$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft File: IWrR11qT4DeulPbJGJbS1YLY_1Q.mft (raw, json) Hash identifier: 8SlJJuN/tXXrveIbYCrMtHu4aieluKPx5lkmnNZu5Sg= Subject key identifier: 00:0D:CE:16:4F:B7:62:87:C4:BF:B9:4C:CE:32:A5:F4:76:FD:65:1D Authority key identifier: 21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54 Certificate issuer: /CN=A91FDDD1/serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54 Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft Manifest number: 94 Signing time: Wed 15 May 2024 07:06:50 +0000 Manifest this update: Wed 15 May 2024 07:06:50 +0000 Manifest next update: Wed 22 May 2024 07:06:50 +0000 Files and hashes: 1: IWrR11qT4DeulPbJGJbS1YLY_1Q.crl (hash: HU1RsesMd8wnxq/jmPPwtTmsByVDEtZ/A2gONSgcBVQ=) 2: 838096CA3BD311EE84056461C4F9AE02.roa (hash: xuVId9Hm47KrucZMsjSwL2x1LKezRg2UYb4YAMdWzpQ=) 3: 27DB37683BD211EE8094355FC4F9AE02.roa (hash: zGK0q5txS96FydXJDIEXpJYa3Lt/UXyszOqHKnQJIS0=) 4: 82C54A1E3BD311EE84056461C4F9AE02.roa (hash: H1ge2MPSBncXeUxZjwux7oLKDAw5t7dscZ/naMsDL0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:06:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDDD1/serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54 Validity Not Before: May 15 07:06:50 2024 GMT Not After : May 22 07:06:50 2024 GMT Subject: CN=66445f0a-e67b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d6:fb:21:95:b0:7e:5d:ba:4a:fb:2a:82:c1: 44:80:7e:00:e6:46:67:d4:58:d8:84:0e:f3:56:7f: c6:e7:2a:d5:af:b2:05:1c:ae:17:1b:e3:d0:13:c2: ec:e1:7e:86:e1:44:f5:4f:1c:9d:af:26:a2:78:66: 56:62:ce:cd:88:0f:29:26:9a:a0:dc:43:73:23:a8: b4:54:ca:b3:33:fd:b7:d6:87:94:19:3d:60:c3:1f: 2c:fb:a8:5e:87:bd:5f:5d:e6:71:72:7f:e2:63:24: 0b:14:89:e0:20:7e:85:99:8b:8e:d4:38:40:3e:56: 8a:4d:6d:86:e8:73:ce:74:05:3e:e5:37:90:92:2a: 9a:53:61:15:32:06:97:9b:50:27:84:d8:4d:95:56: cc:5a:b1:50:e0:97:a7:7a:cb:1d:20:83:bb:c8:eb: 7f:0c:c7:b5:1e:b9:6c:63:ca:05:bf:bc:83:74:2f: 44:a9:ce:da:4e:f9:71:e9:5b:2d:0b:d5:be:7b:c9: fd:b1:8c:95:a1:0a:35:21:db:37:d9:4c:9e:e8:74: 62:96:50:48:9a:5b:79:ca:34:18:50:d7:f0:2d:72: 87:04:39:5b:a7:54:91:34:29:cc:34:82:41:c8:b1: 57:05:5a:9d:c5:7e:8a:43:f2:9a:d4:fa:88:d9:4e: cb:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:0D:CE:16:4F:B7:62:87:C4:BF:B9:4C:CE:32:A5:F4:76:FD:65:1D X509v3 Authority Key Identifier: keyid:21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:83:d5:02:06:fe:39:1c:69:76:4f:84:26:09:20:85:72:5a: 20:b8:0d:65:37:5a:c7:90:c7:3c:e0:f7:cb:1b:1b:ae:36:be: 30:5d:24:87:fa:5a:e1:d1:d4:c3:1e:85:c1:17:40:d0:a8:82: 46:3e:b6:c9:a8:6f:1b:14:05:48:56:16:93:4e:b0:6e:25:50: ef:8e:45:7f:26:34:a6:47:96:e1:7a:3b:df:ae:10:9c:11:b4: 4d:fe:56:b2:f9:b1:10:f6:47:f5:b3:e1:e7:d8:b5:94:38:4d: 1a:2a:48:b5:5a:6e:ac:89:39:9b:06:0e:78:21:f9:89:1b:f9: 28:a5:99:f6:be:b6:5b:fa:19:6b:08:4f:25:d9:80:61:86:0c: a8:35:26:cb:24:1a:2b:e6:ec:39:f1:2d:e2:be:d2:7e:bc:3c: c0:04:ac:7f:a5:67:68:fa:7d:cf:4b:87:21:14:79:df:e6:c6: b6:71:b2:77:d4:09:93:ea:f5:69:67:6a:7b:42:e9:e3:e4:61: 9a:3a:c5:b8:04:51:bb:d0:0a:dc:aa:b7:8e:df:ca:b5:11:6b: a0:29:86:91:1d:3b:89:3c:d6:eb:3a:6c:a9:fa:c5:5b:60:89: 25:dc:79:a4:57:d0:1d:c2:c7:ee:7e:39:9e:3e:cf:25:49:1a: f8:b6:7a:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRERDExMTAvBgNVBAUTKDIxNkFEMUQ3NUE5M0UwMzdBRTk0RjZDOTE4OTZEMkQ1 ODJEOEZGNTQwHhcNMjQwNTE1MDcwNjUwWhcNMjQwNTIyMDcwNjUwWjAYMRYwFAYD VQQDEw02NjQ0NWYwYS1lNjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz9b7IZWwfl26SvsqgsFEgH4A5kZn1FjYhA7zVn/G5yrVr7IFHK4XG+PQE8Ls 4X6G4UT1TxydryaieGZWYs7NiA8pJpqg3ENzI6i0VMqzM/231oeUGT1gwx8s+6he h71fXeZxcn/iYyQLFIngIH6FmYuO1DhAPlaKTW2G6HPOdAU+5TeQkiqaU2EVMgaX m1AnhNhNlVbMWrFQ4JenessdIIO7yOt/DMe1HrlsY8oFv7yDdC9Eqc7aTvlx6Vst C9W+e8n9sYyVoQo1Ids32Uye6HRillBImlt5yjQYUNfwLXKHBDlbp1SRNCnMNIJB yLFXBVqdxX6KQ/Ka1PqI2U7LzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAANzhZP t2KHxL+5TM4ypfR2/WUdMB8GA1UdIwQYMBaAFCFq0ddak+A3rpT2yRiW0tWC2P9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREREMS82OEMxRDQ5NjNC RDAxMUVFOEJBQzM1MUFDNEY5QUUwMi9JV3JSMTFxVDREZXVsUGJKR0piUzFZTFlf MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lXclIxMXFUNERldWxQYkpHSmJTMVlMWV8xUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REREMS82OEMxRDQ5NjNCRDAxMUVFOEJBQzM1MUFDNEY5QUUwMi9JV3JSMTFxVDRE ZXVsUGJKR0piUzFZTFlfMVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNg9UCBv45HGl2T4QmCSCFcloguA1lN1rHkMc84PfLGxuuNr4wXSSH +lrh0dTDHoXBF0DQqIJGPrbJqG8bFAVIVhaTTrBuJVDvjkV/JjSmR5bhejvfrhCc EbRN/lay+bEQ9kf1s+Hn2LWUOE0aKki1Wm6siTmbBg54IfmJG/kopZn2vrZb+hlr CE8l2YBhhgyoNSbLJBor5uw58S3ivtJ+vDzABKx/pWdo+n3PS4chFHnf5sa2cbJ3 1AmT6vVpZ2p7Qunj5GGaOsW4BFG70ArcqreO38q1EWugKYaRHTuJPNbrOmyp+sVb YIkl3HmkV9AdwsfufjmePs8lSRr4tnov -----END CERTIFICATE-----Generated at Wed May 15 09:28:19 2024 by rpki-client on console-fra.rpki-client.org