:10:a7:74:10:ea:40:56:36:8a: 0f:97:64:67:96:5b:45:cc:35:c6:ad:e8:3d:78:81:42:7b:92: 5f:39:74:0c:a3:74:8b:23:b2:dc:40:cd:5c:fd:cf:d2:1a:c5: 1a:e9:76:4b:7e:22:e7:31:a7:e0:0d:2b:2a:f7:24:b7:bb:5f: ed:65:e2:b2:b6:a7:9e:5f:aa:fa:86:b8:d2:2d:0c:8b:27:b0: a2:fb:d8:ae:4a:fc:ea:d0:7f:7a:eb:96:f9:2b:ae:f6:98:41: fc:b6:89:23:90:cb:ff:3b:30:74:84:b5:19:a1:89:25:e0:85: a2:78:61:5a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OUEyNDExMC8GA1UEBRMoNDcxMEU0REU2NDE1QzQ4RThCNTMxQjU5Q0Q0N0E0MUNE NzkzNDU1RTAeFw0yNDA1MTUwODQ3MzdaFw0yNDA1MjIwODQ3MzdaMBgxFjAUBgNV BAMTDTY2NDQ3NmE5LTNmYjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoUZQXtW3Hg/oYYlMVdroBZGYZi6vnoGJDDavYVYwuJH7xn0+3ygkt3uTLVaix kL9mbABNE3MUeclQsSAWOQyavVwxDOLaCcW89lfO6SZMg5zHsL9RSvTfHQ0KQDUS f136s1aCwP2jJ4nY8Ab08ymrWa1y8sxr5RK5mmZC73XVwObmK5Qk4unkM3XL+wm9 imFT0iNtOkfIcJ2hpJrzBJMyjClj/86rwm7BSoxHImPE/wd5/c1uMThkhLVWxhZc 4TITEJ0gf4atmbhe2jCUOkPQVww8jCr7Ri4OzvPINceYsqARWWgQt46hwp088ho8 XnT30MqtcvsZyCpbXi9rAR6ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTfSxVOge fJX/IbQ6tWOQmfDPArMwHwYDVR0jBBgwFoAURxDk3mQVxI6LUxtZzUekHNeTRV4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5QTI0LzkzOTg0Q0YyRTY0 NTExRUVCNUE3MzU3N0M0RjlBRTAyL1J4RGszbVFWeEk2TFV4dFp6VWVrSE5lVFJW NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUnhEazNtUVZ4STZMVXh0WnpVZWtITmVUUlY0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5 QTI0LzkzOTg0Q0YyRTY0NTExRUVCNUE3MzU3N0M0RjlBRTAyL1J4RGszbVFWeEk2 TFV4dFp6VWVrSE5lVFJWNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJHx+1RulmBf09qonYp4MDt9t1SVwmgHVaA6O7Fez7PGPFPLUZx54lAr zVhzGVG+pp0ljkqweARVJgB91RgS19Y6KkFzhTs+0fgXQg8oaR08XE1rBvaRbCQ4 ZHX/eaaSTd6MoNTDoquFwJ2BPaHVMaWDuy0VtV9IHSSYrMKeG6WK3x69Bc1NIRCn dBDqQFY2ig+XZGeWW0XMNcat6D14gUJ7kl85dAyjdIsjstxAzVz9z9IaxRrpdkt+ Iucxp+ANKyr3JLe7X+1l4rK2p55fqvqGuNItDIsnsKL72K5K/OrQf3rrlvkrrvaY Qfy2iSOQy/87MHSEtRmhiSXghaJ4YVo= -----END CERTIFICATE-----Generated at Wed May 15 09:28:17 2024 by rpki-client on console-fra.rpki-client.org