$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft File: buWafawHoiW5GzRmrRoHRkk9jiQ.mft (raw, json) Hash identifier: L4w8kmOdreMfSb7RMHqH+cfzBGQe7WlPZvl/uGwWpB4= Subject key identifier: BE:FA:7F:F8:29:19:4F:7E:9F:C2:DA:38:9D:BA:2B:F7:E2:F9:5D:E0 Authority key identifier: 6E:E5:9A:7D:AC:07:A2:25:B9:1B:34:66:AD:1A:07:46:49:3D:8E:24 Certificate issuer: /CN=A91E9D5D/serialNumber=6EE59A7DAC07A225B91B3466AD1A0746493D8E24 Certificate serial: 04FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft Manifest number: 04F8 Signing time: Sun 05 May 2024 01:23:26 +0000 Manifest this update: Sun 05 May 2024 01:23:26 +0000 Manifest next update: Sun 12 May 2024 01:23:26 +0000 Files and hashes: 1: buWafawHoiW5GzRmrRoHRkk9jiQ.crl (hash: GiZPdrkPNEGvgcl7q5WZRhrVX1fk1uF6Qrte0B/KqMo=) 2: 581F68DAD48A11EEB7A00557C4F9AE02.roa (hash: rWgRsGTMLta/IuuCY7Dii0qt2LNfRV+Vfb8i8XwO5RM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.crl rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1277 (0x4fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9D5D/serialNumber=6EE59A7DAC07A225B91B3466AD1A0746493D8E24 Validity Not Before: May 5 01:23:26 2024 GMT Not After : May 12 01:23:26 2024 GMT Subject: CN=6636df8e-f1b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4c:64:1c:18:b8:6e:38:1c:34:08:14:0f:3f: 81:90:d5:59:0c:20:59:c5:11:6e:a5:09:f8:eb:34: 30:ea:52:de:24:89:25:a2:42:39:13:89:9d:9a:4d: 7a:6a:b4:10:3f:f1:ed:72:69:74:d2:2e:76:f0:66: 5a:31:bd:2a:4b:ad:0d:09:a3:2d:47:a4:53:83:7d: 92:c9:59:a7:e3:a2:88:2c:fe:e8:77:ee:26:4f:f3: d2:4b:e2:f7:9b:f7:49:bb:39:40:64:da:09:b1:90: 21:b5:44:a6:e4:75:a9:97:a5:90:75:9b:51:ee:91: 1d:1e:06:fa:44:e5:11:e2:63:b3:22:45:10:08:e8: 31:91:5f:05:19:82:b5:db:56:72:19:29:39:c5:b3: 81:90:50:b6:f7:ee:ec:77:83:de:b0:95:51:bf:e6: c7:d1:d3:9d:56:b2:d5:ba:53:34:97:d7:13:95:fe: ef:c7:6a:7c:88:10:fb:8f:73:bc:a2:fa:20:39:f3: d4:a9:57:e6:6b:51:cf:ef:cd:ae:55:f0:d4:0c:dc: f5:b1:81:06:34:84:9a:96:71:31:51:c3:58:00:b6: 26:eb:11:a8:0f:59:32:96:f8:e7:05:a2:82:76:f2: f5:fe:67:b5:53:70:ca:0a:cf:1c:2b:ed:ed:83:2c: e0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:FA:7F:F8:29:19:4F:7E:9F:C2:DA:38:9D:BA:2B:F7:E2:F9:5D:E0 X509v3 Authority Key Identifier: keyid:6E:E5:9A:7D:AC:07:A2:25:B9:1B:34:66:AD:1A:07:46:49:3D:8E:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:33:b6:b8:fa:3e:0e:30:df:f8:5c:26:68:89:5d:d5:08:30: ec:d0:3b:9c:ac:1c:b0:14:7a:98:02:62:bc:3d:8d:0b:8a:f3: 7f:62:c9:bc:ce:91:9e:38:79:90:ba:f0:8f:56:00:40:11:dd: e4:c5:87:73:24:76:3e:5e:b3:c4:4d:02:d0:b5:1a:44:03:f1: 39:42:6b:4b:41:09:eb:99:ff:fe:77:4a:3e:6a:87:0c:10:f1: c7:07:80:e1:bc:ed:27:cd:96:3a:57:77:11:4d:54:6a:13:df: 1b:6f:43:eb:53:25:34:b5:6c:2f:6c:f1:f8:5d:53:48:ec:f5: aa:27:5d:9a:7e:2e:c3:4d:5e:1c:02:cf:eb:38:8a:5b:17:70: c9:90:66:6f:63:d0:16:eb:71:52:e2:6d:a5:e6:c6:37:80:20: 9f:51:f7:1e:5b:ca:ff:55:a8:54:76:58:1a:3a:ee:96:14:53: cf:1c:db:d8:1b:e4:0f:44:fc:91:8b:15:d9:f2:4b:7c:e9:5a: 55:35:cf:7a:5f:87:df:55:4b:23:f2:12:75:50:0b:42:8d:58: 5a:df:1e:ad:9e:01:27:92:8b:6d:35:38:9a:21:82:81:b4:4a: 6f:35:4b:14:01:94:90:d5:23:c8:97:58:b1:c7:0a:3f:58:b7: c1:b9:39:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlENUQxMTAvBgNVBAUTKDZFRTU5QTdEQUMwN0EyMjVCOTFCMzQ2NkFEMUEwNzQ2 NDkzRDhFMjQwHhcNMjQwNTA1MDEyMzI2WhcNMjQwNTEyMDEyMzI2WjAYMRYwFAYD VQQDEw02NjM2ZGY4ZS1mMWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0xkHBi4bjgcNAgUDz+BkNVZDCBZxRFupQn46zQw6lLeJIklokI5E4mdmk16 arQQP/Htcml00i528GZaMb0qS60NCaMtR6RTg32SyVmn46KILP7od+4mT/PSS+L3 m/dJuzlAZNoJsZAhtUSm5HWpl6WQdZtR7pEdHgb6ROUR4mOzIkUQCOgxkV8FGYK1 21ZyGSk5xbOBkFC29+7sd4PesJVRv+bH0dOdVrLVulM0l9cTlf7vx2p8iBD7j3O8 ovogOfPUqVfma1HP782uVfDUDNz1sYEGNISalnExUcNYALYm6xGoD1kylvjnBaKC dvL1/me1U3DKCs8cK+3tgyzgYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL76f/gp GU9+n8LaOJ26K/fi+V3gMB8GA1UdIwQYMBaAFG7lmn2sB6IluRs0Zq0aB0ZJPY4k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUQ1RC80MDAxQTE2Q0M0 NUUxMUVCQjI5QjRDNENDNEY5QUUwMi9idVdhZmF3SG9pVzVHelJtclJvSFJrazlq aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J1V2FmYXdIb2lXNUd6Um1yUm9IUmtrOWppUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUQ1RC80MDAxQTE2Q0M0NUUxMUVCQjI5QjRDNENDNEY5QUUwMi9idVdhZmF3SG9p VzVHelJtclJvSFJrazlqaVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsM7a4+j4OMN/4XCZoiV3VCDDs0DucrBywFHqYAmK8PY0LivN/Ysm8 zpGeOHmQuvCPVgBAEd3kxYdzJHY+XrPETQLQtRpEA/E5QmtLQQnrmf/+d0o+aocM EPHHB4DhvO0nzZY6V3cRTVRqE98bb0PrUyU0tWwvbPH4XVNI7PWqJ12afi7DTV4c As/rOIpbF3DJkGZvY9AW63FS4m2l5sY3gCCfUfceW8r/VahUdlgaOu6WFFPPHNvY G+QPRPyRixXZ8kt86VpVNc96X4ffVUsj8hJ1UAtCjVha3x6tngEnkottNTiaIYKB tEpvNUsUAZSQ1SPIl1ixxwo/WLfBuTly -----END CERTIFICATE-----Generated at Sun May 5 02:33:39 2024 by rpki-client on console-fra.rpki-client.org