$ rpki-client -vvf rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.mft File: n2T-UJklN_sLQOUvnPrDEMonGRg.mft (raw, json) Hash identifier: Amypz0kBHf+ifn4qW3B2uIFYxN+odR5+X4uhDKnxJY4= Subject key identifier: 2C:E6:F1:25:FA:1E:F5:71:BD:08:59:59:AB:2A:77:AC:38:8C:F4:12 Authority key identifier: 9F:64:FE:50:99:25:37:FB:0B:40:E5:2F:9C:FA:C3:10:CA:27:19:18 Certificate issuer: /CN=A91A57F8/serialNumber=9F64FE50992537FB0B40E52F9CFAC310CA271918 Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2T-UJklN_sLQOUvnPrDEMonGRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.mft Manifest number: F9 Signing time: Sun 19 May 2024 05:54:52 +0000 Manifest this update: Sun 19 May 2024 05:54:51 +0000 Manifest next update: Sun 26 May 2024 05:54:51 +0000 Files and hashes: 1: n2T-UJklN_sLQOUvnPrDEMonGRg.crl (hash: rFN9OFe3w8V0CyaHCHGbjX/1Am8pDqkQGkjPin2sSz8=) 2: A508D320BBC711ED8DF23C40C4F9AE02.roa (hash: L1wngMa+M4+pohh5cLExIiwcIS0yfGRYYvO2OZ5X45A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.crl rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2T-UJklN_sLQOUvnPrDEMonGRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A57F8/serialNumber=9F64FE50992537FB0B40E52F9CFAC310CA271918 Validity Not Before: May 19 05:54:51 2024 GMT Not After : May 26 05:54:51 2024 GMT Subject: CN=6649942b-fe17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:50:77:6d:0e:5c:d3:30:43:25:d2:6f:6b:a0: d0:f3:1a:c4:d6:62:57:11:5c:d2:49:99:ff:12:a9: ed:b1:fa:b5:6c:f1:20:33:b2:54:6c:45:a0:a7:3f: a5:2a:fd:6e:1a:a7:76:92:90:46:59:9f:46:2d:ce: a8:cb:8c:4a:48:f4:26:2c:e2:6e:3b:97:8a:4b:a8: d8:a8:4b:9c:b5:b8:0b:14:50:e3:e4:68:84:ad:29: 04:b0:40:88:f3:c7:78:0f:46:97:66:a9:cd:de:35: 6e:1f:86:99:0b:9e:9e:98:5b:93:31:b5:b0:a8:fd: 0d:34:f2:c7:55:c6:84:4b:53:1d:e8:0e:74:b2:9d: 75:f5:39:51:b7:22:d3:9e:4f:5b:c5:f7:a8:f1:c5: d6:8f:f2:2a:ae:d1:59:bc:a7:24:4b:a8:ee:87:03: 59:a3:02:f2:e0:d9:7a:e0:42:61:45:d0:90:bd:9e: 3c:47:ab:38:2f:c2:8f:8a:57:bd:2b:85:66:82:44: 55:78:18:34:3a:fa:bb:1f:82:e6:75:ee:d5:98:61: 7b:1e:fe:c2:53:27:79:4b:94:f1:2c:fa:34:de:68: 3a:8a:04:0b:e5:9e:d7:50:cd:9f:96:66:a1:9d:0f: dd:d2:ce:ad:0c:27:8f:d6:6c:a5:4c:4d:7a:aa:e4: 55:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E6:F1:25:FA:1E:F5:71:BD:08:59:59:AB:2A:77:AC:38:8C:F4:12 X509v3 Authority Key Identifier: keyid:9F:64:FE:50:99:25:37:FB:0B:40:E5:2F:9C:FA:C3:10:CA:27:19:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2T-UJklN_sLQOUvnPrDEMonGRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:dc:31:ac:b3:e3:73:f7:fe:c9:8e:92:be:af:7a:cf:51:ef: f9:32:8c:47:12:e9:d5:83:3a:ee:64:79:25:6f:d1:16:84:ad: 4e:67:13:90:3a:5c:20:fa:f6:1a:b5:3f:b6:61:93:2a:d1:9e: e6:27:37:1c:e5:b5:5a:19:4b:7e:53:dd:6e:34:78:50:86:d4: ba:67:e2:aa:e6:3a:66:26:59:2d:61:96:a3:3c:bb:70:2e:36: 37:54:b6:fa:dd:f5:36:41:57:6f:4f:3f:23:1b:9c:ee:cc:1a: bd:87:26:1a:76:63:a0:de:5f:4e:3e:0d:40:68:fe:2f:d2:f6: ec:6b:3d:4e:0b:d4:5f:db:4c:ee:66:b1:4a:de:61:77:16:01: f3:47:e5:4b:df:3b:bc:6d:b6:e7:32:56:72:ea:93:28:75:9d: ac:4e:a9:cf:2b:67:77:cc:6c:d1:e9:8c:2d:0b:b3:87:60:de: 30:ad:08:d0:a8:0d:c1:bb:96:ac:ca:ee:c0:f2:db:9a:4d:85: b1:4d:b9:6a:2d:5a:56:11:d3:48:dc:99:48:04:76:69:8e:bd: 44:4c:1a:17:16:e7:d1:4a:5f:71:18:b1:19:42:5e:1f:2e:f3: a4:c3:f1:f5:ac:02:e5:63:11:a6:5d:15:cf:53:e0:36:1e:77: c9:bc:56:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU3RjgxMTAvBgNVBAUTKDlGNjRGRTUwOTkyNTM3RkIwQjQwRTUyRjlDRkFDMzEw Q0EyNzE5MTgwHhcNMjQwNTE5MDU1NDUxWhcNMjQwNTI2MDU1NDUxWjAYMRYwFAYD VQQDEw02NjQ5OTQyYi1mZTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5FB3bQ5c0zBDJdJva6DQ8xrE1mJXEVzSSZn/Eqntsfq1bPEgM7JUbEWgpz+l Kv1uGqd2kpBGWZ9GLc6oy4xKSPQmLOJuO5eKS6jYqEuctbgLFFDj5GiErSkEsECI 88d4D0aXZqnN3jVuH4aZC56emFuTMbWwqP0NNPLHVcaES1Md6A50sp119TlRtyLT nk9bxfeo8cXWj/IqrtFZvKckS6juhwNZowLy4Nl64EJhRdCQvZ48R6s4L8KPile9 K4VmgkRVeBg0Ovq7H4Lmde7VmGF7Hv7CUyd5S5TxLPo03mg6igQL5Z7XUM2flmah nQ/d0s6tDCeP1mylTE16quRVeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCzm8SX6 HvVxvQhZWasqd6w4jPQSMB8GA1UdIwQYMBaAFJ9k/lCZJTf7C0DlL5z6wxDKJxkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTdGOC8zNDUwOTQwMEI5 NzUxMUVEODA0MERFMjJDNEY5QUUwMi9uMlQtVUprbE5fc0xRT1V2blByREVNb25H UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24yVC1VSmtsTl9zTFFPVXZuUHJERU1vbkdSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTdGOC8zNDUwOTQwMEI5NzUxMUVEODA0MERFMjJDNEY5QUUwMi9uMlQtVUprbE5f c0xRT1V2blByREVNb25HUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAL3DGss+Nz9/7JjpK+r3rPUe/5MoxHEunVgzruZHklb9EWhK1OZxOQ Olwg+vYatT+2YZMq0Z7mJzcc5bVaGUt+U91uNHhQhtS6Z+Kq5jpmJlktYZajPLtw LjY3VLb63fU2QVdvTz8jG5zuzBq9hyYadmOg3l9OPg1AaP4v0vbsaz1OC9Rf20zu ZrFK3mF3FgHzR+VL3zu8bbbnMlZy6pModZ2sTqnPK2d3zGzR6YwtC7OHYN4wrQjQ qA3Bu5asyu7A8tuaTYWxTblqLVpWEdNI3JlIBHZpjr1ETBoXFufRSl9xGLEZQl4f LvOkw/H1rALlYxGmXRXPU+A2HnfJvFZc -----END CERTIFICATE-----Generated at Sun May 19 08:25:06 2024 by rpki-client on console-ams.rpki-client.org