$ rpki-client -vvf rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft File: 091LwNHr_QIHqqZvYIuOBdPNRuM.mft (raw, json) Hash identifier: ChdvMCskaEW4qJGSd693CDJkF4q5BY6NyTDU14rP1j4= Subject key identifier: CB:D3:89:9B:B3:32:6D:CB:93:41:E7:F1:20:8C:FD:86:6A:8E:70:FB Authority key identifier: D3:DD:4B:C0:D1:EB:FD:02:07:AA:A6:6F:60:8B:8E:05:D3:CD:46:E3 Certificate issuer: /CN=A9112956/serialNumber=D3DD4BC0D1EBFD0207AAA66F608B8E05D3CD46E3 Certificate serial: 0ADA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft Manifest number: 0AD5 Signing time: Sat 18 May 2024 20:04:10 +0000 Manifest this update: Sat 18 May 2024 20:04:09 +0000 Manifest next update: Sat 25 May 2024 20:04:09 +0000 Files and hashes: 1: 091LwNHr_QIHqqZvYIuOBdPNRuM.crl (hash: OFr1u3+3bVSnOYjkGBE3ZHoMcvM643XKU0c9/fJqpnI=) 2: 04346EDA262111EAB705442FC4F9AE02.roa (hash: KdYgcreT2ybdc31BhvT/o8kf9CCD38l2qCZ3bAK4GHU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.crl rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2778 (0xada) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112956/serialNumber=D3DD4BC0D1EBFD0207AAA66F608B8E05D3CD46E3 Validity Not Before: May 18 20:04:09 2024 GMT Not After : May 25 20:04:09 2024 GMT Subject: CN=664909ba-36ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2d:11:54:8c:dd:34:36:28:f7:e2:9b:6e:d9: fc:ab:c7:6f:66:0f:fe:90:97:76:aa:b5:b0:5b:42: 97:99:ab:a0:9c:af:09:e6:45:59:ca:6e:92:00:a9: 83:77:a7:56:5d:ec:7b:cc:a5:3c:13:90:65:88:7e: 6b:bb:45:83:69:f5:ba:5b:d2:08:eb:86:18:e6:48: b2:ff:75:40:c4:9b:a7:a3:6e:a4:a5:e4:e4:d8:9c: b6:9e:84:ea:91:8a:f1:c1:c7:03:42:a6:43:a0:5f: 72:6c:07:be:e8:ac:e1:91:2e:5b:e1:b8:32:29:bb: 24:85:49:2b:f8:df:0f:17:b2:0b:80:45:f2:63:56: e3:9f:a0:ab:9b:6c:98:98:05:f3:ae:45:93:43:be: df:09:5b:33:d6:be:19:53:a9:59:a3:5b:ad:fc:a7: f8:0c:d6:47:61:79:f4:cc:e5:0f:e6:70:a1:0b:19: f3:7f:fe:7c:ee:5b:0e:5c:e9:89:e0:3f:96:f7:01: 6f:e2:b7:48:72:72:dd:3e:fc:0a:dc:ac:b4:c0:dd: 3a:6f:65:5c:c5:79:09:34:bd:fe:63:91:a7:30:8b: b9:96:c3:97:8f:e1:c2:df:3a:fd:08:18:d9:a8:c9: 9e:0f:41:9b:6a:fb:a5:42:b9:15:2e:f5:43:9f:23: 15:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D3:89:9B:B3:32:6D:CB:93:41:E7:F1:20:8C:FD:86:6A:8E:70:FB X509v3 Authority Key Identifier: keyid:D3:DD:4B:C0:D1:EB:FD:02:07:AA:A6:6F:60:8B:8E:05:D3:CD:46:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:77:df:8b:b0:95:69:92:22:9a:54:fc:4a:a0:76:7a:4e:bc: a7:19:81:b0:70:9d:42:9f:07:b0:1a:0b:75:f5:6d:75:e6:25: 1b:9a:a3:c5:e7:93:4e:07:75:76:e6:37:4a:1e:bf:da:41:19: fb:a9:4c:3f:02:6b:19:11:39:41:38:47:05:f5:0a:90:b9:0c: e8:12:d4:ef:6a:2e:a6:ff:b2:79:e1:49:40:3c:e6:2d:d9:14: b7:56:6e:11:18:bf:3f:5a:c5:ab:d7:a1:65:e2:2d:6d:15:39: e0:37:b7:33:08:6b:4b:26:10:05:2f:e3:f7:d7:bb:c0:bb:da: ea:87:72:30:3f:3f:3d:ce:80:93:18:04:87:4b:2e:c4:56:06: 44:94:d5:93:e5:c5:c2:bd:c3:18:93:c5:9e:1f:60:f6:a5:67: 2b:6f:51:13:8a:fd:2f:75:ea:84:f5:56:8f:45:38:03:7d:cb: 90:82:66:bb:70:4e:03:aa:c8:ac:cf:02:82:f1:18:fc:7b:4c: df:e9:c0:2f:18:f5:dc:94:c8:c5:6b:39:a7:16:59:9c:14:2f: 75:3b:4e:02:6c:0b:99:84:be:a3:9a:90:5f:f5:b9:58:4e:cc: d4:13:fc:b6:e8:84:c9:bc:36:ab:28:bb:68:d9:f2:2e:5a:76: c1:32:f6:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI5NTYxMTAvBgNVBAUTKEQzREQ0QkMwRDFFQkZEMDIwN0FBQTY2RjYwOEI4RTA1 RDNDRDQ2RTMwHhcNMjQwNTE4MjAwNDA5WhcNMjQwNTI1MjAwNDA5WjAYMRYwFAYD VQQDEw02NjQ5MDliYS0zNmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAty0RVIzdNDYo9+Kbbtn8q8dvZg/+kJd2qrWwW0KXmaugnK8J5kVZym6SAKmD d6dWXex7zKU8E5BliH5ru0WDafW6W9II64YY5kiy/3VAxJuno26kpeTk2Jy2noTq kYrxwccDQqZDoF9ybAe+6KzhkS5b4bgyKbskhUkr+N8PF7ILgEXyY1bjn6Crm2yY mAXzrkWTQ77fCVsz1r4ZU6lZo1ut/Kf4DNZHYXn0zOUP5nChCxnzf/587lsOXOmJ 4D+W9wFv4rdIcnLdPvwK3Ky0wN06b2VcxXkJNL3+Y5GnMIu5lsOXj+HC3zr9CBjZ qMmeD0GbavulQrkVLvVDnyMVpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMvTiZuz Mm3Lk0Hn8SCM/YZqjnD7MB8GA1UdIwQYMBaAFNPdS8DR6/0CB6qmb2CLjgXTzUbj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjk1Ni9FRkJGQkJGMDI2 MUUxMUVBOUM4ODFDMjhDNEY5QUUwMi8wOTFMd05Icl9RSUhxcVp2WUl1T0JkUE5S dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5MUx3TkhyX1FJSHFxWnZZSXVPQmRQTlJ1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Mjk1Ni9FRkJGQkJGMDI2MUUxMUVBOUM4ODFDMjhDNEY5QUUwMi8wOTFMd05Icl9R SUhxcVp2WUl1T0JkUE5SdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkd9+LsJVpkiKaVPxKoHZ6TrynGYGwcJ1CnwewGgt19W115iUbmqPF 55NOB3V25jdKHr/aQRn7qUw/AmsZETlBOEcF9QqQuQzoEtTvai6m/7J54UlAPOYt 2RS3Vm4RGL8/WsWr16Fl4i1tFTngN7czCGtLJhAFL+P317vAu9rqh3IwPz89zoCT GASHSy7EVgZElNWT5cXCvcMYk8WeH2D2pWcrb1ETiv0vdeqE9VaPRTgDfcuQgma7 cE4DqsiszwKC8Rj8e0zf6cAvGPXclMjFazmnFlmcFC91O04CbAuZhL6jmpBf9blY TszUE/y26ITJvDarKLto2fIuWnbBMvaZ -----END CERTIFICATE-----Generated at Sat May 18 20:48:17 2024 by rpki-client on console-fra.rpki-client.org