$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft File: 9UFCkkKfU9qxhrQuVkFJWagL6gg.mft (raw, json) Hash identifier: M5EB3zw+5Uvdni6pZYKgBuvXDaHb3B6f+OMuo3KLs/Q= Subject key identifier: 32:E2:85:1A:94:12:85:0E:0E:0E:9E:50:7B:4B:16:C7:3B:53:8D:4D Authority key identifier: F5:41:42:92:42:9F:53:DA:B1:86:B4:2E:56:41:49:59:A8:0B:EA:08 Certificate issuer: /CN=A91FB92B/serialNumber=F5414292429F53DAB186B42E56414959A80BEA08 Certificate serial: 80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft Manifest number: 7E Signing time: Fri 17 May 2024 07:20:49 +0000 Manifest this update: Fri 17 May 2024 07:20:48 +0000 Manifest next update: Fri 24 May 2024 07:20:48 +0000 Files and hashes: 1: 9UFCkkKfU9qxhrQuVkFJWagL6gg.crl (hash: 3XLwBuDkzq5HQx8Fk3Et1VJsFq9t068vIC2EQgzBWoA=) 2: 25B9F9C454BE11EE810E4C27C4F9AE02.roa (hash: 48a67zy1NAdY4ZXpuPRZ045rOPehCOnyYz0ToZfyAWQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.crl rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:20:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB92B/serialNumber=F5414292429F53DAB186B42E56414959A80BEA08 Validity Not Before: May 17 07:20:48 2024 GMT Not After : May 24 07:20:48 2024 GMT Subject: CN=66470550-231d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:81:c1:98:27:7a:b3:d3:7c:8e:08:48:87:b5: 79:d4:a9:c7:e5:ec:f7:85:47:c3:c3:fb:96:7d:de: 3f:e6:d1:4f:39:a1:f2:7d:b9:06:be:53:c3:b3:d7: b9:9f:a5:27:f7:d0:58:34:35:3a:d7:5b:46:d2:96: ac:5f:04:25:41:3c:e5:fd:af:ac:cb:94:1b:1d:84: e4:3c:a1:00:17:6f:4d:5d:60:76:b3:ba:1f:a7:e9: ba:e2:22:dd:09:04:0e:30:96:4e:a0:88:37:f4:f4: ba:a8:2b:16:11:73:f3:26:f5:c9:03:05:c9:6f:6a: 5e:da:ae:0b:fc:57:5f:26:1c:c6:49:d6:0a:60:e8: 61:2b:9e:5e:ca:b8:6e:ba:80:0c:ff:ad:2c:88:fa: e9:98:6c:dd:64:c8:bc:8e:23:cb:5a:5b:99:0f:de: 0a:2e:ce:ef:a4:f7:b7:83:10:85:79:38:b3:95:48: 55:7b:ad:42:88:d8:29:04:35:c0:e3:0a:56:f9:92: 67:02:cb:85:38:ae:1c:91:f5:09:89:64:2e:e0:0b: 24:61:89:8f:e5:ff:db:0e:df:61:8b:a8:0d:f9:25: 11:0e:a0:98:9e:14:a8:fd:e9:f1:18:72:fd:d1:fb: 69:f5:5a:e3:cd:50:ba:6e:1e:c7:5f:00:98:13:57: 5f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E2:85:1A:94:12:85:0E:0E:0E:9E:50:7B:4B:16:C7:3B:53:8D:4D X509v3 Authority Key Identifier: keyid:F5:41:42:92:42:9F:53:DA:B1:86:B4:2E:56:41:49:59:A8:0B:EA:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:f1:8e:8d:56:be:af:98:1a:c0:6c:82:09:78:5a:c7:7c:7a: 73:75:6f:7b:57:d6:1c:48:16:bc:61:c6:d0:30:e3:9a:68:2a: 5a:95:5a:c1:b1:fe:15:76:fc:d4:7c:be:f0:0c:66:ae:62:4f: 21:0a:90:58:03:0b:5d:6e:1c:6a:4a:a3:ce:53:c8:b7:37:f6: 86:65:0a:ad:56:bd:dc:38:2d:bb:bd:a0:06:35:13:23:9b:7a: 2a:92:cb:62:3d:2b:be:06:2f:83:e2:34:d7:3f:be:ae:9f:f5: ad:b7:d4:b2:b5:82:19:a3:f6:a3:b5:10:c5:28:0c:08:b9:02: 53:13:5a:bb:43:29:16:c4:f0:3e:19:f9:39:a1:d6:9a:e5:8f: 45:12:e7:fd:1b:e7:77:ed:13:ed:c3:6d:c9:85:e2:91:e5:7b: 39:34:7f:34:e8:92:9e:cf:00:62:d4:1c:16:d5:ca:5b:82:82: 67:0f:9b:6e:fc:97:55:c9:93:b5:b4:3b:83:68:8b:4e:cb:41: 1b:db:63:04:75:a6:26:28:80:6f:67:2b:52:04:ed:bb:cd:03: 1d:3c:b1:8c:53:75:bd:1a:92:3a:6e:82:f6:1f:75:99:1f:94: cb:96:06:5f:5c:fb:3c:07:f1:70:2e:2a:c5:10:c6:48:8a:ab: e0:1e:c7:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI5MkIxMTAvBgNVBAUTKEY1NDE0MjkyNDI5RjUzREFCMTg2QjQyRTU2NDE0OTU5 QTgwQkVBMDgwHhcNMjQwNTE3MDcyMDQ4WhcNMjQwNTI0MDcyMDQ4WjAYMRYwFAYD VQQDEw02NjQ3MDU1MC0yMzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2YHBmCd6s9N8jghIh7V51KnH5ez3hUfDw/uWfd4/5tFPOaHyfbkGvlPDs9e5 n6Un99BYNDU611tG0pasXwQlQTzl/a+sy5QbHYTkPKEAF29NXWB2s7ofp+m64iLd CQQOMJZOoIg39PS6qCsWEXPzJvXJAwXJb2pe2q4L/FdfJhzGSdYKYOhhK55eyrhu uoAM/60siPrpmGzdZMi8jiPLWluZD94KLs7vpPe3gxCFeTizlUhVe61CiNgpBDXA 4wpW+ZJnAsuFOK4ckfUJiWQu4AskYYmP5f/bDt9hi6gN+SURDqCYnhSo/enxGHL9 0ftp9VrjzVC6bh7HXwCYE1dfgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDLihRqU EoUODg6eUHtLFsc7U41NMB8GA1UdIwQYMBaAFPVBQpJCn1PasYa0LlZBSVmoC+oI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjkyQi9DNDYwODFGMjU0 QkQxMUVFODEwMkYwN0ZDNEY5QUUwMi85VUZDa2tLZlU5cXhoclF1VmtGSldhZ0w2 Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlVRkNra0tmVTlxeGhyUXVWa0ZKV2FnTDZnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjkyQi9DNDYwODFGMjU0QkQxMUVFODEwMkYwN0ZDNEY5QUUwMi85VUZDa2tLZlU5 cXhoclF1VmtGSldhZ0w2Z2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+8Y6NVr6vmBrAbIIJeFrHfHpzdW97V9YcSBa8YcbQMOOaaCpalVrB sf4VdvzUfL7wDGauYk8hCpBYAwtdbhxqSqPOU8i3N/aGZQqtVr3cOC27vaAGNRMj m3oqkstiPSu+Bi+D4jTXP76un/Wtt9SytYIZo/ajtRDFKAwIuQJTE1q7QykWxPA+ Gfk5odaa5Y9FEuf9G+d37RPtw23JheKR5Xs5NH806JKezwBi1BwW1cpbgoJnD5tu /JdVyZO1tDuDaItOy0Eb22MEdaYmKIBvZytSBO27zQMdPLGMU3W9GpI6boL2H3WZ H5TLlgZfXPs8B/FwLirFEMZIiqvgHscb -----END CERTIFICATE-----Generated at Fri May 17 08:13:56 2024 by rpki-client on console-fra.rpki-client.org