$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft File: -gEnQNykk8ziA6-q3o68cZqsI7Q.mft (raw, json) Hash identifier: ZjvL5Vo/kgf4R+5BnjOXJNftvZEjnkG0YT9kL79QBWc= Subject key identifier: 0B:04:B6:8E:E4:FB:C6:F8:84:5C:9E:4F:FC:76:39:6A:60:E9:87:73 Authority key identifier: FA:01:27:40:DC:A4:93:CC:E2:03:AF:AA:DE:8E:BC:71:9A:AC:23:B4 Certificate issuer: /CN=A91AF404/serialNumber=FA012740DCA493CCE203AFAADE8EBC719AAC23B4 Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft Manifest number: C2 Signing time: Sun 19 May 2024 06:23:43 +0000 Manifest this update: Sun 19 May 2024 06:23:42 +0000 Manifest next update: Sun 26 May 2024 06:23:42 +0000 Files and hashes: 1: -gEnQNykk8ziA6-q3o68cZqsI7Q.crl (hash: Pny3bBjGqIeKSkbm6LrAr4BWpk9JW7qBUnq+WB+yT+U=) 2: D8674A0C0ED911EE8A4E0A23C4F9AE02.roa (hash: cIij3sN4HH4JyeT7dq6JCTUMkfEDdpSpPGISH3QnUL8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.crl rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF404/serialNumber=FA012740DCA493CCE203AFAADE8EBC719AAC23B4 Validity Not Before: May 19 06:23:42 2024 GMT Not After : May 26 06:23:42 2024 GMT Subject: CN=66499aef-abdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ab:b2:e4:73:4c:75:de:e2:f7:f8:b5:ae:f9: 70:5e:22:3e:43:52:61:dd:2e:dc:ec:0d:74:21:43: 0a:13:2a:16:ce:ae:6c:da:67:a9:d8:8f:1f:88:24: 21:aa:e3:8f:ba:06:b2:41:47:5e:09:4d:84:c3:5a: 8d:2d:75:79:a2:dd:40:1d:2e:d0:ed:d4:95:28:a7: 7a:c2:45:4e:91:00:10:4a:da:f4:77:42:fe:d9:75: 59:9f:4b:f4:13:77:cb:24:ce:68:d4:33:cf:3d:d1: ca:05:b6:0c:1f:72:20:b7:f5:a5:55:fa:73:19:b8: 7b:5b:c6:64:3c:72:9b:9f:7a:07:1d:cf:3e:dd:48: 91:c5:8d:3d:c7:47:f1:d5:4a:5b:f8:f7:be:37:b6: 1d:12:e8:df:76:6e:4b:64:44:23:01:b1:c9:1d:c9: db:c8:54:09:11:a5:00:7f:73:13:2f:5c:ec:cb:69: 42:c1:00:35:06:70:11:03:78:da:b2:56:85:5f:0c: 27:fa:90:27:45:cf:8a:30:0a:6f:2a:bd:0f:90:78: bc:dc:d4:7d:b9:a0:16:4d:8c:bb:a6:f1:98:54:cf: 47:be:ec:0b:5b:d0:84:26:18:70:71:bd:01:69:f5: e7:11:42:c8:a2:14:b1:34:06:50:49:92:cc:ce:4b: a1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:04:B6:8E:E4:FB:C6:F8:84:5C:9E:4F:FC:76:39:6A:60:E9:87:73 X509v3 Authority Key Identifier: keyid:FA:01:27:40:DC:A4:93:CC:E2:03:AF:AA:DE:8E:BC:71:9A:AC:23:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:80:61:af:b5:9d:fa:91:2c:3d:f8:84:91:6f:0c:4f:3e:01: 22:b1:ba:49:3a:80:86:03:64:15:e1:c3:f0:5b:8d:b2:0d:f9: 39:ff:2b:d6:02:47:19:b9:e2:c6:05:aa:4b:78:b3:84:53:45: 54:ce:ce:03:1b:c5:03:10:3b:be:8b:2f:b5:31:74:49:32:7f: 43:a6:7e:04:42:57:19:52:07:3f:60:aa:be:f1:01:c4:d2:a6: 81:9f:53:89:b6:31:b6:f0:ae:95:53:9f:75:49:3d:4b:d0:01: 92:a4:f8:9a:b1:b4:78:81:7f:a2:cf:3b:7b:bf:e8:06:10:f9: 4b:17:2e:88:48:ab:10:74:28:dd:5b:61:d5:3a:ff:4f:d4:e6: ff:99:b5:a5:98:56:7e:e5:e9:a8:ae:08:0f:83:2e:35:dc:2d: d6:1b:af:fd:7f:08:8a:43:4f:5b:14:c3:17:56:fb:68:7e:04: 6d:35:a6:be:c4:8e:bb:5b:04:3c:f7:6a:e1:1d:62:7d:e6:96: 6a:c8:fb:26:d6:3e:5d:a7:f0:41:d6:1f:6e:6a:9c:3c:0b:85: 25:37:56:9a:aa:fe:c2:36:e7:f6:9a:5d:77:ee:31:a3:24:7c: 39:96:6a:cd:f9:e8:b0:25:81:ab:c8:72:a4:21:e9:2b:6f:32: a0:ab:45:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY0MDQxMTAvBgNVBAUTKEZBMDEyNzQwRENBNDkzQ0NFMjAzQUZBQURFOEVCQzcx OUFBQzIzQjQwHhcNMjQwNTE5MDYyMzQyWhcNMjQwNTI2MDYyMzQyWjAYMRYwFAYD VQQDEw02NjQ5OWFlZi1hYmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKuy5HNMdd7i9/i1rvlwXiI+Q1Jh3S7c7A10IUMKEyoWzq5s2mep2I8fiCQh quOPugayQUdeCU2Ew1qNLXV5ot1AHS7Q7dSVKKd6wkVOkQAQStr0d0L+2XVZn0v0 E3fLJM5o1DPPPdHKBbYMH3Igt/WlVfpzGbh7W8ZkPHKbn3oHHc8+3UiRxY09x0fx 1Upb+Pe+N7YdEujfdm5LZEQjAbHJHcnbyFQJEaUAf3MTL1zsy2lCwQA1BnARA3ja slaFXwwn+pAnRc+KMApvKr0PkHi83NR9uaAWTYy7pvGYVM9HvuwLW9CEJhhwcb0B afXnEULIohSxNAZQSZLMzkuhKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAsEto7k +8b4hFyeT/x2OWpg6YdzMB8GA1UdIwQYMBaAFPoBJ0DcpJPM4gOvqt6OvHGarCO0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjQwNC81NDQwODFEMkY0 RDgxMUVEOTgwNDZDNEFDNEY5QUUwMi8tZ0VuUU55a2s4emlBNi1xM282OGNacXNJ N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1nRW5RTnlrazh6aUE2LXEzbzY4Y1pxc0k3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjQwNC81NDQwODFEMkY0RDgxMUVEOTgwNDZDNEFDNEY5QUUwMi8tZ0VuUU55a2s4 emlBNi1xM282OGNacXNJN1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFgGGvtZ36kSw9+ISRbwxPPgEisbpJOoCGA2QV4cPwW42yDfk5/yvW AkcZueLGBapLeLOEU0VUzs4DG8UDEDu+iy+1MXRJMn9Dpn4EQlcZUgc/YKq+8QHE 0qaBn1OJtjG28K6VU591ST1L0AGSpPiasbR4gX+izzt7v+gGEPlLFy6ISKsQdCjd W2HVOv9P1Ob/mbWlmFZ+5emorggPgy413C3WG6/9fwiKQ09bFMMXVvtofgRtNaa+ xI67WwQ892rhHWJ95pZqyPsm1j5dp/BB1h9uapw8C4UlN1aaqv7CNuf2ml137jGj JHw5lmrN+eiwJYGryHKkIekrbzKgq0Xh -----END CERTIFICATE-----Generated at Sun May 19 08:25:07 2024 by rpki-client on console-ams.rpki-client.org