$ rpki-client -vvf rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft File: baE3ApweGgauD6j3W7iPLKV4-Fo.mft (raw, json) Hash identifier: m6f+qPflNHvSd3weMUAwYeUATARLov24tjXrOneYGTI= Subject key identifier: 84:00:28:85:E0:91:3B:E6:08:F9:10:39:91:CB:98:9D:E5:9F:61:6E Authority key identifier: 6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A Certificate issuer: /CN=A91C46FC/serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A Certificate serial: 09BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft Manifest number: 09A9 Signing time: Sat 18 May 2024 20:51:16 +0000 Manifest this update: Sat 18 May 2024 20:51:15 +0000 Manifest next update: Sat 25 May 2024 20:51:15 +0000 Files and hashes: 1: baE3ApweGgauD6j3W7iPLKV4-Fo.crl (hash: MM4O+N5FcIiKfIHCtVbTVbsXReTc5vuqOSgrJoqDUYs=) 2: F450F110AAFE11EAAF572C5EC4F9AE02.roa (hash: M+Tax7VG5rWwMeFmLKAhTKuNTWFgY09O4MxcZyAINIM=) 3: FB648B80F9DD11EC85C44880C4F9AE02.roa (hash: atmi78TUPnJSElHg9rmGVGz4tW8Pja2ubn4FGuQeO3A=) 4: 04D48448620C11EA9F85A781C4F9AE02.roa (hash: JiElKZX5FAky3YUtr16s6rTxBUIiCodYWGxVZrlNjio=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2491 (0x9bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C46FC/serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A Validity Not Before: May 18 20:51:15 2024 GMT Not After : May 25 20:51:15 2024 GMT Subject: CN=664914c4-bfc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cc:a2:9d:2c:de:9a:1b:4a:0e:12:cc:f4:9c: cd:f1:b5:ed:7a:07:4c:ce:25:0c:c7:63:de:f3:65: 43:d2:6a:10:e2:59:68:bc:b9:82:69:45:65:20:dd: c4:80:8b:e1:cb:5e:bb:85:71:49:c0:b5:bd:c9:34: 87:fc:7f:04:45:71:46:aa:45:16:55:89:e8:28:12: 9c:61:f6:04:e1:7b:4a:99:6a:a2:18:8a:c6:51:ed: 5a:a7:ad:9d:23:22:5c:18:f3:c6:9b:e1:91:c2:b6: aa:3d:5c:23:78:86:27:52:d7:a9:03:f6:67:f2:e5: fb:94:6f:15:b5:1a:df:78:c4:ad:fd:7d:9a:98:42: 8c:f6:57:bf:3d:7a:dd:98:e1:f9:ad:5b:72:94:d8: 9c:87:68:c5:c9:3f:cc:bb:58:be:3e:1a:2b:97:fc: 59:d6:20:bc:eb:48:b6:29:e6:cc:30:2b:c0:65:4a: ff:8e:a9:91:1e:2a:97:dc:ce:d5:a0:1c:9e:97:3b: ca:54:b6:e2:ba:1e:c4:8e:4a:83:3c:25:7d:96:45: 83:c1:c2:be:27:f3:4b:b5:ba:d5:f7:3d:4e:7b:e7: f0:9d:53:18:5b:69:77:56:a3:f7:7f:f7:35:ca:ec: 1a:13:31:90:d4:02:99:8a:b4:e0:96:7d:bb:d7:84: c7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:00:28:85:E0:91:3B:E6:08:F9:10:39:91:CB:98:9D:E5:9F:61:6E X509v3 Authority Key Identifier: keyid:6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:70:c4:1e:66:62:9d:a5:8f:33:03:1d:0d:c0:2f:2c:87:e8: bb:7f:a5:b2:fc:69:10:fc:0e:f8:e8:29:b8:88:19:68:d9:bd: 52:06:6c:3a:47:6e:a4:cb:2f:f8:fe:c9:21:c0:4b:eb:e5:a7: 7c:32:8b:dd:32:0b:18:6c:77:d9:66:08:a4:fb:b2:5c:df:01: e4:30:79:ec:cf:60:96:11:d3:cb:33:9d:43:6d:8f:06:31:9c: 44:be:a2:79:75:6a:20:93:3b:89:f3:cc:87:b0:0d:2a:7a:7b: c9:a1:37:a7:77:d1:8c:97:f6:e9:e3:c0:f0:10:d2:8e:74:9d: e9:a9:73:9a:c4:17:b1:10:b9:ca:18:e2:bd:b1:19:8c:3a:8f: 42:80:a5:2e:52:4d:d1:cd:5e:33:53:0c:eb:40:e6:aa:61:41: fb:69:03:79:5b:eb:01:f7:ab:b6:04:df:73:cd:9b:bb:88:c2: 3a:cd:9f:a2:e1:fd:24:54:a3:3a:58:bb:56:09:95:04:9e:73: 08:0e:f9:6e:82:42:4e:39:c8:a5:bd:26:04:49:25:24:60:17: a9:2a:b6:c5:99:12:f1:50:ec:c5:72:4f:8a:87:68:f4:0f:68: d7:d0:9f:5b:bf:63:8f:b5:a2:c3:2b:e5:dd:4d:0b:fd:44:cb: 12:16:16:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ2RkMxMTAvBgNVBAUTKDZEQTEzNzAyOUMxRTFBMDZBRTBGQThGNzVCQjg4RjJD QTU3OEY4NUEwHhcNMjQwNTE4MjA1MTE1WhcNMjQwNTI1MjA1MTE1WjAYMRYwFAYD VQQDEw02NjQ5MTRjNC1iZmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArMyinSzemhtKDhLM9JzN8bXtegdMziUMx2Pe82VD0moQ4llovLmCaUVlIN3E gIvhy167hXFJwLW9yTSH/H8ERXFGqkUWVYnoKBKcYfYE4XtKmWqiGIrGUe1ap62d IyJcGPPGm+GRwraqPVwjeIYnUtepA/Zn8uX7lG8VtRrfeMSt/X2amEKM9le/PXrd mOH5rVtylNich2jFyT/Mu1i+Phorl/xZ1iC860i2KebMMCvAZUr/jqmRHiqX3M7V oByelzvKVLbiuh7EjkqDPCV9lkWDwcK+J/NLtbrV9z1Oe+fwnVMYW2l3VqP3f/c1 yuwaEzGQ1AKZirTgln2714THMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQAKIXg kTvmCPkQOZHLmJ3ln2FuMB8GA1UdIwQYMBaAFG2hNwKcHhoGrg+o91u4jyylePha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDZGQy8wRTg1MDVGMDYy MDUxMUVBQkFGRkUxNkJDNEY5QUUwMi9iYUUzQXB3ZUdnYXVENmozVzdpUExLVjQt Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhRTNBcHdlR2dhdUQ2ajNXN2lQTEtWNC1Gby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDZGQy8wRTg1MDVGMDYyMDUxMUVBQkFGRkUxNkJDNEY5QUUwMi9iYUUzQXB3ZUdn YXVENmozVzdpUExLVjQtRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTcMQeZmKdpY8zAx0NwC8sh+i7f6Wy/GkQ/A746Cm4iBlo2b1SBmw6 R26kyy/4/skhwEvr5ad8MovdMgsYbHfZZgik+7Jc3wHkMHnsz2CWEdPLM51DbY8G MZxEvqJ5dWogkzuJ88yHsA0qenvJoTend9GMl/bp48DwENKOdJ3pqXOaxBexELnK GOK9sRmMOo9CgKUuUk3RzV4zUwzrQOaqYUH7aQN5W+sB96u2BN9zzZu7iMI6zZ+i 4f0kVKM6WLtWCZUEnnMIDvlugkJOOcilvSYESSUkYBepKrbFmRLxUOzFck+Kh2j0 D2jX0J9bv2OPtaLDK+XdTQv9RMsSFhYp -----END CERTIFICATE-----Generated at Sat May 18 21:31:31 2024 by rpki-client on console-ams.rpki-client.org