$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft File: 8XD1e07KEpakIh1wemTkKYk7h9Q.mft (raw, json) Hash identifier: vaF/rjhqHqxlVYJarBOb3+e4+SQrXuXMqnYE5eEMjDY= Subject key identifier: F9:A0:7F:5F:0B:64:00:CC:5E:46:22:A4:0F:D5:CC:9E:A2:36:4F:CC Authority key identifier: F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4 Certificate issuer: /CN=A91C4F28/serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4 Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft Manifest number: 5A Signing time: Sun 19 May 2024 07:46:10 +0000 Manifest this update: Sun 19 May 2024 07:46:09 +0000 Manifest next update: Sun 26 May 2024 07:46:09 +0000 Files and hashes: 1: 8XD1e07KEpakIh1wemTkKYk7h9Q.crl (hash: fEE5N8bqxiFI9JLIrX/04B9ugdzGnm/29NxE+BcEU70=) 2: B59362A28D5C11EEADDC522EC4F9AE02.roa (hash: U1iKIhn+RPx+rD5AgF1tzZvG20IRrHp9nRZuh3D7zzQ=) 3: 6DAB109E8DF111EEA5BB4A1BC4F9AE02.roa (hash: P51d+Bkf7r+1HRm8wiTQGVSP6FQQzYCf10d/cp8/V38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F28/serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4 Validity Not Before: May 19 07:46:09 2024 GMT Not After : May 26 07:46:09 2024 GMT Subject: CN=6649ae41-c845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:38:52:3d:9d:de:43:4d:91:34:5f:63:cc:2b: de:05:86:0e:19:7d:94:b8:4c:e0:de:b6:fb:d0:71: 96:32:36:c4:30:31:19:27:2b:cd:d6:24:d5:ba:53: d2:8c:84:0d:a5:f4:39:ed:19:51:33:37:4c:a0:e1: 6b:60:ad:1c:a5:1c:e1:0a:c6:2c:77:a3:f0:56:e1: 1c:19:d1:da:78:1a:16:11:48:86:fd:b3:bb:41:56: 86:62:f5:0d:e7:0f:f5:c9:53:e3:84:a6:40:b3:da: 77:a9:32:13:65:5f:f8:a6:99:a3:dc:22:92:ea:1b: 9b:75:c8:f0:4d:93:2d:3c:0b:8b:26:7c:0e:c5:ab: a0:d6:ae:52:6c:61:69:6c:e1:b5:b1:27:8e:90:c2: 4c:a5:ef:a2:8a:af:75:92:63:16:2e:c5:15:5e:3f: 97:99:a9:94:19:55:b0:d5:02:0c:0b:e1:29:0f:16: c9:cd:03:0c:11:d1:f0:7d:71:3e:06:de:16:3d:9b: 15:3c:33:a7:ef:c2:a3:48:7a:21:65:c1:12:c5:58: 2f:ca:89:e7:37:ad:53:2c:ac:0a:27:7a:84:fc:5a: 69:21:57:ca:9e:c1:e2:ef:cb:ae:b5:38:31:55:2b: 62:3e:55:96:d5:6b:33:79:37:da:0a:ca:f2:5a:c3: 07:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A0:7F:5F:0B:64:00:CC:5E:46:22:A4:0F:D5:CC:9E:A2:36:4F:CC X509v3 Authority Key Identifier: keyid:F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:36:87:0f:c5:e8:1b:09:17:8c:4d:c3:66:4d:fd:57:54:39: 7f:06:dd:4e:1a:c2:39:ff:97:f0:ee:26:c1:2b:15:d4:1e:c7: 03:49:99:21:b7:cf:62:d2:b5:58:44:1b:31:f5:db:e9:ed:93: fb:37:93:2c:2c:fc:f7:d1:a1:86:0b:88:a4:ba:7a:d4:f4:f2: 6b:8a:45:16:90:25:b1:91:4d:ff:b0:e6:d9:88:73:f9:e5:49: d5:49:e7:80:b4:6e:e1:17:bf:89:d5:02:81:45:44:4a:cb:fd: 7e:14:de:e5:11:71:c9:a1:85:16:c3:47:52:72:00:e1:b1:5b: 22:5d:b5:51:16:0f:4d:38:ce:7b:8d:aa:08:68:68:5d:cf:08: 97:dc:85:5e:3e:a6:0a:bc:41:23:3a:0e:33:c7:fa:2b:47:29: da:f4:f8:1f:72:1e:b8:3b:95:6f:14:cc:3c:8f:3c:a8:ab:fa: d0:57:0a:67:c6:94:28:0c:89:05:17:90:28:41:e0:8b:ee:c1: 85:15:02:04:dc:61:51:74:6d:d7:d5:58:91:7f:35:41:7f:8e: 23:1f:ab:e1:d3:75:52:ae:18:78:6c:7d:d1:ab:a0:8f:33:c0: bb:60:6e:0e:07:2b:80:46:80:fa:45:d3:27:e1:78:38:a0:5a: 1b:67:7b:98 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NEYyODExMC8GA1UEBRMoRjE3MEY1N0I0RUNBMTI5NkE0MjIxRDcwN0E2NEU0Mjk4 OTNCODdENDAeFw0yNDA1MTkwNzQ2MDlaFw0yNDA1MjYwNzQ2MDlaMBgxFjAUBgNV BAMTDTY2NDlhZTQxLWM4NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAOFI9nd5DTZE0X2PMK94Fhg4ZfZS4TODetvvQcZYyNsQwMRknK83WJNW6U9KM hA2l9DntGVEzN0yg4WtgrRylHOEKxix3o/BW4RwZ0dp4GhYRSIb9s7tBVoZi9Q3n D/XJU+OEpkCz2nepMhNlX/immaPcIpLqG5t1yPBNky08C4smfA7Fq6DWrlJsYWls 4bWxJ46Qwkyl76KKr3WSYxYuxRVeP5eZqZQZVbDVAgwL4SkPFsnNAwwR0fB9cT4G 3hY9mxU8M6fvwqNIeiFlwRLFWC/Kiec3rVMsrAoneoT8WmkhV8qeweLvy661ODFV K2I+VZbVazN5N9oKyvJawwdpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+aB/Xwtk AMxeRiKkD9XMnqI2T8wwHwYDVR0jBBgwFoAU8XD1e07KEpakIh1wemTkKYk7h9Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0RjI4L0Y1N0ZEMEI4OEQ1 NjExRUU5Nzg3RTc4M0M0RjlBRTAyLzhYRDFlMDdLRXBha0loMXdlbVRrS1lrN2g5 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOFhEMWUwN0tFcGFrSWgxd2VtVGtLWWs3aDlRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0 RjI4L0Y1N0ZEMEI4OEQ1NjExRUU5Nzg3RTc4M0M0RjlBRTAyLzhYRDFlMDdLRXBh a0loMXdlbVRrS1lrN2g5US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGQ2hw/F6BsJF4xNw2ZN/VdUOX8G3U4awjn/l/DuJsErFdQexwNJmSG3 z2LStVhEGzH12+ntk/s3kyws/PfRoYYLiKS6etT08muKRRaQJbGRTf+w5tmIc/nl SdVJ54C0buEXv4nVAoFFRErL/X4U3uURccmhhRbDR1JyAOGxWyJdtVEWD004znuN qghoaF3PCJfchV4+pgq8QSM6DjPH+itHKdr0+B9yHrg7lW8UzDyPPKir+tBXCmfG lCgMiQUXkChB4IvuwYUVAgTcYVF0bdfVWJF/NUF/jiMfq+HTdVKuGHhsfdGroI8z wLtgbg4HK4BGgPpF0yfheDigWhtne5g= -----END CERTIFICATE-----Generated at Sun May 19 08:25:07 2024 by rpki-client on console-ams.rpki-client.org