$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft File: AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft (raw, json) Hash identifier: 9gqFyI7qAIR6D3q0rSHxKiQZOjE+6qgy5wtLLXK41YA= Subject key identifier: 41:B0:C5:B0:7D:65:AB:72:52:1B:86:7A:95:2A:C8:5F:19:EF:AD:F7 Authority key identifier: 03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78 Certificate issuer: /CN=A91E6EFE/serialNumber=033B311D758F04340A23FB081675951C250E8078 Certificate serial: 0112 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft Manifest number: 0110 Signing time: Sun 05 May 2024 05:27:46 +0000 Manifest this update: Sun 05 May 2024 05:27:46 +0000 Manifest next update: Sun 12 May 2024 05:27:46 +0000 Files and hashes: 1: AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl (hash: VpLgYY1wcro1Fjft3P71iq0Ju/EzG5GjbumhGWCchBQ=) 2: 250320C4761511EDA05B8A63C4F9AE02.roa (hash: J+yh8yVkYkkax3iKoT/YJBGRKT6fUNLJo0pPJ2kGDgw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 274 (0x112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6EFE/serialNumber=033B311D758F04340A23FB081675951C250E8078 Validity Not Before: May 5 05:27:46 2024 GMT Not After : May 12 05:27:46 2024 GMT Subject: CN=663718d2-9e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:36:98:f6:50:fb:c7:11:94:e3:da:24:81:fc: 78:0d:fa:aa:f0:e1:81:b2:3c:d9:a4:98:a0:2b:d3: a5:4e:e0:aa:46:e2:49:88:63:e7:bd:23:5f:e7:99: 00:45:65:b9:d4:2a:e7:60:26:7b:37:01:f0:20:45: 89:91:62:19:39:7c:a2:96:21:43:d5:11:43:1d:c6: 19:f4:96:8d:c5:31:2e:46:85:a5:21:f5:ce:1c:69: 7a:12:df:ea:eb:3e:cf:aa:89:22:5c:7b:3b:ec:03: bf:2a:be:64:dd:1d:b5:fc:4c:8f:9d:dd:7a:f0:13: 6f:22:d0:1c:8d:77:ea:33:94:6a:c2:46:50:00:8a: 91:f3:00:d3:0f:26:0f:dc:69:c0:32:78:3b:15:2b: 61:c4:92:b3:fa:73:3f:a2:6d:16:2d:7c:b1:18:ab: a0:c6:b2:c6:16:a8:7e:34:91:72:6f:e7:71:4a:bc: f0:ad:fe:08:d8:ca:50:fc:d5:5c:d2:38:55:ad:0d: 34:55:d8:3a:41:aa:20:34:95:fd:b8:75:ff:c4:fa: 99:59:e2:e3:21:f6:1f:f9:2a:98:b5:1f:30:5c:a6: 81:2b:3b:3c:f2:db:ce:b4:cd:4d:cb:25:52:5e:0f: 50:c7:35:23:21:ef:1d:15:b3:5e:1d:d8:be:db:fd: 00:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B0:C5:B0:7D:65:AB:72:52:1B:86:7A:95:2A:C8:5F:19:EF:AD:F7 X509v3 Authority Key Identifier: keyid:03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:a0:48:74:ef:f6:1e:e7:78:cc:db:33:c9:0a:67:f2:15:fc: 4f:9d:e4:7a:b9:96:90:95:96:ef:f3:b7:d8:20:77:a3:c8:46: 1d:2b:f8:2d:ba:79:9f:f5:01:40:fd:69:88:54:58:fd:0b:df: 7c:b2:c0:ac:49:de:52:32:46:bb:ab:46:6f:b3:fd:a8:fd:13: ac:5e:58:14:1d:0d:86:1b:c8:14:48:38:71:af:97:34:aa:50: 4c:ec:6e:7e:3a:44:11:22:a9:e0:1f:cb:9d:6a:90:3e:cd:32: e4:73:ac:f8:ba:93:00:f6:19:ed:8d:b3:5d:aa:fc:99:60:11: 29:c0:77:61:2e:4f:38:21:0e:77:98:e9:61:4e:e9:c8:28:95: 69:c1:84:37:65:ec:48:7b:53:9e:09:ac:0c:a1:1e:4b:59:f8: 4f:9f:6b:3e:dd:c8:45:83:c6:63:ee:18:13:05:63:86:2a:a4: 1e:2a:fe:1d:e1:d6:21:24:9f:40:e2:d8:79:9a:ae:2d:b3:9d: cf:1b:c9:0d:b4:24:a7:39:ee:72:84:2b:d1:e8:02:fe:14:1f: 3e:42:55:b5:e8:bf:37:fa:9b:54:0d:8f:b5:a2:4c:8d:70:f8: c6:30:2f:2d:55:f5:6a:5a:d2:7f:25:b8:ff:59:44:d9:43:b1: 53:85:1f:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZFRkUxMTAvBgNVBAUTKDAzM0IzMTFENzU4RjA0MzQwQTIzRkIwODE2NzU5NTFD MjUwRTgwNzgwHhcNMjQwNTA1MDUyNzQ2WhcNMjQwNTEyMDUyNzQ2WjAYMRYwFAYD VQQDEw02NjM3MThkMi05ZTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtzaY9lD7xxGU49okgfx4Dfqq8OGBsjzZpJigK9OlTuCqRuJJiGPnvSNf55kA RWW51CrnYCZ7NwHwIEWJkWIZOXyiliFD1RFDHcYZ9JaNxTEuRoWlIfXOHGl6Et/q 6z7PqokiXHs77AO/Kr5k3R21/EyPnd168BNvItAcjXfqM5RqwkZQAIqR8wDTDyYP 3GnAMng7FSthxJKz+nM/om0WLXyxGKugxrLGFqh+NJFyb+dxSrzwrf4I2MpQ/NVc 0jhVrQ00Vdg6QaogNJX9uHX/xPqZWeLjIfYf+SqYtR8wXKaBKzs88tvOtM1NyyVS Xg9QxzUjIe8dFbNeHdi+2/0ACQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEGwxbB9 ZatyUhuGepUqyF8Z7633MB8GA1UdIwQYMBaAFAM7MR11jwQ0CiP7CBZ1lRwlDoB4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkVGRS9EQTRBNDNDMjZD QTExMUVEQjQ0RTc2NUJDNEY5QUUwMi9BenN4SFhXUEJEUUtJX3NJRm5XVkhDVU9n SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0F6c3hIWFdQQkRRS0lfc0lGbldWSENVT2dIZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkVGRS9EQTRBNDNDMjZDQTExMUVEQjQ0RTc2NUJDNEY5QUUwMi9BenN4SFhXUEJE UUtJX3NJRm5XVkhDVU9nSGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAoEh07/Ye53jM2zPJCmfyFfxPneR6uZaQlZbv87fYIHejyEYdK/gt unmf9QFA/WmIVFj9C998ssCsSd5SMka7q0Zvs/2o/ROsXlgUHQ2GG8gUSDhxr5c0 qlBM7G5+OkQRIqngH8udapA+zTLkc6z4upMA9hntjbNdqvyZYBEpwHdhLk84IQ53 mOlhTunIKJVpwYQ3ZexIe1OeCawMoR5LWfhPn2s+3chFg8Zj7hgTBWOGKqQeKv4d 4dYhJJ9A4th5mq4ts53PG8kNtCSnOe5yhCvR6AL+FB8+QlW16L83+ptUDY+1okyN cPjGMC8tVfVqWtJ/Jbj/WUTZQ7FThR82 -----END CERTIFICATE-----Generated at Sun May 5 06:01:20 2024 by rpki-client on console-fra.rpki-client.org