$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/71tJf_2LJZ7p6hV7AiKxECZs9Z8.mft File: 71tJf_2LJZ7p6hV7AiKxECZs9Z8.mft (raw, json) Hash identifier: /qUPi1XycmN72WTlid5REhh6W/P13S+/0tGuxJPmv6U= Subject key identifier: F6:7D:81:C0:8F:C7:90:3B:CF:47:76:CB:23:0B:36:EA:0E:B0:B3:30 Authority key identifier: EF:5B:49:7F:FD:8B:25:9E:E9:EA:15:7B:02:22:B1:10:26:6C:F5:9F Certificate issuer: /CN=A91B9BC6/serialNumber=EF5B497FFD8B259EE9EA157B0222B110266CF59F Certificate serial: 0438 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71tJf_2LJZ7p6hV7AiKxECZs9Z8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/71tJf_2LJZ7p6hV7AiKxECZs9Z8.mft Manifest number: 0420 Signing time: Sun 19 May 2024 02:08:42 +0000 Manifest this update: Sun 19 May 2024 02:08:41 +0000 Manifest next update: Sun 26 May 2024 02:08:41 +0000 Files and hashes: 1: 71tJf_2LJZ7p6hV7AiKxECZs9Z8.crl (hash: sJjwv0J0tuAAJULXXe4/bHZiG3Pkv3C88VonwpZV/CI=) 2: 13DBE72EB4A611EE9795B755C4F9AE02.roa (hash: 8VbCibBd3ZbV3h+sdQu0CJodTZCJLrT/3HEGSl1VZso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/71tJf_2LJZ7p6hV7AiKxECZs9Z8.crl rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/71tJf_2LJZ7p6hV7AiKxECZs9Z8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71tJf_2LJZ7p6hV7AiKxECZs9Z8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1080 (0x438) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9BC6/serialNumber=EF5B497FFD8B259EE9EA157B0222B110266CF59F Validity Not Before: May 19 02:08:41 2024 GMT Not After : May 26 02:08:41 2024 GMT Subject: CN=66495f2a-485f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:53:f9:d6:c0:99:98:06:24:90:ac:01:c6:58: 54:08:c3:4a:ab:6e:50:a0:ac:58:dc:38:82:ad:e9: 43:2a:3f:c0:85:a6:c2:5d:8b:f2:c1:ea:3a:4d:08: f9:53:1b:6d:f8:75:8e:85:a8:a8:f5:99:b7:60:a5: 85:c2:78:3f:7b:77:9f:47:6a:c6:b8:85:f9:92:73: bc:d2:02:b5:cb:3d:ff:f0:ee:78:3e:ba:02:ed:4e: 7b:e5:57:b2:66:f3:c7:b4:1a:10:98:41:da:9d:6c: 73:86:2d:76:b6:23:dc:db:f1:77:f8:9b:3e:fe:fc: 6d:24:03:f2:fa:e7:3f:36:82:8a:ef:ff:be:ac:b3: 17:e8:1b:f9:6f:44:54:02:b1:7e:b2:43:f8:31:6e: 08:0a:a4:c5:bb:9b:f2:ab:e5:9a:d9:3d:81:35:6b: 3d:ec:0a:66:9c:8a:42:15:dc:bf:f7:46:11:07:43: dd:2b:0d:52:66:98:00:d4:98:a1:b0:06:96:31:7e: ed:a0:6c:32:f5:ac:2c:64:34:07:fa:3c:22:f9:bf: 41:24:79:09:f7:d3:f5:0f:28:69:5a:65:b2:90:61: 5c:ec:f1:a6:46:7c:c5:cc:0b:ac:5c:07:7a:fa:30: 02:4a:c5:40:b2:94:4b:28:eb:e5:b2:b5:01:dc:a1: 1d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:7D:81:C0:8F:C7:90:3B:CF:47:76:CB:23:0B:36:EA:0E:B0:B3:30 X509v3 Authority Key Identifier: keyid:EF:5B:49:7F:FD:8B:25:9E:E9:EA:15:7B:02:22:B1:10:26:6C:F5:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/71tJf_2LJZ7p6hV7AiKxECZs9Z8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71tJf_2LJZ7p6hV7AiKxECZs9Z8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/71tJf_2LJZ7p6hV7AiKxECZs9Z8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:d9:f1:4c:5f:b8:b2:f5:9d:68:db:a6:03:7c:3f:55:d3:87: f2:fd:70:b7:c0:95:a0:fc:3e:50:18:7c:13:97:c0:57:45:ab: ee:51:3d:63:41:a0:09:fb:54:2c:87:16:43:a0:34:c0:95:98: bf:31:42:7d:a9:c9:75:c2:47:82:93:fb:d7:a8:b2:2f:a9:db: a3:ff:b2:4b:9a:91:8b:cb:56:82:26:f4:47:23:17:54:0a:b9: 1d:bb:64:39:c1:9e:1f:07:de:06:48:75:e8:f7:16:96:ad:87: 9f:1c:2e:2d:e3:be:d2:a0:b8:9b:9f:9c:71:22:63:26:a9:33: fc:69:a5:6b:7d:1a:7b:63:ac:9c:67:b7:76:cc:dd:ec:c2:72: 51:d7:cc:dc:4b:00:34:83:4a:2a:b8:ab:7b:a2:28:9a:b4:88: 08:04:a5:7a:7d:f1:49:b6:b1:27:fe:66:ef:ad:dc:06:9e:27: 1e:b9:c5:fe:94:e3:e6:9b:87:b4:0a:c3:15:6f:a7:8c:28:9a: 22:be:3d:7d:63:ae:b1:2f:75:07:c2:75:9b:67:ee:6c:f6:b6: 26:f4:0e:92:1d:e9:d2:a4:99:4e:f0:ac:44:87:b9:56:1e:9e: 99:f2:3a:6f:f1:8e:4a:51:d0:30:6f:60:14:e7:41:54:37:fa: 32:f1:7e:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlCQzYxMTAvBgNVBAUTKEVGNUI0OTdGRkQ4QjI1OUVFOUVBMTU3QjAyMjJCMTEw MjY2Q0Y1OUYwHhcNMjQwNTE5MDIwODQxWhcNMjQwNTI2MDIwODQxWjAYMRYwFAYD VQQDEw02NjQ5NWYyYS00ODVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7VP51sCZmAYkkKwBxlhUCMNKq25QoKxY3DiCrelDKj/AhabCXYvyweo6TQj5 Uxtt+HWOhaio9Zm3YKWFwng/e3efR2rGuIX5knO80gK1yz3/8O54ProC7U575Vey ZvPHtBoQmEHanWxzhi12tiPc2/F3+Js+/vxtJAPy+uc/NoKK7/++rLMX6Bv5b0RU ArF+skP4MW4ICqTFu5vyq+Wa2T2BNWs97ApmnIpCFdy/90YRB0PdKw1SZpgA1Jih sAaWMX7toGwy9awsZDQH+jwi+b9BJHkJ99P1DyhpWmWykGFc7PGmRnzFzAusXAd6 +jACSsVAspRLKOvlsrUB3KEd9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPZ9gcCP x5A7z0d2yyMLNuoOsLMwMB8GA1UdIwQYMBaAFO9bSX/9iyWe6eoVewIisRAmbPWf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUJDNi80ODkwOTFDRTI2 NjcxMUVDQjlDMjJDNzdDNEY5QUUwMi83MXRKZl8yTEpaN3A2aFY3QWlLeEVDWnM5 WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcxdEpmXzJMSlo3cDZoVjdBaUt4RUNaczlaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUJDNi80ODkwOTFDRTI2NjcxMUVDQjlDMjJDNzdDNEY5QUUwMi83MXRKZl8yTEpa N3A2aFY3QWlLeEVDWnM5WjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd2fFMX7iy9Z1o26YDfD9V04fy/XC3wJWg/D5QGHwTl8BXRavuUT1j QaAJ+1QshxZDoDTAlZi/MUJ9qcl1wkeCk/vXqLIvqduj/7JLmpGLy1aCJvRHIxdU Crkdu2Q5wZ4fB94GSHXo9xaWrYefHC4t477SoLibn5xxImMmqTP8aaVrfRp7Y6yc Z7d2zN3swnJR18zcSwA0g0oquKt7oiiatIgIBKV6ffFJtrEn/mbvrdwGniceucX+ lOPmm4e0CsMVb6eMKJoivj19Y66xL3UHwnWbZ+5s9rYm9A6SHenSpJlO8KxEh7lW Hp6Z8jpv8Y5KUdAwb2AU50FUN/oy8X5K -----END CERTIFICATE-----Generated at Sun May 19 02:39:37 2024 by rpki-client on console-fra.rpki-client.org