$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft File: apjAwIy9NBmpCCuGDSm_qXL98qc.mft (raw, json) Hash identifier: 8n/eaYtnAcjoaRanziHT3Y+bA6DjXjJTKpBInAfQtUA= Subject key identifier: B1:D0:F1:50:56:81:AC:36:F1:CB:9D:56:14:BB:B7:03:F1:4C:9D:7F Authority key identifier: 6A:98:C0:C0:8C:BD:34:19:A9:08:2B:86:0D:29:BF:A9:72:FD:F2:A7 Certificate issuer: /CN=A91A2BD6/serialNumber=6A98C0C08CBD3419A9082B860D29BFA972FDF2A7 Certificate serial: 036D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft Manifest number: 036A Signing time: Sun 19 May 2024 02:50:47 +0000 Manifest this update: Sun 19 May 2024 02:50:46 +0000 Manifest next update: Sun 26 May 2024 02:50:46 +0000 Files and hashes: 1: apjAwIy9NBmpCCuGDSm_qXL98qc.crl (hash: +U0c/5PID+IZSVsXJxDs7KD6d43uO5+uZKzX1cmamWI=) 2: 61B3CBDC631911ECAE6AA33DC4F9AE02.roa (hash: h+OfjjehRIA/zlWGe9h6a4OIJN0B8XRTcU6gU5D8yHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.crl rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 877 (0x36d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2BD6/serialNumber=6A98C0C08CBD3419A9082B860D29BFA972FDF2A7 Validity Not Before: May 19 02:50:46 2024 GMT Not After : May 26 02:50:46 2024 GMT Subject: CN=66496907-2bbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2e:b8:8f:ec:5b:26:2d:35:23:4f:2a:60:b8: 99:fe:26:63:de:e7:99:c7:3e:ca:08:3d:70:d1:e3: 6c:69:6c:d0:a3:ef:06:cf:b5:5f:68:54:76:af:88: 11:e8:9c:60:63:9b:37:35:2d:ff:1f:5d:92:5f:01: 08:46:87:6f:40:b9:95:fa:66:93:24:7f:d5:fa:d4: 29:ed:a1:69:fb:fa:38:8f:75:58:09:79:67:63:04: ad:18:60:f1:90:39:ee:f0:cf:83:d0:40:c8:22:79: aa:85:fd:86:27:74:76:d3:05:2e:f2:a6:98:c1:9e: 3a:92:5a:54:b8:5e:54:5a:99:c6:fb:0c:06:a0:7e: ad:3d:02:e1:8a:87:59:c1:38:92:d2:fb:79:18:a4: ed:73:5b:7e:8e:62:5c:41:5a:59:a0:55:47:53:9a: 11:15:b1:4c:ae:44:13:c7:69:83:05:34:7b:c1:5e: d9:af:13:82:44:e3:0f:ca:bb:83:80:78:f3:54:ab: 56:0b:bf:25:fb:5d:c3:04:ee:16:ff:c8:66:16:6d: 5c:98:12:50:ea:b5:c9:a6:05:fe:02:ef:1d:39:72: 3f:df:ec:89:85:a3:1d:c6:9c:ea:ac:d3:f9:50:d3: bd:a0:c1:0e:23:35:9e:2b:eb:f0:9b:48:64:9e:1a: 2a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D0:F1:50:56:81:AC:36:F1:CB:9D:56:14:BB:B7:03:F1:4C:9D:7F X509v3 Authority Key Identifier: keyid:6A:98:C0:C0:8C:BD:34:19:A9:08:2B:86:0D:29:BF:A9:72:FD:F2:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:60:41:9e:49:2b:88:96:61:a5:4b:b2:a9:ca:8f:0b:ff:68: e4:f1:e2:5b:ed:59:31:a1:9b:92:02:40:a1:0d:96:7a:9c:b6: 92:f8:c3:87:17:23:0a:57:3b:d3:b6:6a:d3:53:b7:17:36:a3: d5:37:3c:72:c4:de:ee:05:4c:49:93:d3:45:9c:25:b9:0e:99: 6d:0d:80:64:e9:e8:47:0e:85:de:83:70:d0:9d:48:1c:06:94: e4:35:23:79:25:2a:7a:c4:19:34:7d:a2:64:2b:93:70:f6:58: c0:12:7b:84:c0:fe:5a:6b:ae:00:19:e9:9c:02:88:63:39:16: 37:85:60:cc:52:66:49:9c:24:c2:04:e1:1e:ea:b8:46:82:16: 6b:7a:dc:ba:42:e8:5f:8f:27:db:f6:2f:b8:5d:00:c7:69:d1: 34:5d:46:7e:27:c6:66:3d:2d:87:d7:22:26:0f:38:3c:30:78: e0:d5:d8:c0:59:46:e3:56:2d:37:8f:dd:f8:7d:36:5a:98:4f: e1:9a:01:ca:72:59:fc:e9:fd:ad:dd:69:a7:1a:78:2a:9b:a0: 92:22:9e:38:c6:bf:71:25:ff:15:ea:05:11:46:7b:14:1e:c6: 75:1f:ca:98:14:3c:be:16:ba:09:21:5e:7f:8f:9e:96:db:da: 47:9a:4f:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJCRDYxMTAvBgNVBAUTKDZBOThDMEMwOENCRDM0MTlBOTA4MkI4NjBEMjlCRkE5 NzJGREYyQTcwHhcNMjQwNTE5MDI1MDQ2WhcNMjQwNTI2MDI1MDQ2WjAYMRYwFAYD VQQDEw02NjQ5NjkwNy0yYmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArC64j+xbJi01I08qYLiZ/iZj3ueZxz7KCD1w0eNsaWzQo+8Gz7VfaFR2r4gR 6JxgY5s3NS3/H12SXwEIRodvQLmV+maTJH/V+tQp7aFp+/o4j3VYCXlnYwStGGDx kDnu8M+D0EDIInmqhf2GJ3R20wUu8qaYwZ46klpUuF5UWpnG+wwGoH6tPQLhiodZ wTiS0vt5GKTtc1t+jmJcQVpZoFVHU5oRFbFMrkQTx2mDBTR7wV7ZrxOCROMPyruD gHjzVKtWC78l+13DBO4W/8hmFm1cmBJQ6rXJpgX+Au8dOXI/3+yJhaMdxpzqrNP5 UNO9oMEOIzWeK+vwm0hknhoq7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLHQ8VBW gaw28cudVhS7twPxTJ1/MB8GA1UdIwQYMBaAFGqYwMCMvTQZqQgrhg0pv6ly/fKn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkJENi85QzU4NURCMDYz MTUxMUVDQkE1MzY5NjlDNEY5QUUwMi9hcGpBd0l5OU5CbXBDQ3VHRFNtX3FYTDk4 cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FwakF3SXk5TkJtcENDdUdEU21fcVhMOThxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkJENi85QzU4NURCMDYzMTUxMUVDQkE1MzY5NjlDNEY5QUUwMi9hcGpBd0l5OU5C bXBDQ3VHRFNtX3FYTDk4cWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyYEGeSSuIlmGlS7Kpyo8L/2jk8eJb7VkxoZuSAkChDZZ6nLaS+MOH FyMKVzvTtmrTU7cXNqPVNzxyxN7uBUxJk9NFnCW5DpltDYBk6ehHDoXeg3DQnUgc BpTkNSN5JSp6xBk0faJkK5Nw9ljAEnuEwP5aa64AGemcAohjORY3hWDMUmZJnCTC BOEe6rhGghZrety6Quhfjyfb9i+4XQDHadE0XUZ+J8ZmPS2H1yImDzg8MHjg1djA WUbjVi03j934fTZamE/hmgHKcln86f2t3WmnGngqm6CSIp44xr9xJf8V6gURRnsU HsZ1H8qYFDy+FroJIV5/j56W29pHmk9J -----END CERTIFICATE-----Generated at Sun May 19 03:14:49 2024 by rpki-client on console-fra.rpki-client.org