$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft File: 5Acguik7ryW8Chd4xlzw0uDzUWA.mft (raw, json) Hash identifier: c/NBoluENCT4lRYlAH4/twjXYT2m3898EVNUw2duAC0= Subject key identifier: 0B:4B:61:43:79:AB:02:A1:A0:5A:66:5A:ED:DE:90:28:92:07:DC:D8 Authority key identifier: E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60 Certificate issuer: /CN=A91EF35B/serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160 Certificate serial: 03A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft Manifest number: 0392 Signing time: Mon 29 Apr 2024 02:37:19 +0000 Manifest this update: Mon 29 Apr 2024 02:37:18 +0000 Manifest next update: Mon 06 May 2024 02:37:18 +0000 Files and hashes: 1: 5Acguik7ryW8Chd4xlzw0uDzUWA.crl (hash: UfoyyZP0C46suxEVi/pcGNZYxTwZb1OAvaBfBgms7cg=) 2: 859B9868927E11EEB878AA50C4F9AE02.roa (hash: OpcmyzujUrlr3ZQPQLRyT8eyWYNuIn2U5UC/mkkDA5c=) 3: 0BFA0C9C927E11EEA47AD74FC4F9AE02.roa (hash: fhWfXuCA6p+vk9M3U34/ucRqZ7Yybcd/1gRI19pt87k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 02:37:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 937 (0x3a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF35B/serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160 Validity Not Before: Apr 29 02:37:18 2024 GMT Not After : May 6 02:37:18 2024 GMT Subject: CN=662f07de-da5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:65:3b:4e:2f:8f:77:ee:a0:ea:e3:56:bf:9f: 26:e9:dd:47:26:2a:79:50:7e:67:54:86:5f:19:5f: 8c:a2:50:bb:0e:60:9e:a6:8b:ac:56:35:30:a9:d2: e3:01:9e:18:ec:c0:57:f4:af:c2:1a:2c:05:6b:b8: 5a:ab:e2:70:97:9c:69:49:b9:bd:65:78:f9:39:20: 99:7e:7f:8b:20:88:16:bc:04:44:a2:c4:ad:b0:04: a3:d2:8b:e0:ef:00:53:1b:cd:13:58:4a:b8:79:0b: 80:e1:62:0b:5e:06:36:1c:8b:1e:e1:05:3a:df:f6: f9:75:a0:31:a6:6a:d6:e9:18:a2:27:ba:62:9f:c5: 6e:bb:27:71:d3:9a:3a:87:f0:4e:c9:51:3a:c3:4d: 9d:11:75:d8:dd:15:4b:22:9a:e9:26:e6:07:2d:45: 1e:a7:2e:bd:85:a2:ca:bf:20:3f:ca:d4:fc:ea:32: b6:94:52:f4:52:2c:1e:32:0f:24:c9:29:e5:b7:a2: 54:d5:11:db:ee:92:ff:22:bf:c8:8d:ac:09:bd:cf: e2:4f:35:1e:94:8c:cb:a5:71:b7:4e:13:1d:67:cc: d9:23:7b:88:a2:12:03:eb:ff:81:98:1f:30:51:ff: 16:19:66:5f:68:56:a5:7e:f6:dc:07:2c:35:0f:0f: b2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:4B:61:43:79:AB:02:A1:A0:5A:66:5A:ED:DE:90:28:92:07:DC:D8 X509v3 Authority Key Identifier: keyid:E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:f0:f3:7a:79:37:de:bc:01:13:86:c4:f3:ae:e8:d5:25:e5: 13:e3:bc:2f:51:cd:4b:6a:d1:a0:a0:92:cc:a7:3b:fe:98:a0: b0:1e:23:f4:c6:07:12:a8:0f:fa:2a:2d:28:a8:2c:20:43:2c: 32:96:4a:e1:3b:6f:07:00:d3:fe:e9:5b:cc:f7:79:96:51:9b: 1b:5f:d2:85:74:91:23:f0:75:d9:d0:05:05:a2:97:e6:ab:14: d8:80:e2:1e:71:de:50:3a:35:76:50:34:ec:7c:5a:92:ab:1b: 2b:25:53:ae:b3:3e:f1:ed:52:05:f4:5f:47:8c:a5:1d:d7:7d: 5b:a0:36:51:0f:e7:c5:4c:15:0a:00:35:0d:f6:72:83:80:f2: ff:fd:d7:eb:06:83:45:79:3d:f3:33:ad:f5:62:86:06:57:a6: 24:13:2b:9e:e4:02:59:c4:ee:a7:99:cc:ad:c9:2f:f0:27:67: 9f:fa:d7:a0:91:29:0f:2f:47:ff:a9:8f:56:48:30:03:49:e3: 2d:0b:76:dc:e3:c5:42:31:ec:33:06:6c:f5:34:0b:4c:bb:7e: 9c:8d:3d:44:90:37:9e:df:65:83:cf:c7:37:9e:bd:a3:cc:15: 81:ab:f2:64:10:85:30:f1:e8:6b:a1:26:66:ad:42:21:b3:92: 8c:cc:7d:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYzNUIxMTAvBgNVBAUTKEU0MDcyMEJBMjkzQkFGMjVCQzBBMTc3OEM2NUNGMEQy RTBGMzUxNjAwHhcNMjQwNDI5MDIzNzE4WhcNMjQwNTA2MDIzNzE4WjAYMRYwFAYD VQQDEw02NjJmMDdkZS1kYTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA82U7Ti+Pd+6g6uNWv58m6d1HJip5UH5nVIZfGV+MolC7DmCepousVjUwqdLj AZ4Y7MBX9K/CGiwFa7haq+Jwl5xpSbm9ZXj5OSCZfn+LIIgWvAREosStsASj0ovg 7wBTG80TWEq4eQuA4WILXgY2HIse4QU63/b5daAxpmrW6RiiJ7pin8Vuuydx05o6 h/BOyVE6w02dEXXY3RVLIprpJuYHLUUepy69haLKvyA/ytT86jK2lFL0UiweMg8k ySnlt6JU1RHb7pL/Ir/IjawJvc/iTzUelIzLpXG3ThMdZ8zZI3uIohID6/+BmB8w Uf8WGWZfaFalfvbcByw1Dw+yvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAtLYUN5 qwKhoFpmWu3ekCiSB9zYMB8GA1UdIwQYMBaAFOQHILopO68lvAoXeMZc8NLg81Fg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjM1Qi9FMDEwMTU4QTU2 NEUxMUVDODU4ODU5MTRDNEY5QUUwMi81QWNndWlrN3J5VzhDaGQ0eGx6dzB1RHpV V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVBY2d1aWs3cnlXOENoZDR4bHp3MHVEelVXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjM1Qi9FMDEwMTU4QTU2NEUxMUVDODU4ODU5MTRDNEY5QUUwMi81QWNndWlrN3J5 VzhDaGQ0eGx6dzB1RHpVV0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+8PN6eTfevAEThsTzrujVJeUT47wvUc1LatGgoJLMpzv+mKCwHiP0 xgcSqA/6Ki0oqCwgQywylkrhO28HANP+6VvM93mWUZsbX9KFdJEj8HXZ0AUFopfm qxTYgOIecd5QOjV2UDTsfFqSqxsrJVOusz7x7VIF9F9HjKUd131boDZRD+fFTBUK ADUN9nKDgPL//dfrBoNFeT3zM631YoYGV6YkEyue5AJZxO6nmcytyS/wJ2ef+teg kSkPL0f/qY9WSDADSeMtC3bc48VCMewzBmz1NAtMu36cjT1EkDee32WDz8c3nr2j zBWBq/JkEIUw8ehroSZmrUIhs5KMzH1X -----END CERTIFICATE-----Generated at Mon Apr 29 03:35:10 2024 by rpki-client on console-fra.rpki-client.org