$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft File: p4emPknujsb5dRFgfxt8Ww3xFk4.mft (raw, json) Hash identifier: DQFWIcbF4X229tjuE0MNzta619W30R1v1mlM+FdMNpc= Subject key identifier: 0D:C4:1B:91:61:13:37:1A:88:5F:78:E3:A5:B3:E8:89:08:F4:A9:33 Authority key identifier: A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E Certificate issuer: /CN=A91A0A6C/serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E Certificate serial: 0909 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft Manifest number: 0900 Signing time: Sat 18 May 2024 21:15:52 +0000 Manifest this update: Sat 18 May 2024 21:15:51 +0000 Manifest next update: Sat 25 May 2024 21:15:51 +0000 Files and hashes: 1: p4emPknujsb5dRFgfxt8Ww3xFk4.crl (hash: A6Rj12jspYKYAUXMvBFF5KbqnbinDdQeNBn2aAXYPFI=) 2: CFDF8B8A5B5D11EE967F161DC4F9AE02.roa (hash: gmPw0/XxS6by0eGadVEva2pNqJ0sYAzIpNRugtlXu4s=) 3: B13B2E5A5B5D11EEADF5C61CC4F9AE02.roa (hash: BuhJgDsyCsja/6NR2KvBldmlI45GwmmzEaspPRYxwho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2313 (0x909) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0A6C/serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E Validity Not Before: May 18 21:15:51 2024 GMT Not After : May 25 21:15:51 2024 GMT Subject: CN=66491a87-d8fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d9:dc:66:86:70:3d:ee:24:5f:c8:d3:12:2d: 03:ba:88:01:c4:63:f8:d9:a1:f4:22:fb:e6:fc:14: 4e:71:3c:c5:5e:2d:5d:15:72:67:54:69:69:c1:c4: 28:49:3b:7f:6c:b7:04:b6:53:0f:63:ae:94:e7:c6: 26:04:7c:e0:98:a7:01:40:8a:b8:ae:4c:36:3f:b7: 91:7e:99:bd:b1:c9:5a:f6:17:c7:3a:49:42:1d:df: 5b:16:65:bc:49:21:f1:e1:35:15:77:4c:d6:fb:7c: f9:7e:51:b0:91:5c:1c:00:c4:84:a4:cb:80:d9:6a: cc:59:c8:98:bd:31:e9:ae:57:7c:bc:53:c3:77:f9: 7d:ef:83:ff:2c:19:a5:64:db:ab:c8:5d:47:7a:b3: 7b:ee:2f:e1:c1:d0:47:78:91:d7:07:d0:6a:34:36: e7:49:f2:96:4e:b4:b5:ff:04:cd:bc:ab:09:38:2d: 6b:04:81:a5:b3:f2:71:27:5c:89:9e:3a:4e:cc:bb: 63:55:62:06:b5:61:cb:5c:90:02:84:89:63:92:0a: 6f:ed:51:97:e1:fe:ae:91:4a:af:a4:a5:d2:9e:46: da:73:05:11:32:73:61:b7:f9:68:a4:6f:50:93:06: 1c:88:db:a0:b6:d8:14:2e:33:18:be:06:dc:0b:28: c9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C4:1B:91:61:13:37:1A:88:5F:78:E3:A5:B3:E8:89:08:F4:A9:33 X509v3 Authority Key Identifier: keyid:A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:c5:04:35:08:d7:eb:c9:40:0a:32:21:60:84:68:17:25:d2: de:69:bc:de:06:19:d6:52:06:da:28:51:59:b1:48:ec:23:21: 76:cd:e8:0b:cb:b6:33:ae:46:29:3b:25:c7:f4:e3:24:ca:c3: 1c:3e:2f:fa:ee:1b:89:ab:1d:3f:e9:b5:cb:00:50:c3:00:1d: 45:99:be:c1:f8:9c:b4:be:56:bc:57:4b:dd:95:28:3e:72:ea: b9:13:78:19:4d:1b:56:ad:46:68:2d:44:35:9d:e9:5d:cf:85: 0e:8d:87:58:0f:cc:c4:f2:76:70:88:1e:e5:6d:ff:05:a9:ff: eb:9c:8b:f1:fe:a2:52:db:06:84:2f:97:db:52:55:0c:29:64: 02:b6:b4:f9:bf:c5:9c:46:f2:9f:ea:13:60:dc:b4:2f:ac:7a: a7:4d:2f:fd:2d:b8:87:71:9c:e4:9a:1a:9c:af:d0:b1:78:c2: a5:9c:62:62:73:8c:59:9f:53:b2:c7:22:fd:52:21:df:49:08: 21:1d:14:64:58:fa:b4:46:ed:c2:da:45:5b:26:e9:1b:d4:55: b9:6a:2c:42:28:51:44:8c:f8:fa:b4:20:49:11:24:40:15:57: ff:c7:7f:c7:7c:fb:40:30:08:0f:fe:e1:c7:23:50:d5:93:42: 38:87:e6:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBBNkMxMTAvBgNVBAUTKEE3ODdBNjNFNDlFRThFQzZGOTc1MTE2MDdGMUI3QzVC MERGMTE2NEUwHhcNMjQwNTE4MjExNTUxWhcNMjQwNTI1MjExNTUxWjAYMRYwFAYD VQQDEw02NjQ5MWE4Ny1kOGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqtncZoZwPe4kX8jTEi0DuogBxGP42aH0Ivvm/BROcTzFXi1dFXJnVGlpwcQo STt/bLcEtlMPY66U58YmBHzgmKcBQIq4rkw2P7eRfpm9scla9hfHOklCHd9bFmW8 SSHx4TUVd0zW+3z5flGwkVwcAMSEpMuA2WrMWciYvTHprld8vFPDd/l974P/LBml ZNuryF1HerN77i/hwdBHeJHXB9BqNDbnSfKWTrS1/wTNvKsJOC1rBIGls/JxJ1yJ njpOzLtjVWIGtWHLXJAChIljkgpv7VGX4f6ukUqvpKXSnkbacwURMnNht/lopG9Q kwYciNugttgULjMYvgbcCyjJKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA3EG5Fh EzcaiF9446Wz6IkI9KkzMB8GA1UdIwQYMBaAFKeHpj5J7o7G+XURYH8bfFsN8RZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEE2Qy9COTE2RjM4ODgy QzIxMUVBOUE1MTQ2MzlDNEY5QUUwMi9wNGVtUGtudWpzYjVkUkZnZnh0OFd3M3hG azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A0ZW1Qa251anNiNWRSRmdmeHQ4V3czeEZrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEE2Qy9COTE2RjM4ODgyQzIxMUVBOUE1MTQ2MzlDNEY5QUUwMi9wNGVtUGtudWpz YjVkUkZnZnh0OFd3M3hGazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYxQQ1CNfryUAKMiFghGgXJdLeabzeBhnWUgbaKFFZsUjsIyF2zegL y7YzrkYpOyXH9OMkysMcPi/67huJqx0/6bXLAFDDAB1Fmb7B+Jy0vla8V0vdlSg+ cuq5E3gZTRtWrUZoLUQ1neldz4UOjYdYD8zE8nZwiB7lbf8Fqf/rnIvx/qJS2waE L5fbUlUMKWQCtrT5v8WcRvKf6hNg3LQvrHqnTS/9LbiHcZzkmhqcr9CxeMKlnGJi c4xZn1OyxyL9UiHfSQghHRRkWPq0Ru3C2kVbJukb1FW5aixCKFFEjPj6tCBJESRA FVf/x3/HfPtAMAgP/uHHI1DVk0I4h+bb -----END CERTIFICATE-----Generated at Sat May 18 22:27:56 2024 by rpki-client on console-ams.rpki-client.org