$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft File: 4190GdVyqG920uv3gpq22dA0CQU.mft (raw, json) Hash identifier: YLhiwaV+1r14El8kxFL3P8qp9IFi7SNxzCnsZYskkK0= Subject key identifier: 45:3F:83:D0:AD:A8:6B:41:36:CB:78:57:79:55:A8:2D:A1:F1:67:DC Authority key identifier: E3:5F:74:19:D5:72:A8:6F:76:D2:EB:F7:82:9A:B6:D9:D0:34:09:05 Certificate issuer: /CN=A91E8AF5/serialNumber=E35F7419D572A86F76D2EBF7829AB6D9D0340905 Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4190GdVyqG920uv3gpq22dA0CQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft Manifest number: 98 Signing time: Wed 15 May 2024 06:58:59 +0000 Manifest this update: Wed 15 May 2024 06:58:59 +0000 Manifest next update: Wed 22 May 2024 06:58:59 +0000 Files and hashes: 1: 4190GdVyqG920uv3gpq22dA0CQU.crl (hash: aIkoofZFrfWnR9Z2JB8QNEHO/7BmIYIsWWGhsYUqQfk=) 2: 9985244A2D1411EEAA9EA45DC4F9AE02.roa (hash: VdVGiGXj8WmtMijPMpgRK+Rb6MVhazNJnLJSMdY7Rjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.crl rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4190GdVyqG920uv3gpq22dA0CQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 06:58:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8AF5/serialNumber=E35F7419D572A86F76D2EBF7829AB6D9D0340905 Validity Not Before: May 15 06:58:59 2024 GMT Not After : May 22 06:58:59 2024 GMT Subject: CN=66445d33-42fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:cf:d2:2b:f4:56:3d:c3:7d:86:2d:cf:34:a9: f6:25:62:64:fa:de:0d:a5:59:03:c7:7a:02:dd:28: 87:e1:f6:9f:61:40:8f:a3:eb:7c:7c:9e:29:e6:9b: 36:31:64:ad:ca:6b:52:0e:7e:8e:ff:b8:37:07:08: b0:47:06:43:fa:e9:ed:eb:98:65:05:27:b9:35:e0: 97:7d:33:b4:eb:82:91:5c:d1:9d:d3:88:23:c6:5c: 14:25:fc:a2:f0:c2:52:c7:c0:86:34:97:88:6a:be: 87:51:2d:2f:c1:11:f9:fc:fe:39:ea:e5:06:cc:96: 5a:a9:ae:95:21:b3:2f:23:50:81:08:4a:8e:13:68: 7b:5b:e6:db:6b:09:2b:f1:c7:e7:18:64:4b:a2:94: 20:97:35:3a:f8:1e:c5:97:ad:66:44:01:75:9c:b3: 9e:86:35:0f:a1:64:cd:69:d9:7d:de:c0:7b:18:71: d3:ed:30:8d:67:99:49:c3:3c:5c:3e:94:b4:37:5b: 89:dd:35:11:52:23:9d:27:9f:32:d0:c5:17:28:66: 41:d4:61:18:3a:cd:74:6c:ec:bb:d4:f4:da:52:25: 3c:c9:cb:6b:75:02:35:1f:4c:82:97:cd:f5:5b:cd: 80:34:a0:22:c0:4d:8a:c5:10:6d:73:81:30:9c:c7: 2d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:3F:83:D0:AD:A8:6B:41:36:CB:78:57:79:55:A8:2D:A1:F1:67:DC X509v3 Authority Key Identifier: keyid:E3:5F:74:19:D5:72:A8:6F:76:D2:EB:F7:82:9A:B6:D9:D0:34:09:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4190GdVyqG920uv3gpq22dA0CQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:00:e3:42:84:ed:d0:11:4e:26:7b:ef:5e:86:f7:c3:39:cc: 86:5c:dc:6f:95:e0:5b:00:b5:e2:be:00:02:9f:d8:57:7f:3c: d6:82:bb:a8:d2:ac:a5:4a:b9:af:45:4c:71:95:cd:52:8c:2e: 96:fa:f1:31:30:64:49:9e:39:cd:42:ff:a4:5b:31:fb:11:93: 71:9b:5a:93:d7:53:76:cc:f2:05:d1:68:84:a5:16:ef:d5:d3: f1:2b:01:72:f0:9a:43:f5:4e:de:36:81:11:2e:72:96:93:da: 40:f3:8d:db:63:f3:84:95:91:19:ec:2a:6e:eb:74:40:c1:8c: 03:f7:35:f6:6d:25:17:3d:a6:4e:df:e8:fa:d7:8f:d4:ff:c1: ba:3f:9c:90:ba:84:15:15:3f:24:55:50:bb:61:7f:a9:7e:8d: bd:ef:8e:bc:5d:de:10:17:d7:3b:66:77:7b:d1:c6:c7:52:6c: 50:b0:b4:b4:8c:a8:57:0d:e7:81:8b:f0:a7:2a:a7:96:02:6e: bf:17:99:26:36:59:1e:2f:36:b2:d1:6f:35:0a:a5:fd:31:0e: 32:74:cd:c9:45:22:f6:1b:b2:e2:0f:44:ed:68:bc:3c:b7:07: 89:ac:d3:41:39:92:a0:fd:1d:30:8b:94:33:98:df:86:c1:ed: f1:f5:7a:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThBRjUxMTAvBgNVBAUTKEUzNUY3NDE5RDU3MkE4NkY3NkQyRUJGNzgyOUFCNkQ5 RDAzNDA5MDUwHhcNMjQwNTE1MDY1ODU5WhcNMjQwNTIyMDY1ODU5WjAYMRYwFAYD VQQDEw02NjQ0NWQzMy00MmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6c/SK/RWPcN9hi3PNKn2JWJk+t4NpVkDx3oC3SiH4fafYUCPo+t8fJ4p5ps2 MWStymtSDn6O/7g3BwiwRwZD+unt65hlBSe5NeCXfTO064KRXNGd04gjxlwUJfyi 8MJSx8CGNJeIar6HUS0vwRH5/P456uUGzJZaqa6VIbMvI1CBCEqOE2h7W+bbawkr 8cfnGGRLopQglzU6+B7Fl61mRAF1nLOehjUPoWTNadl93sB7GHHT7TCNZ5lJwzxc PpS0N1uJ3TURUiOdJ58y0MUXKGZB1GEYOs10bOy71PTaUiU8yctrdQI1H0yCl831 W82ANKAiwE2KxRBtc4EwnMctgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEU/g9Ct qGtBNst4V3lVqC2h8WfcMB8GA1UdIwQYMBaAFONfdBnVcqhvdtLr94KattnQNAkF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEFGNS8zM0Y3MjU4NjJE MTExMUVFOTk2Q0M2MTBDNEY5QUUwMi80MTkwR2RWeXFHOTIwdXYzZ3BxMjJkQTBD UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQxOTBHZFZ5cUc5MjB1djNncHEyMmRBMENRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEFGNS8zM0Y3MjU4NjJEMTExMUVFOTk2Q0M2MTBDNEY5QUUwMi80MTkwR2RWeXFH OTIwdXYzZ3BxMjJkQTBDUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVAONChO3QEU4me+9ehvfDOcyGXNxvleBbALXivgACn9hXfzzWgruo 0qylSrmvRUxxlc1SjC6W+vExMGRJnjnNQv+kWzH7EZNxm1qT11N2zPIF0WiEpRbv 1dPxKwFy8JpD9U7eNoERLnKWk9pA843bY/OElZEZ7Cpu63RAwYwD9zX2bSUXPaZO 3+j614/U/8G6P5yQuoQVFT8kVVC7YX+pfo297468Xd4QF9c7Znd70cbHUmxQsLS0 jKhXDeeBi/CnKqeWAm6/F5kmNlkeLzay0W81CqX9MQ4ydM3JRSL2G7LiD0TtaLw8 tweJrNNBOZKg/R0wi5QzmN+Gwe3x9Xrl -----END CERTIFICATE-----Generated at Wed May 15 09:28:17 2024 by rpki-client on console-fra.rpki-client.org