$ rpki-client -vvf rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.mft File: bUron6l6cWotkmYf8s9b08zcKfw.mft (raw, json) Hash identifier: 3wYO6Bh72qMcBY4Jw4hNwH3Mj8ycd+10sG4gWM9/+v0= Subject key identifier: CD:7A:90:C8:13:CF:DB:9C:5A:3C:F7:EF:95:B9:75:85:70:8B:56:BB Authority key identifier: 6D:4A:E8:9F:A9:7A:71:6A:2D:92:66:1F:F2:CF:5B:D3:CC:DC:29:FC Certificate issuer: /CN=A91778C2/serialNumber=6D4AE89FA97A716A2D92661FF2CF5BD3CCDC29FC Certificate serial: 167C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUron6l6cWotkmYf8s9b08zcKfw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.mft Manifest number: 1643 Signing time: Sat 18 May 2024 17:12:44 +0000 Manifest this update: Sat 18 May 2024 17:12:43 +0000 Manifest next update: Sat 25 May 2024 17:12:43 +0000 Files and hashes: 1: bUron6l6cWotkmYf8s9b08zcKfw.crl (hash: 05c1qfv63vT7UEbB+JgcvS7Y0lzT0/IoXG0eBW6h07U=) 2: 51AAD304C72511ED9C7B9D2BC4F9AE02.roa (hash: Ecrp0DUfBkdR2dIWTZj26RIpRDqTrQV2Y76hyKPmUwk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.crl rsync://rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUron6l6cWotkmYf8s9b08zcKfw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5756 (0x167c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91778C2/serialNumber=6D4AE89FA97A716A2D92661FF2CF5BD3CCDC29FC Validity Not Before: May 18 17:12:43 2024 GMT Not After : May 25 17:12:43 2024 GMT Subject: CN=6648e18c-9790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:61:f0:77:f6:1c:5c:26:a5:9d:89:2c:d5:57: f8:16:93:0c:08:ab:b8:cf:a5:b5:46:e3:48:31:c4: 07:ad:38:98:be:e3:67:ae:b4:1e:0f:43:a6:d4:c6: aa:e0:69:92:f6:17:b9:8b:b6:a0:ad:97:9c:f9:57: cf:43:29:80:32:02:c7:b6:b2:fc:9c:98:ed:0b:4a: 2c:1e:ee:72:26:33:64:75:bc:33:27:c9:a7:cd:3f: 2c:16:cd:8e:60:f4:89:f4:be:2f:25:69:62:ac:73: 3a:12:cf:3c:fa:ca:82:ab:5f:c6:97:fb:70:13:6a: 67:14:ca:43:3e:dc:ac:03:b9:13:c5:04:1c:1e:db: 47:b9:1c:5f:ba:be:46:e1:16:9b:ca:90:83:3f:4a: 77:a6:97:f9:01:6a:ea:72:94:fd:64:1f:d9:ad:5d: dd:66:13:32:cc:9a:35:8c:53:96:e3:28:e3:49:38: 56:2c:9d:64:be:19:ad:d0:16:3d:1d:ff:d7:cf:4c: 97:d0:9e:a1:43:39:72:81:a4:03:d1:1f:98:1e:60: fd:b0:83:b4:21:e2:92:05:a2:c7:bc:5f:f5:bf:46: c4:a3:ca:56:51:d1:cc:ae:78:65:49:2c:26:15:50: 38:14:ce:cf:81:9b:70:a6:f0:23:01:bf:2a:5e:62: 70:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:7A:90:C8:13:CF:DB:9C:5A:3C:F7:EF:95:B9:75:85:70:8B:56:BB X509v3 Authority Key Identifier: keyid:6D:4A:E8:9F:A9:7A:71:6A:2D:92:66:1F:F2:CF:5B:D3:CC:DC:29:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUron6l6cWotkmYf8s9b08zcKfw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:a3:ce:20:63:38:62:bb:04:af:74:f5:68:a4:97:7b:21:6d: c4:e7:af:49:03:68:be:a7:81:fc:2e:90:24:f2:cb:20:ba:23: 90:df:73:53:a6:d0:0c:fe:94:84:09:06:3d:b8:8f:7e:fd:94: 20:fa:69:1c:af:f9:c8:52:3c:b5:14:50:63:89:3c:7b:92:d7: 0b:32:3b:2d:39:23:75:2f:d8:1c:3c:47:42:43:1a:08:ed:a1: 60:2d:da:4e:41:bc:ac:3e:ea:94:ac:24:76:42:56:72:1c:c1: 72:8a:e8:8e:cb:35:e1:63:79:4b:0b:19:03:01:2c:56:ec:03: 6c:47:c0:e3:28:d8:b5:5e:fc:5d:0d:6b:7c:ed:0f:3a:9e:27: 89:68:b0:e8:50:7e:66:f4:1d:2f:69:e0:fd:73:6a:c8:56:f8: 5a:4d:41:1e:34:fa:08:43:60:31:f4:4a:d5:97:35:d5:dd:e6: ba:2f:c0:58:32:06:c8:74:4b:d0:fd:5c:77:88:52:83:df:53: a9:79:90:a6:86:0b:b6:d5:fb:64:a3:94:de:c9:a5:99:6b:be: 25:2b:2a:66:67:86:fb:76:57:07:15:19:a0:33:68:99:0f:c5: 00:01:4d:ba:ef:ed:79:8a:7f:db:7b:1f:df:28:84:97:74:5d: 1e:7d:5c:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc4QzIxMTAvBgNVBAUTKDZENEFFODlGQTk3QTcxNkEyRDkyNjYxRkYyQ0Y1QkQz Q0NEQzI5RkMwHhcNMjQwNTE4MTcxMjQzWhcNMjQwNTI1MTcxMjQzWjAYMRYwFAYD VQQDEw02NjQ4ZTE4Yy05NzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoGHwd/YcXCalnYks1Vf4FpMMCKu4z6W1RuNIMcQHrTiYvuNnrrQeD0Om1Maq 4GmS9he5i7agrZec+VfPQymAMgLHtrL8nJjtC0osHu5yJjNkdbwzJ8mnzT8sFs2O YPSJ9L4vJWlirHM6Es88+sqCq1/Gl/twE2pnFMpDPtysA7kTxQQcHttHuRxfur5G 4RabypCDP0p3ppf5AWrqcpT9ZB/ZrV3dZhMyzJo1jFOW4yjjSThWLJ1kvhmt0BY9 Hf/Xz0yX0J6hQzlygaQD0R+YHmD9sIO0IeKSBaLHvF/1v0bEo8pWUdHMrnhlSSwm FVA4FM7PgZtwpvAjAb8qXmJwJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM16kMgT z9ucWjz375W5dYVwi1a7MB8GA1UdIwQYMBaAFG1K6J+penFqLZJmH/LPW9PM3Cn8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzhDMi9FRDJCQkM3MEY4 ODcxMUU3OTIxRjg2NjhDNEY5QUUwMi9iVXJvbjZsNmNXb3RrbVlmOHM5YjA4emNL ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JVcm9uNmw2Y1dvdGttWWY4czliMDh6Y0tmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzhDMi9FRDJCQkM3MEY4ODcxMUU3OTIxRjg2NjhDNEY5QUUwMi9iVXJvbjZsNmNX b3RrbVlmOHM5YjA4emNLZncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1o84gYzhiuwSvdPVopJd7IW3E569JA2i+p4H8LpAk8ssguiOQ33NT ptAM/pSECQY9uI9+/ZQg+mkcr/nIUjy1FFBjiTx7ktcLMjstOSN1L9gcPEdCQxoI 7aFgLdpOQbysPuqUrCR2QlZyHMFyiuiOyzXhY3lLCxkDASxW7ANsR8DjKNi1Xvxd DWt87Q86nieJaLDoUH5m9B0vaeD9c2rIVvhaTUEeNPoIQ2Ax9ErVlzXV3ea6L8BY MgbIdEvQ/Vx3iFKD31OpeZCmhgu21ftko5TeyaWZa74lKypmZ4b7dlcHFRmgM2iZ D8UAAU267+15in/bex/fKISXdF0efVzg -----END CERTIFICATE-----Generated at Sat May 18 18:21:37 2024 by rpki-client on console-ams.rpki-client.org