$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft File: _k_aOWcBbBE6yAe4STQKxlIPCAI.mft (raw, json) Hash identifier: xzJ0STsqjJD4V1ySPcDp9Ut0/Zz0Uy3UEPOI4+Txyfg= Subject key identifier: 39:AC:FD:7F:55:01:65:E1:A6:65:1D:2D:41:9A:60:A0:06:BE:25:1D Authority key identifier: FE:4F:DA:39:67:01:6C:11:3A:C8:07:B8:49:34:0A:C6:52:0F:08:02 Certificate issuer: /CN=A91E9580/serialNumber=FE4FDA3967016C113AC807B849340AC6520F0802 Certificate serial: 092C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft Manifest number: 090E Signing time: Thu 02 May 2024 21:21:41 +0000 Manifest this update: Thu 02 May 2024 21:21:41 +0000 Manifest next update: Thu 09 May 2024 21:21:41 +0000 Files and hashes: 1: _k_aOWcBbBE6yAe4STQKxlIPCAI.crl (hash: ixox4fwJLn/pK4SO5PFGp3JDmRzd9H/KuzgJEJPrIrg=) 2: 699CD772C2B911EBBB4C8928C4F9AE02.roa (hash: P84ojHQ6ME3z3QeUAf7xdcNvhj1PWefymQQNfTgzXUo=) 3: DE76B04EC2BA11EB99E5E36FC4F9AE02.roa (hash: vnLp/g0V/F/MvaYVIrAZzlUv5Vsmgf3IbBef1IThZtE=) 4: 91F5867070B811EDB6E1F81BC4F9AE02.roa (hash: y0IcN1cUF9ykncqdKFeigqZgKa6tLkow1aHuIiQMZL0=) 5: 1E9514207F9311EA8177A82DC4F9AE02.roa (hash: Jrpsdmhxrq96Kh9pejROB20rIhJCV4p20adoyvjb7AI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.crl rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 21:21:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2348 (0x92c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9580/serialNumber=FE4FDA3967016C113AC807B849340AC6520F0802 Validity Not Before: May 2 21:21:41 2024 GMT Not After : May 9 21:21:41 2024 GMT Subject: CN=663403e5-e3ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a8:56:8e:7e:c7:84:ca:e8:1c:94:22:77:05: f6:d1:b2:a2:d0:1d:d4:6f:8e:2a:1e:bf:4e:ee:5b: 6a:d6:68:b8:44:cd:55:d4:f0:3e:78:45:e1:d0:70: f7:d9:71:e6:1d:4b:78:af:87:b3:fd:71:1c:bd:30: ec:36:72:be:b5:eb:be:01:ab:21:88:64:41:a3:7a: 53:89:a0:60:76:cb:76:17:b9:c0:71:09:bc:aa:d2: 68:4e:f7:78:65:ef:11:2b:7f:9f:73:bc:32:94:62: 88:cf:08:a7:74:1a:0a:f6:c2:55:cf:ee:e1:92:af: 6a:f5:77:30:ae:74:26:cc:e3:cf:49:ff:33:65:9f: e1:a2:0b:96:f3:b9:6f:89:7c:2f:3a:d1:7c:e5:a5: 07:b5:4f:f2:e8:65:5d:e4:64:07:ef:2b:70:a0:ae: 8d:9a:f8:41:4d:ce:62:8b:99:e3:42:75:92:41:8a: 17:df:12:b1:3e:f9:27:06:82:d4:5a:a2:94:0e:75: 60:91:d2:6e:ff:c7:ef:55:a1:6c:0d:0b:77:6d:ae: 31:55:dd:ac:3e:e8:02:26:ba:ed:33:47:2e:e0:50: f5:a4:12:52:9b:c4:92:e4:95:bc:0b:e5:51:97:72: 9c:a4:bd:8d:67:e6:8b:4b:a9:fe:d0:00:e6:c3:b5: cd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:AC:FD:7F:55:01:65:E1:A6:65:1D:2D:41:9A:60:A0:06:BE:25:1D X509v3 Authority Key Identifier: keyid:FE:4F:DA:39:67:01:6C:11:3A:C8:07:B8:49:34:0A:C6:52:0F:08:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:26:7a:94:d9:be:44:3c:51:9f:a3:c5:d6:c4:07:df:3f:d2: 17:93:33:91:3a:0e:97:14:f3:66:8d:81:a6:89:4e:0a:4d:5d: 57:b3:c9:6a:e2:21:b2:a1:e4:b9:da:65:19:75:4e:18:ac:62: 25:f8:fb:ab:7d:3a:4f:3e:22:ff:71:83:10:59:75:bc:fc:00: 9e:25:f5:b3:5c:98:f5:73:06:92:f7:c7:c3:3d:66:cd:4f:d6: bf:e6:cc:0d:51:70:06:ab:aa:de:bc:80:9c:5d:1c:12:6a:8b: 8c:82:14:e1:f2:1b:cc:2a:0b:fb:65:df:d0:6d:d7:52:fd:40: 13:4d:a4:2d:a2:84:46:74:dc:37:cf:ee:5e:41:83:64:d2:f8: 5d:f0:af:6e:c1:8c:77:98:65:b0:cb:3f:c3:0c:40:de:c6:2c: 12:e1:a6:a6:86:f0:20:a4:2b:1e:b9:53:a9:eb:af:a3:49:8b: 8f:b5:eb:07:30:7c:35:d3:a2:66:da:2a:93:21:23:49:19:d3: be:07:30:fb:86:fb:ef:96:82:b9:f2:d2:9b:50:5f:eb:4b:36: a4:7f:a5:69:e4:93:49:1c:3f:4d:28:5f:8b:d3:b5:b7:1c:4e: 46:bb:1f:eb:22:f0:08:ff:c8:0f:7c:ea:cb:1a:a7:00:a1:76: 81:7d:54:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk1ODAxMTAvBgNVBAUTKEZFNEZEQTM5NjcwMTZDMTEzQUM4MDdCODQ5MzQwQUM2 NTIwRjA4MDIwHhcNMjQwNTAyMjEyMTQxWhcNMjQwNTA5MjEyMTQxWjAYMRYwFAYD VQQDEw02NjM0MDNlNS1lM2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ahWjn7HhMroHJQidwX20bKi0B3Ub44qHr9O7ltq1mi4RM1V1PA+eEXh0HD3 2XHmHUt4r4ez/XEcvTDsNnK+teu+AashiGRBo3pTiaBgdst2F7nAcQm8qtJoTvd4 Ze8RK3+fc7wylGKIzwindBoK9sJVz+7hkq9q9XcwrnQmzOPPSf8zZZ/hoguW87lv iXwvOtF85aUHtU/y6GVd5GQH7ytwoK6NmvhBTc5ii5njQnWSQYoX3xKxPvknBoLU WqKUDnVgkdJu/8fvVaFsDQt3ba4xVd2sPugCJrrtM0cu4FD1pBJSm8SS5JW8C+VR l3KcpL2NZ+aLS6n+0ADmw7XN0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDms/X9V AWXhpmUdLUGaYKAGviUdMB8GA1UdIwQYMBaAFP5P2jlnAWwROsgHuEk0CsZSDwgC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTU4MC9DN0NFMkUxMDdG OEQxMUVBQUQ4Q0Q1MUVDNEY5QUUwMi9fa19hT1djQmJCRTZ5QWU0U1RRS3hsSVBD QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19rX2FPV2NCYkJFNnlBZTRTVFFLeGxJUENBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTU4MC9DN0NFMkUxMDdGOEQxMUVBQUQ4Q0Q1MUVDNEY5QUUwMi9fa19hT1djQmJC RTZ5QWU0U1RRS3hsSVBDQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFJnqU2b5EPFGfo8XWxAffP9IXkzOROg6XFPNmjYGmiU4KTV1Xs8lq 4iGyoeS52mUZdU4YrGIl+PurfTpPPiL/cYMQWXW8/ACeJfWzXJj1cwaS98fDPWbN T9a/5swNUXAGq6revICcXRwSaouMghTh8hvMKgv7Zd/QbddS/UATTaQtooRGdNw3 z+5eQYNk0vhd8K9uwYx3mGWwyz/DDEDexiwS4aamhvAgpCseuVOp66+jSYuPtesH MHw106Jm2iqTISNJGdO+BzD7hvvvloK58tKbUF/rSzakf6Vp5JNJHD9NKF+L07W3 HE5Gux/rIvAI/8gPfOrLGqcAoXaBfVRM -----END CERTIFICATE-----Generated at Thu May 2 22:13:24 2024 by rpki-client on console-fra.rpki-client.org