$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft File: m_aWWObA_qLqCOOn_dKtysoTOUk.mft (raw, json) Hash identifier: GLoXBc3X9tWWHCjfqrrnXGPBwUFk7cnK+fWtMCSrPSA= Subject key identifier: F9:7C:ED:1C:0D:22:CE:C2:BE:F3:1C:69:65:FF:2A:89:64:C0:E7:84 Authority key identifier: 9B:F6:96:58:E6:C0:FE:A2:EA:08:E3:A7:FD:D2:AD:CA:CA:13:39:49 Certificate issuer: /CN=A91CC28E/serialNumber=9BF69658E6C0FEA2EA08E3A7FDD2ADCACA133949 Certificate serial: 0111 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft Manifest number: 010F Signing time: Sun 19 May 2024 05:25:36 +0000 Manifest this update: Sun 19 May 2024 05:25:36 +0000 Manifest next update: Sun 26 May 2024 05:25:36 +0000 Files and hashes: 1: m_aWWObA_qLqCOOn_dKtysoTOUk.crl (hash: vg62tvJAhiFptw8hHFCLWZsF51ufbWWdewCeTYZsjfE=) 2: 73E253FC76D011EDBAECD665C4F9AE02.roa (hash: 0fgfwSnBPj1wqSMD+aZskb0Kd5Z6w3jmnUcNUmB5tFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.crl rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 273 (0x111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC28E/serialNumber=9BF69658E6C0FEA2EA08E3A7FDD2ADCACA133949 Validity Not Before: May 19 05:25:36 2024 GMT Not After : May 26 05:25:36 2024 GMT Subject: CN=66498d50-3e23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:77:f4:d9:d3:91:33:2e:86:f8:33:84:34:f4: f1:b8:7c:94:8d:b2:ea:8c:bf:02:65:3a:55:37:da: 90:5c:a7:c6:0f:6c:0d:7d:9b:4c:55:19:e3:b5:68: 82:20:f3:d7:c9:2b:97:77:92:e0:ee:5f:3f:03:f3: 63:07:4d:16:44:8c:cb:3a:57:4b:90:d2:96:b4:c2: 82:8e:72:8c:de:85:7e:70:38:f8:7f:52:4f:f5:6c: 79:b3:39:c9:35:7a:9b:87:f1:a1:fc:0e:37:81:90: b9:56:32:7c:a0:aa:a5:a0:f9:e2:1a:ad:43:38:24: ad:37:fe:b6:f6:b4:83:69:ed:1d:92:e8:57:0c:6a: db:58:6d:e3:3a:ef:4d:f6:fe:85:07:f7:b0:94:57: 54:35:69:40:db:e4:07:a6:a3:1b:bc:a2:b7:0a:8f: 7a:13:25:32:ea:1c:35:e3:87:7a:2d:82:2a:fa:55: 90:4d:f6:fc:b4:e2:50:ab:e5:b0:db:5f:ec:96:da: c2:54:9b:29:69:9d:c5:a5:94:a7:dd:d1:5b:28:2f: 25:ff:1a:36:5a:0e:f8:54:9b:26:01:ef:ea:86:39: 95:fd:e1:3f:6c:56:34:48:76:d1:8c:66:42:8b:82: 23:c0:07:55:a4:d2:1e:42:2a:c1:6e:b0:13:f4:d9: ab:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:7C:ED:1C:0D:22:CE:C2:BE:F3:1C:69:65:FF:2A:89:64:C0:E7:84 X509v3 Authority Key Identifier: keyid:9B:F6:96:58:E6:C0:FE:A2:EA:08:E3:A7:FD:D2:AD:CA:CA:13:39:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:81:62:da:d8:25:08:f5:59:1c:f4:fa:6f:98:ee:c3:44:f3: cb:f9:e3:03:21:a1:13:b3:cf:af:61:0b:22:5b:2c:d7:f3:7e: e8:c5:01:c0:46:11:83:84:45:4a:83:1e:c3:b3:7d:73:fe:5b: 26:a5:a1:8c:5d:3b:bb:d0:83:c9:a4:92:27:a4:d2:5d:25:be: c6:c7:d9:52:48:ca:b6:74:9e:d5:a3:0b:cf:9a:6b:56:bf:45: c0:b6:be:08:02:3a:92:6b:8d:04:94:7b:8f:e8:17:4a:33:0e: bb:0d:1d:93:2b:37:c6:2d:5d:6e:9f:7e:b7:39:9a:81:80:1a: fe:c8:8a:50:ae:d2:ff:b1:e7:3d:c0:8e:68:24:84:94:e5:37: 26:ac:e5:17:dc:11:5e:8d:ac:18:e6:55:fe:4d:fd:60:41:19: b9:f0:8d:64:a7:2a:6b:b6:ad:87:fb:cf:41:e3:4a:e5:7e:c4: 04:ab:be:86:e7:19:aa:c0:3d:78:74:3e:f6:86:01:ce:35:44: 77:65:ab:a4:68:43:a0:94:a2:3d:81:83:84:ff:f0:6e:c7:6c: da:8a:b6:e5:40:82:bf:b9:bf:77:a0:d9:64:ef:c5:3d:66:7c: 88:de:fe:7c:75:81:aa:3c:6b:f1:de:b2:a3:b2:be:66:a2:a2: 0e:ab:0f:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0MyOEUxMTAvBgNVBAUTKDlCRjY5NjU4RTZDMEZFQTJFQTA4RTNBN0ZERDJBRENB Q0ExMzM5NDkwHhcNMjQwNTE5MDUyNTM2WhcNMjQwNTI2MDUyNTM2WjAYMRYwFAYD VQQDEw02NjQ5OGQ1MC0zZTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA63f02dORMy6G+DOENPTxuHyUjbLqjL8CZTpVN9qQXKfGD2wNfZtMVRnjtWiC IPPXySuXd5Lg7l8/A/NjB00WRIzLOldLkNKWtMKCjnKM3oV+cDj4f1JP9Wx5sznJ NXqbh/Gh/A43gZC5VjJ8oKqloPniGq1DOCStN/629rSDae0dkuhXDGrbWG3jOu9N 9v6FB/ewlFdUNWlA2+QHpqMbvKK3Co96EyUy6hw144d6LYIq+lWQTfb8tOJQq+Ww 21/sltrCVJspaZ3FpZSn3dFbKC8l/xo2Wg74VJsmAe/qhjmV/eE/bFY0SHbRjGZC i4IjwAdVpNIeQirBbrAT9NmrdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPl87RwN Is7CvvMcaWX/KolkwOeEMB8GA1UdIwQYMBaAFJv2lljmwP6i6gjjp/3SrcrKEzlJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzI4RS9CNUNBODk2ODc2 Q0QxMUVEOERDNjNBNjRDNEY5QUUwMi9tX2FXV09iQV9xTHFDT09uX2RLdHlzb1RP VWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21fYVdXT2JBX3FMcUNPT25fZEt0eXNvVE9Vay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzI4RS9CNUNBODk2ODc2Q0QxMUVEOERDNjNBNjRDNEY5QUUwMi9tX2FXV09iQV9x THFDT09uX2RLdHlzb1RPVWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTgWLa2CUI9Vkc9PpvmO7DRPPL+eMDIaETs8+vYQsiWyzX837oxQHA RhGDhEVKgx7Ds31z/lsmpaGMXTu70IPJpJInpNJdJb7Gx9lSSMq2dJ7VowvPmmtW v0XAtr4IAjqSa40ElHuP6BdKMw67DR2TKzfGLV1un363OZqBgBr+yIpQrtL/sec9 wI5oJISU5TcmrOUX3BFejawY5lX+Tf1gQRm58I1kpyprtq2H+89B40rlfsQEq76G 5xmqwD14dD72hgHONUR3ZaukaEOglKI9gYOE//Bux2zairblQIK/ub93oNlk78U9 ZnyI3v58dYGqPGvx3rKjsr5moqIOqw94 -----END CERTIFICATE-----Generated at Sun May 19 06:14:36 2024 by rpki-client on console-ams.rpki-client.org