$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft File: t0bN0xcqIBHwIYn_La14fSnAEek.mft (raw, json) Hash identifier: ZMm5opNBWtFWJZ6adxSv6U0vAs/OSKROG5LXJ6/ytjM= Subject key identifier: A1:B9:E5:85:5F:D9:03:F3:D1:82:4E:F4:CF:DB:42:B0:64:1C:7F:BD Authority key identifier: B7:46:CD:D3:17:2A:20:11:F0:21:89:FF:2D:AD:78:7D:29:C0:11:E9 Certificate issuer: /CN=A91C1B92/serialNumber=B746CDD3172A2011F02189FF2DAD787D29C011E9 Certificate serial: 0CF5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft Manifest number: 0CEE Signing time: Sat 18 May 2024 18:45:59 +0000 Manifest this update: Sat 18 May 2024 18:45:58 +0000 Manifest next update: Sat 25 May 2024 18:45:58 +0000 Files and hashes: 1: t0bN0xcqIBHwIYn_La14fSnAEek.crl (hash: bbxsC0xyDhthx8dEUEcLQZBsa3sI5mm7uFCjH+5OELE=) 2: F8AC3DD8DB9111E9B70EDD2EC4F9AE02.roa (hash: d0zmRTZZFiPHi857cwhVqd99eYG426DFoXz+8wiqEgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.crl rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3317 (0xcf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1B92/serialNumber=B746CDD3172A2011F02189FF2DAD787D29C011E9 Validity Not Before: May 18 18:45:58 2024 GMT Not After : May 25 18:45:58 2024 GMT Subject: CN=6648f767-3e85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9b:8a:48:cb:d0:24:ab:6e:55:4d:0a:c3:eb: 0d:87:a6:17:33:9e:d6:f5:e4:a0:56:91:8f:d7:0a: b9:a6:b0:9d:b8:09:9e:44:f9:fd:a0:c6:6c:04:15: 44:ab:bc:59:8d:50:aa:6a:1b:5f:7d:88:ba:ee:01: e1:cf:d2:12:ac:e2:98:e0:43:a5:bd:c4:ac:8c:0a: 49:66:07:e1:ce:bf:d1:1c:a5:47:d5:13:8f:fc:8a: 33:83:24:b3:55:2b:ea:98:ff:02:a4:27:30:81:40: 67:d3:2b:77:f6:e2:16:95:3c:b8:a1:62:66:54:18: ae:3c:ec:65:e1:d1:6d:de:41:6c:12:27:03:96:77: a8:ac:b8:be:11:ca:a4:02:ba:4e:b9:66:bf:9e:bd: e6:f6:48:54:ce:2a:d9:58:46:c2:a3:fa:62:e2:05: 56:66:a5:93:bc:a1:31:43:bf:50:f9:4e:81:85:c6: a1:a5:bc:fd:5f:ea:d2:7d:56:dc:fd:b8:7f:19:ed: ec:eb:8a:73:d9:c2:e1:06:e3:8b:79:4c:af:10:f4: c1:87:c2:d2:4f:66:be:b0:03:87:d6:d1:fc:07:75: 53:02:3b:54:c7:3e:9c:9e:8c:89:9d:5d:ce:dc:f7: ba:25:1d:f2:6c:b1:17:58:cf:75:20:a7:a5:bd:a1: cb:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B9:E5:85:5F:D9:03:F3:D1:82:4E:F4:CF:DB:42:B0:64:1C:7F:BD X509v3 Authority Key Identifier: keyid:B7:46:CD:D3:17:2A:20:11:F0:21:89:FF:2D:AD:78:7D:29:C0:11:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:36:e5:b9:57:de:81:2e:af:5d:05:00:30:97:24:b2:8b:5c: ca:8c:66:3d:ef:ad:1a:8d:33:c0:68:ad:4d:bd:9d:f0:53:ac: 2c:5e:d7:79:34:5f:ca:b6:b7:db:b4:af:dc:6e:61:68:40:fc: e9:28:35:49:1f:82:5a:b2:4e:7c:4c:bc:c7:6e:84:d9:b4:64: e7:98:33:6f:2b:a7:08:f8:15:b5:bb:f6:ae:09:94:33:46:0c: 4d:73:91:1a:44:de:18:c0:bd:1f:0b:ab:8b:d5:95:f2:d8:1f: 3e:4d:6d:81:d8:60:38:21:3b:07:c1:02:33:ba:08:b3:49:1e: f2:9e:0c:15:ce:80:92:1b:62:2d:61:42:44:14:3b:4f:eb:91: cb:f1:01:80:78:31:4e:fb:55:9d:07:7b:ec:83:b0:ee:cb:33: f2:35:6c:9b:18:9b:f3:ce:f5:26:1d:a7:10:91:d9:57:a4:5d: 56:cf:c0:72:d4:ee:e0:b8:02:e2:b8:e2:8c:0a:cb:1f:a9:77: fe:fb:a4:47:59:41:0c:10:b6:cb:b6:3a:58:6d:16:9d:d4:06: 93:bb:18:54:43:51:c7:99:46:b1:4c:b2:7e:04:49:38:e8:dd: 65:ac:6c:89:c7:65:11:37:c8:a1:0e:ee:b2:8b:00:74:e9:c0: d2:12:1c:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFCOTIxMTAvBgNVBAUTKEI3NDZDREQzMTcyQTIwMTFGMDIxODlGRjJEQUQ3ODdE MjlDMDExRTkwHhcNMjQwNTE4MTg0NTU4WhcNMjQwNTI1MTg0NTU4WjAYMRYwFAYD VQQDEw02NjQ4Zjc2Ny0zZTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAspuKSMvQJKtuVU0Kw+sNh6YXM57W9eSgVpGP1wq5prCduAmeRPn9oMZsBBVE q7xZjVCqahtffYi67gHhz9ISrOKY4EOlvcSsjApJZgfhzr/RHKVH1ROP/IozgySz VSvqmP8CpCcwgUBn0yt39uIWlTy4oWJmVBiuPOxl4dFt3kFsEicDlneorLi+Ecqk ArpOuWa/nr3m9khUzirZWEbCo/pi4gVWZqWTvKExQ79Q+U6Bhcahpbz9X+rSfVbc /bh/Ge3s64pz2cLhBuOLeUyvEPTBh8LST2a+sAOH1tH8B3VTAjtUxz6cnoyJnV3O 3Pe6JR3ybLEXWM91IKelvaHLjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKG55YVf 2QPz0YJO9M/bQrBkHH+9MB8GA1UdIwQYMBaAFLdGzdMXKiAR8CGJ/y2teH0pwBHp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUI5Mi9BQUJGQzQ5QUJE NjAxMUU5OTU2QTBGMTlDNEY5QUUwMi90MGJOMHhjcUlCSHdJWW5fTGExNGZTbkFF ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QwYk4weGNxSUJId0lZbl9MYTE0ZlNuQUVlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUI5Mi9BQUJGQzQ5QUJENjAxMUU5OTU2QTBGMTlDNEY5QUUwMi90MGJOMHhjcUlC SHdJWW5fTGExNGZTbkFFZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNNuW5V96BLq9dBQAwlySyi1zKjGY9760ajTPAaK1NvZ3wU6wsXtd5 NF/KtrfbtK/cbmFoQPzpKDVJH4Jask58TLzHboTZtGTnmDNvK6cI+BW1u/auCZQz RgxNc5EaRN4YwL0fC6uL1ZXy2B8+TW2B2GA4ITsHwQIzugizSR7yngwVzoCSG2It YUJEFDtP65HL8QGAeDFO+1WdB3vsg7DuyzPyNWybGJvzzvUmHacQkdlXpF1Wz8By 1O7guALiuOKMCssfqXf++6RHWUEMELbLtjpYbRad1AaTuxhUQ1HHmUaxTLJ+BEk4 6N1lrGyJx2URN8ihDu6yiwB06cDSEhyu -----END CERTIFICATE-----Generated at Sat May 18 20:16:06 2024 by rpki-client on console-ams.rpki-client.org