$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft File: _lDDhdnrGeLvoU-jWtpb3qW0VtM.mft (raw, json) Hash identifier: dgZu8qCqnYwQvG8DZrbPsSPdaSiU5apw1tgqGm2U53A= Subject key identifier: B2:A6:7A:78:11:C0:5E:90:FD:54:54:FB:06:D4:AE:E9:70:9B:1E:02 Authority key identifier: FE:50:C3:85:D9:EB:19:E2:EF:A1:4F:A3:5A:DA:5B:DE:A5:B4:56:D3 Certificate issuer: /CN=A91F17B1/serialNumber=FE50C385D9EB19E2EFA14FA35ADA5BDEA5B456D3 Certificate serial: 04BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft Manifest number: 0498 Signing time: Mon 06 May 2024 06:36:22 +0000 Manifest this update: Mon 06 May 2024 06:36:22 +0000 Manifest next update: Mon 13 May 2024 06:36:22 +0000 Files and hashes: 1: _lDDhdnrGeLvoU-jWtpb3qW0VtM.crl (hash: vCF54w2cUNfuElA+DjsW17UdiPkhIWkAfe4a2lRg+sc=) 2: 65DFCD4A884D11EE8423C486C4F9AE02.roa (hash: 0n6L5DwgQwmnaLtWhoOtX9wV86ev0397x1UJ2piOano=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.crl rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 06:36:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1214 (0x4be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17B1/serialNumber=FE50C385D9EB19E2EFA14FA35ADA5BDEA5B456D3 Validity Not Before: May 6 06:36:22 2024 GMT Not After : May 13 06:36:22 2024 GMT Subject: CN=66387a66-1c2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f0:71:e5:19:a6:26:2a:d0:01:a6:17:c7:ba: 5b:cd:ae:84:40:1f:0a:a9:52:31:ed:0a:61:9a:60: 25:98:57:af:2a:9b:e8:42:00:a8:b8:c6:88:15:ef: c7:39:b0:7b:00:ad:a1:dc:b8:bd:88:10:95:48:1b: d7:e7:70:84:d2:c3:66:37:d9:23:30:2d:b2:d3:88: 43:c5:95:b5:b8:f0:65:2b:1a:2c:f7:c9:ee:9e:00: a1:5e:90:a2:d4:ea:b5:f4:2a:3f:f4:75:6f:33:9f: b0:ae:d7:f0:2f:fe:29:ab:8e:f7:64:09:47:2c:9b: b3:2c:ed:86:d7:45:20:01:d4:10:85:88:48:d7:77: d1:33:5a:fa:d8:67:19:5b:a4:3c:b9:62:b4:ab:2c: d1:61:03:8b:b7:86:6e:0b:ba:b5:be:8e:12:fb:0e: 65:a1:59:e3:4f:38:de:cb:74:eb:e1:30:6d:00:9e: 28:85:a7:16:47:3d:0e:f2:90:11:80:fa:ac:b9:cc: 62:a7:41:8a:2f:06:5c:32:9c:14:da:dc:e8:47:02: 99:cf:1d:01:f9:88:b2:22:ec:85:6f:3e:49:27:ec: 77:4b:8d:63:8e:a3:d0:19:91:6b:77:5d:f3:47:72: 6d:13:69:0b:37:ea:1a:db:df:66:83:f3:b3:62:d5: 6a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A6:7A:78:11:C0:5E:90:FD:54:54:FB:06:D4:AE:E9:70:9B:1E:02 X509v3 Authority Key Identifier: keyid:FE:50:C3:85:D9:EB:19:E2:EF:A1:4F:A3:5A:DA:5B:DE:A5:B4:56:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:9f:61:ff:53:f1:ef:7a:54:9c:b5:04:37:ed:f1:db:91:60: be:2e:7c:9a:24:9f:8c:c0:8e:0c:9c:21:4d:1c:6a:d0:7a:21: 9c:58:e0:af:d3:39:c8:80:35:32:68:74:3d:89:d0:17:46:aa: 6f:32:72:98:61:76:fd:40:79:d7:34:4b:d3:ef:87:32:51:fa: 15:91:4a:c6:1b:2e:a3:e0:2e:be:ec:0f:af:e4:89:2b:6c:42: 9e:3c:61:9c:16:28:0d:e6:46:ec:71:06:72:82:db:47:b0:df: 9a:0f:90:82:37:3d:f1:17:f3:50:04:cd:25:98:5a:3c:77:89: 25:f9:3a:58:6f:fe:ef:66:1e:25:4d:dc:fa:80:e2:85:99:7a: 16:dc:48:6f:fb:89:07:88:64:3b:db:cc:9e:60:82:29:83:58: fd:52:cc:91:3a:8e:7f:c7:3b:7d:3a:9a:90:45:83:03:5c:29: a5:fc:7c:d4:90:6f:a1:be:30:c3:69:aa:4e:bf:d1:ea:73:43: a3:28:33:b5:7a:c2:c4:a0:23:2c:b9:6c:b5:82:eb:e5:fa:21: 17:7b:bb:88:97:84:e5:4a:df:1b:39:7c:e8:70:ee:e3:b5:58: 4e:79:18:33:79:34:d0:0e:22:c3:fd:56:71:df:1a:93:31:52: 34:e5:88:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3QjExMTAvBgNVBAUTKEZFNTBDMzg1RDlFQjE5RTJFRkExNEZBMzVBREE1QkRF QTVCNDU2RDMwHhcNMjQwNTA2MDYzNjIyWhcNMjQwNTEzMDYzNjIyWjAYMRYwFAYD VQQDEw02NjM4N2E2Ni0xYzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/Bx5RmmJirQAaYXx7pbza6EQB8KqVIx7QphmmAlmFevKpvoQgCouMaIFe/H ObB7AK2h3Li9iBCVSBvX53CE0sNmN9kjMC2y04hDxZW1uPBlKxos98nungChXpCi 1Oq19Co/9HVvM5+wrtfwL/4pq473ZAlHLJuzLO2G10UgAdQQhYhI13fRM1r62GcZ W6Q8uWK0qyzRYQOLt4ZuC7q1vo4S+w5loVnjTzjey3Tr4TBtAJ4ohacWRz0O8pAR gPqsucxip0GKLwZcMpwU2tzoRwKZzx0B+YiyIuyFbz5JJ+x3S41jjqPQGZFrd13z R3JtE2kLN+oa299mg/OzYtVqMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLKmengR wF6Q/VRU+wbUrulwmx4CMB8GA1UdIwQYMBaAFP5Qw4XZ6xni76FPo1raW96ltFbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdCMS82NkU0RTRGNkZC NDAxMUVCQkFCMERBM0JDNEY5QUUwMi9fbEREaGRuckdlTHZvVS1qV3RwYjNxVzBW dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19sRERoZG5yR2VMdm9VLWpXdHBiM3FXMFZ0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTdCMS82NkU0RTRGNkZCNDAxMUVCQkFCMERBM0JDNEY5QUUwMi9fbEREaGRuckdl THZvVS1qV3RwYjNxVzBWdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHn2H/U/HvelSctQQ37fHbkWC+LnyaJJ+MwI4MnCFNHGrQeiGcWOCv 0znIgDUyaHQ9idAXRqpvMnKYYXb9QHnXNEvT74cyUfoVkUrGGy6j4C6+7A+v5Ikr bEKePGGcFigN5kbscQZygttHsN+aD5CCNz3xF/NQBM0lmFo8d4kl+TpYb/7vZh4l Tdz6gOKFmXoW3Ehv+4kHiGQ728yeYIIpg1j9UsyROo5/xzt9OpqQRYMDXCml/HzU kG+hvjDDaapOv9Hqc0OjKDO1esLEoCMsuWy1guvl+iEXe7uIl4TlSt8bOXzocO7j tVhOeRgzeTTQDiLD/VZx3xqTMVI05Ygx -----END CERTIFICATE-----Generated at Mon May 6 09:09:01 2024 by rpki-client on console-fra.rpki-client.org