$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft File: 97sXL8rsr7-evvJQihVCZDOuyd4.mft (raw, json) Hash identifier: fxXotlFtGoYrBpVxsya1Askb2m72qvgUgrqrUjJUv9U= Subject key identifier: 7E:E6:27:2E:46:39:FA:FE:81:49:63:8B:B5:9A:37:10:DE:4E:FB:2F Authority key identifier: F7:BB:17:2F:CA:EC:AF:BF:9E:BE:F2:50:8A:15:42:64:33:AE:C9:DE Certificate issuer: /CN=A91CEDD3/serialNumber=F7BB172FCAECAFBF9EBEF2508A15426433AEC9DE Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft Manifest number: 0118 Signing time: Sun 19 May 2024 05:21:41 +0000 Manifest this update: Sun 19 May 2024 05:21:41 +0000 Manifest next update: Sun 26 May 2024 05:21:41 +0000 Files and hashes: 1: 97sXL8rsr7-evvJQihVCZDOuyd4.crl (hash: 2zxenfkJDz+Bv0s2yfbcbpv2heIHzJ1yUo+sbk/aq8c=) 2: C714C5A6706211EDA9CCDB76C4F9AE02.roa (hash: cSUwwlMJ5mfc3+KfZCUgcz8ae7weryNy8ZVQhlARvAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.crl rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEDD3/serialNumber=F7BB172FCAECAFBF9EBEF2508A15426433AEC9DE Validity Not Before: May 19 05:21:41 2024 GMT Not After : May 26 05:21:41 2024 GMT Subject: CN=66498c65-db5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:af:46:8a:24:f9:62:74:a5:95:91:dd:2c:10: 3d:94:37:10:59:fe:d4:9e:46:42:26:65:b7:3b:56: 92:fe:f9:b3:4c:9c:e0:6f:f7:07:a5:3f:38:ba:9f: 3c:02:23:fa:58:71:19:bf:32:56:16:55:1e:d5:6c: d1:96:4b:02:1b:b7:37:61:30:5e:ae:82:05:eb:bc: 66:16:22:cb:19:38:04:44:fc:47:1a:a2:6d:04:02: ad:0d:6c:a7:fd:e8:d7:de:50:93:63:36:9f:c4:ba: b6:3d:08:f6:87:aa:8d:77:58:b0:7a:e6:05:ac:ca: d9:71:62:26:91:e0:12:db:9f:50:2e:64:28:5a:c3: 3d:69:ce:7b:49:a7:42:0e:1d:3c:a6:75:d8:45:1d: 4e:6d:20:db:a8:5f:c4:03:17:41:2f:b0:ad:54:73: 47:36:82:e0:72:89:9f:7e:77:6b:6a:61:a9:5d:d8: a1:cf:97:1d:8c:0c:27:f1:75:07:96:9f:7e:25:35: 28:fe:ee:4c:55:3d:0e:8b:e4:36:bf:0b:e8:d2:d4: a3:35:d2:76:37:21:32:73:39:f0:b2:49:e3:72:dc: eb:21:7d:d5:39:7a:38:e4:90:03:c3:cd:16:a6:83: 09:ec:db:09:44:e6:7a:35:5b:91:04:00:71:14:61: 17:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E6:27:2E:46:39:FA:FE:81:49:63:8B:B5:9A:37:10:DE:4E:FB:2F X509v3 Authority Key Identifier: keyid:F7:BB:17:2F:CA:EC:AF:BF:9E:BE:F2:50:8A:15:42:64:33:AE:C9:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:9f:2b:e1:55:58:8a:b0:00:c6:fa:a6:88:09:52:b2:15:98: 6e:ce:5f:6c:af:c1:f1:5d:55:57:13:6f:18:6b:ad:30:4e:4f: 2b:06:b2:be:6a:d4:70:7c:cf:81:a1:fd:bf:d9:0b:6c:dd:ef: 10:ec:94:fa:fd:1d:3d:5e:98:c4:80:c6:20:f7:90:e3:13:a6: 92:e0:50:41:62:e8:86:0d:74:84:4b:89:cc:de:b0:2d:c6:00: 0b:85:7e:70:0c:70:6c:69:91:f8:28:1a:d1:14:1b:de:81:28: 1e:3e:a4:92:19:c9:19:72:3b:b3:6b:3f:df:24:fa:e2:c1:b7: f7:83:cd:4b:5e:09:65:60:fc:f7:d3:9f:ef:db:87:7a:7d:56: 3c:e5:7a:2e:e2:8c:b0:76:3f:f0:ac:07:e5:85:e8:b9:9e:6e: 23:f6:7b:1c:21:13:f8:d8:6a:f3:95:8f:3d:0e:d3:19:1c:19: 34:83:e1:ca:19:9a:b5:47:15:02:9e:fc:c1:31:9a:4d:95:e2: f2:dc:23:39:c0:e5:de:0d:50:fb:12:0f:f5:f1:9c:c1:29:e9: d5:bb:dd:a2:d1:d7:cc:04:53:40:5b:2a:d5:79:b9:1b:98:70: 23:7c:c3:8a:35:d0:14:3c:75:d7:41:e7:20:c5:f5:3b:94:f4: 6f:65:43:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VERDMxMTAvBgNVBAUTKEY3QkIxNzJGQ0FFQ0FGQkY5RUJFRjI1MDhBMTU0MjY0 MzNBRUM5REUwHhcNMjQwNTE5MDUyMTQxWhcNMjQwNTI2MDUyMTQxWjAYMRYwFAYD VQQDEw02NjQ5OGM2NS1kYjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyK9GiiT5YnSllZHdLBA9lDcQWf7UnkZCJmW3O1aS/vmzTJzgb/cHpT84up88 AiP6WHEZvzJWFlUe1WzRlksCG7c3YTBeroIF67xmFiLLGTgERPxHGqJtBAKtDWyn /ejX3lCTYzafxLq2PQj2h6qNd1iweuYFrMrZcWImkeAS259QLmQoWsM9ac57SadC Dh08pnXYRR1ObSDbqF/EAxdBL7CtVHNHNoLgcomffndramGpXdihz5cdjAwn8XUH lp9+JTUo/u5MVT0Oi+Q2vwvo0tSjNdJ2NyEycznwsknjctzrIX3VOXo45JADw80W poMJ7NsJROZ6NVuRBABxFGEX4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7mJy5G Ofr+gUlji7WaNxDeTvsvMB8GA1UdIwQYMBaAFPe7Fy/K7K+/nr7yUIoVQmQzrsne MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUREMy9EMDY2MzMyODcw NUUxMUVEQUNBRDg4NUJDNEY5QUUwMi85N3NYTDhyc3I3LWV2dkpRaWhWQ1pET3V5 ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk3c1hMOHJzcjctZXZ2SlFpaFZDWkRPdXlkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUREMy9EMDY2MzMyODcwNUUxMUVEQUNBRDg4NUJDNEY5QUUwMi85N3NYTDhyc3I3 LWV2dkpRaWhWQ1pET3V5ZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPnyvhVViKsADG+qaICVKyFZhuzl9sr8HxXVVXE28Ya60wTk8rBrK+ atRwfM+Bof2/2Qts3e8Q7JT6/R09XpjEgMYg95DjE6aS4FBBYuiGDXSES4nM3rAt xgALhX5wDHBsaZH4KBrRFBvegSgePqSSGckZcjuzaz/fJPriwbf3g81LXgllYPz3 05/v24d6fVY85Xou4oywdj/wrAflhei5nm4j9nscIRP42GrzlY89DtMZHBk0g+HK GZq1RxUCnvzBMZpNleLy3CM5wOXeDVD7Eg/18ZzBKenVu92i0dfMBFNAWyrVebkb mHAjfMOKNdAUPHXXQecgxfU7lPRvZUPB -----END CERTIFICATE-----Generated at Sun May 19 05:48:52 2024 by rpki-client on console-fra.rpki-client.org