$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft File: 31FHCxXowUGvL6hGoowDs4WRurQ.mft (raw, json) Hash identifier: hnSCkWuooVDKkYBct1zHJtHWJkRKKE31CAAfM/leMpw= Subject key identifier: F8:6E:96:5A:E4:75:92:8E:22:6D:B8:39:D6:54:30:77:33:73:5C:1A Authority key identifier: DF:51:47:0B:15:E8:C1:41:AF:2F:A8:46:A2:8C:03:B3:85:91:BA:B4 Certificate issuer: /CN=A91DB7E9/serialNumber=DF51470B15E8C141AF2FA846A28C03B38591BAB4 Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft Manifest number: 76 Signing time: Wed 15 May 2024 07:35:37 +0000 Manifest this update: Wed 15 May 2024 07:35:36 +0000 Manifest next update: Wed 22 May 2024 07:35:36 +0000 Files and hashes: 1: 31FHCxXowUGvL6hGoowDs4WRurQ.crl (hash: UwAA7rWrdJiwAvLZBmAi26mVS02D3LYBd6maKJWhhK0=) 2: 367E2CC86E2F11EE9F5DEF32C4F9AE02.roa (hash: j6e518IrFLggTcXwdzTc/DnExHzZEsAGE1ciCOFgyjQ=) 3: 361777766E2F11EE9F5DEF32C4F9AE02.roa (hash: wLIv2CUnu/H9syGldsXh3/b3aDnFK9VWU8J3766MXj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.crl rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:35:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB7E9/serialNumber=DF51470B15E8C141AF2FA846A28C03B38591BAB4 Validity Not Before: May 15 07:35:36 2024 GMT Not After : May 22 07:35:36 2024 GMT Subject: CN=664465c8-732c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a9:9d:01:ab:28:3b:7b:fb:90:2b:b3:2d:e8: 76:9e:26:a5:55:eb:87:72:7a:69:d5:59:91:4a:6a: 7d:18:4e:02:d0:aa:1d:60:68:32:0b:e5:f0:84:37: 1a:65:0d:5b:22:3c:d6:12:d9:a3:88:8e:bd:71:99: e2:3e:01:47:ed:07:a2:88:b0:6e:18:21:d5:22:d6: 21:e8:8b:fc:07:31:1a:e0:08:a9:c8:5b:e7:d7:cd: 17:5c:e1:1d:52:42:8c:ac:15:fa:d9:f4:58:7b:51: e2:7e:25:2d:34:8b:9a:a1:3e:8c:fb:51:9f:4c:50: 86:57:86:b8:6e:12:1a:5d:aa:23:8c:75:b8:98:3a: ea:f9:06:7e:1a:2e:3f:bc:45:ef:26:67:3d:f4:d3: 4c:5d:74:39:4c:b6:6c:b3:93:be:6a:ec:29:8e:d7: 8b:9f:96:a6:55:92:a0:c7:6e:dd:e5:ff:7a:b6:71: d9:95:eb:b4:04:2e:a5:55:21:2c:06:e2:fb:c5:6f: 15:b0:f8:bb:80:30:cd:80:67:1a:54:f8:88:0d:d2: a4:09:53:68:d0:70:21:1b:5d:44:12:f9:01:3f:ed: 4b:e7:95:d0:9e:83:7f:bb:7f:e4:21:83:34:f8:54: 79:fe:0b:9b:93:d5:99:33:93:18:4a:67:a8:8d:73: 6b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:6E:96:5A:E4:75:92:8E:22:6D:B8:39:D6:54:30:77:33:73:5C:1A X509v3 Authority Key Identifier: keyid:DF:51:47:0B:15:E8:C1:41:AF:2F:A8:46:A2:8C:03:B3:85:91:BA:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:2f:b7:61:2b:42:f9:9c:dc:b4:55:2d:7b:89:22:c4:d3:dd: d0:1e:01:d7:1e:02:5a:d9:07:dc:ce:8f:a1:37:d8:e4:6b:1d: 4b:81:04:73:6e:78:73:07:96:98:47:5e:07:37:4a:1b:18:33: cc:f6:ad:13:9d:f5:3b:1f:5d:86:62:20:a0:2c:e7:0a:ad:19: d1:d2:a1:a5:71:fd:b9:3a:29:ef:ae:05:b4:a9:f2:30:10:8c: 32:02:0f:da:e7:9e:67:03:1b:3c:51:ac:39:8e:ad:ab:7e:c0: d6:21:3c:04:e5:28:9c:40:17:6c:f4:de:22:fe:46:f3:5a:1e: b8:33:e6:06:4b:5a:4d:8c:cb:82:64:4d:72:01:8a:8b:2b:62: 9d:d6:ec:d9:78:67:62:fa:ef:40:6a:33:7b:c3:8b:8e:29:f9: ee:d3:28:d4:ed:c0:82:41:0a:93:f1:7f:c1:f6:e7:d5:40:0d: 6e:2a:c2:a2:6c:c6:e8:21:e3:4b:ca:6a:5b:71:69:a1:53:7f: a9:85:59:02:e8:85:49:20:26:f9:e2:ed:39:84:7c:63:9b:e2: f3:4d:e6:33:da:f7:7a:4e:37:3c:ad:71:93:6f:ea:13:4d:47: 1f:0b:50:6e:6d:2e:6a:7d:7c:6a:10:31:93:b6:ec:5a:19:72: 73:62:ca:ee -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QjdFOTExMC8GA1UEBRMoREY1MTQ3MEIxNUU4QzE0MUFGMkZBODQ2QTI4QzAzQjM4 NTkxQkFCNDAeFw0yNDA1MTUwNzM1MzZaFw0yNDA1MjIwNzM1MzZaMBgxFjAUBgNV BAMTDTY2NDQ2NWM4LTczMmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkqZ0Bqyg7e/uQK7Mt6HaeJqVV64dyemnVWZFKan0YTgLQqh1gaDIL5fCENxpl DVsiPNYS2aOIjr1xmeI+AUftB6KIsG4YIdUi1iHoi/wHMRrgCKnIW+fXzRdc4R1S QoysFfrZ9Fh7UeJ+JS00i5qhPoz7UZ9MUIZXhrhuEhpdqiOMdbiYOur5Bn4aLj+8 Re8mZz3000xddDlMtmyzk75q7CmO14uflqZVkqDHbt3l/3q2cdmV67QELqVVISwG 4vvFbxWw+LuAMM2AZxpU+IgN0qQJU2jQcCEbXUQS+QE/7UvnldCeg3+7f+QhgzT4 VHn+C5uT1ZkzkxhKZ6iNc2ulAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+G6WWuR1 ko4ibbg51lQwdzNzXBowHwYDVR0jBBgwFoAU31FHCxXowUGvL6hGoowDs4WRurQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURCN0U5L0U5OUU3RjUyNkUy RTExRUU4NUQ5MkQzMkM0RjlBRTAyLzMxRkhDeFhvd1VHdkw2aEdvb3dEczRXUnVy US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMzFGSEN4WG93VUd2TDZoR29vd0RzNFdSdXJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURC N0U5L0U5OUU3RjUyNkUyRTExRUU4NUQ5MkQzMkM0RjlBRTAyLzMxRkhDeFhvd1VH dkw2aEdvb3dEczRXUnVyUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHMvt2ErQvmc3LRVLXuJIsTT3dAeAdceAlrZB9zOj6E32ORrHUuBBHNu eHMHlphHXgc3ShsYM8z2rROd9TsfXYZiIKAs5wqtGdHSoaVx/bk6Ke+uBbSp8jAQ jDICD9rnnmcDGzxRrDmOrat+wNYhPATlKJxAF2z03iL+RvNaHrgz5gZLWk2My4Jk TXIBiosrYp3W7Nl4Z2L670BqM3vDi44p+e7TKNTtwIJBCpPxf8H259VADW4qwqJs xugh40vKaltxaaFTf6mFWQLohUkgJvni7TmEfGOb4vNN5jPa93pONzytcZNv6hNN Rx8LUG5tLmp9fGoQMZO27FoZcnNiyu4= -----END CERTIFICATE-----Generated at Wed May 15 09:04:45 2024 by rpki-client on console-ams.rpki-client.org