$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft File: N5uRyTDgoq-LgirZqVm6313dYJ8.mft (raw, json) Hash identifier: Rr0Yuk5iJo3b6eikqsDGq1tNbBtA3h3wMhuFiau+45s= Subject key identifier: 9D:87:DE:92:A0:4E:6D:3E:55:B5:A3:61:09:D3:FD:1E:1B:27:5D:FA Authority key identifier: 37:9B:91:C9:30:E0:A2:AF:8B:82:2A:D9:A9:59:BA:DF:5D:DD:60:9F Certificate issuer: /CN=A91AD92A/serialNumber=379B91C930E0A2AF8B822AD9A959BADF5DDD609F Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft Manifest number: 79 Signing time: Sun 19 May 2024 07:17:31 +0000 Manifest this update: Sun 19 May 2024 07:17:31 +0000 Manifest next update: Sun 26 May 2024 07:17:31 +0000 Files and hashes: 1: N5uRyTDgoq-LgirZqVm6313dYJ8.crl (hash: IDqT9zodhGIMs2+79fgcToV7ycgEgul4khnuoOqeYjI=) 2: 796CD35A5B5511EE8E4D2A39C4F9AE02.roa (hash: v4kYJFNGl2Wr0wg+DiuqDzB5DKzhN07773+uv/HMHPo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.crl rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD92A/serialNumber=379B91C930E0A2AF8B822AD9A959BADF5DDD609F Validity Not Before: May 19 07:17:31 2024 GMT Not After : May 26 07:17:31 2024 GMT Subject: CN=6649a78b-3d79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d7:72:32:92:24:19:21:d6:7d:96:67:21:13: 70:a0:d5:96:90:ce:84:8e:1a:f5:7b:54:c1:e9:4d: 31:99:4c:ac:9c:f9:5a:0f:4e:36:e1:11:f5:25:31: 72:13:c2:ea:11:02:f2:13:a9:cf:55:14:73:19:ac: 8e:06:07:78:57:e3:46:57:a3:2e:4a:8d:84:1f:9d: 02:ad:3e:47:69:64:5d:8e:41:f0:26:df:11:0d:a2: 87:a8:26:d7:5e:6b:29:7f:6d:9f:10:13:e3:f7:1b: 68:88:1d:49:c9:e9:25:af:2f:f2:22:ba:90:34:85: 4e:2f:a1:90:41:86:46:2c:e1:0f:82:41:da:3e:87: c3:52:9a:48:b4:da:0a:b8:78:ae:80:da:ed:1f:8b: 23:de:4b:b2:9c:5b:55:ed:f5:c0:ee:b3:6c:30:42: 69:9b:9b:86:df:19:8c:87:01:eb:aa:60:73:fb:6b: 93:ca:85:52:c1:04:08:cd:50:20:fb:52:fc:e7:64: 5c:97:6e:21:f7:66:1c:8c:18:e1:b2:70:b5:f4:8a: 79:b0:35:64:4b:c1:a4:b2:4a:43:19:dc:16:80:e1: 15:cf:bb:a6:a3:6c:11:0f:7c:99:99:0d:2a:48:93: ac:ea:88:1b:9b:b5:80:d0:1d:10:3f:8b:5f:a3:cc: 74:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:87:DE:92:A0:4E:6D:3E:55:B5:A3:61:09:D3:FD:1E:1B:27:5D:FA X509v3 Authority Key Identifier: keyid:37:9B:91:C9:30:E0:A2:AF:8B:82:2A:D9:A9:59:BA:DF:5D:DD:60:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:f2:92:7d:b9:0a:fb:76:14:61:7c:bc:41:58:89:d4:81:b7: 5e:d2:70:e0:90:06:16:fc:bd:82:4a:63:c5:65:13:d6:fa:4c: 3a:e4:6f:ef:ff:15:e8:4d:c0:5e:08:91:5b:a5:3b:25:f7:f2: 28:b3:5b:57:ff:91:83:92:bd:93:0c:b8:e8:7c:8c:0f:e3:ad: 37:77:40:8c:03:4e:93:34:da:70:6c:0e:2d:8d:f4:cb:b2:22: 60:a1:08:e8:c0:b7:3e:2a:b7:ef:8d:1d:1d:8a:70:38:6a:36: 72:89:09:68:69:7b:e7:27:de:7a:b2:bb:9b:8c:9b:bc:01:e9: 72:47:c1:ba:8c:41:bd:1c:fb:9e:c9:12:19:dd:69:a5:23:85: c0:47:36:7a:17:da:5d:d7:e6:db:69:23:cb:51:86:81:f2:cd: d9:92:c0:84:19:dc:1d:34:7f:3f:42:98:9a:ea:32:e0:3f:a3: 71:0f:3d:14:50:3a:70:38:50:c7:10:e2:3d:46:a8:59:13:f2: 41:d2:78:f5:80:a2:d7:30:5f:f6:0d:3c:58:2b:6b:f9:1c:73: a8:7c:e8:3b:d6:aa:a8:da:33:f4:de:80:6c:c4:78:d2:c3:c3: ed:c1:0f:38:c8:29:86:ab:2c:00:58:7d:59:44:b7:d3:70:47: c0:e8:e3:8a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RDkyQTExMC8GA1UEBRMoMzc5QjkxQzkzMEUwQTJBRjhCODIyQUQ5QTk1OUJBREY1 RERENjA5RjAeFw0yNDA1MTkwNzE3MzFaFw0yNDA1MjYwNzE3MzFaMBgxFjAUBgNV BAMTDTY2NDlhNzhiLTNkNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDE13IykiQZIdZ9lmchE3Cg1ZaQzoSOGvV7VMHpTTGZTKyc+VoPTjbhEfUlMXIT wuoRAvITqc9VFHMZrI4GB3hX40ZXoy5KjYQfnQKtPkdpZF2OQfAm3xENooeoJtde ayl/bZ8QE+P3G2iIHUnJ6SWvL/IiupA0hU4voZBBhkYs4Q+CQdo+h8NSmki02gq4 eK6A2u0fiyPeS7KcW1Xt9cDus2wwQmmbm4bfGYyHAeuqYHP7a5PKhVLBBAjNUCD7 UvznZFyXbiH3ZhyMGOGycLX0inmwNWRLwaSySkMZ3BaA4RXPu6ajbBEPfJmZDSpI k6zqiBubtYDQHRA/i1+jzHTXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnYfekqBO bT5VtaNhCdP9HhsnXfowHwYDVR0jBBgwFoAUN5uRyTDgoq+LgirZqVm6313dYJ8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFEOTJBLzNDRTU3N0RBNUI1 NDExRUU4MDg2RjQzMkM0RjlBRTAyL041dVJ5VERnb3EtTGdpclpxVm02MzEzZFlK OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTjV1UnlURGdvcS1MZ2lyWnFWbTYzMTNkWUo4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFE OTJBLzNDRTU3N0RBNUI1NDExRUU4MDg2RjQzMkM0RjlBRTAyL041dVJ5VERnb3Et TGdpclpxVm02MzEzZFlKOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJrykn25Cvt2FGF8vEFYidSBt17ScOCQBhb8vYJKY8VlE9b6TDrkb+// FehNwF4IkVulOyX38iizW1f/kYOSvZMMuOh8jA/jrTd3QIwDTpM02nBsDi2N9Muy ImChCOjAtz4qt++NHR2KcDhqNnKJCWhpe+cn3nqyu5uMm7wB6XJHwbqMQb0c+57J EhndaaUjhcBHNnoX2l3X5ttpI8tRhoHyzdmSwIQZ3B00fz9CmJrqMuA/o3EPPRRQ OnA4UMcQ4j1GqFkT8kHSePWAotcwX/YNPFgra/kcc6h86DvWqqjaM/TegGzEeNLD w+3BDzjIKYarLABYfVlEt9NwR8Do44o= -----END CERTIFICATE-----Generated at Sun May 19 08:25:07 2024 by rpki-client on console-ams.rpki-client.org