$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF0BD/A67B277873D511EE8808CF71C4F9AE02/AhC5e8hmDE5anWo8udqHGaW6RRI.mft File: AhC5e8hmDE5anWo8udqHGaW6RRI.mft (raw, json) Hash identifier: 0pF5YSgJt5L4yWLp7fbzjer2XhP+1AJ3OtSAAFvXkRg= Subject key identifier: 2A:55:1C:35:78:E4:EB:A6:0E:E4:3F:FB:B6:70:29:20:64:83:DA:3E Authority key identifier: 02:10:B9:7B:C8:66:0C:4E:5A:9D:6A:3C:B9:DA:87:19:A5:BA:45:12 Certificate issuer: /CN=A91CF0BD/serialNumber=0210B97BC8660C4E5A9D6A3CB9DA8719A5BA4512 Certificate serial: 6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhC5e8hmDE5anWo8udqHGaW6RRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF0BD/A67B277873D511EE8808CF71C4F9AE02/AhC5e8hmDE5anWo8udqHGaW6RRI.mft Manifest number: 6C Signing time: Sun 19 May 2024 07:33:34 +0000 Manifest this update: Sun 19 May 2024 07:33:34 +0000 Manifest next update: Sun 26 May 2024 07:33:34 +0000 Files and hashes: 1: AhC5e8hmDE5anWo8udqHGaW6RRI.crl (hash: mue7vI+k+GcRNJzoV6g8/BPSavrwbtV3WoUGfgwstLw=) 2: CC394F9C73D711EE87FD1F7BC4F9AE02.roa (hash: sPT+sP4oyT3F65pTsGpAo6OhKsejuKpWabi4hHyD+Bo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF0BD/A67B277873D511EE8808CF71C4F9AE02/AhC5e8hmDE5anWo8udqHGaW6RRI.crl rsync://rpki.apnic.net/member_repository/A91CF0BD/A67B277873D511EE8808CF71C4F9AE02/AhC5e8hmDE5anWo8udqHGaW6RRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhC5e8hmDE5anWo8udqHGaW6RRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110 (0x6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF0BD/serialNumber=0210B97BC8660C4E5A9D6A3CB9DA8719A5BA4512 Validity Not Before: May 19 07:33:34 2024 GMT Not After : May 26 07:33:34 2024 GMT Subject: CN=6649ab4e-492d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d9:6a:3c:9b:26:08:13:6f:d3:7a:5a:1f:ac: c3:bc:25:57:05:e6:16:21:7e:e3:ad:9e:37:b0:c1: 98:08:5e:85:5c:52:4d:fd:a1:fc:51:35:03:73:9a: 11:4e:4c:27:4a:0e:83:e4:d8:fa:4d:a8:7e:41:13: f5:96:cb:68:25:4a:12:cb:87:fb:18:38:f3:1e:96: 3c:61:a2:91:07:d9:69:b8:c5:22:a6:33:2c:aa:5e: 0e:c4:dd:7f:0f:5d:ec:8d:9e:6d:d1:f6:3f:ae:89: 2e:93:91:30:15:53:b0:f4:56:e3:52:f8:4d:c7:44: d6:bd:a2:d6:e6:00:12:40:ce:cf:81:27:e0:52:22: d7:7d:01:58:ee:f7:36:bd:eb:e5:62:9e:1a:e6:d4: 5d:0e:01:3d:1f:8c:59:1b:71:fb:29:b7:d2:7c:1a: 0d:54:bd:c3:6e:43:5a:71:1a:31:3d:47:45:a8:ae: db:ef:ab:25:44:4d:23:1b:f8:14:00:57:50:b4:45: 79:f1:16:fb:f7:d4:75:f7:99:4a:62:6e:6b:a7:f4: ed:b6:c0:02:f2:df:4a:23:ed:62:e9:5d:3b:5a:66: 07:cf:03:d9:e8:58:89:60:0c:9d:a3:36:c9:ed:ce: 2a:39:71:f1:89:1b:f0:87:6d:92:24:18:bf:82:66: 5f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:55:1C:35:78:E4:EB:A6:0E:E4:3F:FB:B6:70:29:20:64:83:DA:3E X509v3 Authority Key Identifier: keyid:02:10:B9:7B:C8:66:0C:4E:5A:9D:6A:3C:B9:DA:87:19:A5:BA:45:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF0BD/A67B277873D511EE8808CF71C4F9AE02/AhC5e8hmDE5anWo8udqHGaW6RRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhC5e8hmDE5anWo8udqHGaW6RRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF0BD/A67B277873D511EE8808CF71C4F9AE02/AhC5e8hmDE5anWo8udqHGaW6RRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ce:43:b7:b8:7a:fd:de:8b:78:d7:9b:3c:ce:63:20:d2:c1: 99:ae:e0:d4:b1:7a:8d:65:7a:89:71:6e:7a:a3:40:63:3d:c9: 20:f8:96:db:35:de:4d:73:33:09:89:e7:64:90:33:0b:4f:ff: 66:c6:1c:f2:52:f1:51:64:f8:2d:1d:d1:a0:51:6e:55:97:be: 49:2f:b7:8e:2f:30:e6:65:23:c1:00:51:ce:7a:42:56:c2:d9: 2c:07:7c:01:ab:88:f4:58:3d:33:08:ab:97:8b:4c:eb:9c:2b: 50:9c:f9:70:3b:0f:37:66:37:ec:9f:e3:ee:aa:f1:36:bd:43: ec:14:a5:9f:f2:b3:4c:2f:54:c5:7e:4d:1c:61:d5:5e:e7:d2: 00:b1:6a:50:a4:18:81:67:f0:3d:94:43:8d:07:c4:9b:ee:78: f2:d1:27:75:16:c3:8f:2e:85:87:e4:fd:94:f6:34:f3:10:7b: c7:a4:af:c9:22:68:f7:59:f2:ba:ee:5c:f9:ab:61:f4:89:3d: 1e:a0:5e:b5:82:53:9f:fd:88:63:2d:60:89:a0:51:ce:c9:a8: 4f:28:a7:33:95:c7:7f:70:97:28:a5:e9:ac:24:6a:59:e3:90: 5a:36:87:73:be:2d:7f:81:4d:43:fd:1b:08:d7:5f:14:b2:75: ae:d6:5f:e3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RjBCRDExMC8GA1UEBRMoMDIxMEI5N0JDODY2MEM0RTVBOUQ2QTNDQjlEQTg3MTlB NUJBNDUxMjAeFw0yNDA1MTkwNzMzMzRaFw0yNDA1MjYwNzMzMzRaMBgxFjAUBgNV BAMTDTY2NDlhYjRlLTQ5MmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCc2Wo8myYIE2/TelofrMO8JVcF5hYhfuOtnjewwZgIXoVcUk39ofxRNQNzmhFO TCdKDoPk2PpNqH5BE/WWy2glShLLh/sYOPMeljxhopEH2Wm4xSKmMyyqXg7E3X8P XeyNnm3R9j+uiS6TkTAVU7D0VuNS+E3HRNa9otbmABJAzs+BJ+BSItd9AVju9za9 6+Vinhrm1F0OAT0fjFkbcfspt9J8Gg1UvcNuQ1pxGjE9R0WortvvqyVETSMb+BQA V1C0RXnxFvv31HX3mUpibmun9O22wALy30oj7WLpXTtaZgfPA9noWIlgDJ2jNsnt zio5cfGJG/CHbZIkGL+CZl+LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKlUcNXjk 66YO5D/7tnApIGSD2j4wHwYDVR0jBBgwFoAUAhC5e8hmDE5anWo8udqHGaW6RRIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGMEJEL0E2N0IyNzc4NzNE NTExRUU4ODA4Q0Y3MUM0RjlBRTAyL0FoQzVlOGhtREU1YW5Xbzh1ZHFIR2FXNlJS SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQWhDNWU4aG1ERTVhbldvOHVkcUhHYVc2UlJJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG MEJEL0E2N0IyNzc4NzNENTExRUU4ODA4Q0Y3MUM0RjlBRTAyL0FoQzVlOGhtREU1 YW5Xbzh1ZHFIR2FXNlJSSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAErOQ7e4ev3ei3jXmzzOYyDSwZmu4NSxeo1leolxbnqjQGM9ySD4lts1 3k1zMwmJ52SQMwtP/2bGHPJS8VFk+C0d0aBRblWXvkkvt44vMOZlI8EAUc56QlbC 2SwHfAGriPRYPTMIq5eLTOucK1Cc+XA7DzdmN+yf4+6q8Ta9Q+wUpZ/ys0wvVMV+ TRxh1V7n0gCxalCkGIFn8D2UQ40HxJvuePLRJ3UWw48uhYfk/ZT2NPMQe8ekr8ki aPdZ8rruXPmrYfSJPR6gXrWCU5/9iGMtYImgUc7JqE8opzOVx39wlyil6awkalnj kFo2h3O+LX+BTUP9GwjXXxSyda7WX+M= -----END CERTIFICATE-----Generated at Sun May 19 08:26:44 2024 by rpki-client on console-fra.rpki-client.org