$ rpki-client -vvf rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft File: 92dQUVu3YtGADFrmxsLbJP6VLQI.mft (raw, json) Hash identifier: 0DHwZ2SYVEoo66EWFHakF01evzu9HpBuVGtNTqjSHYE= Subject key identifier: 43:5B:C9:C3:C4:3D:4E:C7:E0:15:C2:1B:2F:2D:1F:2C:0F:B6:58:81 Authority key identifier: F7:67:50:51:5B:B7:62:D1:80:0C:5A:E6:C6:C2:DB:24:FE:95:2D:02 Certificate issuer: /CN=A91C83EA/serialNumber=F76750515BB762D1800C5AE6C6C2DB24FE952D02 Certificate serial: 29C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft Manifest number: 29B4 Signing time: Sat 18 May 2024 15:51:16 +0000 Manifest this update: Sat 18 May 2024 15:51:16 +0000 Manifest next update: Sat 25 May 2024 15:51:16 +0000 Files and hashes: 1: 92dQUVu3YtGADFrmxsLbJP6VLQI.crl (hash: 7mYNvO4XDIzHd70yrAGgLEd259spRFwdA0IHH73oXG4=) 2: 2ED1150C561D11E7B003DF26C4F9AE02.roa (hash: 4oR1w97MW2XXfha42d/ChZIX7GukMGo+Z3wi4PaFXKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.crl rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10697 (0x29c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C83EA/serialNumber=F76750515BB762D1800C5AE6C6C2DB24FE952D02 Validity Not Before: May 18 15:51:16 2024 GMT Not After : May 25 15:51:16 2024 GMT Subject: CN=6648ce74-a24f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:56:03:5b:ef:45:c8:77:c3:6f:b8:f1:a9:c3: e4:57:60:d4:fe:39:e8:cb:3e:0d:80:07:e3:9f:22: 80:5d:7e:06:f1:9f:74:83:1f:c3:cb:a6:0f:05:e8: 4b:0d:fa:19:ec:fe:a9:c0:96:51:c2:23:a5:95:d0: 7a:ab:ea:f8:74:21:bf:c6:ac:16:5a:b8:d0:57:8b: f5:b4:fc:01:e5:05:f2:2a:19:7c:8c:c4:f7:d6:c1: 93:dd:d5:60:f4:77:57:94:be:d6:70:10:bc:70:57: c2:2f:7c:65:de:aa:08:35:0a:f8:e7:3f:ef:6e:75: 91:03:93:9a:2a:8f:63:8f:6e:9c:b6:e3:a8:d4:ea: b6:ee:00:e4:c7:5f:bf:31:43:45:90:f0:5f:45:b2: ec:81:e6:24:a0:36:19:68:62:22:2e:d1:54:fe:cf: eb:55:d1:4b:50:87:60:20:b1:d1:b3:9c:b7:8b:f6: e4:a0:6a:56:81:3b:ba:be:a6:9d:50:02:7c:d5:8a: b5:66:f8:f0:9c:0b:9e:36:38:96:ec:be:77:d3:f0: 22:27:e6:a2:f1:37:55:9c:94:c6:49:5a:8e:f4:2a: fe:1c:a6:88:f0:48:e1:55:d2:ef:26:5f:c2:ce:d7: fc:42:eb:32:52:5c:e5:08:dd:b5:76:b5:c0:18:81: b9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:5B:C9:C3:C4:3D:4E:C7:E0:15:C2:1B:2F:2D:1F:2C:0F:B6:58:81 X509v3 Authority Key Identifier: keyid:F7:67:50:51:5B:B7:62:D1:80:0C:5A:E6:C6:C2:DB:24:FE:95:2D:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:c6:f6:c3:12:b8:b0:d4:aa:8c:b9:0a:14:e4:21:ad:c0:d3: 98:64:04:fc:70:ee:1c:d1:a3:06:ea:58:6d:a2:7f:80:f1:77: 9b:62:66:d5:64:16:f2:ef:00:62:aa:9a:35:72:31:3d:b5:ef: 3d:57:bb:1f:de:69:73:50:30:a3:6b:b2:12:dc:9b:0d:25:01: d0:64:8b:ee:84:b0:57:d8:4e:e5:0e:05:36:8c:9b:1c:72:15: db:d9:9f:6a:11:b0:f0:89:b1:00:4c:49:d6:11:ac:ba:d5:ed: 5a:70:69:45:56:b7:55:b6:25:eb:a4:75:f5:63:38:09:12:93: 71:e5:43:6e:3f:8d:9b:08:bb:1f:5d:5d:d6:d7:1c:e3:e6:bd: 73:5a:c1:43:e0:75:b8:14:6b:ed:ad:e3:4d:1d:fe:d3:2e:6b: 3e:b9:59:fc:fc:61:0a:ee:4d:cc:87:a7:59:06:fb:ba:a9:d4: 1e:f5:36:13:95:95:fe:3f:2f:cb:77:7c:76:c0:83:8e:cf:ed: a2:4a:5f:f9:36:f4:ed:8f:d1:06:89:b0:0b:a0:e2:81:ce:e1: 58:23:7a:fd:80:9b:f9:4f:cc:b0:8b:f2:df:1b:32:43:c4:0c: 7f:e1:ae:7e:89:e6:b7:de:01:54:71:63:f4:91:32:ac:35:b5: 27:05:ca:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgzRUExMTAvBgNVBAUTKEY3Njc1MDUxNUJCNzYyRDE4MDBDNUFFNkM2QzJEQjI0 RkU5NTJEMDIwHhcNMjQwNTE4MTU1MTE2WhcNMjQwNTI1MTU1MTE2WjAYMRYwFAYD VQQDEw02NjQ4Y2U3NC1hMjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFYDW+9FyHfDb7jxqcPkV2DU/jnoyz4NgAfjnyKAXX4G8Z90gx/Dy6YPBehL DfoZ7P6pwJZRwiOlldB6q+r4dCG/xqwWWrjQV4v1tPwB5QXyKhl8jMT31sGT3dVg 9HdXlL7WcBC8cFfCL3xl3qoINQr45z/vbnWRA5OaKo9jj26ctuOo1Oq27gDkx1+/ MUNFkPBfRbLsgeYkoDYZaGIiLtFU/s/rVdFLUIdgILHRs5y3i/bkoGpWgTu6vqad UAJ81Yq1ZvjwnAueNjiW7L530/AiJ+ai8TdVnJTGSVqO9Cr+HKaI8EjhVdLvJl/C ztf8QusyUlzlCN21drXAGIG5PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFENbycPE PU7H4BXCGy8tHywPtliBMB8GA1UdIwQYMBaAFPdnUFFbt2LRgAxa5sbC2yT+lS0C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODNFQS9EODJDNjFFODFD NDUxMUU0OTRBNzZGMUJDNEY5QUUwMi85MmRRVVZ1M1l0R0FERnJteHNMYkpQNlZM UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkyZFFVVnUzWXRHQURGcm14c0xiSlA2VkxRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODNFQS9EODJDNjFFODFDNDUxMUU0OTRBNzZGMUJDNEY5QUUwMi85MmRRVVZ1M1l0 R0FERnJteHNMYkpQNlZMUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtxvbDEriw1KqMuQoU5CGtwNOYZAT8cO4c0aMG6lhton+A8XebYmbV ZBby7wBiqpo1cjE9te89V7sf3mlzUDCja7IS3JsNJQHQZIvuhLBX2E7lDgU2jJsc chXb2Z9qEbDwibEATEnWEay61e1acGlFVrdVtiXrpHX1YzgJEpNx5UNuP42bCLsf XV3W1xzj5r1zWsFD4HW4FGvtreNNHf7TLms+uVn8/GEK7k3Mh6dZBvu6qdQe9TYT lZX+Py/Ld3x2wIOOz+2iSl/5NvTtj9EGibALoOKBzuFYI3r9gJv5T8ywi/LfGzJD xAx/4a5+iea33gFUcWP0kTKsNbUnBcrV -----END CERTIFICATE-----Generated at Sat May 18 17:20:36 2024 by rpki-client on console-ams.rpki-client.org