$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft File: N3hUTiRpVIvwm1Td2APX19kPfmI.mft (raw, json) Hash identifier: GSw0tfmxAPyROgR9vFmQevjkbH1QrcRpg8TsuRDsc1Y= Subject key identifier: BA:7F:8C:F3:66:06:86:8E:9F:39:1B:B8:82:CD:76:64:98:AC:A3:5B Authority key identifier: 37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 Certificate issuer: /CN=A91F8CAA/serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft Manifest number: 21 Signing time: Wed 15 May 2024 08:45:19 +0000 Manifest this update: Wed 15 May 2024 08:45:19 +0000 Manifest next update: Wed 22 May 2024 08:45:18 +0000 Files and hashes: 1: N3hUTiRpVIvwm1Td2APX19kPfmI.crl (hash: 5yJqy1zovtYLWlV44L1yOUeJd7FvY6HR7gHo2SVa9TY=) 2: 1EC90968E1F211EEA360BE22C4F9AE02.roa (hash: t0a6+ZrtHXGmxUqi5+aimNkuYhnbf00cWYtVmydfQ2I=) 3: 1E4548E4E1F211EEA360BE22C4F9AE02.roa (hash: yQ1FIIFonh7cCfLctJ8d+Ls3IWEwlpiHbaUt9UxU1rY=) 4: 1DDBD99AE1F211EEA360BE22C4F9AE02.roa (hash: arm7UtKLc4xYXM+k/6yKC2LRVE/77rycSyZpvfnJw88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8CAA/serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Validity Not Before: May 15 08:45:19 2024 GMT Not After : May 22 08:45:18 2024 GMT Subject: CN=6644761f-4090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:67:ba:f6:82:10:15:12:5a:7f:40:14:35:a8: 2d:83:65:ca:12:3f:a6:35:60:2a:3b:fb:24:0c:36: 6b:01:1d:cd:d9:66:c1:a4:8f:90:aa:5f:64:72:36: 45:c3:3e:13:40:61:08:25:e7:5d:aa:14:ed:e8:a0: 15:2b:3d:30:6a:ef:14:f7:e4:87:73:11:f7:22:a9: 05:81:87:63:6d:f7:2c:5a:55:da:a0:79:11:1e:a6: 67:27:59:9f:d0:aa:7d:47:37:50:e5:1a:4e:ec:d2: 6b:6a:bc:aa:94:f5:67:1e:b5:86:c5:0b:bb:40:44: 1a:de:84:ca:e0:8d:74:de:e4:a1:ae:44:b7:a7:61: ca:03:46:a6:02:0a:e6:6a:da:0d:04:0e:d4:c9:37: 50:e2:0f:78:ce:49:1f:6a:d2:a1:59:b3:e4:1a:5a: 67:19:3e:bd:d5:8a:e5:a6:ea:8c:d1:01:0c:da:bb: 7e:d8:bf:c0:e5:d5:cb:94:6e:0d:90:03:4b:92:6a: 82:7d:1e:52:9e:41:77:a5:68:d1:a6:da:ca:8d:22: f4:0d:94:7b:84:c5:98:97:4e:64:81:e7:90:ff:88: 28:f4:0c:44:5c:3c:be:e2:52:02:a4:2d:72:2d:4e: 85:72:4e:96:0f:9e:16:5e:db:d6:a7:41:e3:1f:44: 56:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:7F:8C:F3:66:06:86:8E:9F:39:1B:B8:82:CD:76:64:98:AC:A3:5B X509v3 Authority Key Identifier: keyid:37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:9e:c7:9c:51:53:6b:4f:7c:12:07:b3:d3:27:15:1e:75:7a: 80:f5:30:c2:fa:1e:88:05:87:1b:e8:38:53:23:33:42:c0:48: 62:51:94:aa:9f:82:fa:86:d4:f6:e8:9e:f6:a1:62:8b:77:24: 08:5f:f9:fe:b0:c7:e9:fd:60:6c:8c:2e:d8:72:87:12:04:3c: 1f:71:92:69:38:93:43:c5:b9:3e:9d:a3:f2:56:91:a5:d0:50: aa:15:b7:7d:37:63:b0:b0:4d:43:b1:87:54:6c:d5:65:08:ed: 17:8d:69:d5:09:fb:ab:f3:c8:de:fd:bb:56:81:74:25:95:d0: e5:0a:c4:bb:6d:f4:1b:1a:0f:cf:77:d1:f5:26:57:96:ba:92: 03:dc:ea:ae:20:90:2f:c1:df:bc:cc:31:60:b4:f1:3c:be:59: 95:7e:fa:ca:2c:52:98:ad:1f:40:bf:17:13:cc:0a:18:0e:3b: f7:18:2d:0b:8f:43:d2:f3:dd:80:74:ce:38:59:b0:9f:c9:69: dc:f9:68:7b:65:35:66:d2:e5:d7:12:d7:7d:8c:fc:e6:4b:3a: 85:30:02:39:24:ae:66:7c:1b:7e:98:71:a2:7f:f4:1b:e6:81: ab:c8:7d:01:30:ce:2c:cc:4e:b1:27:d5:ef:2e:aa:27:13:a9: 68:e1:96:f4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OENBQTExMC8GA1UEBRMoMzc3ODU0NEUyNDY5NTQ4QkYwOUI1NERERDgwM0Q3RDdE OTBGN0U2MjAeFw0yNDA1MTUwODQ1MTlaFw0yNDA1MjIwODQ1MThaMBgxFjAUBgNV BAMTDTY2NDQ3NjFmLTQwOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXZ7r2ghAVElp/QBQ1qC2DZcoSP6Y1YCo7+yQMNmsBHc3ZZsGkj5CqX2RyNkXD PhNAYQgl512qFO3ooBUrPTBq7xT35IdzEfciqQWBh2Nt9yxaVdqgeREepmcnWZ/Q qn1HN1DlGk7s0mtqvKqU9WcetYbFC7tARBrehMrgjXTe5KGuRLenYcoDRqYCCuZq 2g0EDtTJN1DiD3jOSR9q0qFZs+QaWmcZPr3ViuWm6ozRAQzau37Yv8Dl1cuUbg2Q A0uSaoJ9HlKeQXelaNGm2sqNIvQNlHuExZiXTmSB55D/iCj0DERcPL7iUgKkLXIt ToVyTpYPnhZe29anQeMfRFZhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUun+M82YG ho6fORu4gs12ZJiso1swHwYDVR0jBBgwFoAUN3hUTiRpVIvwm1Td2APX19kPfmIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4Q0FBL0RDRDAyQTIwRTFF QTExRUU5OTlDNzAyQUM0RjlBRTAyL04zaFVUaVJwVkl2d20xVGQyQVBYMTlrUGZt SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTjNoVVRpUnBWSXZ3bTFUZDJBUFgxOWtQZm1JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4 Q0FBL0RDRDAyQTIwRTFFQTExRUU5OTlDNzAyQUM0RjlBRTAyL04zaFVUaVJwVkl2 d20xVGQyQVBYMTlrUGZtSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHSex5xRU2tPfBIHs9MnFR51eoD1MML6HogFhxvoOFMjM0LASGJRlKqf gvqG1PbonvahYot3JAhf+f6wx+n9YGyMLthyhxIEPB9xkmk4k0PFuT6do/JWkaXQ UKoVt303Y7CwTUOxh1Rs1WUI7ReNadUJ+6vzyN79u1aBdCWV0OUKxLtt9BsaD893 0fUmV5a6kgPc6q4gkC/B37zMMWC08Ty+WZV++sosUpitH0C/FxPMChgOO/cYLQuP Q9Lz3YB0zjhZsJ/Jadz5aHtlNWbS5dcS132M/OZLOoUwAjkkrmZ8G36YcaJ/9Bvm gavIfQEwzizMTrEn1e8uqicTqWjhlvQ= -----END CERTIFICATE-----Generated at Wed May 15 09:28:19 2024 by rpki-client on console-fra.rpki-client.org