$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft File: r-73ovgxqXVbE7N-tum5HYHoqeg.mft (raw, json) Hash identifier: 7HgnHUGNswQk/Yfz6r0gQdlxAoLr7Bk4nn+HaOVWlR0= Subject key identifier: 29:87:71:0F:A7:BE:4C:18:5C:A9:EF:EC:20:A6:25:3C:48:A9:C9:01 Authority key identifier: AF:EE:F7:A2:F8:31:A9:75:5B:13:B3:7E:B6:E9:B9:1D:81:E8:A9:E8 Certificate issuer: /CN=A91A6F2D/serialNumber=AFEEF7A2F831A9755B13B37EB6E9B91D81E8A9E8 Certificate serial: 050F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-73ovgxqXVbE7N-tum5HYHoqeg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft Manifest number: 050C Signing time: Sun 19 May 2024 01:06:40 +0000 Manifest this update: Sun 19 May 2024 01:06:40 +0000 Manifest next update: Sun 26 May 2024 01:06:40 +0000 Files and hashes: 1: r-73ovgxqXVbE7N-tum5HYHoqeg.crl (hash: 9GCqlpwI5jw3mgeAM31zITbHcTkLbwev3bloVDFe27o=) 2: C17E1DDCBC7111EBB1423E5FC4F9AE02.roa (hash: oTgX8pRPquWduIxTiQW61jnbKJfVVMDUd2Oo9gsHJFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.crl rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-73ovgxqXVbE7N-tum5HYHoqeg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1295 (0x50f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6F2D/serialNumber=AFEEF7A2F831A9755B13B37EB6E9B91D81E8A9E8 Validity Not Before: May 19 01:06:40 2024 GMT Not After : May 26 01:06:40 2024 GMT Subject: CN=664950a0-2beb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ed:6a:9b:18:be:6e:c2:66:bd:b7:0b:a1:62: c8:4f:ac:a0:96:0b:7d:5b:82:a4:1b:3e:10:56:24: b5:b3:73:c9:67:e6:5f:a1:bd:87:83:d3:e6:ee:56: b2:6a:57:92:fe:9a:00:4f:0f:ab:f5:cc:e2:af:d0: 87:3f:8a:8a:f8:e3:76:5d:dc:c5:2f:22:ff:d4:cd: ad:40:4d:b9:80:5c:f6:d5:a8:08:2f:2a:18:ad:ec: 48:7a:b1:59:b3:ff:fb:9c:61:52:4b:95:eb:a0:58: ea:b2:99:e6:3b:50:3f:e5:cd:74:85:d8:c9:9c:91: 36:ea:e9:80:ff:1e:92:95:d9:c9:69:98:1f:e2:20: 56:0a:5c:d9:88:86:4e:e9:30:ca:25:f1:25:f8:9a: d3:82:04:9a:8f:df:57:72:42:3e:cb:31:ce:72:75: 1e:be:d3:5f:02:a9:2f:db:03:f3:52:da:33:38:fa: 03:d1:2a:2f:de:38:75:e2:f8:46:17:d3:60:3a:25: 74:1f:62:1c:56:c3:77:4f:90:64:db:c9:d5:e6:61: f0:a6:d0:c5:70:8b:51:00:e7:a3:ae:4f:bb:d3:ce: 4b:db:77:7c:6b:1e:fe:c2:7f:ba:cc:68:dd:34:c8: 5a:a3:33:00:58:b9:4c:6f:cb:ac:90:ab:90:63:7a: 53:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:87:71:0F:A7:BE:4C:18:5C:A9:EF:EC:20:A6:25:3C:48:A9:C9:01 X509v3 Authority Key Identifier: keyid:AF:EE:F7:A2:F8:31:A9:75:5B:13:B3:7E:B6:E9:B9:1D:81:E8:A9:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-73ovgxqXVbE7N-tum5HYHoqeg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:98:89:9a:f5:e4:11:d8:21:50:e5:84:3d:74:c1:f2:59:2a: 43:91:a4:84:46:b3:e4:99:7d:39:31:34:0b:bc:8f:70:22:d7: d7:b0:e2:f5:8e:4f:ba:ce:3d:ee:d6:db:89:41:a4:18:71:26: e4:74:a0:aa:8b:a2:49:70:78:ac:5e:ce:78:2a:f1:9a:8b:44: c1:ed:b9:92:89:89:5a:05:ab:2a:f8:93:9e:71:e4:a7:65:82: 7d:05:6d:e8:6d:79:b4:06:04:7a:07:b2:30:21:0c:28:3a:3e: b1:fe:68:f5:c5:e5:cf:d5:db:41:99:93:52:da:2c:72:19:5e: e0:d6:2e:e9:66:5b:79:49:62:37:92:36:b5:72:4f:86:df:20: 08:e9:64:5e:c8:50:a9:d4:57:4a:8f:b2:b3:9b:63:47:a1:63: f8:7b:3e:d4:51:8b:b4:3f:1b:28:ec:5a:0a:2b:5b:90:82:cc: a7:73:95:1d:75:17:91:04:83:ae:2d:da:a8:00:f2:6d:11:9b: 6c:66:5d:4c:de:f0:42:8c:54:c2:05:ea:1b:ce:68:8d:eb:77: 87:3b:80:54:8e:27:b9:bd:0c:1b:2f:3b:cd:25:cf:c9:b1:6e: d5:b3:42:c5:12:15:fa:be:fd:8f:bd:56:fe:e3:6f:6c:09:46: fe:34:ab:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZGMkQxMTAvBgNVBAUTKEFGRUVGN0EyRjgzMUE5NzU1QjEzQjM3RUI2RTlCOTFE ODFFOEE5RTgwHhcNMjQwNTE5MDEwNjQwWhcNMjQwNTI2MDEwNjQwWjAYMRYwFAYD VQQDEw02NjQ5NTBhMC0yYmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3e1qmxi+bsJmvbcLoWLIT6yglgt9W4KkGz4QViS1s3PJZ+Zfob2Hg9Pm7lay aleS/poATw+r9czir9CHP4qK+ON2XdzFLyL/1M2tQE25gFz21agILyoYrexIerFZ s//7nGFSS5XroFjqspnmO1A/5c10hdjJnJE26umA/x6SldnJaZgf4iBWClzZiIZO 6TDKJfEl+JrTggSaj99XckI+yzHOcnUevtNfAqkv2wPzUtozOPoD0Sov3jh14vhG F9NgOiV0H2IcVsN3T5Bk28nV5mHwptDFcItRAOejrk+7085L23d8ax7+wn+6zGjd NMhaozMAWLlMb8uskKuQY3pT9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCmHcQ+n vkwYXKnv7CCmJTxIqckBMB8GA1UdIwQYMBaAFK/u96L4Mal1WxOzfrbpuR2B6Kno MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkYyRC9GRDg2MEY2OEJD NkUxMUVCQjhDNjQ4NTRDNEY5QUUwMi9yLTczb3ZneHFYVmJFN04tdHVtNUhZSG9x ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ItNzNvdmd4cVhWYkU3Ti10dW01SFlIb3FlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkYyRC9GRDg2MEY2OEJDNkUxMUVCQjhDNjQ4NTRDNEY5QUUwMi9yLTczb3ZneHFY VmJFN04tdHVtNUhZSG9xZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARmIma9eQR2CFQ5YQ9dMHyWSpDkaSERrPkmX05MTQLvI9wItfXsOL1 jk+6zj3u1tuJQaQYcSbkdKCqi6JJcHisXs54KvGai0TB7bmSiYlaBasq+JOeceSn ZYJ9BW3obXm0BgR6B7IwIQwoOj6x/mj1xeXP1dtBmZNS2ixyGV7g1i7pZlt5SWI3 kja1ck+G3yAI6WReyFCp1FdKj7Kzm2NHoWP4ez7UUYu0Pxso7FoKK1uQgsync5Ud dReRBIOuLdqoAPJtEZtsZl1M3vBCjFTCBeobzmiN63eHO4BUjie5vQwbLzvNJc/J sW7Vs0LFEhX6vv2PvVb+429sCUb+NKso -----END CERTIFICATE-----Generated at Sun May 19 01:47:15 2024 by rpki-client on console-ams.rpki-client.org