$ rpki-client -vvf rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft File: Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft (raw, json) Hash identifier: P+TZTZPsTH/2vJ0RGPzX/GGKiMqAaIDdRXvDGBHQCIU= Subject key identifier: FF:03:43:04:B3:E6:3A:CB:70:13:AE:F1:7D:17:E7:2D:0B:58:20:E8 Authority key identifier: 03:1E:29:F2:6E:78:32:81:B7:68:E8:91:08:53:14:4D:F1:EE:55:34 Certificate issuer: /CN=A91805BF/serialNumber=031E29F26E783281B768E8910853144DF1EE5534 Certificate serial: 06BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft Manifest number: 06B9 Signing time: Sat 18 May 2024 23:06:59 +0000 Manifest this update: Sat 18 May 2024 23:06:59 +0000 Manifest next update: Sat 25 May 2024 23:06:59 +0000 Files and hashes: 1: Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl (hash: GJeZVgDwIIyA/CFbfGIGoQXEeTkIB46JVg61m8XWOew=) 2: B89D979A13F411EB8BF49553C4F9AE02.roa (hash: Elt6JYpPcUNolUdz4IF+3v+14XhKVVmXORmOfAqBK0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1726 (0x6be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91805BF/serialNumber=031E29F26E783281B768E8910853144DF1EE5534 Validity Not Before: May 18 23:06:59 2024 GMT Not After : May 25 23:06:59 2024 GMT Subject: CN=66493493-0c72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9e:8e:c8:25:68:33:75:c9:99:66:bf:93:ac: 91:cd:02:24:aa:4e:17:f1:e5:c7:00:3f:7f:16:36: 83:68:10:53:6c:24:8f:fe:39:a7:54:48:04:15:73: 5c:1a:51:e0:3b:4f:a0:65:3e:ca:70:a1:3f:30:ab: 5f:10:d3:8a:47:bf:3d:95:2e:cb:93:ea:24:d5:52: b1:44:28:86:ed:2a:03:d7:51:f8:f7:3d:ee:d8:6b: 39:26:f5:92:68:06:2f:75:bf:35:2b:bc:5e:dc:15: 54:4b:15:54:2d:29:68:4f:45:9e:4f:8f:9d:f0:02: 23:60:41:08:42:42:bc:67:76:15:ae:aa:48:12:2c: 97:78:50:57:2f:9a:08:76:9c:1c:2e:ca:b5:07:ed: ac:36:ee:fe:e3:ec:1f:9b:c7:10:7d:13:21:1f:ea: ea:d8:d8:db:b0:3b:e3:c3:73:de:01:6e:20:7f:c2: 64:a7:e6:e8:d9:a9:29:ae:82:8e:72:ec:24:45:8b: 33:36:10:db:70:f8:3c:5f:94:e1:ab:56:02:6e:95: fb:d0:4c:6f:49:55:47:b9:f2:7e:69:e8:55:66:51: c3:d7:f5:fb:3c:49:1e:6f:df:33:b9:f2:66:2f:c4: fb:ac:37:d5:d2:da:c3:b0:b4:36:52:7f:cf:48:61: 44:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:03:43:04:B3:E6:3A:CB:70:13:AE:F1:7D:17:E7:2D:0B:58:20:E8 X509v3 Authority Key Identifier: keyid:03:1E:29:F2:6E:78:32:81:B7:68:E8:91:08:53:14:4D:F1:EE:55:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:bd:7b:72:ec:14:8e:6c:e3:30:9b:1b:7f:59:ff:4f:0a:8a: 98:64:fd:60:ef:99:9f:ac:4a:96:7b:e3:18:a4:25:0f:9b:2e: ad:b7:5c:ae:df:b4:70:29:1a:3f:91:fa:4c:64:db:a9:d0:9b: e2:5f:dd:09:d4:ea:61:93:d0:b6:04:58:54:ff:e5:3a:80:01: aa:c5:29:70:02:4c:09:6a:dc:94:ba:5e:e4:c5:17:77:33:5e: 67:bc:df:0c:8d:54:43:4b:0c:71:e1:49:4b:09:a8:f6:2e:00: c0:cc:93:a5:a2:75:95:02:b3:bf:f0:91:c8:83:6d:f1:53:64: eb:a8:85:97:82:61:b2:8c:14:60:ad:e7:f8:50:a9:af:90:f7: d4:a1:c4:8d:83:1a:7a:f6:80:6b:96:21:0a:6e:ab:5c:1e:da: ed:21:b0:9e:80:68:aa:30:c4:4b:c1:1a:c6:97:2b:99:92:af: 71:df:9e:d6:03:d7:9b:df:31:59:d5:69:f9:3c:89:af:39:9c: 8e:7a:88:95:35:d6:72:cb:d1:b6:b0:d6:40:55:f2:63:fa:b5: 2c:cf:5a:c2:3e:cc:8d:d3:c8:8c:ef:14:08:fc:c5:92:93:d4: f6:b5:f7:1c:d1:6d:0f:a3:ce:e1:a0:81:26:f3:5b:a6:5b:bd: f9:b3:c3:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA1QkYxMTAvBgNVBAUTKDAzMUUyOUYyNkU3ODMyODFCNzY4RTg5MTA4NTMxNDRE RjFFRTU1MzQwHhcNMjQwNTE4MjMwNjU5WhcNMjQwNTI1MjMwNjU5WjAYMRYwFAYD VQQDEw02NjQ5MzQ5My0wYzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZ6OyCVoM3XJmWa/k6yRzQIkqk4X8eXHAD9/FjaDaBBTbCSP/jmnVEgEFXNc GlHgO0+gZT7KcKE/MKtfENOKR789lS7Lk+ok1VKxRCiG7SoD11H49z3u2Gs5JvWS aAYvdb81K7xe3BVUSxVULSloT0WeT4+d8AIjYEEIQkK8Z3YVrqpIEiyXeFBXL5oI dpwcLsq1B+2sNu7+4+wfm8cQfRMhH+rq2NjbsDvjw3PeAW4gf8Jkp+bo2akproKO cuwkRYszNhDbcPg8X5Thq1YCbpX70ExvSVVHufJ+aehVZlHD1/X7PEkeb98zufJm L8T7rDfV0trDsLQ2Un/PSGFE4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP8DQwSz 5jrLcBOu8X0X5y0LWCDoMB8GA1UdIwQYMBaAFAMeKfJueDKBt2jokQhTFE3x7lU0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDVCRi9GMTMzQkRBQzEz RjIxMUVCOUJFRkNENTFDNEY5QUUwMi9BeDRwOG01NE1vRzNhT2lSQ0ZNVVRmSHVW VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F4NHA4bTU0TW9HM2FPaVJDRk1VVGZIdVZUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDVCRi9GMTMzQkRBQzEzRjIxMUVCOUJFRkNENTFDNEY5QUUwMi9BeDRwOG01NE1v RzNhT2lSQ0ZNVVRmSHVWVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyvXty7BSObOMwmxt/Wf9PCoqYZP1g75mfrEqWe+MYpCUPmy6tt1yu 37RwKRo/kfpMZNup0JviX90J1Ophk9C2BFhU/+U6gAGqxSlwAkwJatyUul7kxRd3 M15nvN8MjVRDSwxx4UlLCaj2LgDAzJOlonWVArO/8JHIg23xU2TrqIWXgmGyjBRg ref4UKmvkPfUocSNgxp69oBrliEKbqtcHtrtIbCegGiqMMRLwRrGlyuZkq9x357W A9eb3zFZ1Wn5PImvOZyOeoiVNdZyy9G2sNZAVfJj+rUsz1rCPsyN08iM7xQI/MWS k9T2tfcc0W0Po87hoIEm81umW735s8ML -----END CERTIFICATE-----Generated at Sun May 19 00:16:16 2024 by rpki-client on console-fra.rpki-client.org