$ rpki-client -vvf rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft File: b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft (raw, json) Hash identifier: vv5OloGHjyd0g9ZTxtTE899onS1g47khy+lNz+z+AcY= Subject key identifier: 5B:AF:10:02:B2:80:61:77:AA:51:6D:3C:F0:EF:87:6D:0E:59:A0:C5 Authority key identifier: 6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 Certificate issuer: /CN=A91A54FE/serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft Manifest number: 1E Signing time: Wed 29 May 2024 09:25:40 +0000 Manifest this update: Wed 29 May 2024 09:25:39 +0000 Manifest next update: Wed 05 Jun 2024 09:25:39 +0000 Files and hashes: 1: b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl (hash: 4+jeqUKm/dBf1jV9qKSP+cZF+5OzKvL7WzeL/3Nediw=) 2: CD24A702015411EF83144341C4F9AE02.roa (hash: IQlxGBDm0ccdjlpT18ECed9Odt+DoMhDg+up6Oc4ECg=) 3: CC9ED4E2015411EF83144341C4F9AE02.roa (hash: J2KwLe8SPWIWD1mMVkmMfy+3ZRxSXbUQ7iUXVfTcvng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 09:25:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A54FE/serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Validity Not Before: May 29 09:25:39 2024 GMT Not After : Jun 5 09:25:39 2024 GMT Subject: CN=6656f493-3a7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:90:76:e2:69:f2:da:13:2f:23:a6:e1:97:68: 82:91:63:1c:34:ca:09:fc:e8:e8:17:a7:4b:81:74: 29:0f:2c:ce:d4:cb:bd:38:bf:25:f0:4b:a6:4f:51: 4d:ed:dd:f0:e2:b3:fc:79:e0:ad:31:25:bf:64:68: 64:6f:74:da:8a:95:7d:a1:71:91:6b:af:5f:86:22: 74:0c:5f:48:01:9d:4d:8f:23:34:fe:b1:f1:f5:f8: 0a:9f:8b:dd:e4:cb:98:5f:4d:28:83:90:c0:9b:5c: cc:5c:6c:c1:26:a5:aa:59:94:c3:82:e0:c1:4b:52: ab:7a:9a:72:e1:16:5c:84:a0:99:c4:4f:c7:68:fd: 04:72:26:1a:5b:05:ef:b4:02:5a:23:a2:f2:89:34: e9:15:07:9e:e6:85:75:b4:ba:42:de:8f:d9:bd:6d: 7c:b6:35:ab:9f:6a:54:81:b6:d0:ee:3e:44:49:ae: 05:f3:07:02:e4:d0:e7:98:ea:07:23:2d:0c:27:b4: 40:9c:c2:03:98:82:5c:08:38:11:81:a8:37:17:99: 5b:4f:d5:b7:39:8d:e6:05:6e:fe:b9:33:2c:64:1c: 2a:cf:29:44:f1:91:a8:f6:14:db:65:1f:1b:b1:8a: b6:93:c4:ea:c7:ea:28:62:05:3d:7e:8d:a1:3a:ba: 00:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:AF:10:02:B2:80:61:77:AA:51:6D:3C:F0:EF:87:6D:0E:59:A0:C5 X509v3 Authority Key Identifier: keyid:6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:8f:11:98:29:b0:c5:16:a1:ab:eb:78:02:5b:9b:b5:92:db: c4:67:5d:ec:07:ea:e2:49:34:6d:de:05:bc:92:3a:5d:c5:8b: d9:9c:ee:36:d1:8f:2c:9d:5f:9c:30:ef:27:67:fb:24:b8:1b: 42:c9:7c:93:71:0d:62:70:35:46:02:a2:8c:f6:cc:71:be:d8: 18:9d:b5:c0:b9:48:bf:f3:94:1e:21:fb:91:3b:24:63:ed:88: 09:5b:d3:c4:59:ac:a8:41:44:f2:c4:a4:34:58:ea:79:98:52: bf:ff:43:18:a3:29:2a:be:d0:d4:45:24:80:03:e6:27:b3:bf: e9:35:44:16:c7:68:92:a5:eb:81:b7:00:6a:6a:02:98:95:76: 82:16:57:54:db:96:1e:b2:fa:61:df:bf:fb:64:ea:f5:ec:25: fd:a6:cf:db:04:6e:7a:28:9b:4f:10:9c:a6:8a:64:25:2f:0b: 4d:d6:77:6c:18:5c:ac:6e:14:9e:e7:e1:bb:4b:15:fc:9c:1c: fc:ec:81:04:e7:dd:e0:a8:4e:f2:4a:6d:f1:42:96:7e:99:43: 88:e8:15:7c:0c:33:5a:78:c3:52:f2:ac:a1:f1:28:d2:cd:d2: 19:76:64:8e:c2:c7:bd:b4:a7:1d:1f:45:c2:e8:2a:52:52:cd: 8a:79:89:62 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NTRGRTExMC8GA1UEBRMoNkZDNzA5MDZGQkE2RjQ1Mzk0NTIwOTE5MzJDNDVGRkE0 RDg1NzJCODAeFw0yNDA1MjkwOTI1MzlaFw0yNDA2MDUwOTI1MzlaMBgxFjAUBgNV BAMTDTY2NTZmNDkzLTNhN2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClkHbiafLaEy8jpuGXaIKRYxw0ygn86OgXp0uBdCkPLM7Uy704vyXwS6ZPUU3t 3fDis/x54K0xJb9kaGRvdNqKlX2hcZFrr1+GInQMX0gBnU2PIzT+sfH1+Aqfi93k y5hfTSiDkMCbXMxcbMEmpapZlMOC4MFLUqt6mnLhFlyEoJnET8do/QRyJhpbBe+0 AlojovKJNOkVB57mhXW0ukLej9m9bXy2NaufalSBttDuPkRJrgXzBwLk0OeY6gcj LQwntECcwgOYglwIOBGBqDcXmVtP1bc5jeYFbv65MyxkHCrPKUTxkaj2FNtlHxux iraTxOrH6ihiBT1+jaE6ugAxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUW68QArKA YXeqUW088O+HbQ5ZoMUwHwYDVR0jBBgwFoAUb8cJBvum9FOUUgkZMsRf+k2Fcrgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1NEZFL0Q2MTE3REY2RjZF OTExRUVBREJGRkI1MkM0RjlBRTAyL2I4Y0pCdnVtOUZPVVVna1pNc1JmLWsyRmNy Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYjhjSkJ2dW05Rk9VVWdrWk1zUmYtazJGY3JnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1 NEZFL0Q2MTE3REY2RjZFOTExRUVBREJGRkI1MkM0RjlBRTAyL2I4Y0pCdnVtOUZP VVVna1pNc1JmLWsyRmNyZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFWPEZgpsMUWoavreAJbm7WS28RnXewH6uJJNG3eBbySOl3Fi9mc7jbR jyydX5ww7ydn+yS4G0LJfJNxDWJwNUYCooz2zHG+2BidtcC5SL/zlB4h+5E7JGPt iAlb08RZrKhBRPLEpDRY6nmYUr//QxijKSq+0NRFJIAD5iezv+k1RBbHaJKl64G3 AGpqApiVdoIWV1Tblh6y+mHfv/tk6vXsJf2mz9sEbnoom08QnKaKZCUvC03Wd2wY XKxuFJ7n4btLFfycHPzsgQTn3eCoTvJKbfFCln6ZQ4joFXwMM1p4w1LyrKHxKNLN 0hl2ZI7Cx720px0fRcLoKlJSzYp5iWI= -----END CERTIFICATE-----Generated at Wed May 29 10:43:58 2024 by rpki-client on console-ams.rpki-client.org