$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft File: vDqLsM3Qi243IbLB0hqBcUw7IUI.mft (raw, json) Hash identifier: Asum7yIcweilV7g5824wQx72r8NY0L36n/VA+OwzAok= Subject key identifier: 25:61:E9:DA:5F:4E:4A:9C:ED:11:DC:4F:17:7E:F4:3A:54:EC:E0:90 Authority key identifier: BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42 Certificate issuer: /CN=A91E3731/serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142 Certificate serial: 029D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft Manifest number: 028B Signing time: Wed 01 May 2024 04:03:22 +0000 Manifest this update: Wed 01 May 2024 04:03:21 +0000 Manifest next update: Wed 08 May 2024 04:03:21 +0000 Files and hashes: 1: vDqLsM3Qi243IbLB0hqBcUw7IUI.crl (hash: 96URKYLw0FRDdnXwYM3GfdMoRt/rsWnk+XZ5Z8socrQ=) 2: CF95FB84B64611EEB591A336C4F9AE02.roa (hash: vc/wKleAxT5DGN2WUuESTcdedKe6sPwfbGKOz/AMqVk=) 3: B7E47C68C02511EC93BB8865C4F9AE02.roa (hash: ZuJCCDt1njHAqjvS4V3VbowX+6xCOcRpjwbID6njzW4=) 4: 75A75BEA797E11EEB4FD0975C4F9AE02.roa (hash: 9cASWZQ78GEKb5CkheXzHHMMexzT3mWa5sU9/uCIAK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 669 (0x29d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3731/serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142 Validity Not Before: May 1 04:03:21 2024 GMT Not After : May 8 04:03:21 2024 GMT Subject: CN=6631bf0a-8ac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b0:61:e3:f1:c7:ae:89:c6:a6:10:8f:d9:d4: 8d:ef:ee:2c:fb:ed:43:2a:74:57:68:4f:2c:b3:11: c7:6c:14:b2:d6:2e:54:a7:0e:d0:61:5b:bd:47:98: 8f:40:09:d2:59:56:8f:db:8f:f6:14:2a:1b:c5:ee: 06:dd:ff:3c:df:8d:76:1c:a8:4c:8c:ff:1f:44:f3: 06:d7:75:ec:3e:a3:c7:ec:26:c6:84:2f:29:da:23: 1d:42:33:73:db:d9:43:8f:a3:8c:1e:f5:49:e2:d6: 15:2f:3f:d3:1a:27:45:2d:ea:1f:0b:9e:a8:f9:0f: b9:d0:44:bd:f2:4a:ad:1b:74:75:d3:6d:4d:91:76: 0d:b4:3a:35:61:f9:75:7b:90:02:46:b0:fb:25:40: a8:8e:7a:40:57:a7:ca:d2:47:17:f4:31:b5:18:ce: fc:ab:43:90:94:71:1a:03:df:08:75:c7:87:78:fd: f6:ac:e4:45:18:9d:03:57:5b:29:96:8b:4a:ea:52: ea:21:47:35:46:13:74:cf:e9:0c:89:c7:e7:f1:3b: 12:6f:2a:ed:98:ff:5c:f8:02:00:33:f0:c7:8e:b9: 25:e6:5a:48:3f:18:9c:0a:39:59:ce:aa:75:cd:32: 74:fb:f3:61:b8:0c:14:f8:ba:e0:c1:50:e0:03:d9: cf:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:61:E9:DA:5F:4E:4A:9C:ED:11:DC:4F:17:7E:F4:3A:54:EC:E0:90 X509v3 Authority Key Identifier: keyid:BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:8f:77:bd:9d:e6:1e:9f:eb:65:38:03:25:b3:b4:d2:67:e7: 15:9a:98:24:f7:26:a3:f2:ee:0f:f2:dd:2a:c8:ec:0f:82:3e: 95:08:51:f8:6b:7b:5d:6f:5f:bd:04:38:e5:7e:04:37:20:2f: 6f:aa:8a:1d:31:f0:e6:45:ed:c0:2f:80:1d:52:a1:ae:29:b1: 91:38:84:f9:13:b3:23:ed:a8:47:d1:75:9c:3d:97:b1:dc:41: 4b:9d:ae:17:7a:4b:76:29:6b:f3:38:8f:d1:b3:bd:ac:6f:01: 9c:38:c6:6b:58:2c:36:ec:5c:52:7a:79:19:5d:bd:d0:55:60: d1:09:b4:fe:38:f1:f3:fc:a9:10:ef:54:35:da:25:b0:d3:06: ea:6f:c0:64:59:09:fd:94:d1:04:b4:29:84:8a:95:a3:77:ef: da:ac:00:d4:b8:83:cf:d0:ea:99:b7:2f:12:48:38:25:81:ba: 10:c5:24:e4:85:96:59:1f:64:f7:fa:0c:ed:ec:1a:c7:7a:12: 4b:e1:5e:a6:f3:ac:7f:32:ac:35:ac:f7:a3:65:89:89:7e:4f: 1c:74:98:be:e4:d1:5a:e8:c9:8a:4d:5f:db:f3:d4:b1:bd:84: cf:55:89:08:c3:b7:bf:c8:9d:6d:66:98:aa:b0:5b:97:43:9b: 0d:cc:ff:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM3MzExMTAvBgNVBAUTKEJDM0E4QkIwQ0REMDhCNkUzNzIxQjJDMUQyMUE4MTcx NEMzQjIxNDIwHhcNMjQwNTAxMDQwMzIxWhcNMjQwNTA4MDQwMzIxWjAYMRYwFAYD VQQDEw02NjMxYmYwYS04YWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3rBh4/HHronGphCP2dSN7+4s++1DKnRXaE8ssxHHbBSy1i5Upw7QYVu9R5iP QAnSWVaP24/2FCobxe4G3f883412HKhMjP8fRPMG13XsPqPH7CbGhC8p2iMdQjNz 29lDj6OMHvVJ4tYVLz/TGidFLeofC56o+Q+50ES98kqtG3R1021NkXYNtDo1Yfl1 e5ACRrD7JUCojnpAV6fK0kcX9DG1GM78q0OQlHEaA98IdceHeP32rORFGJ0DV1sp lotK6lLqIUc1RhN0z+kMicfn8TsSbyrtmP9c+AIAM/DHjrkl5lpIPxicCjlZzqp1 zTJ0+/NhuAwU+LrgwVDgA9nP5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCVh6dpf Tkqc7RHcTxd+9DpU7OCQMB8GA1UdIwQYMBaAFLw6i7DN0ItuNyGywdIagXFMOyFC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzczMS81NUIyMjNFQUMw MjIxMUVDOTI2NURBNURDNEY5QUUwMi92RHFMc00zUWkyNDNJYkxCMGhxQmNVdzdJ VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZEcUxzTTNRaTI0M0liTEIwaHFCY1V3N0lVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzczMS81NUIyMjNFQUMwMjIxMUVDOTI2NURBNURDNEY5QUUwMi92RHFMc00zUWky NDNJYkxCMGhxQmNVdzdJVUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClj3e9neYen+tlOAMls7TSZ+cVmpgk9yaj8u4P8t0qyOwPgj6VCFH4 a3tdb1+9BDjlfgQ3IC9vqoodMfDmRe3AL4AdUqGuKbGROIT5E7Mj7ahH0XWcPZex 3EFLna4Xekt2KWvzOI/Rs72sbwGcOMZrWCw27FxSenkZXb3QVWDRCbT+OPHz/KkQ 71Q12iWw0wbqb8BkWQn9lNEEtCmEipWjd+/arADUuIPP0OqZty8SSDglgboQxSTk hZZZH2T3+gzt7BrHehJL4V6m86x/Mqw1rPejZYmJfk8cdJi+5NFa6MmKTV/b89Sx vYTPVYkIw7e/yJ1tZpiqsFuXQ5sNzP+/ -----END CERTIFICATE-----Generated at Wed May 1 05:59:13 2024 by rpki-client on console-fra.rpki-client.org