$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft File: 1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft (raw, json) Hash identifier: BIfplAJjTUK/mVpY4Q6uibpLOAG0JF7Dy1rJi4K4tuE= Subject key identifier: 54:7A:01:D7:FB:E2:4D:30:39:91:AE:21:E5:AA:31:74:96:CA:95:F3 Authority key identifier: D6:F2:BA:AE:7A:52:0F:AA:46:82:CA:DC:36:93:66:0B:9E:1F:F1:04 Certificate issuer: /CN=A91FC8B6/serialNumber=D6F2BAAE7A520FAA4682CADC3693660B9E1FF104 Certificate serial: B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft Manifest number: B4 Signing time: Sun 05 May 2024 06:32:39 +0000 Manifest this update: Sun 05 May 2024 06:32:39 +0000 Manifest next update: Sun 12 May 2024 06:32:39 +0000 Files and hashes: 1: 1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl (hash: rbdkyJ8cwQbK6Y5/L0JqgoWq+1a+bTwJzonXZono/8Q=) 2: 37B81F7AF64511ED8C736D76C4F9AE02.roa (hash: V7ilMMT06OLjWy4mXgkWYvJ88BLk9HKzitHJj26kG7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 06:32:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC8B6/serialNumber=D6F2BAAE7A520FAA4682CADC3693660B9E1FF104 Validity Not Before: May 5 06:32:39 2024 GMT Not After : May 12 06:32:39 2024 GMT Subject: CN=66372807-bca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d8:03:7a:79:cd:be:06:65:a4:46:b6:ef:cf: fc:99:02:26:61:1f:3f:90:4e:b1:74:58:0e:8e:e9: 70:7b:d5:65:f4:aa:2c:e5:b1:86:ec:c0:af:5c:69: 62:e3:b3:cc:68:89:0f:33:45:08:5b:12:4e:46:82: 4d:b3:d5:10:91:99:b1:14:54:60:20:21:b1:f8:ab: 57:01:ac:2d:a9:8b:c3:a2:a7:98:2b:0b:70:9d:96: d9:b3:ab:b2:41:68:7a:a5:ed:19:e5:fd:b6:21:11: fd:64:b9:eb:6b:0c:75:f1:e6:9f:46:40:8b:96:a8: 27:1a:b9:b6:71:01:e9:e9:9f:17:20:ee:c9:c7:07: ad:12:2c:d6:dd:32:c3:6f:30:f2:64:c4:13:ff:a8: d4:10:bd:fc:d8:f4:2f:e9:b9:63:3c:e9:71:ad:b0: 75:f5:db:26:07:98:f9:ff:f7:b8:db:d3:75:84:fe: 46:38:54:a2:d2:8f:e5:42:d1:65:64:f7:89:96:8e: 0b:c1:b0:08:82:e6:bd:d9:f5:a8:b2:0e:00:56:77: d3:66:ff:65:fb:fb:df:85:cc:f5:9e:ab:ff:76:dc: 20:65:52:be:1b:4b:58:55:ac:68:b9:8a:e7:8b:3a: 1c:e9:76:1a:dc:23:4e:aa:e3:92:e7:e2:c2:8f:ff: 05:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:7A:01:D7:FB:E2:4D:30:39:91:AE:21:E5:AA:31:74:96:CA:95:F3 X509v3 Authority Key Identifier: keyid:D6:F2:BA:AE:7A:52:0F:AA:46:82:CA:DC:36:93:66:0B:9E:1F:F1:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:7a:9e:c8:79:85:89:45:ad:f9:7b:1c:b1:b1:72:63:5e:cd: 66:ce:2d:d4:0a:d2:0a:f3:e3:5b:7b:9e:92:d6:2f:00:a5:bd: ac:87:45:32:c2:e9:d8:39:aa:ad:11:c0:af:ca:8d:10:8b:36: 2a:44:05:19:f4:49:3c:77:28:9b:28:7f:49:5e:01:c1:16:64: 21:43:69:ba:fb:02:03:7e:7c:f8:9f:11:9e:06:66:34:3f:bb: 38:cb:3a:a6:86:ee:50:52:4a:e9:b8:64:b2:89:87:78:ba:32: 27:44:02:47:42:16:d8:0f:68:b8:ec:a1:99:bc:e4:c4:03:aa: 63:ce:b4:07:20:7f:b4:d7:2e:b8:08:3d:2b:bc:ce:0a:93:0c: c5:b8:7a:16:6b:cf:28:0b:a6:95:93:82:99:84:cd:17:c2:dd: f1:3e:c8:d8:86:ef:85:fc:50:2e:79:1a:3f:12:c7:1b:d6:2d: 3b:87:1e:d0:b4:75:3e:78:42:95:cc:61:e5:d9:99:35:13:f6: 8e:17:00:a6:e7:89:72:f5:32:0a:1b:53:72:54:76:8d:74:6a: 52:64:95:16:ea:4f:bd:96:a9:c0:9e:3c:35:a8:72:1c:13:e2: ec:a1:01:46:65:df:d4:7a:d6:ed:90:27:bf:12:fa:85:62:ce: 1f:b0:f0:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM4QjYxMTAvBgNVBAUTKEQ2RjJCQUFFN0E1MjBGQUE0NjgyQ0FEQzM2OTM2NjBC OUUxRkYxMDQwHhcNMjQwNTA1MDYzMjM5WhcNMjQwNTEyMDYzMjM5WjAYMRYwFAYD VQQDEw02NjM3MjgwNy1iY2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoNgDennNvgZlpEa278/8mQImYR8/kE6xdFgOjulwe9Vl9Kos5bGG7MCvXGli 47PMaIkPM0UIWxJORoJNs9UQkZmxFFRgICGx+KtXAawtqYvDoqeYKwtwnZbZs6uy QWh6pe0Z5f22IRH9ZLnrawx18eafRkCLlqgnGrm2cQHp6Z8XIO7JxwetEizW3TLD bzDyZMQT/6jUEL382PQv6bljPOlxrbB19dsmB5j5//e429N1hP5GOFSi0o/lQtFl ZPeJlo4LwbAIgua92fWosg4AVnfTZv9l+/vfhcz1nqv/dtwgZVK+G0tYVaxouYrn izoc6XYa3CNOquOS5+LCj/8FuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFR6Adf7 4k0wOZGuIeWqMXSWypXzMB8GA1UdIwQYMBaAFNbyuq56Ug+qRoLK3DaTZgueH/EE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzhCNi9FQzYyMkIwNkY2 M0YxMUVEOTc4ODJDNzJDNEY5QUUwMi8xdks2cm5wU0Q2cEdnc3JjTnBObUM1NGY4 UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF2SzZybnBTRDZwR2dzcmNOcE5tQzU0ZjhRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzhCNi9FQzYyMkIwNkY2M0YxMUVEOTc4ODJDNzJDNEY5QUUwMi8xdks2cm5wU0Q2 cEdnc3JjTnBObUM1NGY4UVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeep7IeYWJRa35exyxsXJjXs1mzi3UCtIK8+Nbe56S1i8Apb2sh0Uy wunYOaqtEcCvyo0QizYqRAUZ9Ek8dyibKH9JXgHBFmQhQ2m6+wIDfnz4nxGeBmY0 P7s4yzqmhu5QUkrpuGSyiYd4ujInRAJHQhbYD2i47KGZvOTEA6pjzrQHIH+01y64 CD0rvM4KkwzFuHoWa88oC6aVk4KZhM0Xwt3xPsjYhu+F/FAueRo/Escb1i07hx7Q tHU+eEKVzGHl2Zk1E/aOFwCm54ly9TIKG1NyVHaNdGpSZJUW6k+9lqnAnjw1qHIc E+LsoQFGZd/UetbtkCe/EvqFYs4fsPBg -----END CERTIFICATE-----Generated at Sun May 5 08:39:17 2024 by rpki-client on console-fra.rpki-client.org