$ rpki-client -vvf rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.mft File: 91FDq1voML6TvNd20zKw_Vt4fjs.mft (raw, json) Hash identifier: 9rtEJqLpnVunqmvw7fFMMj9BAuBiNzlHMm66d91phso= Subject key identifier: 2F:EB:8B:18:E9:30:D7:83:98:AE:13:DE:FE:5A:8F:10:4F:1C:A0:C9 Authority key identifier: F7:51:43:AB:5B:E8:30:BE:93:BC:D7:76:D3:32:B0:FD:5B:78:7E:3B Certificate issuer: /CN=A91717C0/serialNumber=F75143AB5BE830BE93BCD776D332B0FD5B787E3B Certificate serial: 070F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91FDq1voML6TvNd20zKw_Vt4fjs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.mft Manifest number: 070B Signing time: Sat 18 May 2024 22:37:59 +0000 Manifest this update: Sat 18 May 2024 22:37:59 +0000 Manifest next update: Sat 25 May 2024 22:37:58 +0000 Files and hashes: 1: 91FDq1voML6TvNd20zKw_Vt4fjs.crl (hash: c1lkeEhV52ickghrLC6EsxglkiHWpywDwA5aiJ/2qMo=) 2: 94BF06A8F31D11EA8D62F57EC4F9AE02.roa (hash: 7FN+g/Pr9ZrqQ0ATUeO1ZYKYxMfIdHBqU/8TzDBOjq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.crl rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91FDq1voML6TvNd20zKw_Vt4fjs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1807 (0x70f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91717C0/serialNumber=F75143AB5BE830BE93BCD776D332B0FD5B787E3B Validity Not Before: May 18 22:37:59 2024 GMT Not After : May 25 22:37:58 2024 GMT Subject: CN=66492dc7-8fdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fc:47:f9:d4:68:28:29:62:32:6e:3a:35:b2: ec:f1:ca:ce:c8:5e:36:e9:ec:59:ea:de:dd:1f:fe: 18:71:c8:d1:87:81:a0:bb:87:8b:42:f6:c4:bd:00: 76:f5:b8:10:6e:d0:f3:0a:96:4d:ae:20:6a:ea:b4: 15:d1:b2:73:ec:93:f8:a9:0c:78:1c:fe:a9:92:ca: 48:87:b8:34:00:1b:1d:71:30:08:d8:f2:49:e3:e2: 9d:b9:da:77:8a:a7:e0:dd:ac:47:42:d2:42:42:3c: 44:9c:66:ee:97:0e:e5:8e:32:7f:e8:cf:d1:b0:2c: 7b:28:9c:d4:94:bd:f3:a1:9f:de:e4:b1:17:07:4a: ec:d0:e7:91:64:53:55:fe:4a:99:52:0f:c3:f5:ab: dc:1a:7b:f0:f6:24:09:85:19:48:e4:26:8b:88:5c: 6e:9b:4b:6b:3c:62:7c:fe:e1:1a:f8:3a:5a:5c:56: 4a:c9:7d:39:55:f1:32:ff:90:fe:ea:a0:b4:07:66: f2:2b:eb:ff:4a:5a:3b:d1:89:d9:d7:1d:57:cb:fc: d5:57:88:bf:da:c1:50:fd:bd:67:12:67:c1:bd:1d: 31:45:58:66:7e:3c:f4:9a:bf:b6:b2:30:df:b7:88: 7b:45:6d:25:91:d0:bf:40:06:8f:94:22:5c:d1:23: a6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:EB:8B:18:E9:30:D7:83:98:AE:13:DE:FE:5A:8F:10:4F:1C:A0:C9 X509v3 Authority Key Identifier: keyid:F7:51:43:AB:5B:E8:30:BE:93:BC:D7:76:D3:32:B0:FD:5B:78:7E:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91FDq1voML6TvNd20zKw_Vt4fjs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:7a:5f:86:b7:be:c8:22:42:13:a5:0b:b8:4c:7e:dd:c1:2f: 9a:af:fa:81:67:78:2f:42:70:30:f7:1a:05:4c:8b:06:f9:87: ce:66:1b:10:a8:33:43:45:e5:f2:7b:d8:db:7c:73:fa:ab:1a: b9:fa:af:e6:fa:81:0b:ca:f6:22:73:51:96:c2:ca:5c:11:f4: c8:06:37:b6:5d:e2:60:6f:bc:d3:14:57:c2:b1:6c:b4:f6:0c: 0c:fc:7a:e5:37:ba:f4:ac:8d:51:fc:98:c2:8a:01:34:f3:16: 7a:ce:8f:5b:eb:ac:e2:6a:b0:6e:36:1f:a0:46:65:51:09:92: c5:00:53:f8:a7:cf:20:75:22:ca:d9:dc:6f:96:95:b0:de:71: 65:34:9a:a5:55:4e:01:d0:9d:bc:65:8e:bc:16:92:68:0d:e2: 8e:3c:c0:fd:5c:02:8d:67:12:c7:83:96:98:5e:ad:44:1e:e5: e8:da:01:e9:24:4d:38:10:d3:25:b7:a1:05:a5:da:27:57:33: ed:4e:ed:1e:af:bb:a9:56:17:8a:79:e0:6a:95:27:c7:56:05: e3:e9:32:98:7d:52:06:bc:ad:54:e7:b0:50:39:85:84:a8:2e: e5:2a:9d:00:0f:c9:79:ec:9e:04:06:f8:69:e6:80:74:5a:0c: 57:9f:cd:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE3QzAxMTAvBgNVBAUTKEY3NTE0M0FCNUJFODMwQkU5M0JDRDc3NkQzMzJCMEZE NUI3ODdFM0IwHhcNMjQwNTE4MjIzNzU5WhcNMjQwNTI1MjIzNzU4WjAYMRYwFAYD VQQDEw02NjQ5MmRjNy04ZmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1fxH+dRoKCliMm46NbLs8crOyF426exZ6t7dH/4YccjRh4Ggu4eLQvbEvQB2 9bgQbtDzCpZNriBq6rQV0bJz7JP4qQx4HP6pkspIh7g0ABsdcTAI2PJJ4+Kdudp3 iqfg3axHQtJCQjxEnGbulw7ljjJ/6M/RsCx7KJzUlL3zoZ/e5LEXB0rs0OeRZFNV /kqZUg/D9avcGnvw9iQJhRlI5CaLiFxum0trPGJ8/uEa+DpaXFZKyX05VfEy/5D+ 6qC0B2byK+v/Slo70YnZ1x1Xy/zVV4i/2sFQ/b1nEmfBvR0xRVhmfjz0mr+2sjDf t4h7RW0lkdC/QAaPlCJc0SOmGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC/rixjp MNeDmK4T3v5ajxBPHKDJMB8GA1UdIwQYMBaAFPdRQ6tb6DC+k7zXdtMysP1beH47 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTdDMC8wMThFQkU1OEYz MUExMUVBQkMwMENDNUNDNEY5QUUwMi85MUZEcTF2b01MNlR2TmQyMHpLd19WdDRm anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkxRkRxMXZvTUw2VHZOZDIwekt3X1Z0NGZqcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTdDMC8wMThFQkU1OEYzMUExMUVBQkMwMENDNUNDNEY5QUUwMi85MUZEcTF2b01M NlR2TmQyMHpLd19WdDRmanMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMel+Gt77IIkITpQu4TH7dwS+ar/qBZ3gvQnAw9xoFTIsG+YfOZhsQ qDNDReXye9jbfHP6qxq5+q/m+oELyvYic1GWwspcEfTIBje2XeJgb7zTFFfCsWy0 9gwM/HrlN7r0rI1R/JjCigE08xZ6zo9b66ziarBuNh+gRmVRCZLFAFP4p88gdSLK 2dxvlpWw3nFlNJqlVU4B0J28ZY68FpJoDeKOPMD9XAKNZxLHg5aYXq1EHuXo2gHp JE04ENMlt6EFpdonVzPtTu0er7upVheKeeBqlSfHVgXj6TKYfVIGvK1U57BQOYWE qC7lKp0AD8l57J4EBvhp5oB0WgxXn83S -----END CERTIFICATE-----Generated at Sun May 19 00:30:17 2024 by rpki-client on console-ams.rpki-client.org