$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft File: v49Do1Dk9qJgvwPtS9_BqB2itaE.mft (raw, json) Hash identifier: 9itPmIj0DeQr2WrYAYg9X16nkZfHz3EKNaI7DEJcoXg= Subject key identifier: 34:15:F7:DD:AB:55:B8:F7:A6:63:9C:78:A1:C3:F6:C3:85:9C:CA:83 Authority key identifier: BF:8F:43:A3:50:E4:F6:A2:60:BF:03:ED:4B:DF:C1:A8:1D:A2:B5:A1 Certificate issuer: /CN=A91FAB62/serialNumber=BF8F43A350E4F6A260BF03ED4BDFC1A81DA2B5A1 Certificate serial: 05AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft Manifest number: 058F Signing time: Sun 05 May 2024 00:54:52 +0000 Manifest this update: Sun 05 May 2024 00:54:51 +0000 Manifest next update: Sun 12 May 2024 00:54:51 +0000 Files and hashes: 1: v49Do1Dk9qJgvwPtS9_BqB2itaE.crl (hash: ILXTbCALzOOrQ67ZRj0RZYKolrVse9C5yytDDeTvGa4=) 2: 606DB4B298D111EB84F5A23CC4F9AE02.roa (hash: HuIL+t/3wMddPUcF7ctURnPOPzSEH5hDsX9pnO4ksro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.crl rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1453 (0x5ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAB62/serialNumber=BF8F43A350E4F6A260BF03ED4BDFC1A81DA2B5A1 Validity Not Before: May 5 00:54:51 2024 GMT Not After : May 12 00:54:51 2024 GMT Subject: CN=6636d8dc-158c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6d:56:a7:ac:1a:cd:5f:18:1b:2a:4f:b3:e6: 4d:a2:bd:81:14:92:8a:5b:76:17:7b:12:53:60:b2: db:08:37:9c:c9:95:aa:1f:54:9f:9d:4e:3f:11:54: 2c:39:08:43:c0:f5:12:91:b3:b0:e3:77:61:65:69: 92:3d:9a:ee:21:bd:53:41:2b:42:38:d3:38:c6:24: 14:fd:a7:4d:03:6d:eb:6e:c6:8b:93:64:57:c9:05: a7:c8:9d:53:d0:e3:e4:bf:b4:b5:26:3b:5f:a9:db: 70:ac:fe:c2:1d:5f:fb:18:e1:7f:57:3e:5c:72:70: fe:83:dc:de:e5:29:c3:31:dd:d2:82:0c:3b:65:5b: 2f:c6:0b:db:66:88:f7:12:b9:53:dd:df:eb:de:5a: fd:a4:64:59:ec:80:34:ea:86:89:52:aa:00:49:94: 44:5c:2b:27:80:7f:9b:e4:64:27:56:5d:d7:31:1e: 14:01:52:ec:69:3c:c0:fa:bc:24:09:11:dd:df:5d: 1c:73:1c:29:c1:42:e8:5b:46:90:20:68:22:8d:a8: 48:81:55:7e:4a:60:a0:ed:60:bd:f3:66:8f:a8:3f: 4e:a4:ef:f7:15:8a:ef:e1:45:43:0a:76:38:c2:38: 5b:a7:82:f3:04:bf:b6:f0:54:e3:2c:78:77:8a:71: 47:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:15:F7:DD:AB:55:B8:F7:A6:63:9C:78:A1:C3:F6:C3:85:9C:CA:83 X509v3 Authority Key Identifier: keyid:BF:8F:43:A3:50:E4:F6:A2:60:BF:03:ED:4B:DF:C1:A8:1D:A2:B5:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:50:a8:56:7b:24:4a:f5:e7:83:b9:10:79:ef:fb:22:ce:ea: 3e:69:5c:0b:52:d2:fa:32:aa:6b:58:f2:d0:2d:ca:2d:e6:30: 2a:c5:22:99:91:98:24:b2:c0:74:80:70:59:92:58:4b:55:9d: 94:7a:40:37:6c:d5:5e:51:12:f8:31:1e:36:28:93:94:4a:1e: c3:7d:3f:6b:dd:d3:2c:68:15:ce:40:6a:ec:2a:16:a0:58:40: 84:2b:1d:53:0b:7d:51:ce:c6:f9:c1:7f:ad:f3:bd:a8:fb:84: 59:aa:16:1e:88:35:b1:70:87:fd:74:c8:b7:52:d7:b3:39:f4: 93:71:c9:93:5d:66:e6:8b:81:2d:29:96:41:9c:a3:46:b4:cd: ea:8b:62:2b:a2:16:10:c3:a2:9c:ea:5d:e5:ed:5e:f4:b5:1b: a6:1b:d5:2d:1d:75:a4:3f:e0:ab:b9:4e:9c:3c:52:25:bd:54: b8:f0:dd:7f:f7:09:e1:a8:06:7d:b2:1a:e5:c1:6d:05:ba:3c: 6a:08:be:a7:9f:b9:dc:55:93:46:01:97:24:db:a7:e7:39:1d: d7:e3:94:63:16:42:e1:a4:c5:28:06:69:44:af:d9:5c:67:9a: e9:40:b7:23:b1:46:ed:42:ae:a3:bd:f8:0d:06:5e:95:29:88: c8:64:6e:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFCNjIxMTAvBgNVBAUTKEJGOEY0M0EzNTBFNEY2QTI2MEJGMDNFRDRCREZDMUE4 MURBMkI1QTEwHhcNMjQwNTA1MDA1NDUxWhcNMjQwNTEyMDA1NDUxWjAYMRYwFAYD VQQDEw02NjM2ZDhkYy0xNThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt21Wp6wazV8YGypPs+ZNor2BFJKKW3YXexJTYLLbCDecyZWqH1SfnU4/EVQs OQhDwPUSkbOw43dhZWmSPZruIb1TQStCONM4xiQU/adNA23rbsaLk2RXyQWnyJ1T 0OPkv7S1JjtfqdtwrP7CHV/7GOF/Vz5ccnD+g9ze5SnDMd3Sggw7ZVsvxgvbZoj3 ErlT3d/r3lr9pGRZ7IA06oaJUqoASZREXCsngH+b5GQnVl3XMR4UAVLsaTzA+rwk CRHd310ccxwpwULoW0aQIGgijahIgVV+SmCg7WC982aPqD9OpO/3FYrv4UVDCnY4 wjhbp4LzBL+28FTjLHh3inFHTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDQV992r Vbj3pmOceKHD9sOFnMqDMB8GA1UdIwQYMBaAFL+PQ6NQ5PaiYL8D7UvfwagdorWh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUI2Mi84MkU5M0YyQzk4 Q0YxMUVCQjc1NzJBM0FDNEY5QUUwMi92NDlEbzFEazlxSmd2d1B0UzlfQnFCMml0 YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Y0OURvMURrOXFKZ3Z3UHRTOV9CcUIyaXRhRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUI2Mi84MkU5M0YyQzk4Q0YxMUVCQjc1NzJBM0FDNEY5QUUwMi92NDlEbzFEazlx Smd2d1B0UzlfQnFCMml0YUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2UKhWeyRK9eeDuRB57/sizuo+aVwLUtL6MqprWPLQLcot5jAqxSKZ kZgkssB0gHBZklhLVZ2UekA3bNVeURL4MR42KJOUSh7DfT9r3dMsaBXOQGrsKhag WECEKx1TC31Rzsb5wX+t872o+4RZqhYeiDWxcIf9dMi3UtezOfSTccmTXWbmi4Et KZZBnKNGtM3qi2IrohYQw6Kc6l3l7V70tRumG9UtHXWkP+CruU6cPFIlvVS48N1/ 9wnhqAZ9shrlwW0FujxqCL6nn7ncVZNGAZck26fnOR3X45RjFkLhpMUoBmlEr9lc Z5rpQLcjsUbtQq6jvfgNBl6VKYjIZG4R -----END CERTIFICATE-----Generated at Sun May 5 02:33:40 2024 by rpki-client on console-fra.rpki-client.org