$ rpki-client -vvf rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft File: dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft (raw, json) Hash identifier: JqQSwsJKAVUkmNWcthZ9PAd08/+W05ApxX1dM0v3n0M= Subject key identifier: EE:A3:C7:72:25:F9:13:E1:2D:A1:7C:31:0C:A2:10:F1:8B:86:E5:D6 Authority key identifier: 75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94 Certificate issuer: /CN=A91C72E6/serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94 Certificate serial: BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft Manifest number: BD Signing time: Sun 19 May 2024 06:22:52 +0000 Manifest this update: Sun 19 May 2024 06:22:52 +0000 Manifest next update: Sun 26 May 2024 06:22:52 +0000 Files and hashes: 1: dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl (hash: nfksHquEhqxrbK+mQD/ne3fyEMqPMyIGz42d9eCTdLc=) 2: 2340D07AF2F111ED91F08A4FC4F9AE02.roa (hash: NJPA2ug9v7ULpxFpnIiqCWjxYfxy+oFyEisS40VIQIg=) 3: 23EE2B76F2F111ED91F08A4FC4F9AE02.roa (hash: 4D2wEEASuC+DaTGly/YjUPgX8hODTmCI2sIITWQ6fMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C72E6/serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94 Validity Not Before: May 19 06:22:52 2024 GMT Not After : May 26 06:22:52 2024 GMT Subject: CN=66499abc-5e71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:90:93:c5:ca:68:69:92:a6:ae:60:c8:9a:4e: d8:57:7b:9a:13:45:26:cc:4d:2a:d7:c8:97:8f:82: 83:7e:89:d6:3f:45:e2:3e:c5:5b:a9:ad:cf:41:9f: 6f:c2:96:1d:84:b8:a2:df:30:fb:1b:46:aa:62:45: 3d:85:c1:24:d0:8a:03:6f:98:54:c7:fe:ca:8f:c1: 13:70:47:ee:23:87:0c:94:70:57:c2:2b:9c:a8:58: 88:6b:d2:37:3a:50:92:c4:f2:19:d2:50:41:c6:0d: 7c:45:a9:3a:60:e3:9f:de:11:5b:00:5c:35:32:bc: ce:33:85:83:f8:c7:57:43:19:82:e8:8b:e8:d0:7e: 46:cb:bd:b4:f1:58:c3:dd:58:3f:6b:f2:63:29:7d: bd:71:ad:69:54:b8:fa:96:1c:1a:29:7c:bd:d0:f6: 9c:1d:55:2d:cc:b2:0f:12:94:34:1f:bf:3a:10:c9: 00:b6:4a:78:73:ad:77:ae:77:49:f6:32:89:97:06: e4:1f:3d:b1:39:44:8e:3d:18:3b:f9:39:9c:e5:f1: 04:e1:31:a8:32:a4:d5:bb:b6:c4:be:b9:10:05:95: c3:f6:ef:23:b7:d3:91:4d:3b:3d:32:f0:d1:63:b8: 63:49:d4:0d:a9:f6:c7:20:dd:29:31:16:22:ab:99: 7f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A3:C7:72:25:F9:13:E1:2D:A1:7C:31:0C:A2:10:F1:8B:86:E5:D6 X509v3 Authority Key Identifier: keyid:75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:bc:be:4c:3a:45:b3:ab:84:d6:21:ab:67:fc:7f:0b:2e:78: 3d:4a:a2:72:3c:1d:cf:e9:7d:d5:0b:05:ec:c5:bc:89:6a:3e: c3:94:3e:00:ac:4a:5e:4f:6f:aa:99:e5:2c:fb:16:3a:fc:ba: f6:6e:16:e0:86:6a:ba:93:ee:b8:e1:0b:c3:cf:9f:77:5c:f3: c4:f0:d4:ec:20:bc:0a:0d:3d:c9:52:ab:da:52:4e:a2:92:b0: 76:fd:fa:df:54:c4:b1:2f:2a:23:b9:a6:57:e8:b6:fa:10:95: 2f:fc:d7:6e:21:33:44:b0:f7:c6:6a:7f:28:d2:e4:c7:51:66: 84:3c:f3:b8:fe:2a:85:e4:bc:7b:35:a5:fa:0b:36:dd:ee:e3: 05:e7:95:06:40:75:d0:f4:c4:d0:0f:bb:04:ce:a4:e7:4c:fc: 83:94:6b:14:84:7a:63:c3:2d:df:25:5c:25:ae:1e:0c:eb:d6: 03:45:ce:d9:76:14:bb:94:ee:19:27:80:4d:a2:8b:f5:48:05: db:5d:1a:c2:23:c1:d4:ff:e2:d8:ac:5c:b0:9d:19:8e:4f:8c: 3e:8b:e4:51:24:35:06:39:a1:bb:f5:65:78:14:5f:81:e2:7c: f8:bd:64:b6:f4:8e:e7:39:c5:b7:40:46:b2:2b:ff:7e:20:d8: a6:d1:2d:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcyRTYxMTAvBgNVBAUTKDc1MjUzM0IxODUyRjdEMkFDNkU3MERDREVCRkQ1NDdE REM0MzhGOTQwHhcNMjQwNTE5MDYyMjUyWhcNMjQwNTI2MDYyMjUyWjAYMRYwFAYD VQQDEw02NjQ5OWFiYy01ZTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnpCTxcpoaZKmrmDImk7YV3uaE0UmzE0q18iXj4KDfonWP0XiPsVbqa3PQZ9v wpYdhLii3zD7G0aqYkU9hcEk0IoDb5hUx/7Kj8ETcEfuI4cMlHBXwiucqFiIa9I3 OlCSxPIZ0lBBxg18Rak6YOOf3hFbAFw1MrzOM4WD+MdXQxmC6Ivo0H5Gy7208VjD 3Vg/a/JjKX29ca1pVLj6lhwaKXy90PacHVUtzLIPEpQ0H786EMkAtkp4c613rndJ 9jKJlwbkHz2xOUSOPRg7+Tmc5fEE4TGoMqTVu7bEvrkQBZXD9u8jt9ORTTs9MvDR Y7hjSdQNqfbHIN0pMRYiq5l/9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO6jx3Il +RPhLaF8MQyiEPGLhuXWMB8GA1UdIwQYMBaAFHUlM7GFL30qxucNzev9VH3cQ4+U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzJFNi9FNkU2RkIzMkYy RUExMUVEOTA5OTAwNEFDNEY5QUUwMi9kU1V6c1lVdmZTckc1dzNONl8xVWZkeERq NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RTVXpzWVV2ZlNyRzV3M042XzFVZmR4RGo1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzJFNi9FNkU2RkIzMkYyRUExMUVEOTA5OTAwNEFDNEY5QUUwMi9kU1V6c1lVdmZT ckc1dzNONl8xVWZkeERqNVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMvL5MOkWzq4TWIatn/H8LLng9SqJyPB3P6X3VCwXsxbyJaj7DlD4A rEpeT2+qmeUs+xY6/Lr2bhbghmq6k+644QvDz593XPPE8NTsILwKDT3JUqvaUk6i krB2/frfVMSxLyojuaZX6Lb6EJUv/NduITNEsPfGan8o0uTHUWaEPPO4/iqF5Lx7 NaX6Czbd7uMF55UGQHXQ9MTQD7sEzqTnTPyDlGsUhHpjwy3fJVwlrh4M69YDRc7Z dhS7lO4ZJ4BNoov1SAXbXRrCI8HU/+LYrFywnRmOT4w+i+RRJDUGOaG79WV4FF+B 4nz4vWS29I7nOcW3QEayK/9+INim0S33 -----END CERTIFICATE-----Generated at Sun May 19 08:25:07 2024 by rpki-client on console-ams.rpki-client.org