$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft File: 90n3b5KhbSqHFDf3LIbQ0F3imtU.mft (raw, json) Hash identifier: B501hjc8V5h1qlR712L/B4/PbyJws6vBvxkd3g/Sx6w= Subject key identifier: 1F:74:BE:8B:24:99:BC:B8:8B:2A:45:8A:3B:2E:70:A6:45:78:F3:82 Authority key identifier: F7:49:F7:6F:92:A1:6D:2A:87:14:37:F7:2C:86:D0:D0:5D:E2:9A:D5 Certificate issuer: /CN=A91DDDED/serialNumber=F749F76F92A16D2A871437F72C86D0D05DE29AD5 Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft Manifest number: F5 Signing time: Sun 19 May 2024 05:44:25 +0000 Manifest this update: Sun 19 May 2024 05:44:24 +0000 Manifest next update: Sun 26 May 2024 05:44:24 +0000 Files and hashes: 1: 90n3b5KhbSqHFDf3LIbQ0F3imtU.crl (hash: Ub01ITREDvhc76xb7WdYzeKTX0zljBW2ARuX88iCKls=) 2: 69B6C14A9DF611ED8D51D272C4F9AE02.roa (hash: EOM0FWbEMad8JTUCseZOxf5a+Kkz8yoPl4Vr42b3Qr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.crl rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDDED/serialNumber=F749F76F92A16D2A871437F72C86D0D05DE29AD5 Validity Not Before: May 19 05:44:24 2024 GMT Not After : May 26 05:44:24 2024 GMT Subject: CN=664991b9-2e93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b0:31:1d:54:6e:1d:19:a3:e9:99:f8:07:cc: 6a:6c:52:cf:0d:37:49:cd:de:88:a4:f5:df:b3:23: 3d:d3:22:67:f3:07:ba:2d:a8:f9:94:fe:51:48:5d: cc:db:75:8d:c4:52:6d:92:a0:aa:bc:cc:b7:b0:43: 44:2b:0e:c8:58:20:92:c7:d2:b7:2d:a6:ce:2e:be: 0b:67:02:c0:df:45:7c:02:e4:d5:74:97:f5:d8:f0: 1c:2f:6a:72:04:04:78:5c:e2:fa:7f:a0:19:da:7f: 75:eb:52:f8:cb:4a:5d:bc:1d:80:de:45:e1:49:2e: 9d:7e:2f:33:10:8e:90:f2:51:27:a9:4e:0b:88:2c: 6a:d6:df:78:c2:45:dd:4e:0c:52:4a:15:82:db:7b: d4:7c:39:dc:13:c0:4a:d7:0d:4b:58:36:0a:8e:5f: 1a:19:d4:3b:73:06:78:7a:27:38:af:e6:49:79:ea: 9b:99:4b:55:16:01:21:26:d1:0a:bb:a5:3c:57:35: b3:a6:b1:46:43:66:c1:82:39:c1:51:fc:70:eb:7a: 4b:69:02:b3:21:94:e9:10:50:48:1b:16:a9:5d:5b: 5e:e0:34:d1:5d:da:75:80:21:93:82:87:89:31:66: 80:5b:0b:12:82:c6:37:96:55:0f:24:51:8d:e9:f9: c3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:74:BE:8B:24:99:BC:B8:8B:2A:45:8A:3B:2E:70:A6:45:78:F3:82 X509v3 Authority Key Identifier: keyid:F7:49:F7:6F:92:A1:6D:2A:87:14:37:F7:2C:86:D0:D0:5D:E2:9A:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:d3:11:e9:53:78:69:b3:b8:75:25:78:5e:08:08:28:2d:29: 2b:ce:01:41:64:f8:ea:23:af:41:80:e0:e7:04:59:df:a3:d1: d2:65:b6:cc:17:88:66:40:3b:c1:5f:51:36:cd:4c:11:79:3a: dc:11:f8:b1:ed:5e:c0:2f:3c:63:37:2f:9b:f4:97:6f:82:b1: 2b:f2:b6:44:0d:0f:5c:bc:c8:7d:ea:a6:ff:50:88:ab:b8:3d: 73:1e:b6:5d:36:a0:6f:80:21:6d:e9:ff:82:89:4d:25:a6:23: 18:d2:8f:1a:11:7f:58:b0:fd:1d:04:01:ec:34:bf:1d:92:57: 35:22:1e:81:1d:d8:c2:c8:d6:e5:ad:ee:1e:51:8e:9e:42:42: b4:ed:83:b6:2d:f0:08:6b:80:71:39:ec:81:64:9f:e3:21:0d: 30:10:4d:68:63:e4:27:f6:16:b6:be:c0:6a:3b:e7:37:31:23: 97:02:8c:85:cf:cf:14:70:56:65:c8:0f:8b:3a:81:b5:95:d8: b4:c7:5d:72:15:40:55:36:71:d3:87:50:db:2e:25:ef:f6:99: e3:f2:25:69:80:b4:d6:22:b1:9b:d7:bd:95:eb:9a:9c:04:c0: a2:6c:9e:bc:17:0c:0f:ae:65:cf:b7:ba:4c:c1:41:43:01:d4: f0:b0:71:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERERUQxMTAvBgNVBAUTKEY3NDlGNzZGOTJBMTZEMkE4NzE0MzdGNzJDODZEMEQw NURFMjlBRDUwHhcNMjQwNTE5MDU0NDI0WhcNMjQwNTI2MDU0NDI0WjAYMRYwFAYD VQQDEw02NjQ5OTFiOS0yZTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLAxHVRuHRmj6Zn4B8xqbFLPDTdJzd6IpPXfsyM90yJn8we6Laj5lP5RSF3M 23WNxFJtkqCqvMy3sENEKw7IWCCSx9K3LabOLr4LZwLA30V8AuTVdJf12PAcL2py BAR4XOL6f6AZ2n9161L4y0pdvB2A3kXhSS6dfi8zEI6Q8lEnqU4LiCxq1t94wkXd TgxSShWC23vUfDncE8BK1w1LWDYKjl8aGdQ7cwZ4eic4r+ZJeeqbmUtVFgEhJtEK u6U8VzWzprFGQ2bBgjnBUfxw63pLaQKzIZTpEFBIGxapXVte4DTRXdp1gCGTgoeJ MWaAWwsSgsY3llUPJFGN6fnDDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB90vosk mby4iypFijsucKZFePOCMB8GA1UdIwQYMBaAFPdJ92+SoW0qhxQ39yyG0NBd4prV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERERFRC83OUNDMDE2NjlE RjIxMUVEOTU5NDlGNTdDNEY5QUUwMi85MG4zYjVLaGJTcUhGRGYzTEliUTBGM2lt dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkwbjNiNUtoYlNxSEZEZjNMSWJRMEYzaW10VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RERFRC83OUNDMDE2NjlERjIxMUVEOTU5NDlGNTdDNEY5QUUwMi85MG4zYjVLaGJT cUhGRGYzTEliUTBGM2ltdFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAB0xHpU3hps7h1JXheCAgoLSkrzgFBZPjqI69BgODnBFnfo9HSZbbM F4hmQDvBX1E2zUwReTrcEfix7V7ALzxjNy+b9JdvgrEr8rZEDQ9cvMh96qb/UIir uD1zHrZdNqBvgCFt6f+CiU0lpiMY0o8aEX9YsP0dBAHsNL8dklc1Ih6BHdjCyNbl re4eUY6eQkK07YO2LfAIa4BxOeyBZJ/jIQ0wEE1oY+Qn9ha2vsBqO+c3MSOXAoyF z88UcFZlyA+LOoG1ldi0x11yFUBVNnHTh1DbLiXv9pnj8iVpgLTWIrGb172V65qc BMCibJ68FwwPrmXPt7pMwUFDAdTwsHHk -----END CERTIFICATE-----Generated at Sun May 19 07:40:46 2024 by rpki-client on console-fra.rpki-client.org