$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft File: AwUYVzXgl--zaoYGU7JTq-n-EVw.mft (raw, json) Hash identifier: 5i3UkAP+87rRegf0OJ0AKdGypU6Wf/YSIvhFacecxgc= Subject key identifier: FC:E9:FE:10:3E:C5:68:B6:23:09:96:DD:02:0F:42:B6:D0:01:AC:72 Authority key identifier: 03:05:18:57:35:E0:97:EF:B3:6A:86:06:53:B2:53:AB:E9:FE:11:5C Certificate issuer: /CN=A91AEE40/serialNumber=0305185735E097EFB36A860653B253ABE9FE115C Certificate serial: 01B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft Manifest number: 01B2 Signing time: Sun 19 May 2024 04:33:08 +0000 Manifest this update: Sun 19 May 2024 04:33:07 +0000 Manifest next update: Sun 26 May 2024 04:33:07 +0000 Files and hashes: 1: AwUYVzXgl--zaoYGU7JTq-n-EVw.crl (hash: UW6RKdtU4BsLT0CRmzYbtSKA8/bDDuHQIOM1g/MuWig=) 2: 59179A7E0F3211EDA9D57685C4F9AE02.roa (hash: 3MexE2Ef/70Vdkn5/BRpA8PSShaP/zOIN02NAcupUFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.crl rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 437 (0x1b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEE40/serialNumber=0305185735E097EFB36A860653B253ABE9FE115C Validity Not Before: May 19 04:33:07 2024 GMT Not After : May 26 04:33:07 2024 GMT Subject: CN=66498104-4b1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ed:73:cb:71:d6:ee:1f:f4:e4:0a:40:60:e5: 48:41:81:8e:4e:d2:64:0f:a4:fd:90:98:df:74:fe: 5d:91:c3:d6:9c:85:3a:8b:18:3f:48:d5:76:fd:cb: 4e:0a:e0:12:e0:3e:a1:a8:a7:da:9b:54:a7:d2:28: 34:02:17:a1:63:67:1e:89:26:76:fd:3b:e4:74:55: 82:4f:50:0d:31:62:06:07:3b:69:8d:23:60:c9:c0: e4:2a:dc:99:39:21:48:0d:84:0e:a3:b7:f7:1b:c0: cc:75:4c:c7:39:7a:40:53:31:f3:35:64:0f:04:a6: 17:29:12:c9:02:ec:3a:f8:0d:b0:90:9e:a0:2b:d4: 52:17:0a:40:cd:60:5b:4f:57:07:47:d5:65:7a:46: 0a:f1:5a:15:db:09:a3:07:f3:06:34:70:52:1d:0a: 99:a3:03:1b:08:bf:44:8b:ed:96:30:f6:c5:f6:3e: 7a:86:5f:4f:ac:4f:a3:50:9c:21:c7:2c:3a:37:84: ed:8d:7b:0c:88:68:ca:97:75:20:6d:65:96:e8:8a: bc:ed:69:8a:14:98:63:3f:85:8d:1e:93:99:c8:a5: f0:20:21:7c:cc:ee:fe:aa:9b:76:b7:8e:96:11:4b: 90:cd:94:cf:1b:56:9d:13:f0:35:75:a6:2a:71:9f: 3e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E9:FE:10:3E:C5:68:B6:23:09:96:DD:02:0F:42:B6:D0:01:AC:72 X509v3 Authority Key Identifier: keyid:03:05:18:57:35:E0:97:EF:B3:6A:86:06:53:B2:53:AB:E9:FE:11:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:e7:27:1a:a5:5d:65:7f:9f:b4:ae:ea:e2:93:11:cf:29:19: 29:03:7a:1b:4c:35:91:81:65:4e:37:71:06:1e:41:cb:29:3d: d6:cf:6d:db:ec:19:69:c6:63:b1:a6:2d:6a:9e:6e:29:60:2f: 70:b6:5a:f6:39:6a:d0:c2:e6:bb:61:7a:0e:ba:ae:5f:26:3b: 28:fc:a8:cb:13:40:21:33:c6:aa:0e:89:a6:52:76:02:a8:ef: e1:dd:3b:74:cd:c8:be:55:64:65:c6:1d:ed:7b:36:b4:76:81: 3a:9e:de:80:ea:51:e8:3b:3a:5e:37:e1:02:a4:35:2b:10:0d: 9a:02:0f:77:f9:c0:0e:fa:4b:8d:45:bd:93:b5:73:a6:ea:f2: a5:8c:03:ce:62:ee:2c:a8:6b:81:a0:07:7d:42:4d:a6:b7:60: b3:ec:1d:de:a4:ed:27:48:82:5a:c2:71:aa:27:75:70:7b:7d: 38:02:47:cf:d6:1b:6a:b0:42:07:23:83:a2:f6:69:17:fa:7f: f6:b3:17:21:ae:a4:86:87:46:d4:89:9a:d9:37:10:ab:a6:be: d2:9c:52:3f:82:f6:b9:92:32:1a:2f:d3:0f:12:a3:64:a8:e9: 89:c9:a8:13:d3:af:ef:27:1d:e7:0b:98:f3:09:73:d7:e8:de: 50:e4:95:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVFNDAxMTAvBgNVBAUTKDAzMDUxODU3MzVFMDk3RUZCMzZBODYwNjUzQjI1M0FC RTlGRTExNUMwHhcNMjQwNTE5MDQzMzA3WhcNMjQwNTI2MDQzMzA3WjAYMRYwFAYD VQQDEw02NjQ5ODEwNC00YjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxO1zy3HW7h/05ApAYOVIQYGOTtJkD6T9kJjfdP5dkcPWnIU6ixg/SNV2/ctO CuAS4D6hqKfam1Sn0ig0AhehY2ceiSZ2/TvkdFWCT1ANMWIGBztpjSNgycDkKtyZ OSFIDYQOo7f3G8DMdUzHOXpAUzHzNWQPBKYXKRLJAuw6+A2wkJ6gK9RSFwpAzWBb T1cHR9VlekYK8VoV2wmjB/MGNHBSHQqZowMbCL9Ei+2WMPbF9j56hl9PrE+jUJwh xyw6N4TtjXsMiGjKl3UgbWWW6Iq87WmKFJhjP4WNHpOZyKXwICF8zO7+qpt2t46W EUuQzZTPG1adE/A1daYqcZ8+rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPzp/hA+ xWi2IwmW3QIPQrbQAaxyMB8GA1UdIwQYMBaAFAMFGFc14Jfvs2qGBlOyU6vp/hFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUU0MC8wRUVDMjlGODBG MzAxMUVEQjM1NjhBODRDNEY5QUUwMi9Bd1VZVnpYZ2wtLXphb1lHVTdKVHEtbi1F VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F3VVlWelhnbC0temFvWUdVN0pUcS1uLUVWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUU0MC8wRUVDMjlGODBGMzAxMUVEQjM1NjhBODRDNEY5QUUwMi9Bd1VZVnpYZ2wt LXphb1lHVTdKVHEtbi1FVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj5ycapV1lf5+0rurikxHPKRkpA3obTDWRgWVON3EGHkHLKT3Wz23b 7BlpxmOxpi1qnm4pYC9wtlr2OWrQwua7YXoOuq5fJjso/KjLE0AhM8aqDommUnYC qO/h3Tt0zci+VWRlxh3teza0doE6nt6A6lHoOzpeN+ECpDUrEA2aAg93+cAO+kuN Rb2TtXOm6vKljAPOYu4sqGuBoAd9Qk2mt2Cz7B3epO0nSIJawnGqJ3Vwe304AkfP 1htqsEIHI4Oi9mkX+n/2sxchrqSGh0bUiZrZNxCrpr7SnFI/gva5kjIaL9MPEqNk qOmJyagT06/vJx3nC5jzCXPX6N5Q5JVi -----END CERTIFICATE-----Generated at Sun May 19 05:48:51 2024 by rpki-client on console-fra.rpki-client.org