$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft File: AKZAby8KlHvrUUE2cN9yG611usQ.mft (raw, json) Hash identifier: kvVllALK2vfyx6Z8M64Fl9b52DD//xl5wINj/Wj7V2Q= Subject key identifier: B9:3E:F8:D0:9F:84:CA:BA:64:2A:A9:D1:7F:0E:C4:9B:AC:FA:35:A3 Authority key identifier: 00:A6:40:6F:2F:0A:94:7B:EB:51:41:36:70:DF:72:1B:AD:75:BA:C4 Certificate issuer: /CN=A91AF0B6/serialNumber=00A6406F2F0A947BEB51413670DF721BAD75BAC4 Certificate serial: 0280 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft Manifest number: 027D Signing time: Sun 19 May 2024 03:41:41 +0000 Manifest this update: Sun 19 May 2024 03:41:40 +0000 Manifest next update: Sun 26 May 2024 03:41:40 +0000 Files and hashes: 1: AKZAby8KlHvrUUE2cN9yG611usQ.crl (hash: 3SVWgPm4Hr2TcIaEAZ0zcgmS64fnkibwRY8nMUHHpd0=) 2: FB1D01D4BF8B11ECB9B8D351C4F9AE02.roa (hash: SBU8GVreyOnldCYNvt0nDJnVdYm/HEq3WcHOf4U77zE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.crl rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 640 (0x280) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF0B6/serialNumber=00A6406F2F0A947BEB51413670DF721BAD75BAC4 Validity Not Before: May 19 03:41:40 2024 GMT Not After : May 26 03:41:40 2024 GMT Subject: CN=664974f4-b1fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:48:7e:04:16:61:34:5e:94:19:19:dd:e7:be: 6b:32:fd:d7:6a:38:e6:5d:6c:8e:1b:b2:b2:e5:16: 9a:80:01:50:bf:15:87:00:14:6e:ea:f2:a5:56:d8: b0:3b:d7:e2:87:7c:5c:76:64:6f:8f:3a:b2:9f:24: 3c:eb:2f:52:2a:49:00:01:8b:a1:0e:0a:03:b0:3c: d4:63:ae:35:0f:0d:6a:7f:71:23:13:07:df:f2:e6: 62:0e:43:56:81:18:af:f6:02:d7:12:23:d7:aa:e4: 64:32:48:48:41:00:0d:48:69:88:7d:ff:ef:45:f8: 4c:7f:53:a3:28:75:81:07:77:47:a8:7a:f6:7a:23: d9:cc:63:21:dc:b7:48:e4:33:0c:9a:9f:b2:a1:56: 54:8d:6b:47:89:81:1a:d6:30:8e:1c:88:6b:3a:29: 18:e8:52:7e:d3:3d:05:b2:28:74:bb:f5:80:dc:99: 88:ec:1e:84:33:33:1a:97:ca:5e:33:55:a4:18:3d: b8:4f:c4:2d:b2:21:2f:99:b9:07:ae:b6:77:c9:e9: c2:c1:1f:33:be:6b:9c:82:1b:25:a6:68:da:69:ea: f7:0e:48:d8:61:3a:2e:f1:29:06:95:9c:e3:78:b5: 06:8c:7a:18:f2:bd:14:6b:21:be:33:5c:87:21:a5: 6b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:3E:F8:D0:9F:84:CA:BA:64:2A:A9:D1:7F:0E:C4:9B:AC:FA:35:A3 X509v3 Authority Key Identifier: keyid:00:A6:40:6F:2F:0A:94:7B:EB:51:41:36:70:DF:72:1B:AD:75:BA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:2a:c7:14:50:7d:0a:6b:da:ef:71:df:c7:a4:73:ec:03:d4: 30:2a:f0:f2:4c:e6:5c:35:ee:53:f2:be:e4:02:cd:b2:94:6a: 9e:a6:8d:fd:e7:2d:a2:ad:79:da:8b:b4:60:34:f5:16:56:88: 19:95:f5:01:97:54:37:f8:3c:ed:cb:fb:e8:55:a9:62:4b:b7: bd:8f:a5:d2:97:6b:09:6f:6b:73:ae:c4:e2:8d:7f:b2:e6:50: 0c:55:12:68:0d:6d:b6:f4:33:ac:35:63:e1:1a:14:c3:b0:fb: 26:67:e8:dc:3e:d5:5f:9c:f7:71:41:d8:28:9f:8c:5c:74:f0: 41:de:bb:d0:e9:e2:84:a0:2b:57:d1:5d:e0:0a:ef:91:4c:03: 41:63:45:59:a2:be:bd:5c:f4:b6:f9:02:e5:b9:d5:14:4e:92: 76:a6:a2:7e:a3:e6:d0:83:dc:fc:1d:57:17:dc:20:cb:de:91: e5:00:d1:84:8d:29:d0:af:9a:e2:a1:7e:7a:f2:ef:e5:fb:67: b9:d9:ef:57:10:25:c1:55:d0:5d:fc:8e:e9:7e:ff:97:43:9f: 3f:6f:32:10:6a:c3:e0:4f:12:de:c1:b9:b2:e8:42:f1:90:e3: 0f:1a:8b:43:8f:56:71:0e:7f:93:5c:63:0c:39:fb:a1:ff:f2: 78:3d:f7:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwQjYxMTAvBgNVBAUTKDAwQTY0MDZGMkYwQTk0N0JFQjUxNDEzNjcwREY3MjFC QUQ3NUJBQzQwHhcNMjQwNTE5MDM0MTQwWhcNMjQwNTI2MDM0MTQwWjAYMRYwFAYD VQQDEw02NjQ5NzRmNC1iMWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUh+BBZhNF6UGRnd575rMv3XajjmXWyOG7Ky5RaagAFQvxWHABRu6vKlVtiw O9fih3xcdmRvjzqynyQ86y9SKkkAAYuhDgoDsDzUY641Dw1qf3EjEwff8uZiDkNW gRiv9gLXEiPXquRkMkhIQQANSGmIff/vRfhMf1OjKHWBB3dHqHr2eiPZzGMh3LdI 5DMMmp+yoVZUjWtHiYEa1jCOHIhrOikY6FJ+0z0Fsih0u/WA3JmI7B6EMzMal8pe M1WkGD24T8QtsiEvmbkHrrZ3yenCwR8zvmucghslpmjaaer3DkjYYTou8SkGlZzj eLUGjHoY8r0UayG+M1yHIaVrvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLk++NCf hMq6ZCqp0X8OxJus+jWjMB8GA1UdIwQYMBaAFACmQG8vCpR761FBNnDfchutdbrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjBCNi8wNzU5MzhENkJG ODgxMUVDQjFFMjVBMzBDNEY5QUUwMi9BS1pBYnk4S2xIdnJVVUUyY045eUc2MTF1 c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FLWkFieThLbEh2clVVRTJjTjl5RzYxMXVzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjBCNi8wNzU5MzhENkJGODgxMUVDQjFFMjVBMzBDNEY5QUUwMi9BS1pBYnk4S2xI dnJVVUUyY045eUc2MTF1c1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHKscUUH0Ka9rvcd/HpHPsA9QwKvDyTOZcNe5T8r7kAs2ylGqepo39 5y2irXnai7RgNPUWVogZlfUBl1Q3+Dzty/voValiS7e9j6XSl2sJb2tzrsTijX+y 5lAMVRJoDW229DOsNWPhGhTDsPsmZ+jcPtVfnPdxQdgon4xcdPBB3rvQ6eKEoCtX 0V3gCu+RTANBY0VZor69XPS2+QLludUUTpJ2pqJ+o+bQg9z8HVcX3CDL3pHlANGE jSnQr5rioX568u/l+2e52e9XECXBVdBd/I7pfv+XQ58/bzIQasPgTxLewbmy6ELx kOMPGotDj1ZxDn+TXGMMOfuh//J4PfeS -----END CERTIFICATE-----Generated at Sun May 19 04:22:05 2024 by rpki-client on console-fra.rpki-client.org