$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft File: 9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft (raw, json) Hash identifier: pqxPmXmCQmW2LubH4vGWwY35XancWjYtaz7C9O/3nuQ= Subject key identifier: BF:61:5C:39:42:49:1D:9F:36:5A:C4:56:9B:4C:C3:79:2B:E2:F9:C6 Authority key identifier: F5:3E:56:40:76:98:C1:FA:A7:5D:25:76:55:13:B5:07:65:2C:97:AB Certificate issuer: /CN=A91A1B9F/serialNumber=F53E56407698C1FAA75D25765513B507652C97AB Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9T5WQHaYwfqnXSV2VRO1B2Usl6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft Manifest number: 74 Signing time: Fri 31 May 2024 08:17:55 +0000 Manifest this update: Fri 31 May 2024 08:17:55 +0000 Manifest next update: Fri 07 Jun 2024 08:17:55 +0000 Files and hashes: 1: 9T5WQHaYwfqnXSV2VRO1B2Usl6s.crl (hash: fhgitKwrwUngzHW4CDtf3IEyZBZhIzy5ORukdMTgXlM=) 2: 37E179CC6F0011EEAFD97016C4F9AE02.roa (hash: Un+Z3Gbkw13LeqQHwF6QsntnQss6CAfhF5vXIpVmBv4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.crl rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9T5WQHaYwfqnXSV2VRO1B2Usl6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1B9F/serialNumber=F53E56407698C1FAA75D25765513B507652C97AB Validity Not Before: May 31 08:17:55 2024 GMT Not After : Jun 7 08:17:55 2024 GMT Subject: CN=665987b3-80c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:58:72:37:7a:eb:3c:2f:af:0e:03:3b:9f:5a: d4:db:55:78:d1:f3:32:af:80:97:4b:c5:f5:9f:3a: f5:93:3f:16:07:30:3f:e9:12:29:1f:1e:c7:1c:5c: 41:44:42:a9:fe:a2:a2:32:92:6d:16:ce:81:f4:ff: 6f:47:b5:bc:da:1b:77:e9:0a:4b:12:7f:9d:ce:fa: 6c:60:72:30:a2:b1:78:dd:37:38:20:41:30:ba:32: 8b:f0:0b:6a:11:ea:c6:81:ff:de:70:f9:8a:ab:c6: ab:e8:4e:20:63:4d:43:4b:ed:d4:ca:46:c7:67:71: 3a:09:30:3b:c5:de:03:27:d7:c0:ec:6b:c3:d1:8e: 3f:da:6d:eb:21:6c:ae:17:17:f7:99:0c:de:3c:58: 89:60:e0:62:aa:20:92:b9:c6:0f:a2:e3:56:6c:91: 9b:fb:a9:a0:9e:70:e8:a6:20:0f:71:37:d7:0b:6d: 84:f3:a4:0c:55:00:c3:e4:15:60:67:81:51:b1:5c: fc:54:93:35:6f:2a:90:b9:dc:02:5f:87:89:2e:f8: 7f:e1:c5:df:de:28:5b:1d:bc:b8:b4:e7:7f:6f:49: 82:f4:f7:d4:61:5a:a1:ea:86:2d:f4:a7:4d:77:5d: 7c:55:31:ab:c4:97:21:34:f6:41:81:26:7d:6e:f7: 39:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:61:5C:39:42:49:1D:9F:36:5A:C4:56:9B:4C:C3:79:2B:E2:F9:C6 X509v3 Authority Key Identifier: keyid:F5:3E:56:40:76:98:C1:FA:A7:5D:25:76:55:13:B5:07:65:2C:97:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9T5WQHaYwfqnXSV2VRO1B2Usl6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:c0:4d:e9:36:e7:da:82:64:74:79:65:47:bc:d7:3c:4e:14: 79:52:36:26:98:aa:c4:83:b6:c0:06:d9:07:8e:9d:9d:b5:92: 81:bf:a7:6f:83:f0:44:d5:39:ea:24:62:da:93:94:23:c3:91: 7c:bc:da:dc:a8:44:09:a8:a5:81:ad:70:d0:22:2e:7f:f4:43: b4:c6:b1:5a:29:65:c7:6b:41:92:29:39:f0:65:38:f2:6c:d0: 52:d5:c1:48:40:7d:b8:1d:09:44:e7:af:f3:ab:81:6a:fc:8a: 5f:9b:b8:55:c5:41:fa:64:05:d8:24:b5:bc:4a:5f:57:ff:71: b4:40:34:0c:55:08:2e:86:e6:f9:b0:b7:14:b5:c0:5f:b3:83: 5e:f8:30:4f:fd:72:1c:bd:46:f5:ce:19:4c:96:16:6a:69:99: 31:b0:1b:d9:28:84:b3:ac:07:f0:c1:6c:86:c4:9c:ea:5f:f3: cc:0e:63:00:61:f6:a8:b9:2f:6d:81:4a:53:62:52:57:08:9e: 83:94:07:05:b6:86:7a:c4:f4:2a:aa:ec:52:cf:5c:fe:1b:bf: bc:3d:5d:06:f3:e0:f4:5a:9e:6f:58:80:54:72:c2:4e:ab:b9: 6b:37:f0:48:50:6b:89:78:a1:36:45:01:5d:aa:cf:92:4f:30: 40:21:a7:4f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MUI5RjExMC8GA1UEBRMoRjUzRTU2NDA3Njk4QzFGQUE3NUQyNTc2NTUxM0I1MDc2 NTJDOTdBQjAeFw0yNDA1MzEwODE3NTVaFw0yNDA2MDcwODE3NTVaMBgxFjAUBgNV BAMTDTY2NTk4N2IzLTgwYzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyWHI3eus8L68OAzufWtTbVXjR8zKvgJdLxfWfOvWTPxYHMD/pEikfHsccXEFE Qqn+oqIykm0WzoH0/29HtbzaG3fpCksSf53O+mxgcjCisXjdNzggQTC6MovwC2oR 6saB/95w+YqrxqvoTiBjTUNL7dTKRsdncToJMDvF3gMn18Dsa8PRjj/abeshbK4X F/eZDN48WIlg4GKqIJK5xg+i41ZskZv7qaCecOimIA9xN9cLbYTzpAxVAMPkFWBn gVGxXPxUkzVvKpC53AJfh4ku+H/hxd/eKFsdvLi0539vSYL099RhWqHqhi30p013 XXxVMavElyE09kGBJn1u9znRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUv2FcOUJJ HZ82WsRWm0zDeSvi+cYwHwYDVR0jBBgwFoAU9T5WQHaYwfqnXSV2VRO1B2Usl6sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUExQjlGLzU2OTIyOTAyNkUx NTExRUU4RDZFRDQ1OEM0RjlBRTAyLzlUNVdRSGFZd2ZxblhTVjJWUk8xQjJVc2w2 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOVQ1V1FIYVl3ZnFuWFNWMlZSTzFCMlVzbDZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEx QjlGLzU2OTIyOTAyNkUxNTExRUU4RDZFRDQ1OEM0RjlBRTAyLzlUNVdRSGFZd2Zx blhTVjJWUk8xQjJVc2w2cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFbATek259qCZHR5ZUe81zxOFHlSNiaYqsSDtsAG2QeOnZ21koG/p2+D 8ETVOeokYtqTlCPDkXy82tyoRAmopYGtcNAiLn/0Q7TGsVopZcdrQZIpOfBlOPJs 0FLVwUhAfbgdCUTnr/OrgWr8il+buFXFQfpkBdgktbxKX1f/cbRANAxVCC6G5vmw txS1wF+zg174ME/9chy9RvXOGUyWFmppmTGwG9kohLOsB/DBbIbEnOpf88wOYwBh 9qi5L22BSlNiUlcInoOUBwW2hnrE9Cqq7FLPXP4bv7w9XQbz4PRanm9YgFRywk6r uWs38EhQa4l4oTZFAV2qz5JPMEAhp08= -----END CERTIFICATE-----Generated at Fri May 31 10:42:50 2024 by rpki-client on console-fra.rpki-client.org