$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft File: sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft (raw, json) Hash identifier: lPPF7d0HGVATSfyP9v14Q6ge+gyV4VSnDhoO9MEHtgg= Subject key identifier: B9:04:66:57:70:83:16:3E:43:18:C3:9B:6E:48:D4:53:4D:AE:78:75 Authority key identifier: B1:91:AE:20:68:14:6F:9C:73:9B:EA:6C:D5:9E:79:2C:4F:89:7B:76 Certificate issuer: /CN=A91D5320/serialNumber=B191AE2068146F9C739BEA6CD59E792C4F897B76 Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft Manifest number: 9F Signing time: Sun 19 May 2024 06:52:25 +0000 Manifest this update: Sun 19 May 2024 06:52:25 +0000 Manifest next update: Sun 26 May 2024 06:52:25 +0000 Files and hashes: 1: sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl (hash: RArqkMuYNn7xzqF8/a0xAOfoR2Vrb+iIy/vkozzfFl4=) 2: E7B472CE2DC811EEBADF8E61C4F9AE02.roa (hash: 5Q25UCh0k+HcT+bVmBbgnql+OtM49EW3g9wv+fI2f98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5320/serialNumber=B191AE2068146F9C739BEA6CD59E792C4F897B76 Validity Not Before: May 19 06:52:25 2024 GMT Not After : May 26 06:52:25 2024 GMT Subject: CN=6649a1a9-c03b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:39:00:4c:ec:81:37:92:44:dc:83:3f:8b:be: d2:88:c5:d3:bf:ed:c9:4f:3d:13:b5:f2:ef:4f:d2: f7:c2:2b:dc:0b:d1:f9:2d:21:c6:e7:23:4c:80:f9: 71:8c:26:dd:d5:ff:80:46:56:51:36:f5:58:15:ce: 2c:e6:42:c8:c8:c0:eb:5c:7e:34:4f:15:0b:2b:89: 9f:aa:bf:d6:31:cb:89:e2:87:5c:92:61:77:48:6b: 19:be:0e:05:11:54:5b:5b:bc:96:25:9c:ad:aa:17: 9b:6b:00:bd:7e:7c:14:0a:a2:77:87:0b:8e:86:08: 55:6a:4d:0f:30:70:c5:db:2e:d6:39:0b:67:a6:5d: dc:ed:3c:61:d1:e8:a3:d8:43:ad:56:0f:da:45:fb: d0:56:49:06:98:87:ad:46:18:0d:53:0c:b7:0d:e3: 83:76:b7:b3:e6:d9:69:48:99:9d:79:73:7e:f9:69: 6b:9d:6e:00:91:7b:e8:8f:dd:aa:67:64:50:9a:10: e4:13:63:b1:4f:21:91:ab:8a:db:d3:01:ee:d7:ae: e2:0d:63:6d:50:35:77:e8:bf:69:01:7e:ab:c2:61: 72:ba:80:30:52:01:49:48:70:48:b1:58:c4:ee:0d: 8e:15:bd:80:5f:23:f4:6c:55:64:7a:5e:4d:39:42: 6e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:04:66:57:70:83:16:3E:43:18:C3:9B:6E:48:D4:53:4D:AE:78:75 X509v3 Authority Key Identifier: keyid:B1:91:AE:20:68:14:6F:9C:73:9B:EA:6C:D5:9E:79:2C:4F:89:7B:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:2d:d8:af:c0:fd:0a:ba:27:59:df:22:b1:74:b2:9e:78:51: 9b:b3:1d:25:4e:fd:38:c2:55:0b:fe:5d:e2:63:99:4f:f5:2e: 3d:6c:51:a2:e4:2d:9c:96:de:a7:9a:2e:f9:a8:4d:06:3b:4d: 0e:02:55:ce:6a:db:97:4e:6a:2c:3d:c0:9d:69:ca:50:dd:29: 27:76:0c:f8:10:a3:b6:f7:f0:6b:6f:99:b3:f9:6f:a3:b5:3d: 57:c4:7e:1f:c0:99:28:19:e8:a6:e9:5b:2e:55:e7:c8:eb:a0: 39:30:e8:2a:54:c2:5c:7f:35:68:d6:ab:2d:7c:23:69:ab:89: 45:bd:8e:96:1a:6a:cc:6b:07:ce:2e:89:9f:d1:fd:58:34:8c: 05:6b:2e:34:db:e8:3e:c6:01:1f:74:21:6c:49:b7:d7:70:8c: c7:5f:26:15:7b:d5:ef:a1:6d:a1:e2:14:b8:f1:9e:e4:05:fc: 16:38:70:c0:3b:22:5a:38:84:4e:41:8e:d7:c8:44:68:e4:0a: 32:f3:d8:4b:ea:3a:11:8d:28:29:8f:90:00:eb:ea:e8:96:07: e4:7f:e3:9f:4d:86:29:fe:b7:ac:5e:ee:7e:ea:2d:ad:b0:92: 97:0b:ea:b2:7d:cf:37:d1:37:a8:d7:e8:fa:58:73:5d:bb:50: ca:59:9f:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUzMjAxMTAvBgNVBAUTKEIxOTFBRTIwNjgxNDZGOUM3MzlCRUE2Q0Q1OUU3OTJD NEY4OTdCNzYwHhcNMjQwNTE5MDY1MjI1WhcNMjQwNTI2MDY1MjI1WjAYMRYwFAYD VQQDEw02NjQ5YTFhOS1jMDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjkATOyBN5JE3IM/i77SiMXTv+3JTz0TtfLvT9L3wivcC9H5LSHG5yNMgPlx jCbd1f+ARlZRNvVYFc4s5kLIyMDrXH40TxULK4mfqr/WMcuJ4odckmF3SGsZvg4F EVRbW7yWJZytqhebawC9fnwUCqJ3hwuOhghVak0PMHDF2y7WOQtnpl3c7Txh0eij 2EOtVg/aRfvQVkkGmIetRhgNUwy3DeODdrez5tlpSJmdeXN++WlrnW4AkXvoj92q Z2RQmhDkE2OxTyGRq4rb0wHu167iDWNtUDV36L9pAX6rwmFyuoAwUgFJSHBIsVjE 7g2OFb2AXyP0bFVkel5NOUJuWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLkEZldw gxY+QxjDm25I1FNNrnh1MB8GA1UdIwQYMBaAFLGRriBoFG+cc5vqbNWeeSxPiXt2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTMyMC83OENDRkU0RTJE QzgxMUVFOTM3MEQzNDhDNEY5QUUwMi9zWkd1SUdnVWI1eHptLXBzMVo1NUxFLUpl M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NaR3VJR2dVYjV4em0tcHMxWjU1TEUtSmUzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTMyMC83OENDRkU0RTJEQzgxMUVFOTM3MEQzNDhDNEY5QUUwMi9zWkd1SUdnVWI1 eHptLXBzMVo1NUxFLUplM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyLdivwP0KuidZ3yKxdLKeeFGbsx0lTv04wlUL/l3iY5lP9S49bFGi 5C2clt6nmi75qE0GO00OAlXOatuXTmosPcCdacpQ3Skndgz4EKO29/Brb5mz+W+j tT1XxH4fwJkoGeim6VsuVefI66A5MOgqVMJcfzVo1qstfCNpq4lFvY6WGmrMawfO Lomf0f1YNIwFay402+g+xgEfdCFsSbfXcIzHXyYVe9XvoW2h4hS48Z7kBfwWOHDA OyJaOIROQY7XyERo5Aoy89hL6joRjSgpj5AA6+rolgfkf+OfTYYp/resXu5+6i2t sJKXC+qyfc830Teo1+j6WHNdu1DKWZ/n -----END CERTIFICATE-----Generated at Sun May 19 08:25:08 2024 by rpki-client on console-ams.rpki-client.org