$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/92beXsvKeWcFK5bbbxeCvY_abXQ.mft File: 92beXsvKeWcFK5bbbxeCvY_abXQ.mft (raw, json) Hash identifier: bRcvTtWmZLwRzMQP40X/7ygPb3CrC4vxfITYpRm4+JQ= Subject key identifier: B5:BC:7D:D8:1C:0E:5B:0D:70:6C:D3:55:32:51:63:5E:A4:37:91:0A Authority key identifier: F7:66:DE:5E:CB:CA:79:67:05:2B:96:DB:6F:17:82:BD:8F:DA:6D:74 Certificate issuer: /CN=A91C9670/serialNumber=F766DE5ECBCA7967052B96DB6F1782BD8FDA6D74 Certificate serial: 048E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92beXsvKeWcFK5bbbxeCvY_abXQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/92beXsvKeWcFK5bbbxeCvY_abXQ.mft Manifest number: 0484 Signing time: Sun 19 May 2024 01:38:52 +0000 Manifest this update: Sun 19 May 2024 01:38:52 +0000 Manifest next update: Sun 26 May 2024 01:38:52 +0000 Files and hashes: 1: 92beXsvKeWcFK5bbbxeCvY_abXQ.crl (hash: vDsCRweN+jKaKtOlcHoR88BrTnN1dNz5s17kfDmMzks=) 2: E2663F929C9511ED8014F84CC4F9AE02.roa (hash: ZDZ8AE6u93UpfzZLuAEDW0C4qVyJLeRqdGE15jbnwd0=) 3: E14490BE9C9511ED8014F84CC4F9AE02.roa (hash: /MgtQcweIAcBhK7+0nnabZoBWUotTZ+eRWCRE/XqRM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/92beXsvKeWcFK5bbbxeCvY_abXQ.crl rsync://rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/92beXsvKeWcFK5bbbxeCvY_abXQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92beXsvKeWcFK5bbbxeCvY_abXQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1166 (0x48e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9670/serialNumber=F766DE5ECBCA7967052B96DB6F1782BD8FDA6D74 Validity Not Before: May 19 01:38:52 2024 GMT Not After : May 26 01:38:52 2024 GMT Subject: CN=6649582c-0784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:dc:0c:92:76:38:6f:93:f7:98:fe:20:d9:94: a0:e8:62:a6:ff:2f:da:b4:81:8e:4d:b9:5c:46:c6: 54:09:da:85:39:68:72:85:2d:52:42:26:eb:d8:71: 3b:6f:19:77:18:ff:f7:48:f3:60:83:97:81:f9:51: 01:ea:ac:46:98:0a:24:fd:c4:7e:aa:12:0f:25:d0: 11:e6:b3:e5:74:04:fd:99:11:d4:64:02:d5:2d:50: c4:a3:2b:1c:00:85:61:8c:95:3e:57:fd:a9:91:69: e1:d5:0e:14:3c:67:fd:e7:57:fa:dd:f4:08:a8:62: 73:53:4e:c1:3e:a7:37:80:de:5f:7e:14:95:b6:32: ae:b9:01:fc:46:00:b5:67:c2:89:80:73:0f:3c:b5: a6:14:74:74:6f:7d:7e:e9:13:a4:b5:58:00:2d:ec: a0:fa:64:ee:97:95:86:7d:e4:c8:9f:f3:3d:a1:e4: e8:f9:27:c9:3e:a8:7f:b7:e3:40:a7:ec:b2:37:24: 6a:04:ad:2d:30:1a:1c:78:ad:0e:c0:62:fb:30:a5: cb:0c:2a:09:5f:e0:08:a7:9e:7e:a5:cb:75:6c:6f: b9:91:d7:fb:00:21:f8:66:09:f1:9c:e7:98:a0:6b: 77:98:cd:cb:ce:4c:59:6d:d7:cb:11:b7:32:c9:2e: 1f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:BC:7D:D8:1C:0E:5B:0D:70:6C:D3:55:32:51:63:5E:A4:37:91:0A X509v3 Authority Key Identifier: keyid:F7:66:DE:5E:CB:CA:79:67:05:2B:96:DB:6F:17:82:BD:8F:DA:6D:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/92beXsvKeWcFK5bbbxeCvY_abXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92beXsvKeWcFK5bbbxeCvY_abXQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/92beXsvKeWcFK5bbbxeCvY_abXQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:51:c4:03:46:aa:8b:a9:33:b9:5f:7e:d7:a3:4c:10:0d:6d: 54:54:6c:69:02:f6:42:b2:5a:b2:84:4e:42:3c:b2:ea:33:9d: 2d:a5:65:50:4b:8b:6f:03:b6:e6:c6:35:23:9a:0f:79:b0:b0: 84:45:41:d2:2a:84:9d:e1:71:f9:83:3f:a1:ff:66:c0:78:02: ee:84:12:42:19:93:89:23:95:30:7d:4c:dc:1a:06:ba:34:15: 1d:f7:7f:c8:f3:8e:31:1c:39:dd:45:a9:76:fd:56:c4:48:0d: 03:b6:e2:82:83:b0:a6:3d:dd:72:96:69:17:a1:0c:c1:56:00: 99:ae:ed:dc:09:dc:ee:8e:ed:6a:ea:41:9c:ff:de:71:25:24: 2f:ba:bf:95:52:c0:e3:2f:16:11:94:d5:ef:19:fc:2d:78:c2: 86:1d:82:ce:6a:4d:ca:b1:b1:a8:c6:4e:6a:f9:33:ef:d8:29: b0:0f:be:ac:0e:b8:1d:fa:9f:75:63:64:35:7e:a3:00:6f:a6: f5:ed:1b:7d:ac:b9:80:a4:97:60:0e:bc:3f:21:52:1b:77:fb: 95:23:2b:c7:54:26:75:15:ad:b8:33:18:93:92:cc:0d:64:0e: bf:1f:39:93:69:9f:28:e5:39:1d:28:34:56:48:ee:f9:96:f6: eb:1c:6e:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk2NzAxMTAvBgNVBAUTKEY3NjZERTVFQ0JDQTc5NjcwNTJCOTZEQjZGMTc4MkJE OEZEQTZENzQwHhcNMjQwNTE5MDEzODUyWhcNMjQwNTI2MDEzODUyWjAYMRYwFAYD VQQDEw02NjQ5NTgyYy0wNzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyNwMknY4b5P3mP4g2ZSg6GKm/y/atIGOTblcRsZUCdqFOWhyhS1SQibr2HE7 bxl3GP/3SPNgg5eB+VEB6qxGmAok/cR+qhIPJdAR5rPldAT9mRHUZALVLVDEoysc AIVhjJU+V/2pkWnh1Q4UPGf951f63fQIqGJzU07BPqc3gN5ffhSVtjKuuQH8RgC1 Z8KJgHMPPLWmFHR0b31+6ROktVgALeyg+mTul5WGfeTIn/M9oeTo+SfJPqh/t+NA p+yyNyRqBK0tMBoceK0OwGL7MKXLDCoJX+AIp55+pct1bG+5kdf7ACH4ZgnxnOeY oGt3mM3LzkxZbdfLEbcyyS4fjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLW8fdgc DlsNcGzTVTJRY16kN5EKMB8GA1UdIwQYMBaAFPdm3l7LynlnBSuW228Xgr2P2m10 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTY3MC81OTQwNDg5Q0Yz ODcxMUVCODcyQzAxMkJDNEY5QUUwMi85MmJlWHN2S2VXY0ZLNWJiYnhlQ3ZZX2Fi WFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkyYmVYc3ZLZVdjRks1YmJieGVDdllfYWJYUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTY3MC81OTQwNDg5Q0YzODcxMUVCODcyQzAxMkJDNEY5QUUwMi85MmJlWHN2S2VX Y0ZLNWJiYnhlQ3ZZX2FiWFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClUcQDRqqLqTO5X37Xo0wQDW1UVGxpAvZCslqyhE5CPLLqM50tpWVQ S4tvA7bmxjUjmg95sLCERUHSKoSd4XH5gz+h/2bAeALuhBJCGZOJI5UwfUzcGga6 NBUd93/I844xHDndRal2/VbESA0DtuKCg7CmPd1ylmkXoQzBVgCZru3cCdzuju1q 6kGc/95xJSQvur+VUsDjLxYRlNXvGfwteMKGHYLOak3KsbGoxk5q+TPv2CmwD76s Drgd+p91Y2Q1fqMAb6b17Rt9rLmApJdgDrw/IVIbd/uVIyvHVCZ1Fa24MxiTkswN ZA6/HzmTaZ8o5TkdKDRWSO75lvbrHG56 -----END CERTIFICATE-----Generated at Sun May 19 02:59:14 2024 by rpki-client on console-ams.rpki-client.org