$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft File: poNjJUbxoQeEvBpP9voLvmzsLU4.mft (raw, json) Hash identifier: mVV6bNfsIEJzdQBLijJyxSALrga9TwpZ2RoeQIs2SWo= Subject key identifier: 6C:80:FE:55:0E:26:5F:EE:8D:78:43:12:A7:04:73:8D:D9:DE:54:C8 Authority key identifier: A6:83:63:25:46:F1:A1:07:84:BC:1A:4F:F6:FA:0B:BE:6C:EC:2D:4E Certificate issuer: /CN=A91EF547/serialNumber=A683632546F1A10784BC1A4FF6FA0BBE6CEC2D4E Certificate serial: 02E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft Manifest number: 02DD Signing time: Sun 05 May 2024 03:28:37 +0000 Manifest this update: Sun 05 May 2024 03:28:36 +0000 Manifest next update: Sun 12 May 2024 03:28:36 +0000 Files and hashes: 1: poNjJUbxoQeEvBpP9voLvmzsLU4.crl (hash: 93PVwr88mSaAolE9j9x7v7eM7VJU8tLaJZtf0GsREv4=) 2: 6246B1F2609A11EDAAF70C26C4F9AE02.roa (hash: 9iuRPtJtPVpZtpxOlfWixhsZnHDnNABuW0tptS1BjqY=) 3: 636B090C609A11EDAAF70C26C4F9AE02.roa (hash: QyRkmLWgtCylcw5XwIHicG5jrFkS5lOAs5ZkrfJP/ZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.crl rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 739 (0x2e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF547/serialNumber=A683632546F1A10784BC1A4FF6FA0BBE6CEC2D4E Validity Not Before: May 5 03:28:36 2024 GMT Not After : May 12 03:28:36 2024 GMT Subject: CN=6636fce4-5302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e5:48:b1:de:b0:40:98:b3:08:9e:ec:c2:3d: 18:b6:e8:b9:6f:01:94:20:92:06:85:9a:5f:07:93: 75:72:5f:bc:50:29:42:1e:8b:81:22:34:1e:89:4b: 7e:cf:23:e0:27:ce:5a:e3:e0:b8:7f:d8:1c:67:33: 8b:8e:68:bd:50:af:ee:66:1e:62:53:ff:3a:3c:33: 18:ed:21:13:47:db:93:0b:ac:4b:5f:d4:ca:00:b3: 5d:a4:f2:38:39:54:44:f0:f4:fe:91:90:5f:af:78: 2e:51:91:ff:75:61:c9:26:13:f7:08:ca:eb:1c:62: 44:75:ee:2e:7a:68:b3:ea:ef:96:37:5e:dc:8b:e4: ed:a4:70:7c:16:9b:7d:b0:35:7b:c0:d1:76:b4:b3: ef:ef:bf:fe:90:ba:bd:6e:62:c7:e1:c8:f3:6c:a2: 2f:86:f1:69:dc:7e:30:51:f4:b9:49:5c:e8:60:81: a7:85:dd:5a:e7:8f:7e:4c:0f:01:95:cc:41:a4:7c: 1f:0c:da:73:dd:f3:c6:0b:d1:33:7d:20:a0:28:b6: 3f:c2:5e:91:4c:00:e9:bc:54:ad:b3:14:92:1c:99: 57:af:29:ca:c3:7f:e0:b1:ba:ce:1b:bb:bf:a9:26: 1f:24:dd:b3:a7:3e:89:2f:4a:07:de:f1:66:19:3d: 01:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:80:FE:55:0E:26:5F:EE:8D:78:43:12:A7:04:73:8D:D9:DE:54:C8 X509v3 Authority Key Identifier: keyid:A6:83:63:25:46:F1:A1:07:84:BC:1A:4F:F6:FA:0B:BE:6C:EC:2D:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:15:8d:5d:6b:75:11:7d:25:e2:bd:20:a8:14:82:d7:87:89: 69:e8:6d:5c:aa:d8:d3:c4:60:3e:aa:da:a2:35:a4:a2:8d:7f: c8:02:3a:7c:f3:0b:51:e1:ad:fc:1c:66:e5:92:f7:c7:77:4b: b4:2a:77:6c:5d:c3:e7:b1:04:60:19:b1:60:a7:c9:6f:bd:ab: 64:cf:2a:d3:af:3f:dd:1c:eb:36:24:92:aa:45:83:a9:34:a0: 71:aa:c8:05:a7:0a:59:4c:79:70:44:47:e3:9c:48:01:c1:dc: 56:b0:6f:99:bd:3e:df:ec:7a:72:79:88:0d:27:42:a5:2d:43: a8:d1:96:de:92:2b:73:83:b6:b5:80:c1:79:37:54:7d:bc:21: 19:b4:ca:0e:72:25:34:e9:3d:12:92:a0:bc:d2:10:c7:5f:f1: 04:0d:23:62:48:3f:f8:ab:e0:a1:79:01:62:6b:44:16:1e:1a: 46:b5:26:60:23:d2:58:f4:7f:52:6a:5a:54:7b:6b:aa:da:dc: 62:00:57:81:52:a2:0e:5b:60:47:c3:4c:86:48:84:78:56:bb: f6:2e:84:9c:d3:76:4c:88:3d:c7:1d:79:15:30:18:ab:46:a6: ae:02:a3:43:ca:6b:29:0a:83:75:4b:76:f3:63:88:9d:71:3a: 67:89:26:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY1NDcxMTAvBgNVBAUTKEE2ODM2MzI1NDZGMUExMDc4NEJDMUE0RkY2RkEwQkJF NkNFQzJENEUwHhcNMjQwNTA1MDMyODM2WhcNMjQwNTEyMDMyODM2WjAYMRYwFAYD VQQDEw02NjM2ZmNlNC01MzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOVIsd6wQJizCJ7swj0Ytui5bwGUIJIGhZpfB5N1cl+8UClCHouBIjQeiUt+ zyPgJ85a4+C4f9gcZzOLjmi9UK/uZh5iU/86PDMY7SETR9uTC6xLX9TKALNdpPI4 OVRE8PT+kZBfr3guUZH/dWHJJhP3CMrrHGJEde4uemiz6u+WN17ci+TtpHB8Fpt9 sDV7wNF2tLPv77/+kLq9bmLH4cjzbKIvhvFp3H4wUfS5SVzoYIGnhd1a549+TA8B lcxBpHwfDNpz3fPGC9EzfSCgKLY/wl6RTADpvFStsxSSHJlXrynKw3/gsbrOG7u/ qSYfJN2zpz6JL0oH3vFmGT0BVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGyA/lUO Jl/ujXhDEqcEc43Z3lTIMB8GA1UdIwQYMBaAFKaDYyVG8aEHhLwaT/b6C75s7C1O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU0Ny82MjZFMTA5NDk4 QzcxMUVDODZBMDA5NDlDNEY5QUUwMi9wb05qSlVieG9RZUV2QnBQOXZvTHZtenNM VTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BvTmpKVWJ4b1FlRXZCcFA5dm9Mdm16c0xVNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjU0Ny82MjZFMTA5NDk4QzcxMUVDODZBMDA5NDlDNEY5QUUwMi9wb05qSlVieG9R ZUV2QnBQOXZvTHZtenNMVTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHFY1da3URfSXivSCoFILXh4lp6G1cqtjTxGA+qtqiNaSijX/IAjp8 8wtR4a38HGblkvfHd0u0KndsXcPnsQRgGbFgp8lvvatkzyrTrz/dHOs2JJKqRYOp NKBxqsgFpwpZTHlwREfjnEgBwdxWsG+ZvT7f7HpyeYgNJ0KlLUOo0Zbekitzg7a1 gMF5N1R9vCEZtMoOciU06T0SkqC80hDHX/EEDSNiSD/4q+CheQFia0QWHhpGtSZg I9JY9H9SalpUe2uq2txiAFeBUqIOW2BHw0yGSIR4Vrv2LoSc03ZMiD3HHXkVMBir RqauAqNDymspCoN1S3bzY4idcTpniSbB -----END CERTIFICATE-----Generated at Sun May 5 04:34:57 2024 by rpki-client on console-fra.rpki-client.org