$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.mft File: aaSG-_IUhPFBL7ioCieKJIzvvrI.mft (raw, json) Hash identifier: cVSC1U4IGXgoqT1kuUB3XnkfOhLpOqUoYRtRZkz+H38= Subject key identifier: C3:1C:A8:10:83:93:6D:AC:BD:33:57:F4:FA:12:40:DF:5E:94:F8:D1 Authority key identifier: 69:A4:86:FB:F2:14:84:F1:41:2F:B8:A8:0A:27:8A:24:8C:EF:BE:B2 Certificate issuer: /CN=A91B4713/serialNumber=69A486FBF21484F1412FB8A80A278A248CEFBEB2 Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaSG-_IUhPFBL7ioCieKJIzvvrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.mft Manifest number: 5F Signing time: Sun 19 May 2024 07:44:16 +0000 Manifest this update: Sun 19 May 2024 07:44:16 +0000 Manifest next update: Sun 26 May 2024 07:44:16 +0000 Files and hashes: 1: aaSG-_IUhPFBL7ioCieKJIzvvrI.crl (hash: EUKs+WJaJS8XuvFLT5cYeGuw2OsLy5LsL/CkqLQDb/I=) 2: A5656D2E892B11EE94747D6BC4F9AE02.roa (hash: VnYcm5CeSehv5WnUy5aoQgFD29rO6YanbckbuMVthro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.crl rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaSG-_IUhPFBL7ioCieKJIzvvrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4713/serialNumber=69A486FBF21484F1412FB8A80A278A248CEFBEB2 Validity Not Before: May 19 07:44:16 2024 GMT Not After : May 26 07:44:16 2024 GMT Subject: CN=6649add0-26c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8a:d1:6c:d1:11:22:23:34:b3:1f:15:90:fe: 84:8f:4a:0c:bc:d6:dd:4d:e1:fb:20:97:2b:d2:b7: 8f:f3:80:98:a6:9d:c6:70:bf:d5:bb:75:05:8c:8c: 3b:fc:77:5c:2a:53:78:ca:90:72:01:78:ec:28:04: d8:c8:06:be:ae:08:73:12:a3:40:f5:ae:b8:35:7b: ea:d6:84:8e:39:e5:5e:84:50:19:4d:ab:58:b7:cf: b2:90:e5:bb:2d:59:5e:9a:fc:d4:ee:9c:2e:31:c5: a7:57:2d:3e:e5:5b:c7:99:e1:96:f4:eb:e3:0f:f1: 7f:6e:5a:2b:88:76:0d:b1:13:40:49:62:bb:91:ac: 51:88:0f:bd:08:70:7e:e8:7b:c4:c6:d3:d6:17:2d: 11:55:52:bd:89:b2:ba:a9:31:a6:58:3c:cf:e1:3f: ae:e9:95:7b:8f:83:a4:d2:77:3d:fc:5c:0f:e9:f5: 70:08:b9:5b:1d:24:b0:ff:0c:60:0f:79:a4:10:5b: c5:87:f9:07:fb:78:b8:18:88:fd:14:0a:5c:59:1c: c9:95:76:09:69:68:4e:d4:7a:cf:93:50:b0:c7:56: ef:95:fa:8d:05:7c:bd:c4:8a:cf:90:c2:23:22:8d: af:54:e4:7e:07:71:1d:07:3f:18:fe:6e:6b:34:34: 9e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:1C:A8:10:83:93:6D:AC:BD:33:57:F4:FA:12:40:DF:5E:94:F8:D1 X509v3 Authority Key Identifier: keyid:69:A4:86:FB:F2:14:84:F1:41:2F:B8:A8:0A:27:8A:24:8C:EF:BE:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaSG-_IUhPFBL7ioCieKJIzvvrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:92:e8:40:ee:fc:2e:b8:d4:90:40:3c:37:3b:eb:90:e6:61: fd:35:fd:1a:a0:0c:26:88:f0:3b:bb:05:fb:dd:82:4e:8d:ae: 5b:89:ab:6a:72:fe:62:c6:e8:33:5c:78:09:c7:ae:f2:70:33: 33:ab:69:4b:3e:5d:ca:1c:1a:e6:f9:96:83:fd:23:6e:d8:e3: 06:ed:29:3b:4c:f5:6c:62:9a:4d:cb:a2:40:b6:d7:20:58:66: 28:d5:e1:62:83:98:76:d8:62:0b:61:1d:b0:3d:16:40:10:9d: ea:38:c0:2a:04:06:37:43:25:4b:8c:20:39:3e:be:aa:c3:18: e8:fb:ce:d5:14:46:59:b3:92:43:c1:e5:da:b0:41:3d:16:75: 52:9b:cd:22:24:80:06:96:6e:54:50:53:5c:c6:31:a0:f5:89: 9a:2c:4e:de:94:9f:23:fa:6c:fb:b6:bf:a9:ec:cf:64:32:85: 13:e9:2e:39:55:25:ab:50:af:49:0a:55:12:53:d4:99:69:10: 2f:8f:d9:ae:79:39:78:3f:40:b3:c4:e9:92:3d:da:a4:1d:40: 65:5d:40:db:2e:f1:88:3a:f9:11:84:8b:87:45:e3:84:e9:17: 76:a7:77:94:16:c8:f2:7b:ba:0f:fd:01:30:cb:38:25:cd:27: 05:00:b5:3f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NDcxMzExMC8GA1UEBRMoNjlBNDg2RkJGMjE0ODRGMTQxMkZCOEE4MEEyNzhBMjQ4 Q0VGQkVCMjAeFw0yNDA1MTkwNzQ0MTZaFw0yNDA1MjYwNzQ0MTZaMBgxFjAUBgNV BAMTDTY2NDlhZGQwLTI2YzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFitFs0REiIzSzHxWQ/oSPSgy81t1N4fsglyvSt4/zgJimncZwv9W7dQWMjDv8 d1wqU3jKkHIBeOwoBNjIBr6uCHMSo0D1rrg1e+rWhI455V6EUBlNq1i3z7KQ5bst WV6a/NTunC4xxadXLT7lW8eZ4Zb06+MP8X9uWiuIdg2xE0BJYruRrFGID70IcH7o e8TG09YXLRFVUr2JsrqpMaZYPM/hP67plXuPg6TSdz38XA/p9XAIuVsdJLD/DGAP eaQQW8WH+Qf7eLgYiP0UClxZHMmVdglpaE7Ues+TULDHVu+V+o0FfL3Eis+QwiMi ja9U5H4HcR0HPxj+bms0NJ47AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwxyoEIOT bay9M1f0+hJA316U+NEwHwYDVR0jBBgwFoAUaaSG+/IUhPFBL7ioCieKJIzvvrIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0NzEzL0ZFMUJEOTdDODky QTExRUVCNjE0ODI2QUM0RjlBRTAyL2FhU0ctX0lVaFBGQkw3aW9DaWVLSkl6dnZy SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYWFTRy1fSVVoUEZCTDdpb0NpZUtKSXp2dnJJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 NzEzL0ZFMUJEOTdDODkyQTExRUVCNjE0ODI2QUM0RjlBRTAyL2FhU0ctX0lVaFBG Qkw3aW9DaWVLSkl6dnZySS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAqS6EDu/C641JBAPDc765DmYf01/RqgDCaI8Du7Bfvdgk6NrluJq2py /mLG6DNceAnHrvJwMzOraUs+XcocGub5loP9I27Y4wbtKTtM9Wximk3LokC21yBY ZijV4WKDmHbYYgthHbA9FkAQneo4wCoEBjdDJUuMIDk+vqrDGOj7ztUURlmzkkPB 5dqwQT0WdVKbzSIkgAaWblRQU1zGMaD1iZosTt6UnyP6bPu2v6nsz2QyhRPpLjlV JatQr0kKVRJT1JlpEC+P2a55OXg/QLPE6ZI92qQdQGVdQNsu8Yg6+RGEi4dF44Tp F3and5QWyPJ7ug/9ATDLOCXNJwUAtT8= -----END CERTIFICATE-----Generated at Sun May 19 08:26:44 2024 by rpki-client on console-fra.rpki-client.org