$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft File: ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft (raw, json) Hash identifier: NGOgKetvzbYGRdPn77D4VbcB96lEuapewYslOyhWnmY= Subject key identifier: AB:63:FF:62:C4:6E:5B:7A:A2:D6:8A:62:5D:DD:A4:52:E7:60:B9:E2 Authority key identifier: 72:D1:57:43:F5:9C:83:A5:C1:95:A5:E6:DB:1E:A4:64:76:34:BE:F7 Certificate issuer: /CN=A91CC1E9/serialNumber=72D15743F59C83A5C195A5E6DB1EA4647634BEF7 Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft Manifest number: CE Signing time: Fri 31 May 2024 07:03:36 +0000 Manifest this update: Fri 31 May 2024 07:03:35 +0000 Manifest next update: Fri 07 Jun 2024 07:03:35 +0000 Files and hashes: 1: ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl (hash: xc5JvIVUMWvjuxrGdKoNhHED7ONSQ9qnfVG8uGxcc4k=) 2: 2AB990CAF0A911ED80D2CB35C4F9AE02.roa (hash: h0OHHfyqua5aHyvIAMrPgr0AnTnOs5NGoLfx1yUR4Yw=) 3: F8F1CAD6F09D11ED96BA6D66C4F9AE02.roa (hash: pm/iT+02G+62pDwe2s4D7yK+mZHuZy8yyY7IKbX7Ek0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:03:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC1E9/serialNumber=72D15743F59C83A5C195A5E6DB1EA4647634BEF7 Validity Not Before: May 31 07:03:35 2024 GMT Not After : Jun 7 07:03:35 2024 GMT Subject: CN=66597647-bae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:7c:51:eb:8d:d0:77:1d:c8:9e:55:5e:39:a4: e5:3c:9b:6b:fa:de:82:87:ed:b4:32:ab:22:af:4b: c3:34:2d:d9:ba:1c:22:b7:3e:db:81:48:92:f4:3a: 07:9b:57:c7:17:e9:df:03:f9:83:f8:3a:eb:ba:b4: 55:26:a1:8e:57:4c:28:16:08:29:26:3a:d4:22:42: 9f:09:64:75:f6:e1:7c:a5:51:c4:ac:1e:9f:98:ba: 86:40:24:82:8e:53:68:cb:90:41:3e:dc:3c:06:5f: 17:ce:c5:36:1a:b7:bb:8f:8c:d7:21:07:d3:7b:e9: 52:9a:1c:1e:ce:81:2f:7e:97:df:bc:2d:99:cd:b0: 4f:50:62:89:8d:14:80:70:88:83:3a:37:12:8a:c9: 0d:7b:4b:a1:a0:3d:1e:45:19:d2:f5:68:d1:90:ed: 89:98:57:08:12:a8:f4:a4:48:a4:e2:24:db:63:0c: b0:17:96:dd:6b:57:04:e8:65:d3:ab:f8:3e:3b:bf: 2a:34:67:91:d6:a2:7a:f5:ae:07:ef:f5:d2:3f:90: 19:97:e4:1e:66:90:0d:0b:f7:33:84:24:5a:a2:e3: b6:ef:e5:73:f7:40:b1:1d:fc:a8:a4:8b:71:73:fe: 5f:04:09:40:1f:de:f2:c3:45:45:bf:43:03:73:31: cd:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:63:FF:62:C4:6E:5B:7A:A2:D6:8A:62:5D:DD:A4:52:E7:60:B9:E2 X509v3 Authority Key Identifier: keyid:72:D1:57:43:F5:9C:83:A5:C1:95:A5:E6:DB:1E:A4:64:76:34:BE:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:e4:de:16:bb:e8:14:34:75:8e:84:9e:2c:49:b0:e3:52:85: c1:f9:ff:e6:22:57:f4:5a:e9:a0:41:a2:1d:e7:01:10:df:c3: e7:12:04:b5:f0:45:6b:79:68:63:01:e8:31:b0:c7:22:24:22: cb:d6:ef:4f:c5:50:be:a6:2e:08:6f:7d:6e:89:12:ce:4e:30: d5:1e:95:3b:4c:81:69:9d:0a:6e:39:67:89:3e:c2:e2:66:fa: 62:42:8b:8c:8b:da:8a:7b:d7:9a:df:96:46:c8:58:6f:a9:44: b6:64:5b:10:74:a6:26:0f:52:a1:cc:66:be:bb:d4:46:ae:29: c6:3f:93:5b:e5:72:ae:e6:81:72:32:99:ff:32:a6:3a:c5:b8: 2d:45:91:78:d1:59:bf:dc:c8:26:fc:1c:a6:19:11:e1:48:db: 9c:b2:ca:a2:31:69:f0:ec:12:23:87:14:9d:57:a9:42:02:57: 12:16:ab:44:d7:c2:03:ba:46:81:a3:39:ee:68:ea:40:4b:c4: 98:aa:cf:fd:09:c0:78:27:8c:52:a4:29:1b:66:a7:44:d6:54: 1f:51:da:1a:ee:b3:ab:df:91:3f:ee:45:8f:34:fb:55:c1:f6: 6c:d1:45:8e:45:6f:52:b5:ef:44:3d:cd:2f:78:9d:d8:0a:61: 7d:9d:f1:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0MxRTkxMTAvBgNVBAUTKDcyRDE1NzQzRjU5QzgzQTVDMTk1QTVFNkRCMUVBNDY0 NzYzNEJFRjcwHhcNMjQwNTMxMDcwMzM1WhcNMjQwNjA3MDcwMzM1WjAYMRYwFAYD VQQDEw02NjU5NzY0Ny1iYWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5XxR643Qdx3InlVeOaTlPJtr+t6Ch+20Mqsir0vDNC3Zuhwitz7bgUiS9DoH m1fHF+nfA/mD+DrrurRVJqGOV0woFggpJjrUIkKfCWR19uF8pVHErB6fmLqGQCSC jlNoy5BBPtw8Bl8XzsU2Gre7j4zXIQfTe+lSmhwezoEvfpffvC2ZzbBPUGKJjRSA cIiDOjcSiskNe0uhoD0eRRnS9WjRkO2JmFcIEqj0pEik4iTbYwywF5bda1cE6GXT q/g+O78qNGeR1qJ69a4H7/XSP5AZl+QeZpANC/czhCRaouO27+Vz90CxHfyopItx c/5fBAlAH97yw0VFv0MDczHNmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKtj/2LE blt6otaKYl3dpFLnYLniMB8GA1UdIwQYMBaAFHLRV0P1nIOlwZWl5tsepGR2NL73 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzFFOS9CQkNENUQyQ0VG Q0MxMUVEQjI5QkIwNkNDNEY5QUUwMi9jdEZYUV9XY2c2WEJsYVhtMng2a1pIWTB2 dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N0RlhRX1djZzZYQmxhWG0yeDZrWkhZMHZ2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzFFOS9CQkNENUQyQ0VGQ0MxMUVEQjI5QkIwNkNDNEY5QUUwMi9jdEZYUV9XY2c2 WEJsYVhtMng2a1pIWTB2dmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCp5N4Wu+gUNHWOhJ4sSbDjUoXB+f/mIlf0WumgQaId5wEQ38PnEgS1 8EVreWhjAegxsMciJCLL1u9PxVC+pi4Ib31uiRLOTjDVHpU7TIFpnQpuOWeJPsLi ZvpiQouMi9qKe9ea35ZGyFhvqUS2ZFsQdKYmD1KhzGa+u9RGrinGP5Nb5XKu5oFy Mpn/MqY6xbgtRZF40Vm/3Mgm/BymGRHhSNucssqiMWnw7BIjhxSdV6lCAlcSFqtE 18IDukaBoznuaOpAS8SYqs/9CcB4J4xSpCkbZqdE1lQfUdoa7rOr35E/7kWPNPtV wfZs0UWORW9Ste9EPc0veJ3YCmF9nfGf -----END CERTIFICATE-----Generated at Fri May 31 10:02:43 2024 by rpki-client on console-ams.rpki-client.org