$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft File: i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft (raw, json) Hash identifier: qA5Prl9Za3dP5QGAKG5UC7RDzD4PHkJMFU16LqsWj0Y= Subject key identifier: 18:D3:8C:8F:F2:DA:0D:B5:3C:26:25:90:0B:D2:76:4C:D8:67:DA:07 Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8 Certificate issuer: /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8 Certificate serial: 0629 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft Manifest number: 05D1 Signing time: Tue 07 May 2024 10:35:52 +0000 Manifest this update: Tue 07 May 2024 10:35:51 +0000 Manifest next update: Tue 14 May 2024 10:35:51 +0000 Files and hashes: 1: i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl (hash: QR8SzN7dZPBX36pODhxH3hsTv5ifhKvoGBjhgfI7bV4=) 2: B7BC1B76506A11EDBB3A804AC4F9AE02.roa (hash: d49RSnIOfctyMbKO+cJYRLNtwFDSa0oSxu4naTU0dt8=) 3: 79D30C40BABE11EB825A5D09C4F9AE02.roa (hash: erdJwwKYuHo5MOa5sdoIAFW6uQlopkViyg002+GNblI=) 4: A66095C6465C11EE85F77F3EC4F9AE02.roa (hash: ypfsUv8dujxM6Doc46KPm7faHLpqj037IFwXuUnu61o=) 5: 30CB9694A28911ECBC355360C4F9AE02.roa (hash: B8cf+gykoiUdRA2SF3oc8jRg9pQg6awYYolexOaC74Y=) 6: BB9C14F6AA5511EB86F34077C4F9AE02.roa (hash: Nm29k/y9vIV+vz0MYGZmxMrY5VCpZ8ev2AQsl+lZr3w=) 7: 317095E0A28911ECBC355360C4F9AE02.roa (hash: uV2UmQYkfzYcdxjPYQG2wuhRAMorkGhjJiNk6JKFedE=) 8: 8BB6CB12A4D511EB9E4DF342C4F9AE02.roa (hash: pGZTk76nvEvH+X6mKbAJLcJp9iyzmP73pcve+h0fuy0=) 9: 2AECA58494EE11EE84F9D73CC4F9AE02.roa (hash: iJVLBFfNHCqiKdww74crDyNfaz//PGmFtjdlqaDOdWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1577 (0x629) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8 Validity Not Before: May 7 10:35:51 2024 GMT Not After : May 14 10:35:51 2024 GMT Subject: CN=663a0408-9403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0e:a0:5b:63:71:19:54:cf:a6:bf:68:a3:9f: e9:7e:8b:19:b5:e6:04:48:bd:f6:9d:09:ff:ec:c8: e8:07:56:8a:d5:f2:8a:33:f9:94:53:7c:0a:40:60: 25:a5:20:58:2a:ff:4c:a4:9d:cb:d2:85:85:89:c2: 21:cf:65:c9:67:12:ca:1e:b0:f9:7e:4f:7c:60:97: 95:9f:3f:4f:fb:f6:8e:1b:86:f2:a5:86:20:b5:5f: 81:65:6e:81:07:4e:0d:9f:09:06:96:08:e7:11:bc: 6c:60:3f:72:a2:37:42:0c:c0:10:53:16:51:11:81: c9:c8:c2:2f:7c:12:ef:64:5f:ba:72:ae:c1:4b:db: 9c:42:ed:36:dc:15:35:a5:76:db:ef:a6:e4:ae:b9: 78:98:f2:a8:03:02:7b:ab:77:d2:6c:fb:1c:d2:5f: 1c:5d:8f:12:0a:24:41:71:dc:6a:10:bf:17:fe:15: 40:2f:46:b3:4a:3c:69:92:24:0a:18:24:ce:a3:74: 60:04:be:84:b6:f2:5c:ee:7a:1b:5f:60:88:33:27: 72:ca:6b:7a:94:91:9a:61:2a:d2:33:d3:04:ce:3a: 9c:83:da:43:3e:05:3a:98:c2:f4:33:28:d2:b4:6c: 13:34:4d:8d:68:1e:20:48:a4:c5:61:8c:63:5e:e4: 78:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D3:8C:8F:F2:DA:0D:B5:3C:26:25:90:0B:D2:76:4C:D8:67:DA:07 X509v3 Authority Key Identifier: keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:d3:13:18:02:46:79:f9:5d:da:ca:9c:3a:7c:44:8f:c5:35: b7:96:86:a1:ee:bc:7f:55:7e:31:da:af:21:fc:32:06:0e:6a: 29:6e:19:d3:1f:15:36:29:31:59:4e:c3:ad:09:05:ef:1c:b8: b4:e2:e6:2c:38:2e:cb:f3:45:66:99:f5:9c:54:56:31:b2:75: 62:38:93:c7:61:9c:8b:b5:04:0b:dc:af:a2:27:ce:ab:21:c5: 80:41:82:d7:90:61:a5:15:d6:1b:ce:62:f6:07:e1:42:4a:a9: 79:42:c3:3e:9a:48:a6:d1:51:5c:da:94:9d:75:20:d1:2a:8c: 00:b9:07:44:9d:d1:a7:7e:8b:6d:55:5d:74:2c:3e:35:00:c8: de:74:85:9c:63:6f:da:86:4c:99:91:eb:3f:a4:6c:64:6d:37: 60:b1:78:db:97:1e:5a:2b:67:72:d5:f2:b1:8c:69:5e:50:81: 31:9a:d7:f8:fa:18:9a:8f:0a:ea:b9:f0:94:70:79:75:20:dd: ff:c8:cf:ea:c3:e4:3b:4e:d3:17:6d:36:96:df:53:b7:1b:a1: 66:54:c7:1b:7c:c6:8d:b5:14:29:31:f7:14:16:7f:ef:63:9b: 05:77:33:7f:98:58:16:6a:4b:f4:77:56:1a:b8:9c:2c:44:5e: 48:05:c1:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMzMUIxMTAvBgNVBAUTKDhCOEFENUNBMUMzRThCOENGNDY4QjVGNDk2QTkxQUJC MEU0OENGQTgwHhcNMjQwNTA3MTAzNTUxWhcNMjQwNTE0MTAzNTUxWjAYMRYwFAYD VQQDEw02NjNhMDQwOC05NDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyg6gW2NxGVTPpr9oo5/pfosZteYESL32nQn/7MjoB1aK1fKKM/mUU3wKQGAl pSBYKv9MpJ3L0oWFicIhz2XJZxLKHrD5fk98YJeVnz9P+/aOG4bypYYgtV+BZW6B B04NnwkGlgjnEbxsYD9yojdCDMAQUxZREYHJyMIvfBLvZF+6cq7BS9ucQu023BU1 pXbb76bkrrl4mPKoAwJ7q3fSbPsc0l8cXY8SCiRBcdxqEL8X/hVAL0azSjxpkiQK GCTOo3RgBL6EtvJc7nobX2CIMydyymt6lJGaYSrSM9MEzjqcg9pDPgU6mML0MyjS tGwTNE2NaB4gSKTFYYxjXuR43wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBjTjI/y 2g21PCYlkAvSdkzYZ9oHMB8GA1UdIwQYMBaAFIuK1cocPouM9Gi19JapGrsOSM+o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMxQi9EMEVDQ0Q0ODg5 M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0ejBhTFgwbHFrYXV3NUl6 NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2k0clZ5aHctaTR6MGFMWDBscWthdXc1SXo2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzMxQi9EMEVDQ0Q0ODg5M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0 ejBhTFgwbHFrYXV3NUl6NmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBK0xMYAkZ5+V3aypw6fESPxTW3loah7rx/VX4x2q8h/DIGDmopbhnT HxU2KTFZTsOtCQXvHLi04uYsOC7L80VmmfWcVFYxsnViOJPHYZyLtQQL3K+iJ86r IcWAQYLXkGGlFdYbzmL2B+FCSql5QsM+mkim0VFc2pSddSDRKowAuQdEndGnfott VV10LD41AMjedIWcY2/ahkyZkes/pGxkbTdgsXjblx5aK2dy1fKxjGleUIExmtf4 +hiajwrqufCUcHl1IN3/yM/qw+Q7TtMXbTaW31O3G6FmVMcbfMaNtRQpMfcUFn/v Y5sFdzN/mFgWakv0d1YauJwsRF5IBcEM -----END CERTIFICATE-----Generated at Tue May 7 12:23:34 2024 by rpki-client on console-fra.rpki-client.org