$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft File: 53BQiRv4knQyZQtwbyv-3ZKhEck.mft (raw, json) Hash identifier: mBA2EA3qvs/+2zx5tJCzkvMvaWETj8s9SoRYIfVb5OY= Subject key identifier: BE:21:B9:63:CB:94:84:6F:57:43:B6:93:CC:85:38:7C:78:3B:8C:57 Authority key identifier: E7:70:50:89:1B:F8:92:74:32:65:0B:70:6F:2B:FE:DD:92:A1:11:C9 Certificate issuer: /CN=A91F8ADF/serialNumber=E77050891BF8927432650B706F2BFEDD92A111C9 Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft Manifest number: BA Signing time: Sun 05 May 2024 06:30:05 +0000 Manifest this update: Sun 05 May 2024 06:30:04 +0000 Manifest next update: Sun 12 May 2024 06:30:04 +0000 Files and hashes: 1: 53BQiRv4knQyZQtwbyv-3ZKhEck.crl (hash: GzW+a5EtwDjPoIl71ksybmp4pzGHDL9jT6v+5OSLtto=) 2: F3210638F06D11ED9055A212C4F9AE02.roa (hash: 2X5jx6X75tKEOxFsKjMVap1yMnHeZJOzPkaHa0il1ag=) 3: F2948C58F06D11ED9055A212C4F9AE02.roa (hash: LjeOvWFRejV1Xk0x//k7198FJTyV/phTAb3tYSdVkIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.crl rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 06:30:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8ADF/serialNumber=E77050891BF8927432650B706F2BFEDD92A111C9 Validity Not Before: May 5 06:30:04 2024 GMT Not After : May 12 06:30:04 2024 GMT Subject: CN=6637276d-4532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8b:11:cd:9e:2f:ab:3a:f6:9c:5b:63:74:1a: 81:c8:36:5d:22:bf:c5:4e:55:ac:ad:09:ca:d1:56: 8d:5f:bf:93:1a:a9:cf:d5:07:5c:07:79:ec:3b:71: e6:5f:aa:92:47:cf:f2:e2:e3:c3:fc:17:21:65:1f: c0:42:22:93:27:cb:64:33:8b:08:3b:59:b2:76:e6: 32:1f:fa:34:61:36:f4:62:26:fe:47:2d:7c:42:9e: c0:3d:be:cd:7d:11:91:8a:fb:db:03:39:23:e2:ff: 53:ae:09:c6:52:07:ec:11:05:5c:c8:5e:88:35:ec: 7c:67:65:ba:1a:3b:5d:92:d1:b8:e5:23:10:bb:9e: 9b:c0:8c:d1:a8:17:ec:77:8f:ed:7d:96:fc:8f:23: 8c:83:be:e4:a0:c1:76:b8:12:be:aa:b3:9a:23:fb: 98:78:96:d6:36:1b:55:68:f0:a0:09:a8:74:f5:9c: d9:71:69:f6:48:c4:54:1b:87:d2:bd:35:ac:93:46: 85:8b:08:9e:9e:5f:a0:28:fc:37:73:46:c2:ed:ac: c7:ad:3f:4d:68:ba:77:ee:6f:7f:f5:73:8e:89:1d: 19:1d:17:5e:ed:16:bb:a6:c4:9a:55:0d:4b:c2:c3: 77:ce:fe:ec:c8:1b:60:24:4f:41:d0:7d:ac:a2:09: d6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:21:B9:63:CB:94:84:6F:57:43:B6:93:CC:85:38:7C:78:3B:8C:57 X509v3 Authority Key Identifier: keyid:E7:70:50:89:1B:F8:92:74:32:65:0B:70:6F:2B:FE:DD:92:A1:11:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:89:61:76:36:c9:12:e9:71:70:26:2b:c9:78:a9:20:ef:b1: ff:d8:d8:6a:b0:8e:8d:ba:51:72:d0:fc:89:b8:71:1d:0b:a3: ca:af:db:d2:af:50:d7:bc:62:fb:8a:18:bc:8c:65:c0:01:e4: 2e:f3:a0:8c:47:0f:cd:37:ee:19:20:2b:e5:e6:46:4f:5f:ec: 21:8f:83:0a:27:df:bb:25:81:7b:a8:22:a6:7c:db:e6:74:0e: fd:b9:8f:2c:a6:43:96:c8:95:01:6b:86:01:89:9e:42:3d:94: 50:f9:ab:49:e2:cf:12:e0:14:74:3f:8e:05:37:b1:b9:a3:e2: e2:56:42:ce:dd:78:be:5d:85:58:58:36:e2:ba:5d:e6:e2:ca: 97:0e:b1:9c:02:29:df:60:f3:82:5c:81:40:d4:22:af:4d:41: 87:32:da:24:1a:5c:33:3c:28:5f:ed:0f:8b:2a:13:71:4d:a2: 87:70:d7:14:8a:7d:2a:ed:99:a6:a7:bb:b0:74:19:6e:ee:77: a3:bf:c7:80:23:14:5a:c1:fe:8b:72:d8:e7:47:f3:a2:2c:9e: d2:3c:e0:75:ae:ce:97:2a:c0:53:40:40:f5:a9:26:4e:d4:35: ae:ef:41:3a:87:c8:34:39:0f:ea:0b:c5:ad:18:d5:51:32:a9: 12:0c:14:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBREYxMTAvBgNVBAUTKEU3NzA1MDg5MUJGODkyNzQzMjY1MEI3MDZGMkJGRURE OTJBMTExQzkwHhcNMjQwNTA1MDYzMDA0WhcNMjQwNTEyMDYzMDA0WjAYMRYwFAYD VQQDEw02NjM3Mjc2ZC00NTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4YsRzZ4vqzr2nFtjdBqByDZdIr/FTlWsrQnK0VaNX7+TGqnP1QdcB3nsO3Hm X6qSR8/y4uPD/BchZR/AQiKTJ8tkM4sIO1myduYyH/o0YTb0Yib+Ry18Qp7APb7N fRGRivvbAzkj4v9TrgnGUgfsEQVcyF6INex8Z2W6GjtdktG45SMQu56bwIzRqBfs d4/tfZb8jyOMg77koMF2uBK+qrOaI/uYeJbWNhtVaPCgCah09ZzZcWn2SMRUG4fS vTWsk0aFiwienl+gKPw3c0bC7azHrT9NaLp37m9/9XOOiR0ZHRde7Ra7psSaVQ1L wsN3zv7syBtgJE9B0H2sognWqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL4huWPL lIRvV0O2k8yFOHx4O4xXMB8GA1UdIwQYMBaAFOdwUIkb+JJ0MmULcG8r/t2SoRHJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEFERi9DREY0MDVDMkYw NjgxMUVEQkI5NzhFMkRDNEY5QUUwMi81M0JRaVJ2NGtuUXlaUXR3Ynl2LTNaS2hF Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUzQlFpUnY0a25ReVpRdHdieXYtM1pLaEVjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEFERi9DREY0MDVDMkYwNjgxMUVEQkI5NzhFMkRDNEY5QUUwMi81M0JRaVJ2NGtu UXlaUXR3Ynl2LTNaS2hFY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfiWF2NskS6XFwJivJeKkg77H/2NhqsI6NulFy0PyJuHEdC6PKr9vS r1DXvGL7ihi8jGXAAeQu86CMRw/NN+4ZICvl5kZPX+whj4MKJ9+7JYF7qCKmfNvm dA79uY8spkOWyJUBa4YBiZ5CPZRQ+atJ4s8S4BR0P44FN7G5o+LiVkLO3Xi+XYVY WDbiul3m4sqXDrGcAinfYPOCXIFA1CKvTUGHMtokGlwzPChf7Q+LKhNxTaKHcNcU in0q7Zmmp7uwdBlu7nejv8eAIxRawf6LctjnR/OiLJ7SPOB1rs6XKsBTQED1qSZO 1DWu70E6h8g0OQ/qC8WtGNVRMqkSDBSX -----END CERTIFICATE-----Generated at Sun May 5 08:39:16 2024 by rpki-client on console-fra.rpki-client.org