$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.mft File: h2m5UvnIAGdXkp8GmXzeWx5EjxQ.mft (raw, json) Hash identifier: 8B1s3AhxE7WV+L9xwl6FXRGhV0CGbNR1ezHJO4QJylk= Subject key identifier: 6B:82:2A:F7:88:56:B6:69:E7:2C:EE:7B:E5:B9:3E:1E:88:73:3D:44 Authority key identifier: 87:69:B9:52:F9:C8:00:67:57:92:9F:06:99:7C:DE:5B:1E:44:8F:14 Certificate issuer: /CN=A91A5030/serialNumber=8769B952F9C8006757929F06997CDE5B1E448F14 Certificate serial: 2546 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.mft Manifest number: 2535 Signing time: Sat 18 May 2024 16:01:16 +0000 Manifest this update: Sat 18 May 2024 16:01:15 +0000 Manifest next update: Sat 25 May 2024 16:01:15 +0000 Files and hashes: 1: h2m5UvnIAGdXkp8GmXzeWx5EjxQ.crl (hash: jiePSzE1wBqfHkVWVfUp2XHbRvHntHUq5G0ojn3Q2AY=) 2: 341F127A553C11E78691D52BC4F9AE02.roa (hash: 8X+x3LlikAlMNq0qZjdxxF001f12N0qrp8xYT/hgJaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.crl rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9542 (0x2546) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5030/serialNumber=8769B952F9C8006757929F06997CDE5B1E448F14 Validity Not Before: May 18 16:01:15 2024 GMT Not After : May 25 16:01:15 2024 GMT Subject: CN=6648d0cc-2017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:18:a8:80:3d:cb:85:a6:57:20:72:5c:94:70: 89:9c:bc:c9:81:5f:39:f9:4b:54:8a:59:b6:8e:70: 05:9f:2f:eb:d7:3f:a2:60:14:29:59:d4:7c:cb:cc: 18:69:42:6c:4b:e4:b0:b9:06:11:f9:05:60:98:c0: be:2b:12:02:21:d2:47:39:1d:99:ca:a7:61:24:29: 1b:85:54:26:1e:a1:fe:79:08:65:eb:20:43:85:90: 48:a2:3f:c3:49:10:b1:9d:58:78:5b:cb:3d:eb:13: 4a:3c:72:ed:06:56:77:53:99:70:b2:df:15:c0:34: 6f:75:d8:16:6c:2a:5d:46:ba:26:da:b4:d9:4c:30: 57:94:86:3a:6e:9a:2a:87:61:68:4b:52:05:5c:bd: ec:c2:1f:3f:3d:f2:66:f2:95:af:fb:dd:04:11:54: e5:cd:1f:5c:76:86:4f:6c:e5:0a:ca:9d:4c:ac:b8: 02:ca:d0:db:78:35:99:e0:1f:f0:02:af:37:30:1f: cc:0f:c9:e4:56:ef:22:9b:36:57:d6:3c:7e:fc:ac: 28:c4:0b:82:6f:13:e2:b4:d4:24:17:88:4d:58:84: 46:8e:89:bd:77:42:32:af:c9:c5:50:16:df:26:ba: a6:1a:53:68:88:4e:81:f1:de:ca:01:46:ad:a5:4d: a2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:82:2A:F7:88:56:B6:69:E7:2C:EE:7B:E5:B9:3E:1E:88:73:3D:44 X509v3 Authority Key Identifier: keyid:87:69:B9:52:F9:C8:00:67:57:92:9F:06:99:7C:DE:5B:1E:44:8F:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:83:02:29:50:1b:12:06:92:7b:32:96:d1:39:5f:90:08:15: 35:5e:09:60:7f:d4:b0:8f:8d:5b:03:55:47:5f:a5:0b:93:e3: 54:c4:a5:37:d7:12:89:21:c1:b1:9f:95:b4:c4:34:f0:b5:d7: 83:60:14:a3:44:11:bc:19:ab:dc:0d:c8:13:be:da:db:84:5f: f6:e3:43:b9:9f:b0:24:41:01:96:11:98:50:b7:ee:c5:73:f7: 55:5f:db:2b:4a:a2:f7:4d:5f:9e:0c:fd:20:97:c9:f8:c8:be: 72:72:b2:b9:a8:01:f0:26:2c:78:fd:2b:66:26:a1:0a:ce:55: 64:82:f7:26:15:12:fa:04:58:6f:53:88:9f:c3:98:1c:77:39: ef:46:ec:d4:d4:af:e2:f8:f9:bd:f9:af:01:54:57:95:25:5b: ef:a6:5c:52:cf:23:85:99:24:99:70:f6:5c:96:e7:7e:28:4a: 03:17:59:2e:7d:32:56:9d:f1:a2:69:07:de:c8:bd:f2:44:ce: 03:f5:d4:64:8a:5f:52:dd:6e:a0:77:c4:8c:6b:71:23:0f:0d: 26:1c:45:37:ca:ff:e5:59:d9:89:71:9f:00:e1:b6:fa:dd:e0: ef:90:da:86:d6:52:95:7e:0e:9d:26:20:b5:fb:e1:32:cb:d4: 08:46:f2:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUwMzAxMTAvBgNVBAUTKDg3NjlCOTUyRjlDODAwNjc1NzkyOUYwNjk5N0NERTVC MUU0NDhGMTQwHhcNMjQwNTE4MTYwMTE1WhcNMjQwNTI1MTYwMTE1WjAYMRYwFAYD VQQDEw02NjQ4ZDBjYy0yMDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuBiogD3LhaZXIHJclHCJnLzJgV85+UtUilm2jnAFny/r1z+iYBQpWdR8y8wY aUJsS+SwuQYR+QVgmMC+KxICIdJHOR2ZyqdhJCkbhVQmHqH+eQhl6yBDhZBIoj/D SRCxnVh4W8s96xNKPHLtBlZ3U5lwst8VwDRvddgWbCpdRrom2rTZTDBXlIY6bpoq h2FoS1IFXL3swh8/PfJm8pWv+90EEVTlzR9cdoZPbOUKyp1MrLgCytDbeDWZ4B/w Aq83MB/MD8nkVu8imzZX1jx+/KwoxAuCbxPitNQkF4hNWIRGjom9d0Iyr8nFUBbf JrqmGlNoiE6B8d7KAUatpU2iqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGuCKveI VrZp5yzue+W5Ph6Icz1EMB8GA1UdIwQYMBaAFIdpuVL5yABnV5KfBpl83lseRI8U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTAzMC9DRTZBM0YxMEZE MkExMUU0Qjc0RkVBNDJDNEY5QUUwMi9oMm01VXZuSUFHZFhrcDhHbVh6ZVd4NUVq eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gybTVVdm5JQUdkWGtwOEdtWHplV3g1RWp4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTAzMC9DRTZBM0YxMEZEMkExMUU0Qjc0RkVBNDJDNEY5QUUwMi9oMm01VXZuSUFH ZFhrcDhHbVh6ZVd4NUVqeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5gwIpUBsSBpJ7MpbROV+QCBU1Xglgf9Swj41bA1VHX6ULk+NUxKU3 1xKJIcGxn5W0xDTwtdeDYBSjRBG8GavcDcgTvtrbhF/240O5n7AkQQGWEZhQt+7F c/dVX9srSqL3TV+eDP0gl8n4yL5ycrK5qAHwJix4/StmJqEKzlVkgvcmFRL6BFhv U4ifw5gcdznvRuzU1K/i+Pm9+a8BVFeVJVvvplxSzyOFmSSZcPZclud+KEoDF1ku fTJWnfGiaQfeyL3yRM4D9dRkil9S3W6gd8SMa3EjDw0mHEU3yv/lWdmJcZ8A4bb6 3eDvkNqG1lKVfg6dJiC1++Eyy9QIRvKD -----END CERTIFICATE-----Generated at Sat May 18 17:20:34 2024 by rpki-client on console-ams.rpki-client.org