$ rpki-client -vvf rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft File: RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft (raw, json) Hash identifier: Qe5BTvhvdunrAAIjFUmXnq0AMLfFEj/MLlJmgPcjvh0= Subject key identifier: B6:EA:68:BE:5C:3E:3B:B3:A6:F4:39:DF:59:83:CA:69:47:4A:86:B6 Authority key identifier: 45:33:7D:C5:E4:83:9E:49:81:91:29:DE:A2:A9:46:1B:02:1C:D1:90 Certificate issuer: /CN=A91A78A7/serialNumber=45337DC5E4839E49819129DEA2A9461B021CD190 Certificate serial: 01C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft Manifest number: 01BF Signing time: Fri 31 May 2024 05:09:39 +0000 Manifest this update: Fri 31 May 2024 05:09:38 +0000 Manifest next update: Fri 07 Jun 2024 05:09:38 +0000 Files and hashes: 1: RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl (hash: Ea9r09dTBxid90yq32GHWKCNSk54yVwyNcObJwP4uOE=) 2: D470449E0E4411ED9C0F5B45C4F9AE02.roa (hash: CPLqRFB+uGz4g69H8XoarAiXwWOpy55nPSbhKqZCtGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 05:09:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 449 (0x1c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A78A7/serialNumber=45337DC5E4839E49819129DEA2A9461B021CD190 Validity Not Before: May 31 05:09:38 2024 GMT Not After : Jun 7 05:09:38 2024 GMT Subject: CN=66595b93-e001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:50:fd:55:dc:90:8e:fe:eb:20:c2:ed:43:17: 65:cc:5b:0d:af:09:a2:59:d5:cc:c1:34:c5:11:dd: 97:34:79:ac:5d:72:b3:f3:ac:6f:5b:96:b7:4f:ef: 9b:47:7a:55:7f:b0:6c:5f:48:ed:da:42:f9:d4:71: 56:49:7e:31:2a:bc:85:33:37:c4:5a:8f:c7:ad:c8: d2:01:9a:87:f0:4d:82:70:e2:82:8f:65:22:18:0f: b3:a3:21:09:98:58:0f:aa:c5:83:0a:4d:b7:32:fb: ea:b1:21:99:fc:7e:56:2d:23:b3:05:bd:1b:e0:4c: 5a:7b:a3:30:c7:7b:0f:6f:a1:3b:fc:40:1a:54:be: ba:47:37:0d:fc:df:4c:b9:dd:45:71:5d:ac:f2:31: 09:53:25:a9:31:29:a0:92:20:9f:ae:f9:cf:65:54: c5:e9:fd:76:07:0d:86:bf:85:60:b2:2d:0d:70:ad: 74:cc:c4:e0:3d:0c:b7:37:ee:87:d3:ef:6f:50:95: 3e:8b:94:10:e7:e8:57:4f:9c:75:07:9f:c3:9f:7b: 85:83:e7:56:48:4e:52:54:d7:19:1c:3f:f6:f4:19: 67:01:15:6d:a4:41:73:0e:9c:53:08:cd:55:39:f9: cb:e4:a7:b1:15:53:e0:b1:2d:b0:b8:a5:4b:ea:d0: ff:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:EA:68:BE:5C:3E:3B:B3:A6:F4:39:DF:59:83:CA:69:47:4A:86:B6 X509v3 Authority Key Identifier: keyid:45:33:7D:C5:E4:83:9E:49:81:91:29:DE:A2:A9:46:1B:02:1C:D1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:f7:75:25:b5:8e:84:23:3a:2a:f8:4a:5f:72:15:85:18:39: 12:22:e9:c9:3e:93:83:de:44:82:de:9f:8d:bc:04:6a:76:ed: dd:63:b3:29:ab:e7:37:d7:e8:2d:91:95:fa:d8:32:27:7a:d6: f8:c2:25:2c:2f:e6:a0:8f:9b:f4:b3:21:82:8a:ac:ee:83:f1: 5b:fa:bd:eb:a0:26:ba:9b:49:0d:1e:e7:4d:ea:18:d7:f4:9c: 70:b4:ea:c8:ea:ce:40:44:1e:88:0b:19:39:a1:6e:dc:6c:cc: cd:5e:54:71:dc:67:89:30:d9:19:ba:5f:2b:09:7a:8b:73:74: 89:60:4f:00:5d:31:73:c3:d0:d1:cb:17:c7:60:22:74:73:c4: ed:0d:9f:e2:11:15:59:86:ab:0a:7b:f5:8f:0a:ff:83:cc:00: ad:67:0f:df:8d:b4:81:61:82:0a:8f:40:1f:ba:ec:8f:17:19: aa:b1:31:05:ed:1a:4d:a9:5a:6a:4d:f9:04:38:52:37:8d:b6: 2d:8d:1b:fa:91:3c:a7:d5:5e:ad:92:4c:58:e4:0d:eb:e6:f5: 25:7f:2f:23:3b:7e:38:48:34:03:01:1a:ee:9a:5c:7f:ce:6d: 30:f7:10:de:17:b0:ec:8e:44:0e:ca:ab:f1:27:37:67:8d:78: 09:9f:b7:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc4QTcxMTAvBgNVBAUTKDQ1MzM3REM1RTQ4MzlFNDk4MTkxMjlERUEyQTk0NjFC MDIxQ0QxOTAwHhcNMjQwNTMxMDUwOTM4WhcNMjQwNjA3MDUwOTM4WjAYMRYwFAYD VQQDEw02NjU5NWI5My1lMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz1D9VdyQjv7rIMLtQxdlzFsNrwmiWdXMwTTFEd2XNHmsXXKz86xvW5a3T++b R3pVf7BsX0jt2kL51HFWSX4xKryFMzfEWo/HrcjSAZqH8E2CcOKCj2UiGA+zoyEJ mFgPqsWDCk23MvvqsSGZ/H5WLSOzBb0b4Exae6Mwx3sPb6E7/EAaVL66RzcN/N9M ud1FcV2s8jEJUyWpMSmgkiCfrvnPZVTF6f12Bw2Gv4Vgsi0NcK10zMTgPQy3N+6H 0+9vUJU+i5QQ5+hXT5x1B5/Dn3uFg+dWSE5SVNcZHD/29BlnARVtpEFzDpxTCM1V OfnL5KexFVPgsS2wuKVL6tD/cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLbqaL5c PjuzpvQ531mDymlHSoa2MB8GA1UdIwQYMBaAFEUzfcXkg55JgZEp3qKpRhsCHNGQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzhBNy8xMDRCMTk0NjBD QkQxMUVEQUE3N0QxMkRDNEY5QUUwMi9SVE45eGVTRG5rbUJrU25lb3FsR0d3SWMw WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JUTjl4ZVNEbmttQmtTbmVvcWxHR3dJYzBaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzhBNy8xMDRCMTk0NjBDQkQxMUVEQUE3N0QxMkRDNEY5QUUwMi9SVE45eGVTRG5r bUJrU25lb3FsR0d3SWMwWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCp93UltY6EIzoq+EpfchWFGDkSIunJPpOD3kSC3p+NvARqdu3dY7Mp q+c31+gtkZX62DInetb4wiUsL+agj5v0syGCiqzug/Fb+r3roCa6m0kNHudN6hjX 9JxwtOrI6s5ARB6ICxk5oW7cbMzNXlRx3GeJMNkZul8rCXqLc3SJYE8AXTFzw9DR yxfHYCJ0c8TtDZ/iERVZhqsKe/WPCv+DzACtZw/fjbSBYYIKj0AfuuyPFxmqsTEF 7RpNqVpqTfkEOFI3jbYtjRv6kTyn1V6tkkxY5A3r5vUlfy8jO344SDQDARrumlx/ zm0w9xDeF7DsjkQOyqvxJzdnjXgJn7fP -----END CERTIFICATE-----Generated at Fri May 31 06:49:22 2024 by rpki-client on console-ams.rpki-client.org