$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft File: Xs7vXyjy82UFPfuM780W4cPehK4.mft (raw, json) Hash identifier: 5dEdWTBoCNixL3Wn8URwOSlK/MmTm0Is1Ocwp6nLD70= Subject key identifier: 61:D6:F7:49:11:97:35:15:25:B4:45:E3:4C:9B:D5:0C:26:F5:61:10 Authority key identifier: 5E:CE:EF:5F:28:F2:F3:65:05:3D:FB:8C:EF:CD:16:E1:C3:DE:84:AE Certificate issuer: /CN=A91DB8D9/serialNumber=5ECEEF5F28F2F365053DFB8CEFCD16E1C3DE84AE Certificate serial: 02E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xs7vXyjy82UFPfuM780W4cPehK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft Manifest number: 02DD Signing time: Sun 19 May 2024 03:20:31 +0000 Manifest this update: Sun 19 May 2024 03:20:30 +0000 Manifest next update: Sun 26 May 2024 03:20:30 +0000 Files and hashes: 1: Xs7vXyjy82UFPfuM780W4cPehK4.crl (hash: /VwBdQW6qC7zXdzmduvRczp+V/aTy57nJu439+AB4qQ=) 2: 7E044E58A06B11ECBF29B644C4F9AE02.roa (hash: GU0rz8UZFYHn2t9WQ+hsu8X7VuJP0c0476L85iweLMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.crl rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xs7vXyjy82UFPfuM780W4cPehK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 736 (0x2e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB8D9/serialNumber=5ECEEF5F28F2F365053DFB8CEFCD16E1C3DE84AE Validity Not Before: May 19 03:20:30 2024 GMT Not After : May 26 03:20:30 2024 GMT Subject: CN=66496fff-1529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f4:e3:54:6a:59:bf:6e:b5:ec:1d:d2:64:60: 3b:a1:66:5a:7c:24:3a:ef:3c:4d:6a:e7:ca:b7:b5: 20:4f:62:27:fc:6e:11:d4:a9:68:28:28:96:bc:ee: 23:ca:6f:d2:e2:10:ca:9e:13:44:4d:88:eb:aa:01: 92:9a:dd:96:82:40:38:a7:f3:7a:39:c9:fe:a4:e4: a5:60:86:3e:a8:1d:74:7b:76:5b:12:9b:f5:4d:f2: e2:c1:fa:42:dd:eb:43:42:0a:5c:a6:41:a9:30:c7: 1b:20:b3:fe:09:a4:d1:99:90:da:84:cd:54:9c:11: 4b:47:2b:56:4d:3e:7e:50:61:e8:a1:ec:69:85:2a: ee:74:4e:e3:b2:0f:51:4c:b1:c8:65:8a:6b:dd:bb: 35:09:41:74:ec:a3:14:51:3d:2f:1c:a2:95:57:55: 9c:62:8b:75:63:6c:a4:ce:8c:5c:06:5a:af:69:5c: 9b:c1:31:75:68:e3:91:f3:bd:e0:10:25:44:43:18: e0:ec:35:36:ee:f7:3d:1f:a3:64:b0:b8:53:9a:be: ed:16:ed:8c:d1:d6:37:9c:03:5a:b6:a5:90:ce:7c: 5f:4f:ab:ee:48:0b:40:d4:4c:1f:1f:e3:ae:70:3a: 11:ad:dd:44:dd:fa:4c:96:73:c8:81:49:13:13:05: f5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D6:F7:49:11:97:35:15:25:B4:45:E3:4C:9B:D5:0C:26:F5:61:10 X509v3 Authority Key Identifier: keyid:5E:CE:EF:5F:28:F2:F3:65:05:3D:FB:8C:EF:CD:16:E1:C3:DE:84:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xs7vXyjy82UFPfuM780W4cPehK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:78:38:d1:39:49:fe:44:87:8e:9b:0a:84:5e:be:fe:52:f1: 17:f5:af:b5:23:78:15:40:ee:0d:43:69:15:64:ce:76:47:e9: a7:72:65:c3:53:d4:1f:fb:95:f3:d1:95:59:2f:e3:4a:83:4e: 43:64:d2:71:20:f0:b8:a6:1b:ad:14:6b:dd:6e:f2:f2:cc:8a: ab:8c:b3:37:2a:bb:d9:2b:55:87:db:34:9a:33:e2:ce:d5:a0: 2d:a0:73:31:7b:dc:c3:08:76:83:20:f7:d7:9e:68:15:a9:9d: 52:f7:76:e4:fd:21:4a:6b:f3:a9:03:d4:72:94:63:53:c9:6a: 47:db:90:82:02:fb:7e:02:c5:c9:6b:2f:69:c8:b4:5e:ac:fa: f1:33:66:7b:b2:9a:1c:1b:39:aa:bd:a6:ee:2d:8a:57:22:18: 78:a2:91:cf:eb:f9:4b:68:91:de:12:12:c3:c3:dc:a9:9c:cf: be:f8:e2:4c:7e:84:67:ad:ac:89:f4:b5:d6:fa:14:68:35:84: c9:ab:33:7f:ff:d6:9a:a4:25:1b:ff:cc:a6:57:b8:24:20:8b: 21:5d:d3:aa:e0:a8:87:43:eb:f5:97:5b:4e:91:1b:90:b7:46: 19:86:8e:97:ea:b6:64:c7:64:dd:90:1f:ad:35:7a:72:e6:bc: ef:32:d1:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI4RDkxMTAvBgNVBAUTKDVFQ0VFRjVGMjhGMkYzNjUwNTNERkI4Q0VGQ0QxNkUx QzNERTg0QUUwHhcNMjQwNTE5MDMyMDMwWhcNMjQwNTI2MDMyMDMwWjAYMRYwFAYD VQQDEw02NjQ5NmZmZi0xNTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp/TjVGpZv2617B3SZGA7oWZafCQ67zxNaufKt7UgT2In/G4R1KloKCiWvO4j ym/S4hDKnhNETYjrqgGSmt2WgkA4p/N6Ocn+pOSlYIY+qB10e3ZbEpv1TfLiwfpC 3etDQgpcpkGpMMcbILP+CaTRmZDahM1UnBFLRytWTT5+UGHooexphSrudE7jsg9R TLHIZYpr3bs1CUF07KMUUT0vHKKVV1WcYot1Y2ykzoxcBlqvaVybwTF1aOOR873g ECVEQxjg7DU27vc9H6NksLhTmr7tFu2M0dY3nANatqWQznxfT6vuSAtA1EwfH+Ou cDoRrd1E3fpMlnPIgUkTEwX1BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGHW90kR lzUVJbRF40yb1Qwm9WEQMB8GA1UdIwQYMBaAFF7O718o8vNlBT37jO/NFuHD3oSu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjhEOS84QjAwMjM3NjlB MDIxMUVDOEI4MTc3ODVDNEY5QUUwMi9Yczd2WHlqeTgyVUZQZnVNNzgwVzRjUGVo SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hzN3ZYeWp5ODJVRlBmdU03ODBXNGNQZWhLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjhEOS84QjAwMjM3NjlBMDIxMUVDOEI4MTc3ODVDNEY5QUUwMi9Yczd2WHlqeTgy VUZQZnVNNzgwVzRjUGVoSzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTeDjROUn+RIeOmwqEXr7+UvEX9a+1I3gVQO4NQ2kVZM52R+mncmXD U9Qf+5Xz0ZVZL+NKg05DZNJxIPC4phutFGvdbvLyzIqrjLM3KrvZK1WH2zSaM+LO 1aAtoHMxe9zDCHaDIPfXnmgVqZ1S93bk/SFKa/OpA9RylGNTyWpH25CCAvt+AsXJ ay9pyLRerPrxM2Z7spocGzmqvabuLYpXIhh4opHP6/lLaJHeEhLDw9ypnM+++OJM foRnrayJ9LXW+hRoNYTJqzN//9aapCUb/8ymV7gkIIshXdOq4KiHQ+v1l1tOkRuQ t0YZho6X6rZkx2TdkB+tNXpy5rzvMtFR -----END CERTIFICATE-----Generated at Sun May 19 04:20:44 2024 by rpki-client on console-ams.rpki-client.org