$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft File: reE11eBNSWNwmzymv8AQttD5fK8.mft (raw, json) Hash identifier: 5yfDRnF8DZBhqkhuS9Vw7Fow3thm83rdmMI+pCVSsE8= Subject key identifier: 3D:D1:ED:62:01:F6:C5:F8:0D:D1:31:B2:57:D6:FE:41:B0:DB:C1:DA Authority key identifier: AD:E1:35:D5:E0:4D:49:63:70:9B:3C:A6:BF:C0:10:B6:D0:F9:7C:AF Certificate issuer: /CN=A91B7A06/serialNumber=ADE135D5E04D4963709B3CA6BFC010B6D0F97CAF Certificate serial: 11DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft Manifest number: 11D4 Signing time: Sat 18 May 2024 17:43:37 +0000 Manifest this update: Sat 18 May 2024 17:43:36 +0000 Manifest next update: Sat 25 May 2024 17:43:36 +0000 Files and hashes: 1: reE11eBNSWNwmzymv8AQttD5fK8.crl (hash: FstsVzotyiLhQkbZltbJg7T7cjjMSdmI7GRdEe2DyxY=) 2: F8E415E2987F11ED9E1F4D0FC4F9AE02.roa (hash: RXba5RPYGdrEPYE0W7ZkSNkUJa3nMIMiYXLWi5PzuxY=) 3: F7B1497E987F11ED9E1F4D0FC4F9AE02.roa (hash: tLHrIwYJaTjIZxtRObnXfzrOCU5rWos6mjn9XBFANiI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.crl rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4574 (0x11de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7A06/serialNumber=ADE135D5E04D4963709B3CA6BFC010B6D0F97CAF Validity Not Before: May 18 17:43:36 2024 GMT Not After : May 25 17:43:36 2024 GMT Subject: CN=6648e8c9-0789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7c:8f:e2:04:a2:1d:76:64:de:8a:84:c5:94: b8:9d:b6:fd:34:f8:85:c5:4c:88:86:ea:69:1c:37: 59:2e:fb:b5:6d:f3:61:97:1c:b2:0e:89:36:ed:b7: 10:a0:fb:f1:cf:35:0a:72:35:d6:19:b4:21:b0:0d: 20:ec:c6:17:61:56:f5:37:84:d6:90:f1:39:c6:5f: b6:eb:ef:fc:80:c8:33:c3:bf:91:6c:56:86:bf:3d: 1c:21:6b:8d:2f:60:96:6e:bf:41:c2:73:07:ab:c9: 45:e8:69:03:e4:e2:4d:8f:3b:a0:09:e7:1a:77:78: 5c:e4:1a:f9:c6:7b:0c:1b:09:f3:f8:b0:b5:37:14: f3:6f:50:9b:ff:be:d4:8d:96:99:06:47:7e:1e:56: 1c:91:3a:8b:78:65:99:6a:46:c9:87:b4:42:fb:51: df:1d:1a:c4:af:b2:49:f7:84:9a:ae:15:c2:57:23: 42:40:91:71:08:90:26:d8:cd:e4:a2:3e:69:41:e7: 22:cc:35:a6:f6:af:8a:42:c3:b0:ba:0f:ff:20:f2: cb:2e:51:70:44:f3:d0:09:35:fa:5b:64:df:53:8d: 1d:2e:05:47:0f:6d:11:c3:14:48:47:fd:2d:0b:68: 86:c7:48:5e:18:21:e6:68:87:a5:05:e9:85:62:ae: 42:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D1:ED:62:01:F6:C5:F8:0D:D1:31:B2:57:D6:FE:41:B0:DB:C1:DA X509v3 Authority Key Identifier: keyid:AD:E1:35:D5:E0:4D:49:63:70:9B:3C:A6:BF:C0:10:B6:D0:F9:7C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:0e:4f:4b:9b:4e:36:59:67:0a:32:40:a4:7e:a1:c3:19:af: ed:ec:9f:2f:83:23:31:e7:4d:a0:d0:3f:d1:d1:0e:91:62:74: 57:44:de:87:34:67:68:c8:82:ff:30:02:9d:08:67:4e:49:9b: 6f:07:dc:d1:17:94:e9:89:a0:9c:03:b5:10:ef:11:a4:87:fb: a3:37:9f:59:cd:34:f7:7d:d6:c9:cd:2b:7c:de:97:02:f4:f9: 2b:2e:9d:81:60:ba:e0:79:f9:0f:47:35:cf:06:06:42:bf:a5: 86:bf:a4:15:92:e6:b1:ea:ea:e5:ec:2f:0c:62:04:09:c3:24: a8:51:6b:e0:11:46:fe:07:92:6a:53:e4:25:9e:d0:45:09:6f: 7b:78:c0:7b:77:57:62:bc:68:51:e7:75:2a:4a:5e:95:ec:49: 4c:7c:a4:a2:55:2e:f4:98:4e:98:75:c0:5a:04:e6:e9:ec:c6: 4e:0a:a6:e7:45:48:c2:30:b0:7c:30:46:ae:d0:ff:75:ee:cd: 0a:15:db:ad:68:b9:5d:4f:17:19:86:d9:cb:f9:f1:b9:cb:5a: b2:98:bb:b1:73:55:3a:93:bf:a4:5e:06:2e:d7:38:83:a2:05: 06:e4:56:45:ad:10:f0:ca:b1:83:ba:b7:56:8c:17:d4:82:82: 14:80:94:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdBMDYxMTAvBgNVBAUTKEFERTEzNUQ1RTA0RDQ5NjM3MDlCM0NBNkJGQzAxMEI2 RDBGOTdDQUYwHhcNMjQwNTE4MTc0MzM2WhcNMjQwNTI1MTc0MzM2WjAYMRYwFAYD VQQDEw02NjQ4ZThjOS0wNzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApXyP4gSiHXZk3oqExZS4nbb9NPiFxUyIhuppHDdZLvu1bfNhlxyyDok27bcQ oPvxzzUKcjXWGbQhsA0g7MYXYVb1N4TWkPE5xl+26+/8gMgzw7+RbFaGvz0cIWuN L2CWbr9BwnMHq8lF6GkD5OJNjzugCecad3hc5Br5xnsMGwnz+LC1NxTzb1Cb/77U jZaZBkd+HlYckTqLeGWZakbJh7RC+1HfHRrEr7JJ94SarhXCVyNCQJFxCJAm2M3k oj5pQecizDWm9q+KQsOwug//IPLLLlFwRPPQCTX6W2TfU40dLgVHD20RwxRIR/0t C2iGx0heGCHmaIelBemFYq5CNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD3R7WIB 9sX4DdExslfW/kGw28HaMB8GA1UdIwQYMBaAFK3hNdXgTUljcJs8pr/AELbQ+Xyv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0EwNi80OEY0RENEQUM2 QzMxMUU4OEY3MUNDNTZDNEY5QUUwMi9yZUUxMWVCTlNXTndtenltdjhBUXR0RDVm SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JlRTExZUJOU1dOd216eW12OEFRdHRENWZLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0EwNi80OEY0RENEQUM2QzMxMUU4OEY3MUNDNTZDNEY5QUUwMi9yZUUxMWVCTlNX TndtenltdjhBUXR0RDVmSzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVDk9Lm042WWcKMkCkfqHDGa/t7J8vgyMx502g0D/R0Q6RYnRXRN6H NGdoyIL/MAKdCGdOSZtvB9zRF5TpiaCcA7UQ7xGkh/ujN59ZzTT3fdbJzSt83pcC 9PkrLp2BYLrgefkPRzXPBgZCv6WGv6QVkuax6url7C8MYgQJwySoUWvgEUb+B5Jq U+QlntBFCW97eMB7d1divGhR53UqSl6V7ElMfKSiVS70mE6YdcBaBObp7MZOCqbn RUjCMLB8MEau0P917s0KFdutaLldTxcZhtnL+fG5y1qymLuxc1U6k7+kXgYu1ziD ogUG5FZFrRDwyrGDurdWjBfUgoIUgJSl -----END CERTIFICATE-----Generated at Sat May 18 18:21:38 2024 by rpki-client on console-ams.rpki-client.org