$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft File: aXYgUV57Huisfz9tE76uumLE7ak.mft (raw, json) Hash identifier: qwB5cQnJzdx7LRAUZypLbQ+3huAwh6uSyw6kkiLgBd4= Subject key identifier: C2:73:A4:D9:11:EC:7E:20:56:F5:27:91:9F:9D:89:B9:10:60:33:23 Authority key identifier: 69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 Certificate issuer: /CN=A91DE2AE/serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Certificate serial: 0115 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft Manifest number: 010B Signing time: Sun 19 May 2024 05:35:00 +0000 Manifest this update: Sun 19 May 2024 05:35:00 +0000 Manifest next update: Sun 26 May 2024 05:35:00 +0000 Files and hashes: 1: aXYgUV57Huisfz9tE76uumLE7ak.crl (hash: ofFH3JsOMS1zUtnGOD7AwLIzL5OiGzWRuUKxibs8lIg=) 2: 38E45CE08C2511EDB64DB410C4F9AE02.roa (hash: wwhddg3RMeo3ysiKpZIkpJZYnoyXbvI39OLMxKPP5Xg=) 3: F3B716768F2F11EE86964D62C4F9AE02.roa (hash: 1/DvyxegSe9VNjEpPkSKtnMnOpXbnNm973Ain9lFciA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE2AE/serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Validity Not Before: May 19 05:35:00 2024 GMT Not After : May 26 05:35:00 2024 GMT Subject: CN=66498f84-5c20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:45:17:67:1b:82:96:21:98:77:8f:85:2c:c1: 4f:cd:03:e2:69:d1:a3:85:50:0b:20:84:67:bf:94: 64:73:d6:8c:ef:fa:eb:b3:5f:b2:19:3b:87:d2:0f: 9a:8d:a4:98:df:ce:03:02:fc:cc:42:f8:b4:0c:c8: ae:ad:57:1a:d9:6d:70:38:31:2f:5f:2a:9f:7b:b6: ea:da:89:0e:25:7a:ad:73:02:1d:6c:00:e1:ed:69: 44:c7:e6:ed:f9:fb:22:90:4f:08:02:06:63:87:45: 99:85:46:70:40:20:82:61:94:a0:d0:0d:2e:cf:4d: 07:9f:ca:4b:63:bb:91:72:ff:01:cf:28:01:e1:5f: d4:3d:39:a9:ef:cc:ab:d0:30:70:78:79:57:22:d4: ef:5f:79:71:a4:ee:5b:6b:90:4e:f2:e3:5d:82:2a: 72:bb:95:a7:a9:ca:ff:ca:bb:6f:06:5e:ea:47:e6: 50:f8:0e:63:65:e7:b3:a6:78:fa:91:6f:9e:e2:bd: 2b:ba:c0:8f:59:75:97:37:ef:fb:d6:d7:7e:75:60: ba:57:bf:1b:49:01:2b:3d:8c:c3:44:5f:09:f1:b5: 3a:72:c9:33:81:39:2a:9a:dc:cf:79:a9:b7:de:62: 3b:d0:99:15:f7:44:70:92:07:f7:c1:28:3b:6d:2d: 0b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:73:A4:D9:11:EC:7E:20:56:F5:27:91:9F:9D:89:B9:10:60:33:23 X509v3 Authority Key Identifier: keyid:69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:b4:90:ca:20:a4:d5:fe:6f:24:91:36:72:b6:8b:7c:d5:67: 0f:f6:92:8b:86:ae:ea:a1:3b:b7:eb:a6:cf:4f:dd:1d:04:ff: d8:b6:69:71:78:e7:82:04:39:2d:a4:20:04:bb:31:39:a8:42: 6a:05:4c:3d:38:3d:1b:6d:e9:8c:ad:2b:46:f9:1f:ff:3e:b4: dc:c4:94:ff:4e:50:a3:77:63:1d:ad:da:71:48:80:76:9a:df: 0c:5e:29:c1:6e:76:3f:25:08:97:76:1c:96:60:c2:ee:a3:4f: 56:8e:7b:d5:f1:ae:e3:47:6a:c2:39:fb:65:29:b4:a1:6a:07: e4:4b:92:f4:d7:86:c0:3e:07:ed:93:2c:eb:45:7d:d5:f4:c2: 8b:04:2d:a9:0c:f1:e7:e6:9a:e1:b6:fa:7d:00:25:95:f9:89: 51:e5:22:81:fa:48:03:49:e4:de:46:9e:01:e5:76:2c:e0:63: ec:b1:aa:89:6a:66:ff:88:1d:e6:fd:83:79:d9:9d:66:65:ba: 19:21:f0:a2:59:49:8a:a4:4a:cb:9c:fc:72:f8:39:40:37:5d: 42:1f:94:2c:2e:21:e8:23:22:fb:b3:1e:51:0b:6f:65:12:2a: 4a:13:3e:1b:64:ea:86:b5:b3:54:1a:f4:49:0e:e3:0b:b3:d2: 6b:00:ab:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUyQUUxMTAvBgNVBAUTKDY5NzYyMDUxNUU3QjFFRThBQzdGM0Y2RDEzQkVBRUJB NjJDNEVEQTkwHhcNMjQwNTE5MDUzNTAwWhcNMjQwNTI2MDUzNTAwWjAYMRYwFAYD VQQDEw02NjQ5OGY4NC01YzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUUXZxuCliGYd4+FLMFPzQPiadGjhVALIIRnv5Rkc9aM7/rrs1+yGTuH0g+a jaSY384DAvzMQvi0DMiurVca2W1wODEvXyqfe7bq2okOJXqtcwIdbADh7WlEx+bt +fsikE8IAgZjh0WZhUZwQCCCYZSg0A0uz00Hn8pLY7uRcv8BzygB4V/UPTmp78yr 0DBweHlXItTvX3lxpO5ba5BO8uNdgipyu5Wnqcr/yrtvBl7qR+ZQ+A5jZeezpnj6 kW+e4r0rusCPWXWXN+/71td+dWC6V78bSQErPYzDRF8J8bU6cskzgTkqmtzPeam3 3mI70JkV90Rwkgf3wSg7bS0L8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJzpNkR 7H4gVvUnkZ+dibkQYDMjMB8GA1UdIwQYMBaAFGl2IFFeex7orH8/bRO+rrpixO2p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTJBRS9DNzBGRUEyQThD MjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1aXNmejl0RTc2dXVtTEU3 YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FYWWdVVjU3SHVpc2Z6OXRFNzZ1dW1MRTdhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTJBRS9DNzBGRUEyQThDMjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1 aXNmejl0RTc2dXVtTEU3YWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAtJDKIKTV/m8kkTZytot81WcP9pKLhq7qoTu366bPT90dBP/Ytmlx eOeCBDktpCAEuzE5qEJqBUw9OD0bbemMrStG+R//PrTcxJT/TlCjd2MdrdpxSIB2 mt8MXinBbnY/JQiXdhyWYMLuo09WjnvV8a7jR2rCOftlKbShagfkS5L014bAPgft kyzrRX3V9MKLBC2pDPHn5prhtvp9ACWV+YlR5SKB+kgDSeTeRp4B5XYs4GPssaqJ amb/iB3m/YN52Z1mZboZIfCiWUmKpErLnPxy+DlAN11CH5QsLiHoIyL7sx5RC29l EipKEz4bZOqGtbNUGvRJDuMLs9JrAKuj -----END CERTIFICATE-----Generated at Sun May 19 06:14:37 2024 by rpki-client on console-ams.rpki-client.org