$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4164/03D92FD4919111EB89DDC35BC4F9AE02/_o6qXXjgvmaMYYYEpini9_PVvLM.mft File: _o6qXXjgvmaMYYYEpini9_PVvLM.mft (raw, json) Hash identifier: kATcv2LBB6RexX9tVHrpKcGo2lcaWz7fPtZZmeDXYkA= Subject key identifier: 59:DD:EF:9C:99:9B:80:D3:9C:3B:26:47:41:C9:BD:23:F5:5A:08:C6 Authority key identifier: FE:8E:AA:5D:78:E0:BE:66:8C:61:86:04:A6:29:E2:F7:F3:D5:BC:B3 Certificate issuer: /CN=A91D4164/serialNumber=FE8EAA5D78E0BE668C618604A629E2F7F3D5BCB3 Certificate serial: 05A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_o6qXXjgvmaMYYYEpini9_PVvLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4164/03D92FD4919111EB89DDC35BC4F9AE02/_o6qXXjgvmaMYYYEpini9_PVvLM.mft Manifest number: 058F Signing time: Sun 19 May 2024 00:37:21 +0000 Manifest this update: Sun 19 May 2024 00:37:21 +0000 Manifest next update: Sun 26 May 2024 00:37:21 +0000 Files and hashes: 1: _o6qXXjgvmaMYYYEpini9_PVvLM.crl (hash: HGKxCSgcO0wvRCMT0bmaZ22L1MLpApY2Qopxc8rWfzo=) 2: F6E84A68B4F111EDB776C753C4F9AE02.roa (hash: QBIsEfEypouSOOGrxGisTFHhBqrkN+HfY4+ipH6FJGU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4164/03D92FD4919111EB89DDC35BC4F9AE02/_o6qXXjgvmaMYYYEpini9_PVvLM.crl rsync://rpki.apnic.net/member_repository/A91D4164/03D92FD4919111EB89DDC35BC4F9AE02/_o6qXXjgvmaMYYYEpini9_PVvLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_o6qXXjgvmaMYYYEpini9_PVvLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1443 (0x5a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4164/serialNumber=FE8EAA5D78E0BE668C618604A629E2F7F3D5BCB3 Validity Not Before: May 19 00:37:21 2024 GMT Not After : May 26 00:37:21 2024 GMT Subject: CN=664949c1-c287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2d:47:d3:c5:12:c0:9f:6b:c8:29:45:ae:4d: de:9e:f7:89:63:a8:7b:c8:9d:e5:c1:18:cf:7f:0d: 06:98:84:17:8b:bd:ca:63:87:6a:bd:82:81:19:88: af:74:62:3f:c0:47:7c:8f:a9:ee:2b:a1:71:39:94: b8:9e:69:03:93:7f:a0:91:3f:dd:08:50:d7:14:60: 77:1d:50:86:d9:22:e1:39:56:40:0d:19:19:1a:15: 38:e9:be:41:b4:2d:60:dc:6b:17:17:d1:e2:e5:05: 8c:ed:d5:b1:c5:f3:01:de:5b:a6:9c:6b:94:75:2e: 90:2a:4f:51:89:ff:7f:84:37:73:da:16:b3:c1:2c: 90:73:fc:03:a6:18:7e:a2:47:3d:0a:b3:13:06:9a: cc:82:a4:1d:a2:85:59:b3:f6:42:c6:5f:a8:60:5b: 63:ec:48:bb:e8:5c:79:bc:16:85:f0:68:6d:19:b3: 5a:ee:7b:31:96:6f:7c:a5:f1:0d:ce:74:9e:3a:c3: 6f:90:49:73:03:5f:09:e1:50:f3:84:5c:55:e8:3f: 3c:01:97:08:8c:dd:7e:9e:e3:51:1b:20:56:b1:30: a2:f1:58:2f:cd:72:c6:5d:45:1c:1a:e9:ff:12:19: 94:4b:77:9b:f6:b2:9b:e3:5d:8a:c6:d8:97:90:23: e9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:DD:EF:9C:99:9B:80:D3:9C:3B:26:47:41:C9:BD:23:F5:5A:08:C6 X509v3 Authority Key Identifier: keyid:FE:8E:AA:5D:78:E0:BE:66:8C:61:86:04:A6:29:E2:F7:F3:D5:BC:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4164/03D92FD4919111EB89DDC35BC4F9AE02/_o6qXXjgvmaMYYYEpini9_PVvLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_o6qXXjgvmaMYYYEpini9_PVvLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4164/03D92FD4919111EB89DDC35BC4F9AE02/_o6qXXjgvmaMYYYEpini9_PVvLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:d7:d7:d0:71:d9:60:25:ed:9a:fc:54:b5:76:9f:aa:c7:c9: 2a:9f:a4:df:78:92:c1:5a:83:e1:49:d5:a3:35:fb:19:b0:3c: 84:8b:d0:3b:e0:89:0e:22:45:92:97:7b:22:40:29:75:04:63: de:74:63:b5:d3:10:76:94:f6:0b:55:6d:76:f8:e6:49:d8:cd: 05:c2:f1:87:02:d0:50:f7:1f:cb:c2:a0:4a:a6:ce:d8:f1:24: 91:c8:77:4a:d6:64:cf:c3:b8:d3:bd:d3:92:ec:c4:e4:52:f5: 4b:e0:1b:95:35:ae:49:56:ab:74:19:d7:e8:5e:8c:c7:e3:17: 32:ba:a8:c0:53:73:08:18:be:14:a6:9d:60:39:56:9d:45:fd: 13:51:bc:b4:35:07:1d:48:50:47:2d:43:b5:07:b2:3a:c0:ff: 43:e6:c3:d7:23:90:ef:e7:b8:bd:72:70:1e:32:0f:79:6e:af: e9:e8:1b:fc:c1:ba:22:50:e8:6a:dc:d7:d0:67:93:b9:5b:c7: 5e:35:a5:31:34:fb:26:b5:db:48:cd:ca:6f:5a:11:e4:4d:c1: 7f:46:f2:3a:95:21:6e:d4:bc:03:b2:e2:d5:56:58:f8:83:38: cf:db:20:25:4c:ac:ad:d2:45:cf:74:f2:77:d6:6b:98:79:20: 4c:c6:e7:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQxNjQxMTAvBgNVBAUTKEZFOEVBQTVENzhFMEJFNjY4QzYxODYwNEE2MjlFMkY3 RjNENUJDQjMwHhcNMjQwNTE5MDAzNzIxWhcNMjQwNTI2MDAzNzIxWjAYMRYwFAYD VQQDEw02NjQ5NDljMS1jMjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0i1H08USwJ9ryClFrk3enveJY6h7yJ3lwRjPfw0GmIQXi73KY4dqvYKBGYiv dGI/wEd8j6nuK6FxOZS4nmkDk3+gkT/dCFDXFGB3HVCG2SLhOVZADRkZGhU46b5B tC1g3GsXF9Hi5QWM7dWxxfMB3lumnGuUdS6QKk9Rif9/hDdz2hazwSyQc/wDphh+ okc9CrMTBprMgqQdooVZs/ZCxl+oYFtj7Ei76Fx5vBaF8GhtGbNa7nsxlm98pfEN znSeOsNvkElzA18J4VDzhFxV6D88AZcIjN1+nuNRGyBWsTCi8VgvzXLGXUUcGun/ EhmUS3eb9rKb412KxtiXkCPpZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFnd75yZ m4DTnDsmR0HJvSP1WgjGMB8GA1UdIwQYMBaAFP6Oql144L5mjGGGBKYp4vfz1byz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDE2NC8wM0Q5MkZENDkx OTExMUVCODlEREMzNUJDNEY5QUUwMi9fbzZxWFhqZ3ZtYU1ZWVlFcGluaTlfUFZ2 TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19vNnFYWGpndm1hTVlZWUVwaW5pOV9QVnZMTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDE2NC8wM0Q5MkZENDkxOTExMUVCODlEREMzNUJDNEY5QUUwMi9fbzZxWFhqZ3Zt YU1ZWVlFcGluaTlfUFZ2TE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCx19fQcdlgJe2a/FS1dp+qx8kqn6TfeJLBWoPhSdWjNfsZsDyEi9A7 4IkOIkWSl3siQCl1BGPedGO10xB2lPYLVW12+OZJ2M0FwvGHAtBQ9x/LwqBKps7Y 8SSRyHdK1mTPw7jTvdOS7MTkUvVL4BuVNa5JVqt0GdfoXozH4xcyuqjAU3MIGL4U pp1gOVadRf0TUby0NQcdSFBHLUO1B7I6wP9D5sPXI5Dv57i9cnAeMg95bq/p6Bv8 wboiUOhq3NfQZ5O5W8deNaUxNPsmtdtIzcpvWhHkTcF/RvI6lSFu1LwDsuLVVlj4 gzjP2yAlTKyt0kXPdPJ31muYeSBMxuce -----END CERTIFICATE-----Generated at Sun May 19 01:47:14 2024 by rpki-client on console-fra.rpki-client.org