$ rpki-client -vvf rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft File: a5tdFBgYlY1zBFgvJU6hddhD4_0.mft (raw, json) Hash identifier: a5brUOr5xy7AJn5SSc/LdrlHKIHdhPhBonCLZiKbedk= Subject key identifier: A9:20:89:8D:2A:25:CA:AB:4F:51:39:DF:E6:4F:47:D0:35:A1:29:5E Authority key identifier: 6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD Certificate issuer: /CN=A91359CD/serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD Certificate serial: 0909 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft Manifest number: 0903 Signing time: Thu 30 May 2024 21:42:49 +0000 Manifest this update: Thu 30 May 2024 21:42:49 +0000 Manifest next update: Thu 06 Jun 2024 21:42:49 +0000 Files and hashes: 1: a5tdFBgYlY1zBFgvJU6hddhD4_0.crl (hash: sxPagu1MpUXfSPHFlWTJQ9O/sYQfYbKA69/8tCR1akE=) 2: 8F467E0082DD11EABD325010C4F9AE02.roa (hash: 8UoETv43NCbg359unaKa056KSfIsJT8AiDvuudbYvko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 21:42:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2313 (0x909) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91359CD/serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD Validity Not Before: May 30 21:42:49 2024 GMT Not After : Jun 6 21:42:49 2024 GMT Subject: CN=6658f2d9-d1a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e0:d6:4b:b9:0e:fe:9a:83:de:6d:aa:3c:31: 26:92:4a:2d:17:46:8c:b7:82:bb:75:fb:29:a7:6c: ad:bd:6a:38:70:b8:d6:f1:1b:45:d3:ce:84:83:64: 31:d5:34:4b:87:68:00:86:d5:c0:59:7d:08:43:02: 12:0a:0f:ae:10:97:77:eb:85:3f:bc:99:b0:aa:4e: 28:8f:ad:78:9b:83:49:de:8a:41:78:62:a0:34:1b: a2:f0:78:51:39:ca:e8:4f:ca:a4:5e:df:ac:df:69: ed:45:45:73:3b:18:c0:c3:02:9f:1c:0e:9a:83:57: 90:3e:19:d3:13:fd:f5:7a:55:30:b5:65:47:66:99: 77:d2:fe:ac:59:ce:49:fd:1b:10:b5:2b:7e:08:ea: 37:b9:9b:57:ac:1c:e9:4c:1e:f5:8d:d7:a4:eb:fb: 85:0c:0c:7d:35:eb:9e:4c:56:48:11:81:c5:01:37: ed:06:08:28:00:ce:20:3a:22:67:19:bf:94:4f:f2: 26:01:78:79:d2:b0:c7:d8:89:f0:59:46:0e:a8:d9: 96:af:88:f5:b6:92:b2:7f:59:84:c4:50:dc:11:a1: 06:95:26:fb:3a:80:a8:85:68:10:c2:6f:57:dd:a1: 0e:a1:25:4d:e8:da:ca:5f:4b:a2:f7:6e:ed:bb:12: 2c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:20:89:8D:2A:25:CA:AB:4F:51:39:DF:E6:4F:47:D0:35:A1:29:5E X509v3 Authority Key Identifier: keyid:6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:72:73:46:a0:cf:d2:49:71:8e:44:3c:8e:3e:e8:c5:70:11: 97:09:bc:56:56:0d:e4:1b:5c:e6:b8:90:26:30:01:ac:cb:26: 79:5c:eb:d0:ad:e0:51:56:29:aa:63:2c:cc:21:38:38:84:f7: 35:4d:9f:98:ea:c5:80:4e:0f:99:c5:2e:88:ce:3e:35:45:ad: 50:2f:42:d9:e6:bd:9b:1a:fa:89:18:05:e6:5e:26:69:c2:b1: a0:cf:0b:48:16:c3:fc:56:a6:ed:4e:56:90:b2:16:1c:b4:7a: 7c:a0:b5:0c:4b:e4:fa:99:75:eb:23:7f:ab:ef:cf:15:f4:c9: ed:b4:b5:62:5f:18:83:7e:52:f8:c6:c6:f2:ef:4b:f0:67:c2: 7b:bc:3c:4f:05:73:6c:b2:f3:1e:a2:7b:dd:17:41:60:7b:8f: 5e:92:ad:71:79:7e:11:4c:bb:cb:f3:02:e6:0d:f1:cc:2c:46: 3a:d7:0d:51:0b:c6:10:c7:56:33:58:c3:09:72:4f:a0:28:10: 14:17:e3:92:d1:b4:50:b4:89:bf:c8:1b:32:fa:7a:99:a7:02: d4:42:55:51:c2:30:f5:ed:4a:c4:f1:24:db:c7:68:8c:5d:9e: c3:2b:4f:ab:46:61:b6:a5:ab:ec:f3:47:83:00:c6:36:09:8a: a8:52:b0:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU5Q0QxMTAvBgNVBAUTKDZCOUI1RDE0MTgxODk1OEQ3MzA0NTgyRjI1NEVBMTc1 RDg0M0UzRkQwHhcNMjQwNTMwMjE0MjQ5WhcNMjQwNjA2MjE0MjQ5WjAYMRYwFAYD VQQDEw02NjU4ZjJkOS1kMWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ODWS7kO/pqD3m2qPDEmkkotF0aMt4K7dfspp2ytvWo4cLjW8RtF086Eg2Qx 1TRLh2gAhtXAWX0IQwISCg+uEJd364U/vJmwqk4oj614m4NJ3opBeGKgNBui8HhR OcroT8qkXt+s32ntRUVzOxjAwwKfHA6ag1eQPhnTE/31elUwtWVHZpl30v6sWc5J /RsQtSt+COo3uZtXrBzpTB71jdek6/uFDAx9NeueTFZIEYHFATftBggoAM4gOiJn Gb+UT/ImAXh50rDH2InwWUYOqNmWr4j1tpKyf1mExFDcEaEGlSb7OoCohWgQwm9X 3aEOoSVN6NrKX0ui927tuxIsGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKkgiY0q JcqrT1E53+ZPR9A1oSleMB8GA1UdIwQYMBaAFGubXRQYGJWNcwRYLyVOoXXYQ+P9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTlDRC8xODVGRkMyODgy REIxMUVBQUMyQ0Q2MEFDNEY5QUUwMi9hNXRkRkJnWWxZMXpCRmd2SlU2aGRkaEQ0 XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E1dGRGQmdZbFkxekJGZ3ZKVTZoZGRoRDRfMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTlDRC8xODVGRkMyODgyREIxMUVBQUMyQ0Q2MEFDNEY5QUUwMi9hNXRkRkJnWWxZ MXpCRmd2SlU2aGRkaEQ0XzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBecnNGoM/SSXGORDyOPujFcBGXCbxWVg3kG1zmuJAmMAGsyyZ5XOvQ reBRVimqYyzMITg4hPc1TZ+Y6sWATg+ZxS6Izj41Ra1QL0LZ5r2bGvqJGAXmXiZp wrGgzwtIFsP8VqbtTlaQshYctHp8oLUMS+T6mXXrI3+r788V9MnttLViXxiDflL4 xsby70vwZ8J7vDxPBXNssvMeonvdF0Fge49ekq1xeX4RTLvL8wLmDfHMLEY61w1R C8YQx1YzWMMJck+gKBAUF+OS0bRQtIm/yBsy+nqZpwLUQlVRwjD17UrE8STbx2iM XZ7DK0+rRmG2pavs80eDAMY2CYqoUrBK -----END CERTIFICATE-----Generated at Thu May 30 23:29:01 2024 by rpki-client on console-ams.rpki-client.org