$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft File: 1383l1I1q95fSYn78_6TjVJ8GUg.mft (raw, json) Hash identifier: xXsEV3gdtDszUuWKynfG5WWNsVgKqeve+2VDDqCUn2Y= Subject key identifier: FC:E3:60:65:A4:77:A3:6C:91:C0:0B:D9:E6:D9:79:BA:71:0B:27:E1 Authority key identifier: D7:7F:37:97:52:35:AB:DE:5F:49:89:FB:F3:FE:93:8D:52:7C:19:48 Certificate issuer: /CN=A91F8336/serialNumber=D77F37975235ABDE5F4989FBF3FE938D527C1948 Certificate serial: 10D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft Manifest number: 10C4 Signing time: Sat 04 May 2024 18:02:23 +0000 Manifest this update: Sat 04 May 2024 18:02:22 +0000 Manifest next update: Sat 11 May 2024 18:02:22 +0000 Files and hashes: 1: 1383l1I1q95fSYn78_6TjVJ8GUg.crl (hash: u6UnYUgOfwAo1e9eOI5Qt9tsMIHvMNJgCugi7/tsSYI=) 2: 4AE6CFF8B25211EBA977EE09C4F9AE02.roa (hash: W7J7CZ7K1SQs80EMK/WL5CtVaWJnhQcFLeI1LnfC9vE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.crl rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4308 (0x10d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8336/serialNumber=D77F37975235ABDE5F4989FBF3FE938D527C1948 Validity Not Before: May 4 18:02:22 2024 GMT Not After : May 11 18:02:22 2024 GMT Subject: CN=6636782f-92b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:92:8a:5d:0f:55:cc:fe:cb:c1:73:18:ca:a4: 6c:42:e9:92:70:87:bc:52:11:c3:a2:7a:00:88:c8: b0:fe:52:9e:9d:83:0c:47:9f:0a:b1:a5:af:f9:e0: 87:ea:7e:92:3a:78:e6:35:2a:4e:95:9a:12:a7:d3: b8:92:57:5a:71:a7:a9:f4:60:04:71:2f:56:29:6a: 99:8b:21:4b:70:c3:da:0c:f0:3b:ef:69:20:28:53: a1:ba:6f:fd:cd:ad:79:4f:7f:24:b5:fe:eb:fe:bc: 03:7b:64:9a:91:a6:d1:fd:94:ab:2e:bd:f6:00:d3: 16:d1:53:ec:05:8d:a9:35:28:ca:59:26:64:c9:59: bd:0e:63:93:7e:c9:42:84:5e:e8:84:63:0a:0a:8a: d7:0f:5e:94:30:2a:a8:e6:d6:e4:f9:11:fc:f3:cd: 65:f6:cc:29:8b:83:1e:9f:57:47:ee:28:8c:19:f7: f3:f5:59:fb:cc:f8:70:b7:13:5a:ef:66:3e:39:20: 19:a1:88:a8:68:5c:59:77:27:b3:47:a9:00:bf:d4: 0d:09:32:d4:74:7f:dc:8c:77:dd:c1:87:64:e6:01: 94:5e:02:7e:37:6f:6e:8b:3b:88:8a:c8:b7:1d:14: 73:7b:36:32:ca:30:07:dd:2c:c8:0e:3d:e0:2b:be: 3e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E3:60:65:A4:77:A3:6C:91:C0:0B:D9:E6:D9:79:BA:71:0B:27:E1 X509v3 Authority Key Identifier: keyid:D7:7F:37:97:52:35:AB:DE:5F:49:89:FB:F3:FE:93:8D:52:7C:19:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:38:c5:36:f0:b8:4d:ea:d1:38:ec:16:44:b2:92:7f:ae:e6: 5a:2e:ae:08:6d:35:9a:05:26:23:33:90:66:da:b1:dc:2e:86: 08:62:8b:40:f5:78:a5:1a:07:3b:30:94:01:87:48:6b:8c:63: 2c:15:7a:23:1e:1e:5b:75:81:31:6c:83:13:62:5a:d4:7c:f8: 67:8c:f3:92:ed:44:b5:75:16:31:3e:0a:37:2b:3e:b8:f5:01: 51:63:cb:f7:fb:28:4f:aa:9d:84:1b:23:c5:73:a6:50:61:58: 0c:be:89:d2:ed:73:f5:0a:e1:66:5e:91:a0:33:fa:3d:52:c3: 70:b4:88:31:f7:d5:9b:3c:6d:48:b3:1d:ec:55:09:63:19:74: 8a:9c:59:bb:be:f2:76:12:52:fb:36:97:bd:ec:2e:82:20:08: b9:e9:e1:0f:72:f6:d2:06:15:34:3b:88:40:aa:f5:04:8e:87: fc:31:ee:e2:5d:ca:9d:85:c4:39:f0:5f:a7:ed:68:45:45:32: cd:d4:ed:37:36:8b:73:a3:a0:5e:fd:da:c2:13:98:97:75:f4: 8c:8e:ff:86:ac:0b:c0:57:bd:4f:e6:da:30:b4:04:de:36:f9: 08:48:8e:40:81:31:e3:fd:48:c5:8d:ee:7e:62:82:7f:a7:4c: a9:23:f7:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICENQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzMzYxMTAvBgNVBAUTKEQ3N0YzNzk3NTIzNUFCREU1RjQ5ODlGQkYzRkU5MzhE NTI3QzE5NDgwHhcNMjQwNTA0MTgwMjIyWhcNMjQwNTExMTgwMjIyWjAYMRYwFAYD VQQDEw02NjM2NzgyZi05MmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA25KKXQ9VzP7LwXMYyqRsQumScIe8UhHDonoAiMiw/lKenYMMR58KsaWv+eCH 6n6SOnjmNSpOlZoSp9O4kldacaep9GAEcS9WKWqZiyFLcMPaDPA772kgKFOhum/9 za15T38ktf7r/rwDe2SakabR/ZSrLr32ANMW0VPsBY2pNSjKWSZkyVm9DmOTfslC hF7ohGMKCorXD16UMCqo5tbk+RH8881l9swpi4Men1dH7iiMGffz9Vn7zPhwtxNa 72Y+OSAZoYioaFxZdyezR6kAv9QNCTLUdH/cjHfdwYdk5gGUXgJ+N29uizuIisi3 HRRzezYyyjAH3SzIDj3gK74+0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPzjYGWk d6NskcAL2ebZebpxCyfhMB8GA1UdIwQYMBaAFNd/N5dSNaveX0mJ+/P+k41SfBlI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODMzNi8zN0UxNjczRUZE MUQxMUU4QjNFMzZFNTdDNEY5QUUwMi8xMzgzbDFJMXE5NWZTWW43OF82VGpWSjhH VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEzODNsMUkxcTk1ZlNZbjc4XzZUalZKOEdVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODMzNi8zN0UxNjczRUZEMUQxMUU4QjNFMzZFNTdDNEY5QUUwMi8xMzgzbDFJMXE5 NWZTWW43OF82VGpWSjhHVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0OMU28LhN6tE47BZEspJ/ruZaLq4IbTWaBSYjM5Bm2rHcLoYIYotA 9XilGgc7MJQBh0hrjGMsFXojHh5bdYExbIMTYlrUfPhnjPOS7US1dRYxPgo3Kz64 9QFRY8v3+yhPqp2EGyPFc6ZQYVgMvonS7XP1CuFmXpGgM/o9UsNwtIgx99WbPG1I sx3sVQljGXSKnFm7vvJ2ElL7Npe97C6CIAi56eEPcvbSBhU0O4hAqvUEjof8Me7i XcqdhcQ58F+n7WhFRTLN1O03Notzo6Be/drCE5iXdfSMjv+GrAvAV71P5towtATe NvkISI5AgTHj/UjFje5+YoJ/p0ypI/eb -----END CERTIFICATE-----Generated at Sat May 4 20:37:20 2024 by rpki-client on console-fra.rpki-client.org