$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft File: xIKbbAf9gE3wklz_wWHGcCgHoCY.mft (raw, json) Hash identifier: 4MC3D5FHkie7z2XYQMseHV1ylF+szO0awnYgM08TPhs= Subject key identifier: A3:1A:0A:A0:88:89:67:CB:2A:B4:26:0F:DA:F8:83:9A:34:A2:E1:FC Authority key identifier: C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26 Certificate issuer: /CN=A91E7E45/serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026 Certificate serial: 0937 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft Manifest number: 0909 Signing time: Thu 02 May 2024 21:26:22 +0000 Manifest this update: Thu 02 May 2024 21:26:22 +0000 Manifest next update: Thu 09 May 2024 21:26:22 +0000 Files and hashes: 1: xIKbbAf9gE3wklz_wWHGcCgHoCY.crl (hash: Urpcy9P8QVBFmLs5sv3Xqhy6F00ykRGMAl+4i9Eu8Qg=) 2: C5576730FC8611EE8534E632C4F9AE02.roa (hash: q3alJvFt8+kISch4lxCuxAzu6zRm+B94dOe7NA4BTZk=) 3: 37EB7A8A02F811EFB057C123C4F9AE02.roa (hash: DGfH6yW61di/wPLWjQ46RxKQ70IcdSulWwnvy2l4/iw=) 4: 0FD437CAC11811EE8328EF7AC4F9AE02.roa (hash: fbYOGjHMohkB40Ip5nHSIZM+X/jub17JqWsOkKhOWSY=) 5: 9406C1209FDB11EDB88C5662C4F9AE02.roa (hash: YZEuoke/CkJiGAVUdW9nROMmjBJVKYrECNHv0AzIy0U=) 6: E8137EDEA29011EAA7A47878C4F9AE02.roa (hash: 2gLVXHr34ksm7UG4jmg1c/bwz/Ta19pU2wRXas1eM5o=) 7: B16C9766F97711EEB642002CC4F9AE02.roa (hash: QK/3IPLlLHpJzMAh9LEu9wBTyMjDq5axIgBNT1XfyTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 21:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2359 (0x937) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7E45/serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026 Validity Not Before: May 2 21:26:22 2024 GMT Not After : May 9 21:26:22 2024 GMT Subject: CN=663404fe-2ac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2d:51:6b:8a:85:ac:05:41:f3:e1:b7:09:6f: ed:a2:30:ba:ec:65:61:88:ee:38:9f:1f:e9:de:cf: 11:ed:7b:40:d0:6c:a8:01:e4:55:4f:36:a1:18:36: 01:9b:a8:59:64:38:56:c6:ee:1c:f6:b6:14:e8:4d: 4b:9c:6d:88:f0:8b:1b:ca:7f:a5:ea:50:2a:5c:fb: bd:cb:0b:6a:54:fb:cb:e0:3a:67:27:a1:ad:c6:f5: f7:b6:69:e8:6a:9f:b1:5a:d6:c4:07:29:f2:2c:f5: 6c:e3:7b:3c:5c:69:05:e5:4e:3b:0d:0f:c0:0a:98: ca:9d:a9:82:b9:ba:15:78:da:14:f6:12:73:63:b1: c5:96:01:6b:aa:34:e2:28:30:90:9b:ee:8b:2f:4d: a9:e4:c6:55:35:de:a0:ab:b1:ac:f3:08:62:c8:87: 97:e7:9d:ed:cf:5a:22:72:a3:ff:4e:7f:a2:26:84: b1:9c:46:b0:76:a6:eb:91:61:d7:5d:53:40:f1:f6: 7a:6b:72:97:dc:a8:28:5f:74:73:e9:a5:95:24:b0: ef:d3:2a:77:13:4d:53:e3:5c:ca:28:3a:89:f3:df: 99:ff:cf:c5:6a:de:11:c4:f3:fb:fd:4e:71:53:87: 59:37:82:2f:9e:b0:90:fa:c5:71:e1:54:1d:b8:35: eb:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:1A:0A:A0:88:89:67:CB:2A:B4:26:0F:DA:F8:83:9A:34:A2:E1:FC X509v3 Authority Key Identifier: keyid:C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:50:a4:3e:66:14:a3:98:d8:5e:43:75:d3:77:ec:0c:80:18: 7c:12:0f:58:58:76:bf:b0:96:3c:0c:4e:8d:9b:38:33:47:10: 9e:fa:8d:09:22:5e:e4:7e:64:d3:36:de:ed:b8:12:4e:b6:83: 26:e3:e2:30:65:ae:25:02:f4:5a:c0:92:f3:6d:0d:a3:04:9f: a2:81:2d:d3:12:f8:a5:b4:09:30:b6:a8:43:c9:dd:fd:2e:51: 5b:65:41:66:0d:fe:6f:34:76:e5:ba:95:db:e9:e5:29:f3:7e: 12:70:b3:ff:21:9c:59:ba:72:b0:97:e8:e0:a3:96:a6:41:38: ac:b0:02:e2:88:22:05:00:d9:a0:23:4d:11:87:f9:f1:39:6f: a2:df:00:4d:a5:7c:45:47:39:78:d7:1d:ed:42:c0:a6:7e:56: 76:80:74:da:73:9d:e6:53:0d:de:5a:d1:91:51:85:01:0b:1f: 95:9a:cb:57:2e:49:6f:89:c7:49:d6:56:e3:8d:d7:c0:0f:cc: a9:05:b4:6e:4a:13:c3:16:cb:4e:17:fc:1a:0e:32:93:50:4b: 5e:33:6d:71:2e:a8:7e:8e:53:17:15:68:4c:c0:8b:3a:2a:0d: 64:8f:22:3e:4c:33:30:21:37:0f:e0:b8:aa:d0:99:70:27:e1: ca:7f:7e:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdFNDUxMTAvBgNVBAUTKEM0ODI5QjZDMDdGRDgwNERGMDkyNUNGRkMxNjFDNjcw MjgwN0EwMjYwHhcNMjQwNTAyMjEyNjIyWhcNMjQwNTA5MjEyNjIyWjAYMRYwFAYD VQQDEw02NjM0MDRmZS0yYWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0y1Ra4qFrAVB8+G3CW/tojC67GVhiO44nx/p3s8R7XtA0GyoAeRVTzahGDYB m6hZZDhWxu4c9rYU6E1LnG2I8Isbyn+l6lAqXPu9ywtqVPvL4DpnJ6GtxvX3tmno ap+xWtbEBynyLPVs43s8XGkF5U47DQ/ACpjKnamCuboVeNoU9hJzY7HFlgFrqjTi KDCQm+6LL02p5MZVNd6gq7Gs8whiyIeX553tz1oicqP/Tn+iJoSxnEawdqbrkWHX XVNA8fZ6a3KX3KgoX3Rz6aWVJLDv0yp3E01T41zKKDqJ89+Z/8/Fat4RxPP7/U5x U4dZN4IvnrCQ+sVx4VQduDXrFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKMaCqCI iWfLKrQmD9r4g5o0ouH8MB8GA1UdIwQYMBaAFMSCm2wH/YBN8JJc/8FhxnAoB6Am MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0U0NS8wNkM4NTYzQzgz RDkxMUVBQTMxMjRGNUNDNEY5QUUwMi94SUtiYkFmOWdFM3drbHpfd1dIR2NDZ0hv Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hJS2JiQWY5Z0Uzd2tsel93V0hHY0NnSG9DWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0U0NS8wNkM4NTYzQzgzRDkxMUVBQTMxMjRGNUNDNEY5QUUwMi94SUtiYkFmOWdF M3drbHpfd1dIR2NDZ0hvQ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdUKQ+ZhSjmNheQ3XTd+wMgBh8Eg9YWHa/sJY8DE6NmzgzRxCe+o0J Il7kfmTTNt7tuBJOtoMm4+IwZa4lAvRawJLzbQ2jBJ+igS3TEviltAkwtqhDyd39 LlFbZUFmDf5vNHblupXb6eUp834ScLP/IZxZunKwl+jgo5amQTissALiiCIFANmg I00Rh/nxOW+i3wBNpXxFRzl41x3tQsCmflZ2gHTac53mUw3eWtGRUYUBCx+VmstX LklvicdJ1lbjjdfAD8ypBbRuShPDFstOF/waDjKTUEteM21xLqh+jlMXFWhMwIs6 Kg1kjyI+TDMwITcP4Liq0JlwJ+HKf355 -----END CERTIFICATE-----Generated at Thu May 2 22:13:24 2024 by rpki-client on console-fra.rpki-client.org