$ rpki-client -vvf rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft File: I90ea4NEljsEULkpM3adRKcyUWs.mft (raw, json) Hash identifier: 8keu6HGjoLj35vvO8CTnvitq0SMS1sVFaF0LHbjMVtc= Subject key identifier: BB:B0:11:B5:30:07:8D:FA:E6:89:51:42:E2:AA:6D:61:2F:20:3F:1B Authority key identifier: 23:DD:1E:6B:83:44:96:3B:04:50:B9:29:33:76:9D:44:A7:32:51:6B Certificate issuer: /CN=A91437AC/serialNumber=23DD1E6B8344963B0450B92933769D44A732516B Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft Manifest number: 85 Signing time: Sun 19 May 2024 07:08:29 +0000 Manifest this update: Sun 19 May 2024 07:08:28 +0000 Manifest next update: Sun 26 May 2024 07:08:28 +0000 Files and hashes: 1: I90ea4NEljsEULkpM3adRKcyUWs.crl (hash: MyBgvvjgRC7sWq/3YTBn1ZqzzlvtjTf4wL77mX+7oUw=) 2: 229EA4AC57D811EEAB6EE280C4F9AE02.roa (hash: oUU1xW8bDxUWQVNSobkgR2udor+n65o3/Lyz6/cnbog=) 3: 413CAD964D6011EE80905941C4F9AE02.roa (hash: 47tmswHBTa3/FL2MnwZbuEJdMTNY6qleScdQXHL84Wk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.crl rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91437AC/serialNumber=23DD1E6B8344963B0450B92933769D44A732516B Validity Not Before: May 19 07:08:28 2024 GMT Not After : May 26 07:08:28 2024 GMT Subject: CN=6649a56d-1cd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:38:b9:bf:47:10:7e:fc:be:13:b3:c5:58:0c: 2b:b5:76:c7:e0:94:db:10:3c:8a:be:1b:70:87:c2: c5:c5:18:3e:0c:cd:c5:71:9b:68:88:fb:64:54:38: 73:19:cf:2a:2e:d0:79:ac:57:68:cd:ce:7f:a2:3e: 00:f6:7f:6c:0d:88:84:13:2a:b0:3b:4f:ac:d2:a4: 23:1f:0f:9c:cf:e3:32:91:05:81:5c:c1:86:5b:1b: 98:f3:cd:e1:aa:35:fe:77:19:b3:45:b1:04:0d:e0: cb:31:cd:bb:59:a7:46:b9:06:7b:19:38:59:24:2c: 3b:30:92:26:10:f0:cc:51:cb:37:c4:e0:8d:94:52: 99:fb:a2:48:94:99:05:57:3b:b3:04:d6:1f:74:dd: f3:a5:4f:86:a6:a2:ea:2e:a8:32:7e:fd:5d:39:91: 2a:56:f3:f9:95:81:2a:b2:55:3a:45:ef:50:cd:d8: fe:7f:ae:f5:c3:59:e5:fa:cf:4b:1b:c9:ff:c6:8f: 11:38:25:d9:1e:90:36:a9:24:5e:b8:cf:19:a0:45: 0e:87:db:95:c5:8b:95:66:d8:0e:ac:b3:c5:ae:af: 28:b2:8f:4e:6c:39:bb:a5:ea:0d:3b:7d:33:37:89: 95:03:23:64:a2:94:5e:f9:a0:de:b0:d5:f9:a5:df: ff:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B0:11:B5:30:07:8D:FA:E6:89:51:42:E2:AA:6D:61:2F:20:3F:1B X509v3 Authority Key Identifier: keyid:23:DD:1E:6B:83:44:96:3B:04:50:B9:29:33:76:9D:44:A7:32:51:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:88:db:86:3c:22:14:a8:91:07:03:4c:76:3b:8c:58:6f:50: e2:43:a3:fa:bb:39:e9:f8:7e:aa:86:46:d7:ab:31:9e:13:b5: 56:9d:96:ea:f3:a5:fe:76:17:9d:23:d9:ad:bf:c1:82:9f:c9: 3f:47:39:a5:0d:2f:5a:ec:eb:1c:ed:57:e1:31:9f:ec:65:b5: d3:08:12:39:6b:da:9f:e5:83:bf:c1:14:a3:b4:48:7d:b5:04: bd:ee:a5:d0:6c:3b:5c:03:85:bb:73:a3:64:c2:4b:6b:10:bb: 78:cd:ad:6e:cb:82:b2:35:69:7c:fe:ac:a9:35:a3:b5:18:5e: 6c:9e:51:97:a0:28:10:94:3b:22:52:8b:62:3e:79:d3:23:82: 6f:d2:fb:89:c3:5f:80:34:ce:1f:29:47:0f:49:3f:a2:39:a0: 2a:d3:19:3d:19:80:43:1e:78:cb:0c:a0:96:8b:0c:d9:e1:cf: 4b:8c:0b:77:44:03:8e:d6:73:d8:95:5a:38:df:6f:3b:67:9f: 0d:55:5e:47:a3:6c:74:67:10:b5:9f:3f:40:df:3e:ce:82:c4: b4:25:03:93:3d:2c:1a:df:6d:f8:1d:a0:4f:9b:26:96:50:78: 34:cf:1c:1d:31:4b:3c:ad:14:83:29:5b:b3:9d:00:30:d0:db: 3f:61:25:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM3QUMxMTAvBgNVBAUTKDIzREQxRTZCODM0NDk2M0IwNDUwQjkyOTMzNzY5RDQ0 QTczMjUxNkIwHhcNMjQwNTE5MDcwODI4WhcNMjQwNTI2MDcwODI4WjAYMRYwFAYD VQQDEw02NjQ5YTU2ZC0xY2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAozi5v0cQfvy+E7PFWAwrtXbH4JTbEDyKvhtwh8LFxRg+DM3FcZtoiPtkVDhz Gc8qLtB5rFdozc5/oj4A9n9sDYiEEyqwO0+s0qQjHw+cz+MykQWBXMGGWxuY883h qjX+dxmzRbEEDeDLMc27WadGuQZ7GThZJCw7MJImEPDMUcs3xOCNlFKZ+6JIlJkF VzuzBNYfdN3zpU+GpqLqLqgyfv1dOZEqVvP5lYEqslU6Re9Qzdj+f671w1nl+s9L G8n/xo8ROCXZHpA2qSReuM8ZoEUOh9uVxYuVZtgOrLPFrq8oso9ObDm7peoNO30z N4mVAyNkopRe+aDesNX5pd//pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLuwEbUw B4365olRQuKqbWEvID8bMB8GA1UdIwQYMBaAFCPdHmuDRJY7BFC5KTN2nUSnMlFr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzdBQy8wMjU2RUI5NjRE NjAxMUVFODM4NUYwNDBDNEY5QUUwMi9JOTBlYTRORWxqc0VVTGtwTTNhZFJLY3lV V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k5MGVhNE5FbGpzRVVMa3BNM2FkUktjeVVXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzdBQy8wMjU2RUI5NjRENjAxMUVFODM4NUYwNDBDNEY5QUUwMi9JOTBlYTRORWxq c0VVTGtwTTNhZFJLY3lVV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFiNuGPCIUqJEHA0x2O4xYb1DiQ6P6uznp+H6qhkbXqzGeE7VWnZbq 86X+dhedI9mtv8GCn8k/RzmlDS9a7Osc7VfhMZ/sZbXTCBI5a9qf5YO/wRSjtEh9 tQS97qXQbDtcA4W7c6NkwktrELt4za1uy4KyNWl8/qypNaO1GF5snlGXoCgQlDsi UotiPnnTI4Jv0vuJw1+ANM4fKUcPST+iOaAq0xk9GYBDHnjLDKCWiwzZ4c9LjAt3 RAOO1nPYlVo43287Z58NVV5Ho2x0ZxC1nz9A3z7OgsS0JQOTPSwa3234HaBPmyaW UHg0zxwdMUs8rRSDKVuznQAw0Ns/YSXx -----END CERTIFICATE-----Generated at Sun May 19 08:25:00 2024 by rpki-client on console-ams.rpki-client.org