$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft File: SLmUWYf2drRs7T3hKEmoo49AaLU.mft (raw, json) Hash identifier: 5Bq4pVLNLJpVaBlUos0BvEqd6XPQVFYIscfCOSCyZ0A= Subject key identifier: 63:F6:9E:1A:A8:2A:9A:8E:A8:CC:75:82:7C:D6:D8:27:30:C4:F9:37 Authority key identifier: 48:B9:94:59:87:F6:76:B4:6C:ED:3D:E1:28:49:A8:A3:8F:40:68:B5 Certificate issuer: /CN=A91E1BAB/serialNumber=48B9945987F676B46CED3DE12849A8A38F4068B5 Certificate serial: 072B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLmUWYf2drRs7T3hKEmoo49AaLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft Manifest number: 0719 Signing time: Sat 18 May 2024 22:39:59 +0000 Manifest this update: Sat 18 May 2024 22:39:59 +0000 Manifest next update: Sat 25 May 2024 22:39:59 +0000 Files and hashes: 1: SLmUWYf2drRs7T3hKEmoo49AaLU.crl (hash: AIPhodtaTQ2zAjtMeOAHPZgMWRyl4/y4grcr7Qam+Cc=) 2: 37A46070F6F211EA922F482BC4F9AE02.roa (hash: abpHjZAvbs4qC9WBBPzqi+c7CmMUiHDfmwHOTCh+x/k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.crl rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLmUWYf2drRs7T3hKEmoo49AaLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1835 (0x72b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1BAB/serialNumber=48B9945987F676B46CED3DE12849A8A38F4068B5 Validity Not Before: May 18 22:39:59 2024 GMT Not After : May 25 22:39:59 2024 GMT Subject: CN=66492e3f-03d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c7:d1:c2:74:87:5a:7e:f3:32:ea:a7:eb:73: ab:6e:78:28:ef:63:97:a0:01:60:3a:f8:e8:ff:dd: 48:89:56:3b:ed:2c:62:ee:6a:b5:55:2a:9d:78:e3: c5:0d:44:2c:56:75:f3:20:03:ba:84:4a:6c:94:8f: fc:5d:39:c8:dc:ec:6e:29:ef:dd:7e:86:d5:65:6e: 6a:a1:d2:5e:f8:cf:07:3f:e0:d7:ee:bc:66:26:44: ab:28:32:1f:b6:8e:28:a3:db:02:32:48:5c:c1:c7: 73:bc:31:b9:1d:70:c7:b7:7b:03:b1:db:de:0a:16: b2:9c:ed:63:58:14:28:72:de:8e:73:5e:f1:00:0a: 91:cf:79:4f:bc:07:7a:95:9e:61:b9:d6:69:a6:7b: 7d:bd:5d:c9:a3:5e:0d:da:6c:6f:bd:27:cc:29:24: 74:19:28:9b:a8:5d:8e:77:9f:0b:71:6d:75:57:e3: 38:03:cc:cd:63:ca:f5:66:0a:9c:e7:11:4e:cf:24: d5:83:ad:36:3e:96:0e:7f:97:4b:af:4c:f6:f9:33: 49:f5:00:94:85:64:d0:c0:f8:dc:b9:62:bd:40:bc: ac:6f:cd:bb:e7:87:e0:d3:9e:1f:3f:e8:d2:14:3d: b4:e0:78:59:b3:12:58:29:eb:63:15:1f:ae:96:25: a0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F6:9E:1A:A8:2A:9A:8E:A8:CC:75:82:7C:D6:D8:27:30:C4:F9:37 X509v3 Authority Key Identifier: keyid:48:B9:94:59:87:F6:76:B4:6C:ED:3D:E1:28:49:A8:A3:8F:40:68:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLmUWYf2drRs7T3hKEmoo49AaLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:f6:85:e7:bc:42:56:56:60:b9:bc:d8:42:e0:55:3d:7e:d4: 7d:bb:9c:ba:86:a3:8d:6c:5f:1a:26:9e:62:cf:f8:e0:da:a4: c7:7a:83:a7:33:e0:7b:0e:48:f3:6a:39:78:a2:c0:c0:b6:4b: 7d:60:d7:2a:0c:4b:28:4b:d1:a4:c4:57:51:ce:56:29:83:2e: bc:5b:2e:da:04:17:d7:bc:18:fd:e2:74:d7:fa:a6:2a:63:17: 17:c8:e1:84:5e:fe:ee:2d:c1:4e:43:7b:94:4f:d8:50:90:26: 00:91:6c:42:a0:48:72:f4:f5:83:65:fa:de:a7:c3:a9:c0:f3: 97:cd:b9:27:4d:8c:49:13:89:22:35:da:58:13:5c:8e:da:89: 29:c6:2a:ac:7e:bd:b1:b6:f4:15:7e:5f:19:23:eb:d4:a6:42: e4:e8:a5:ee:72:61:51:de:f5:05:08:d0:e4:96:b3:aa:60:49: 0e:47:f0:82:ad:e0:97:86:5f:02:6a:7e:8e:53:f0:62:d7:04: 64:ac:92:46:12:a4:58:c6:2a:8d:58:1f:2c:e7:7a:7c:cb:cb: 79:0e:5c:40:c3:5d:dc:5c:03:cc:fd:15:ff:f6:b7:45:51:b6: e2:32:29:8a:1b:1f:c6:21:40:76:81:d2:62:e8:20:29:4a:1f: ac:89:f8:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFCQUIxMTAvBgNVBAUTKDQ4Qjk5NDU5ODdGNjc2QjQ2Q0VEM0RFMTI4NDlBOEEz OEY0MDY4QjUwHhcNMjQwNTE4MjIzOTU5WhcNMjQwNTI1MjIzOTU5WjAYMRYwFAYD VQQDEw02NjQ5MmUzZi0wM2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzMfRwnSHWn7zMuqn63Orbngo72OXoAFgOvjo/91IiVY77Sxi7mq1VSqdeOPF DUQsVnXzIAO6hEpslI/8XTnI3OxuKe/dfobVZW5qodJe+M8HP+DX7rxmJkSrKDIf to4oo9sCMkhcwcdzvDG5HXDHt3sDsdveChaynO1jWBQoct6Oc17xAAqRz3lPvAd6 lZ5hudZppnt9vV3Jo14N2mxvvSfMKSR0GSibqF2Od58LcW11V+M4A8zNY8r1Zgqc 5xFOzyTVg602PpYOf5dLr0z2+TNJ9QCUhWTQwPjcuWK9QLysb82754fg054fP+jS FD204HhZsxJYKetjFR+uliWg+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGP2nhqo KpqOqMx1gnzW2CcwxPk3MB8GA1UdIwQYMBaAFEi5lFmH9na0bO094ShJqKOPQGi1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUJBQi8wQjk3NjAxQUY2 NjQxMUVBOTFDRDJBNTNDNEY5QUUwMi9TTG1VV1lmMmRyUnM3VDNoS0Vtb280OUFh TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NMbVVXWWYyZHJSczdUM2hLRW1vbzQ5QWFMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUJBQi8wQjk3NjAxQUY2NjQxMUVBOTFDRDJBNTNDNEY5QUUwMi9TTG1VV1lmMmRy UnM3VDNoS0Vtb280OUFhTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCe9oXnvEJWVmC5vNhC4FU9ftR9u5y6hqONbF8aJp5iz/jg2qTHeoOn M+B7Dkjzajl4osDAtkt9YNcqDEsoS9GkxFdRzlYpgy68Wy7aBBfXvBj94nTX+qYq YxcXyOGEXv7uLcFOQ3uUT9hQkCYAkWxCoEhy9PWDZfrep8OpwPOXzbknTYxJE4ki NdpYE1yO2okpxiqsfr2xtvQVfl8ZI+vUpkLk6KXucmFR3vUFCNDklrOqYEkOR/CC reCXhl8Can6OU/Bi1wRkrJJGEqRYxiqNWB8s53p8y8t5DlxAw13cXAPM/RX/9rdF UbbiMimKGx/GIUB2gdJi6CApSh+sifgC -----END CERTIFICATE-----Generated at Sun May 19 00:16:20 2024 by rpki-client on console-fra.rpki-client.org