$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft File: SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft (raw, json) Hash identifier: T7eVPAduQXfxk3okOyKR5ARFmf3Qquucd8L2Qq7Z6qQ= Subject key identifier: 8E:42:60:7B:E2:9E:EA:41:76:60:25:1C:35:70:A2:30:39:63:D2:94 Authority key identifier: 4B:3C:69:56:B0:44:90:01:00:85:8C:0D:E5:0E:B9:A4:62:B0:8C:C7 Certificate issuer: /CN=A91FB0D0/serialNumber=4B3C6956B044900100858C0DE50EB9A462B08CC7 Certificate serial: 022E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft Manifest number: 022C Signing time: Wed 01 May 2024 04:21:15 +0000 Manifest this update: Wed 01 May 2024 04:21:14 +0000 Manifest next update: Wed 08 May 2024 04:21:14 +0000 Files and hashes: 1: SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl (hash: bfK1/64P+DKIK8YAIOvX+rdMlHLdtZWnh3myE/LKJhg=) 2: D9EEB222DBFC11EC82E85E69C4F9AE02.roa (hash: jHd8qJcQlJOSStuF+vj3hLpCyj/EjA+DE0KlXQP34pw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 558 (0x22e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB0D0/serialNumber=4B3C6956B044900100858C0DE50EB9A462B08CC7 Validity Not Before: May 1 04:21:14 2024 GMT Not After : May 8 04:21:14 2024 GMT Subject: CN=6631c33a-7fe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d6:88:08:1e:e7:66:48:03:c1:7b:37:63:55: 54:92:dc:4a:a2:65:b9:70:e3:eb:4e:6e:8e:05:96: 06:a0:00:2f:91:47:a8:93:29:0e:33:cb:3f:bb:eb: 14:04:5b:0e:a2:bc:ed:22:97:d4:59:41:3c:aa:d9: bc:28:32:4b:b8:df:8b:48:15:d9:94:3d:44:14:56: 2e:e6:98:16:8a:99:3b:64:eb:65:be:d9:61:13:b4: d5:7e:fc:da:c2:bc:16:0c:a4:20:ac:3b:85:a0:af: 58:be:9a:73:32:d3:ef:de:df:21:06:fa:da:6b:b9: 6e:b1:7e:31:2b:1f:5c:02:b1:eb:c8:52:98:d2:f8: 7b:bd:4e:56:ed:fe:b6:74:09:87:ec:c7:79:84:7f: f1:56:a7:6e:00:72:00:44:e6:63:7d:da:28:39:6b: f4:a9:ad:95:e5:fc:dd:1c:fc:ed:aa:1f:e1:e5:9f: 00:1e:65:91:de:23:52:e5:fa:0a:39:3a:01:34:8e: e2:f3:7a:fe:35:d9:50:d8:a9:b3:bc:2d:cd:f4:41: e9:9b:be:ea:7d:45:04:f1:2d:68:df:48:88:a1:d8: d1:4a:10:85:c3:cd:2a:6d:dc:f8:ea:9e:80:64:80: 71:76:db:56:c2:a6:95:11:45:5e:b1:b3:e7:88:33: 75:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:42:60:7B:E2:9E:EA:41:76:60:25:1C:35:70:A2:30:39:63:D2:94 X509v3 Authority Key Identifier: keyid:4B:3C:69:56:B0:44:90:01:00:85:8C:0D:E5:0E:B9:A4:62:B0:8C:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:3d:b3:8d:50:e4:45:d8:dc:d7:9c:dc:b6:2c:a0:c8:ba:87: f4:f9:7a:d9:e8:db:53:48:f4:86:cf:c7:7d:6c:75:f8:00:50: 8d:8d:f3:31:37:5f:88:e7:8e:16:0c:48:7f:89:1b:1a:21:f5: ae:61:17:e4:73:25:ba:71:4b:53:7c:8a:e0:ce:a7:0d:14:58: f5:0f:5f:ed:e8:fb:36:4c:ee:6f:66:9d:56:7d:7b:89:ac:82: cb:58:a2:32:a0:9a:60:45:bb:43:c8:bd:7b:b1:77:2f:a6:f7: 47:f1:f0:bd:55:09:41:f1:ad:4c:6c:07:44:93:79:19:b4:6d: 47:fa:aa:ad:35:d0:a0:b5:23:c4:46:a3:2c:38:8b:d6:f3:50: 01:04:8b:09:4a:6d:9c:10:09:ac:06:e0:a4:0e:99:4e:f4:23: 83:10:b5:97:5b:87:ed:66:1d:1a:33:10:3f:2a:be:35:53:8e: fe:04:cd:61:b0:13:36:77:b8:2b:6c:91:93:e8:78:6d:29:22: 01:d3:8e:b7:db:75:7c:17:f9:44:b1:c7:36:a9:35:12:9e:5b: e9:c3:5e:71:5a:bd:b2:67:a1:9d:5a:5e:24:7f:b2:d0:c9:ef: 7a:d2:03:c6:f1:7f:fd:d5:a3:65:0d:b7:05:48:d7:36:9e:03: bb:c5:a0:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIwRDAxMTAvBgNVBAUTKDRCM0M2OTU2QjA0NDkwMDEwMDg1OEMwREU1MEVCOUE0 NjJCMDhDQzcwHhcNMjQwNTAxMDQyMTE0WhcNMjQwNTA4MDQyMTE0WjAYMRYwFAYD VQQDEw02NjMxYzMzYS03ZmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NaICB7nZkgDwXs3Y1VUktxKomW5cOPrTm6OBZYGoAAvkUeokykOM8s/u+sU BFsOorztIpfUWUE8qtm8KDJLuN+LSBXZlD1EFFYu5pgWipk7ZOtlvtlhE7TVfvza wrwWDKQgrDuFoK9YvppzMtPv3t8hBvraa7lusX4xKx9cArHryFKY0vh7vU5W7f62 dAmH7Md5hH/xVqduAHIAROZjfdooOWv0qa2V5fzdHPztqh/h5Z8AHmWR3iNS5foK OToBNI7i83r+NdlQ2KmzvC3N9EHpm77qfUUE8S1o30iIodjRShCFw80qbdz46p6A ZIBxdttWwqaVEUVesbPniDN1EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI5CYHvi nupBdmAlHDVwojA5Y9KUMB8GA1UdIwQYMBaAFEs8aVawRJABAIWMDeUOuaRisIzH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjBEMC85M0ZCN0Y0RURC RjYxMUVDOEI0MkY0NzVDNEY5QUUwMi9TenhwVnJCRWtBRUFoWXdONVE2NXBHS3dq TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1N6eHBWckJFa0FFQWhZd041UTY1cEdLd2pNYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjBEMC85M0ZCN0Y0RURCRjYxMUVDOEI0MkY0NzVDNEY5QUUwMi9TenhwVnJCRWtB RUFoWXdONVE2NXBHS3dqTWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIPbONUORF2NzXnNy2LKDIuof0+XrZ6NtTSPSGz8d9bHX4AFCNjfMx N1+I544WDEh/iRsaIfWuYRfkcyW6cUtTfIrgzqcNFFj1D1/t6Ps2TO5vZp1WfXuJ rILLWKIyoJpgRbtDyL17sXcvpvdH8fC9VQlB8a1MbAdEk3kZtG1H+qqtNdCgtSPE RqMsOIvW81ABBIsJSm2cEAmsBuCkDplO9CODELWXW4ftZh0aMxA/Kr41U47+BM1h sBM2d7grbJGT6HhtKSIB046323V8F/lEscc2qTUSnlvpw15xWr2yZ6GdWl4kf7LQ ye960gPG8X/91aNlDbcFSNc2ngO7xaCr -----END CERTIFICATE-----Generated at Wed May 1 05:59:16 2024 by rpki-client on console-fra.rpki-client.org