$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.mft File: 788FLZiSks6xBQkSnI3iA9SfaAQ.mft (raw, json) Hash identifier: 1p+f/xp5VV0cJBs6OZ/cmQI5fS3fNA2zj6IrDFQIgqM= Subject key identifier: 19:ED:9F:4C:5A:99:F3:8D:E3:FE:0F:41:A4:4E:B2:0B:20:27:D1:D9 Authority key identifier: EF:CF:05:2D:98:92:92:CE:B1:05:09:12:9C:8D:E2:03:D4:9F:68:04 Certificate issuer: /CN=A91EB9C0/serialNumber=EFCF052D989292CEB10509129C8DE203D49F6804 Certificate serial: 0C88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788FLZiSks6xBQkSnI3iA9SfaAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.mft Manifest number: 0C82 Signing time: Mon 06 May 2024 18:56:55 +0000 Manifest this update: Mon 06 May 2024 18:56:55 +0000 Manifest next update: Mon 13 May 2024 18:56:55 +0000 Files and hashes: 1: 788FLZiSks6xBQkSnI3iA9SfaAQ.crl (hash: cZBlTYEgqStAMil1bT3UZlyPdO7eofOyqOZm97mhhU4=) 2: 1004D41ED21D11E992825429C4F9AE02.roa (hash: Zc60K4ZMZPyJuc6g6BeiVIXF/a+xAC8+kYk2iliu0z8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.crl rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788FLZiSks6xBQkSnI3iA9SfaAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 18:53:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3208 (0xc88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB9C0/serialNumber=EFCF052D989292CEB10509129C8DE203D49F6804 Validity Not Before: May 6 18:56:55 2024 GMT Not After : May 13 18:56:55 2024 GMT Subject: CN=663927f7-e70a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a3:34:66:71:45:f0:9c:17:72:c1:cb:eb:be: a2:ce:ed:12:5c:f6:40:cf:c8:5c:f9:41:f1:78:78: 1e:42:19:4c:4a:a6:2a:23:0f:ae:8b:a6:72:dc:a6: 9e:3b:0b:da:db:b0:80:a8:dc:13:84:2c:08:b8:63: c5:42:8c:08:19:fe:21:92:40:6c:01:a1:60:70:ce: 68:6b:2f:a1:d9:4b:46:d3:75:f2:1d:f9:7e:2b:2c: f2:c8:96:8e:9a:23:93:12:f8:44:49:d2:23:82:da: 61:64:d9:a3:38:f6:0c:72:c1:71:83:8f:ad:fc:7e: 78:9f:ad:9c:3c:d5:4e:29:56:88:eb:15:ff:bb:b7: a5:3a:3d:71:8c:51:9a:fd:96:cf:84:6e:1a:cf:18: 9b:f8:01:eb:66:d8:ca:ec:07:6e:e1:b1:a0:f0:3b: 77:a8:11:1f:8d:9f:bc:38:5f:4c:e5:da:b7:50:8e: 65:1a:6c:b7:53:cc:77:35:7e:c6:ad:9b:99:69:11: e9:54:f6:95:64:bd:6f:60:7e:ee:5c:4f:dc:ed:6f: 04:17:6d:f2:17:32:b0:fe:7d:23:91:ae:ca:e7:aa: 8c:18:33:87:df:5d:f9:7a:57:9c:b8:c7:e4:5a:29: fb:98:a6:31:b9:02:3f:b0:20:25:65:99:be:aa:1e: 5c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:ED:9F:4C:5A:99:F3:8D:E3:FE:0F:41:A4:4E:B2:0B:20:27:D1:D9 X509v3 Authority Key Identifier: keyid:EF:CF:05:2D:98:92:92:CE:B1:05:09:12:9C:8D:E2:03:D4:9F:68:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788FLZiSks6xBQkSnI3iA9SfaAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:ec:d9:d9:32:1f:46:10:3b:1e:71:e6:0f:b8:02:bc:a8:9e: 09:ea:06:b7:89:1d:34:8b:09:23:1b:01:4c:2f:94:a7:b7:d3: af:57:8c:74:9b:c4:2e:be:e7:78:6a:c0:00:22:7d:44:69:81: 26:59:f5:e4:a8:59:fe:44:39:c7:2d:cb:4a:d7:e1:88:15:2e: 67:68:9a:77:1a:0e:bd:4f:0e:67:d5:53:01:29:b5:d5:04:3c: ce:16:c9:6c:35:28:c4:77:c7:c2:a2:76:b1:85:35:46:39:76: cf:45:8f:09:73:68:14:7a:66:43:02:d5:c8:de:0f:0f:d8:e4: e0:96:ea:25:1c:e0:d8:60:82:98:ae:8c:30:ad:63:ee:30:0a: 52:29:5b:68:ab:d7:88:a2:d3:8c:93:08:f1:b0:5c:77:2f:29: fc:6e:29:70:3c:86:f8:fe:fe:e1:12:d5:6e:0e:db:f8:07:a6: 02:82:4d:f8:3d:47:73:3c:4d:87:28:91:e4:d4:77:05:99:48: ef:33:62:9f:8b:7a:bf:1d:08:c1:4d:98:26:1f:3e:b3:a7:ab: 3e:8f:a3:35:e4:64:7e:88:e3:52:e5:9b:ca:9b:c4:4e:1f:e0: c0:f5:a6:98:5d:2f:15:8c:98:c4:cd:44:21:98:c1:16:7a:a3: 88:0e:33:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI5QzAxMTAvBgNVBAUTKEVGQ0YwNTJEOTg5MjkyQ0VCMTA1MDkxMjlDOERFMjAz RDQ5RjY4MDQwHhcNMjQwNTA2MTg1NjU1WhcNMjQwNTEzMTg1NjU1WjAYMRYwFAYD VQQDEw02NjM5MjdmNy1lNzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6M0ZnFF8JwXcsHL676izu0SXPZAz8hc+UHxeHgeQhlMSqYqIw+ui6Zy3Kae Owva27CAqNwThCwIuGPFQowIGf4hkkBsAaFgcM5oay+h2UtG03XyHfl+KyzyyJaO miOTEvhESdIjgtphZNmjOPYMcsFxg4+t/H54n62cPNVOKVaI6xX/u7elOj1xjFGa /ZbPhG4azxib+AHrZtjK7Adu4bGg8Dt3qBEfjZ+8OF9M5dq3UI5lGmy3U8x3NX7G rZuZaRHpVPaVZL1vYH7uXE/c7W8EF23yFzKw/n0jka7K56qMGDOH3135elecuMfk Win7mKYxuQI/sCAlZZm+qh5c6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBntn0xa mfON4/4PQaROsgsgJ9HZMB8GA1UdIwQYMBaAFO/PBS2YkpLOsQUJEpyN4gPUn2gE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjlDMC9EMzY0RjBDQ0Qy MUExMUU5ODNGOUU1MjRDNEY5QUUwMi83ODhGTFppU2tzNnhCUWtTbkkzaUE5U2Zh QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc4OEZMWmlTa3M2eEJRa1NuSTNpQTlTZmFBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjlDMC9EMzY0RjBDQ0QyMUExMUU5ODNGOUU1MjRDNEY5QUUwMi83ODhGTFppU2tz NnhCUWtTbkkzaUE5U2ZhQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj7NnZMh9GEDseceYPuAK8qJ4J6ga3iR00iwkjGwFML5Snt9OvV4x0 m8Quvud4asAAIn1EaYEmWfXkqFn+RDnHLctK1+GIFS5naJp3Gg69Tw5n1VMBKbXV BDzOFslsNSjEd8fConaxhTVGOXbPRY8Jc2gUemZDAtXI3g8P2OTgluolHODYYIKY rowwrWPuMApSKVtoq9eIotOMkwjxsFx3Lyn8bilwPIb4/v7hEtVuDtv4B6YCgk34 PUdzPE2HKJHk1HcFmUjvM2Kfi3q/HQjBTZgmHz6zp6s+j6M15GR+iONS5ZvKm8RO H+DA9aaYXS8VjJjEzUQhmMEWeqOIDjOx -----END CERTIFICATE-----Generated at Mon May 6 20:19:45 2024 by rpki-client on console-ams.rpki-client.org