$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft File: 38I-PZBdDoNoEhlZbQgimmlPrxM.mft (raw, json) Hash identifier: gKOJ9ugscdL0wbKGCGVLcngeH9/0nfkAmncqmpWBeQo= Subject key identifier: E6:2F:75:7E:8D:2E:E2:9A:24:F3:0A:F1:D9:D5:59:C6:05:54:7C:C4 Authority key identifier: DF:C2:3E:3D:90:5D:0E:83:68:12:19:59:6D:08:22:9A:69:4F:AF:13 Certificate issuer: /CN=A91E3D04/serialNumber=DFC23E3D905D0E83681219596D08229A694FAF13 Certificate serial: 0D59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft Manifest number: 0D41 Signing time: Thu 02 May 2024 18:44:38 +0000 Manifest this update: Thu 02 May 2024 18:44:38 +0000 Manifest next update: Thu 09 May 2024 18:44:38 +0000 Files and hashes: 1: 38I-PZBdDoNoEhlZbQgimmlPrxM.crl (hash: GPxZT11XgCws1Xu+uVH5A97O2I1gE7HxZ/1rDy+C6xE=) 2: 10E6D9CAB55C11ECA9565039C4F9AE02.roa (hash: 6DLxtAbKI0TdBhmj3SbmREK/S1JyCj5OlF8tz2zn8hE=) 3: AB52C51AB96B11ECB44AC533C4F9AE02.roa (hash: BFItKdByLIEkXoft9kFeiVrhIrvjybyyrxXKRRvzUHA=) 4: AC641C88B96B11ECB44AC533C4F9AE02.roa (hash: TrGSIyh6C09xmAUxJKHOBcNW39FMNadQbNfVuEP5YqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.crl rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 18:44:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3417 (0xd59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3D04/serialNumber=DFC23E3D905D0E83681219596D08229A694FAF13 Validity Not Before: May 2 18:44:38 2024 GMT Not After : May 9 18:44:38 2024 GMT Subject: CN=6633df16-002e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:32:d3:4b:f7:b0:53:b1:0c:a1:ae:db:08:59: 1e:3f:ad:b0:ff:3e:f2:32:93:e7:fa:26:b0:c2:08: 11:2e:e1:d2:50:1f:02:f9:cf:5f:ee:6e:c8:0d:d8: 3c:69:f7:58:0d:e4:cc:e8:cd:b7:dc:47:df:fe:18: 1e:63:49:6c:5e:7b:4b:74:3e:b1:6d:3f:e5:c2:79: df:4d:25:d9:d8:a4:f6:c6:79:ef:92:bf:ad:49:3d: 17:29:02:16:bf:9a:a3:1d:aa:db:47:c0:33:5e:01: 4b:ac:42:21:5d:5b:33:6c:84:dc:84:8f:bf:25:4d: 1d:ff:0b:6d:f5:05:64:84:b4:7f:28:1b:a4:bd:f1: 40:57:b0:4a:94:97:d8:0f:1f:22:59:51:a2:4e:62: 4c:cb:60:3f:9b:a7:13:f6:e9:8e:d2:c5:b0:2e:32: 6b:ce:fd:33:22:23:93:5a:02:a7:2d:23:0b:bc:c5: 34:0e:a2:1b:cd:9c:c4:67:cd:79:95:bc:fc:88:36: a7:8a:3d:7d:82:dd:74:a8:70:76:77:78:de:23:b3: 02:20:14:88:89:fe:ed:fb:ee:9f:d9:f9:07:4a:c4: f5:95:e6:f4:72:89:89:8c:4d:9d:d3:d9:9b:90:43: 6a:a4:5d:3b:19:c4:fd:ca:0c:56:58:47:68:65:cd: 43:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:2F:75:7E:8D:2E:E2:9A:24:F3:0A:F1:D9:D5:59:C6:05:54:7C:C4 X509v3 Authority Key Identifier: keyid:DF:C2:3E:3D:90:5D:0E:83:68:12:19:59:6D:08:22:9A:69:4F:AF:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:58:99:0d:e9:5b:98:ea:38:94:17:d8:f9:de:5a:84:ce:5e: e2:41:cb:32:ec:b3:b2:85:cf:24:eb:cd:70:51:52:e0:71:fc: 80:3b:fd:d2:ae:de:19:60:9e:38:8a:63:f9:b7:16:4c:15:7c: aa:d7:f6:ef:a1:f4:e1:59:47:3e:02:60:ec:2a:d7:29:e0:51: 06:ed:79:c9:00:a8:55:43:e4:92:06:1b:14:9a:7c:7b:7a:c2: ee:a1:99:6a:42:e1:fd:9e:98:a8:75:57:82:c1:a3:f3:db:72: 23:41:aa:71:12:b9:8b:01:af:61:7e:19:b8:59:4e:5e:3d:d2: 22:9c:38:22:7f:25:e3:ac:be:76:6e:73:ad:ef:6e:ba:e8:c8: 26:f9:8b:40:34:5d:77:1c:4d:5b:43:c5:40:36:24:47:68:c3: 07:f1:c1:44:d6:c5:20:b3:ee:d8:06:23:c7:e8:0a:d3:fe:18: 68:6e:30:87:1b:e6:ae:93:f2:6f:b2:48:0a:2f:2a:5c:b4:65: 42:cb:39:e1:7d:21:ac:e4:fc:92:0b:76:cc:3c:92:8d:73:8d: 7b:9f:1b:0b:c5:02:62:be:7c:29:f6:c6:1f:da:d5:55:58:57: 93:1b:0a:6c:79:3b:35:e4:bd:09:a8:ce:ce:47:6d:42:e7:1e: 43:53:6b:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNEMDQxMTAvBgNVBAUTKERGQzIzRTNEOTA1RDBFODM2ODEyMTk1OTZEMDgyMjlB Njk0RkFGMTMwHhcNMjQwNTAyMTg0NDM4WhcNMjQwNTA5MTg0NDM4WjAYMRYwFAYD VQQDEw02NjMzZGYxNi0wMDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTLTS/ewU7EMoa7bCFkeP62w/z7yMpPn+iawwggRLuHSUB8C+c9f7m7IDdg8 afdYDeTM6M233Eff/hgeY0lsXntLdD6xbT/lwnnfTSXZ2KT2xnnvkr+tST0XKQIW v5qjHarbR8AzXgFLrEIhXVszbITchI+/JU0d/wtt9QVkhLR/KBukvfFAV7BKlJfY Dx8iWVGiTmJMy2A/m6cT9umO0sWwLjJrzv0zIiOTWgKnLSMLvMU0DqIbzZzEZ815 lbz8iDanij19gt10qHB2d3jeI7MCIBSIif7t++6f2fkHSsT1leb0comJjE2d09mb kENqpF07GcT9ygxWWEdoZc1DswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOYvdX6N LuKaJPMK8dnVWcYFVHzEMB8GA1UdIwQYMBaAFN/CPj2QXQ6DaBIZWW0IIpppT68T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0QwNC83QTE3RkU4RUFE RDkxMUU5Qjc0MDlBNzJDNEY5QUUwMi8zOEktUFpCZERvTm9FaGxaYlFnaW1tbFBy eE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM4SS1QWkJkRG9Ob0VobFpiUWdpbW1sUHJ4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0QwNC83QTE3RkU4RUFERDkxMUU5Qjc0MDlBNzJDNEY5QUUwMi8zOEktUFpCZERv Tm9FaGxaYlFnaW1tbFByeE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrWJkN6VuY6jiUF9j53lqEzl7iQcsy7LOyhc8k681wUVLgcfyAO/3S rt4ZYJ44imP5txZMFXyq1/bvofThWUc+AmDsKtcp4FEG7XnJAKhVQ+SSBhsUmnx7 esLuoZlqQuH9npiodVeCwaPz23IjQapxErmLAa9hfhm4WU5ePdIinDgifyXjrL52 bnOt72666Mgm+YtANF13HE1bQ8VANiRHaMMH8cFE1sUgs+7YBiPH6ArT/hhobjCH G+auk/JvskgKLypctGVCyznhfSGs5PySC3bMPJKNc417nxsLxQJivnwp9sYf2tVV WFeTGwpseTs15L0JqM7OR21C5x5DU2ua -----END CERTIFICATE-----Generated at Thu May 2 20:50:38 2024 by rpki-client on console-fra.rpki-client.org