$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft File: CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft (raw, json) Hash identifier: EdT+y+aF0/qExV6aPcUOhlUMoqz9tg8OC4cpJqZZwh0= Subject key identifier: BC:A2:23:E9:F1:B8:D6:EB:63:2C:E7:E7:87:81:20:0E:DD:93:32:A5 Authority key identifier: 08:D9:F4:83:E4:54:21:58:F6:2C:BE:70:58:69:EB:ED:77:FB:92:7F Certificate issuer: /CN=A91FF7FC/serialNumber=08D9F483E4542158F62CBE705869EBED77FB927F Certificate serial: 03F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft Manifest number: 03F2 Signing time: Fri 03 May 2024 02:18:01 +0000 Manifest this update: Fri 03 May 2024 02:18:01 +0000 Manifest next update: Fri 10 May 2024 02:18:01 +0000 Files and hashes: 1: CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl (hash: sQRc3nnSDoBYigQJnPz63KaaCPnNk5nSL5Q39wwH+bw=) 2: 5CA72CF82A6911EC94518740C4F9AE02.roa (hash: Z2yy802j+BnUWjHnyzkSwccTe9na+Hx4eWQsC6nuncs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 02:18:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1014 (0x3f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF7FC/serialNumber=08D9F483E4542158F62CBE705869EBED77FB927F Validity Not Before: May 3 02:18:01 2024 GMT Not After : May 10 02:18:01 2024 GMT Subject: CN=66344959-09e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:79:85:db:5c:59:53:50:b1:c0:cc:ae:aa:6f: b6:28:a3:84:4b:20:4e:ad:d8:44:42:fa:84:4c:d1: 9e:06:c1:f6:05:8b:1b:04:0f:cd:0d:33:7a:a7:5c: f4:77:bd:cc:4c:15:d6:f9:27:9c:50:4d:b3:50:94: 1e:95:f9:29:8b:19:ad:07:4a:6b:25:aa:4a:b2:11: e4:c7:42:0c:47:09:f9:92:0b:1f:1c:cb:c5:3c:5d: d8:27:b5:35:aa:da:53:cd:71:79:a3:e5:80:57:32: 8f:ba:33:1d:b0:bf:df:cc:6b:8a:bf:76:de:04:ad: bd:76:cd:cf:51:ae:65:ee:5e:88:dd:b4:c6:6b:2a: 49:a2:0f:0a:47:54:b1:6b:2c:6c:60:92:82:19:ce: 20:18:b4:50:ec:0d:c5:e2:bf:6f:c1:d4:d6:27:f9: 51:5f:b3:5b:df:21:35:44:5b:09:2d:ea:1d:2e:7e: d9:30:7c:2a:ea:61:06:52:ec:4a:7b:91:cb:35:83: 9a:c9:53:f3:05:0c:98:f5:3a:c4:91:0e:b5:99:e7: eb:45:a5:61:88:57:41:32:90:41:52:97:8b:a6:3a: 59:f3:25:12:da:58:7c:25:58:05:c0:53:63:86:f4: 43:a9:21:4e:a0:c6:a0:1c:0f:2f:7b:c5:58:b5:77: 90:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A2:23:E9:F1:B8:D6:EB:63:2C:E7:E7:87:81:20:0E:DD:93:32:A5 X509v3 Authority Key Identifier: keyid:08:D9:F4:83:E4:54:21:58:F6:2C:BE:70:58:69:EB:ED:77:FB:92:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:7c:24:17:51:c4:47:18:0a:89:30:c8:8b:11:c1:c5:25:fc: 4d:f0:d0:ab:b0:88:f1:21:4d:12:38:1c:ba:87:80:38:6f:50: 7d:ad:ad:2e:ff:74:1d:ef:c2:4a:45:69:78:76:3c:b9:c3:31: d8:28:fe:0d:10:45:21:aa:76:c5:b1:5a:13:28:39:ba:c5:bb: 6b:7e:3e:1d:33:8f:8c:3e:4a:fe:47:07:3f:7f:22:d8:49:07: aa:52:bf:0a:50:c6:67:b2:46:cb:4b:d2:9c:8c:ef:e6:c9:b6: e2:50:3f:09:7b:a4:d8:58:63:a1:75:f2:e6:ba:7c:c1:9d:de: dd:d5:2a:df:80:9b:06:ec:c7:9a:de:86:b2:58:81:4d:ba:77: 51:94:16:4d:5d:fb:b2:86:8d:02:0e:9a:d6:a4:53:15:10:3e: 9c:45:4a:81:f4:09:6d:1e:77:9a:b8:1f:ef:95:5b:e4:a0:6f: bd:d9:de:39:bb:93:62:3a:5c:35:6e:b2:4f:6d:52:19:57:02: dc:89:10:5e:8e:c3:d1:a0:3c:bd:61:55:71:13:85:3c:54:95: 96:85:78:4f:54:6a:5b:f4:7b:33:42:ed:b8:20:ed:01:5d:68: 49:1c:86:db:ce:8e:21:54:73:9e:00:08:55:7a:a0:5b:63:09: a2:51:50:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY3RkMxMTAvBgNVBAUTKDA4RDlGNDgzRTQ1NDIxNThGNjJDQkU3MDU4NjlFQkVE NzdGQjkyN0YwHhcNMjQwNTAzMDIxODAxWhcNMjQwNTEwMDIxODAxWjAYMRYwFAYD VQQDEw02NjM0NDk1OS0wOWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3mF21xZU1CxwMyuqm+2KKOESyBOrdhEQvqETNGeBsH2BYsbBA/NDTN6p1z0 d73MTBXW+SecUE2zUJQelfkpixmtB0prJapKshHkx0IMRwn5kgsfHMvFPF3YJ7U1 qtpTzXF5o+WAVzKPujMdsL/fzGuKv3beBK29ds3PUa5l7l6I3bTGaypJog8KR1Sx ayxsYJKCGc4gGLRQ7A3F4r9vwdTWJ/lRX7Nb3yE1RFsJLeodLn7ZMHwq6mEGUuxK e5HLNYOayVPzBQyY9TrEkQ61mefrRaVhiFdBMpBBUpeLpjpZ8yUS2lh8JVgFwFNj hvRDqSFOoMagHA8ve8VYtXeQWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLyiI+nx uNbrYyzn54eBIA7dkzKlMB8GA1UdIwQYMBaAFAjZ9IPkVCFY9iy+cFhp6+13+5J/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjdGQy80RTIzQjM5QzJB NjIxMUVDQTlBNjdDMzBDNEY5QUUwMi9DTm4wZy1SVUlWajJMTDV3V0ducjdYZjdr bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NObjBnLVJVSVZqMkxMNXdXR25yN1hmN2tuOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjdGQy80RTIzQjM5QzJBNjIxMUVDQTlBNjdDMzBDNEY5QUUwMi9DTm4wZy1SVUlW ajJMTDV3V0ducjdYZjdrbjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+fCQXUcRHGAqJMMiLEcHFJfxN8NCrsIjxIU0SOBy6h4A4b1B9ra0u /3Qd78JKRWl4djy5wzHYKP4NEEUhqnbFsVoTKDm6xbtrfj4dM4+MPkr+Rwc/fyLY SQeqUr8KUMZnskbLS9KcjO/mybbiUD8Je6TYWGOhdfLmunzBnd7d1SrfgJsG7Mea 3oayWIFNundRlBZNXfuyho0CDprWpFMVED6cRUqB9AltHneauB/vlVvkoG+92d45 u5NiOlw1brJPbVIZVwLciRBejsPRoDy9YVVxE4U8VJWWhXhPVGpb9HszQu24IO0B XWhJHIbbzo4hVHOeAAhVeqBbYwmiUVDS -----END CERTIFICATE-----Generated at Fri May 3 04:45:31 2024 by rpki-client on console-fra.rpki-client.org