$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft File: b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft (raw, json) Hash identifier: GgoZefC+GcwU/lsyZRdNUBdG6r3KVxd4TbSXyzP/etE= Subject key identifier: 06:E6:19:04:BC:68:B7:4D:14:77:D5:3C:4F:21:3A:BC:AE:A2:03:14 Authority key identifier: 6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3 Certificate issuer: /CN=A91CBE4E/serialNumber=6FF1A24E7F54F2EF0C605E0E06FC8A46C544D6D3 Certificate serial: 83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft Manifest number: 81 Signing time: Sun 19 May 2024 07:12:46 +0000 Manifest this update: Sun 19 May 2024 07:12:45 +0000 Manifest next update: Sun 26 May 2024 07:12:45 +0000 Files and hashes: 1: b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl (hash: aXiqqIccZitNyxHUGlX9ygHvtghb+kApPEoTiGFZNQs=) 2: 089A55E052CB11EEB275AA16C4F9AE02.roa (hash: ax1bHy7X34iXLX07N6LNxeI0vXjEjPqhN5RKN4nqXaY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBE4E/serialNumber=6FF1A24E7F54F2EF0C605E0E06FC8A46C544D6D3 Validity Not Before: May 19 07:12:45 2024 GMT Not After : May 26 07:12:45 2024 GMT Subject: CN=6649a66e-3124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8d:b3:54:35:c9:3d:47:9b:a7:30:00:69:d0: c5:f7:2b:7c:43:8a:22:5b:3b:68:88:e6:b7:92:11: ed:3f:5a:f8:a1:53:dc:0c:79:64:6e:83:10:d9:8b: c3:49:12:7a:ab:74:a2:c8:2c:a1:9a:f7:ea:da:51: fc:18:5b:ca:43:6d:c7:61:c1:4d:9b:78:3a:cc:f2: 96:f2:83:93:ee:52:b0:35:d8:72:e3:16:07:0a:09: 0f:54:6d:4a:9e:05:e9:9a:e8:b4:d3:35:93:06:4b: 2a:79:6b:50:3f:de:94:ef:18:c5:36:58:7a:68:0c: 75:e1:f5:02:32:c8:5d:02:16:6f:ad:7e:9b:2e:34: 3d:ea:19:c1:53:10:dc:e5:e9:54:62:c2:87:58:57: 82:9c:bf:76:3c:4c:24:35:18:1c:80:1b:66:4c:fe: b1:44:15:b8:ee:87:b5:de:2a:b8:44:5b:ef:91:89: 39:cb:77:f9:a3:66:af:c1:c5:99:52:b4:bc:3a:1e: 56:7a:e4:95:29:b5:1b:e0:98:04:9c:3b:34:ee:3d: 33:3c:cc:76:b7:2b:1d:cd:ad:9a:d7:32:4d:d4:3d: 09:c8:5e:25:8a:83:6c:71:52:1d:e0:91:0a:17:83: 3f:28:89:ab:48:ca:b4:bf:0e:29:2a:78:53:cc:06: cd:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E6:19:04:BC:68:B7:4D:14:77:D5:3C:4F:21:3A:BC:AE:A2:03:14 X509v3 Authority Key Identifier: keyid:6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:75:ad:5c:91:6a:d3:c7:bc:8c:ca:92:47:f2:dd:28:30:b5: 3a:cf:b8:3a:16:bd:62:a7:b6:34:53:d3:da:ae:7e:32:47:97: c4:c8:62:86:ce:f0:4b:5a:fa:88:b6:55:01:8b:35:c7:87:30: 0b:ff:80:f6:65:3b:3a:21:e8:f2:4f:2e:05:ce:5b:7f:03:8b: 4f:c2:9c:e3:23:86:24:90:a5:36:26:00:78:d0:6a:e5:3f:9e: 21:6e:cd:90:96:ae:87:08:58:17:62:10:d5:d3:d1:16:b5:89: f6:64:e1:a3:48:8f:a9:30:46:cb:11:42:55:6b:80:e7:da:3a: 95:fc:54:ef:67:a5:ad:e6:25:64:78:14:07:ed:4e:a0:33:fb: d8:c4:ec:a9:6a:e5:24:1f:58:7e:11:82:39:5d:98:52:b9:c4: 33:a2:90:77:2e:17:11:f0:ef:ed:6c:ce:9a:3d:90:dc:67:0a: 1c:ea:8a:29:c2:0c:7a:d1:61:07:7d:5a:0a:10:ed:a5:36:42: 2a:1c:7d:f2:d5:47:0d:3c:94:a8:e7:14:9a:79:94:c1:3b:ad: 3d:ac:e6:cd:3f:5b:df:d5:95:13:2d:d7:90:ac:e2:69:0a:09: 57:bf:38:1f:62:65:46:ca:8d:7e:0f:60:e9:24:8e:69:4a:b8: e1:d8:32:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JFNEUxMTAvBgNVBAUTKDZGRjFBMjRFN0Y1NEYyRUYwQzYwNUUwRTA2RkM4QTQ2 QzU0NEQ2RDMwHhcNMjQwNTE5MDcxMjQ1WhcNMjQwNTI2MDcxMjQ1WjAYMRYwFAYD VQQDEw02NjQ5YTY2ZS0zMTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm42zVDXJPUebpzAAadDF9yt8Q4oiWztoiOa3khHtP1r4oVPcDHlkboMQ2YvD SRJ6q3SiyCyhmvfq2lH8GFvKQ23HYcFNm3g6zPKW8oOT7lKwNdhy4xYHCgkPVG1K ngXpmui00zWTBksqeWtQP96U7xjFNlh6aAx14fUCMshdAhZvrX6bLjQ96hnBUxDc 5elUYsKHWFeCnL92PEwkNRgcgBtmTP6xRBW47oe13iq4RFvvkYk5y3f5o2avwcWZ UrS8Oh5WeuSVKbUb4JgEnDs07j0zPMx2tysdza2a1zJN1D0JyF4lioNscVId4JEK F4M/KImrSMq0vw4pKnhTzAbNqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAbmGQS8 aLdNFHfVPE8hOryuogMUMB8GA1UdIwQYMBaAFG/xok5/VPLvDGBeDgb8ikbFRNbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkU0RS9EQjAzRjY1QTUy QzkxMUVFOTAzMjhGMTRDNEY5QUUwMi9iX0dpVG45VTh1OE1ZRjRPQnZ5S1JzVkUx dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfR2lUbjlVOHU4TVlGNE9CdnlLUnNWRTF0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkU0RS9EQjAzRjY1QTUyQzkxMUVFOTAzMjhGMTRDNEY5QUUwMi9iX0dpVG45VTh1 OE1ZRjRPQnZ5S1JzVkUxdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTda1ckWrTx7yMypJH8t0oMLU6z7g6Fr1ip7Y0U9Parn4yR5fEyGKG zvBLWvqItlUBizXHhzAL/4D2ZTs6IejyTy4Fzlt/A4tPwpzjI4YkkKU2JgB40Grl P54hbs2Qlq6HCFgXYhDV09EWtYn2ZOGjSI+pMEbLEUJVa4Dn2jqV/FTvZ6Wt5iVk eBQH7U6gM/vYxOypauUkH1h+EYI5XZhSucQzopB3LhcR8O/tbM6aPZDcZwoc6oop wgx60WEHfVoKEO2lNkIqHH3y1UcNPJSo5xSaeZTBO609rObNP1vf1ZUTLdeQrOJp CglXvzgfYmVGyo1+D2DpJI5pSrjh2DJm -----END CERTIFICATE-----Generated at Sun May 19 08:25:08 2024 by rpki-client on console-ams.rpki-client.org