$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft File: mlTRAXUBnPgIazCzHmUq4GAv9rw.mft (raw, json) Hash identifier: ZQOxN3eibTao6T8EB3tY3kAbic/DYrxncEJ8mV6zZ0U= Subject key identifier: A5:9E:D6:A5:0D:B6:5C:19:54:8E:11:35:E2:8E:DB:3D:BE:0F:D3:39 Authority key identifier: 9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC Certificate issuer: /CN=A91E57C9/serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC Certificate serial: 01F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft Manifest number: 01EA Signing time: Sun 19 May 2024 04:15:45 +0000 Manifest this update: Sun 19 May 2024 04:15:45 +0000 Manifest next update: Sun 26 May 2024 04:15:45 +0000 Files and hashes: 1: mlTRAXUBnPgIazCzHmUq4GAv9rw.crl (hash: z8zWWQ+ZrC5aRg1JJVmHWE2xTM9JJvYM8Su5p9edf50=) 2: 2AEC4C4EF9D911ECBC381559C4F9AE02.roa (hash: vfdbKyJ3mviRT1GnKxYZo1xv2FhpXFvdbF0/IM2Mc1w=) 3: 2B658C44F9D911ECBC381559C4F9AE02.roa (hash: qqSsVUySdeF/mPXA1H2/Nb+W0uFPMOk9qHP5kfHhs6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 496 (0x1f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57C9/serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC Validity Not Before: May 19 04:15:45 2024 GMT Not After : May 26 04:15:45 2024 GMT Subject: CN=66497cf1-bb65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3a:ba:9a:59:b1:b6:62:e9:d6:e2:db:fd:80: bb:05:5c:57:53:57:02:7c:48:60:89:fc:98:56:8c: 21:7f:81:31:a7:86:5a:41:04:47:87:88:8c:ca:2a: 24:07:c0:21:9b:d3:88:78:93:4a:60:d3:88:6a:22: 47:cc:63:68:a0:8e:b7:61:a0:6a:91:45:e0:74:61: e7:55:ba:f1:10:e6:fc:bf:3b:5b:27:1f:51:80:39: 0b:68:3c:1a:a5:78:79:91:d6:be:26:68:ed:9c:23: d3:30:1d:90:36:d1:80:da:d2:0d:10:5b:f4:5c:65: 72:f9:01:6f:e0:4a:4d:05:8a:c6:0e:32:47:ed:9d: 53:25:73:e1:98:19:53:1a:cf:af:d6:fc:a8:f6:39: 89:ad:16:2a:8f:30:8b:80:5f:00:e9:ed:50:68:8e: de:77:4a:49:bd:fc:d2:be:a1:28:4d:5b:ae:65:18: 12:82:a1:26:7b:9c:69:18:a0:9a:08:c8:9c:06:cc: 2a:39:bb:c3:f7:cf:92:ca:cb:b2:cb:ae:09:be:a2: 19:ec:a6:38:0a:dc:89:e1:f7:a1:1e:1f:10:b5:4e: 69:e2:4c:55:4d:ab:27:b9:8a:b7:5f:1a:5d:84:94: 49:91:65:67:cf:7e:44:d8:c6:5a:44:28:95:54:0a: 15:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:9E:D6:A5:0D:B6:5C:19:54:8E:11:35:E2:8E:DB:3D:BE:0F:D3:39 X509v3 Authority Key Identifier: keyid:9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:cd:09:3a:cd:84:15:89:79:af:03:12:58:70:95:ef:b5:7c: ac:f1:29:66:80:69:0b:d6:39:c9:63:2a:15:fd:fc:e0:0c:af: e3:c9:98:f9:0b:ec:16:a6:78:c2:57:a0:d4:36:fe:41:c9:88: 35:7a:06:06:96:a6:ec:e4:2e:7d:0c:46:61:2c:12:4c:68:80: cb:59:ef:b6:39:99:e7:77:c6:1c:17:d3:31:c5:11:57:d8:73: 6f:4e:88:32:82:d6:c3:ae:10:a7:36:c2:d4:7f:0f:2d:da:6c: 9d:de:8c:e0:a5:0d:75:1e:30:92:61:1d:b1:7c:47:5e:1f:4b: dc:92:63:c0:89:06:7c:84:f6:b2:d7:0a:16:b8:ae:65:45:6f: 10:d3:d6:ec:02:06:9b:af:bf:5a:ee:a3:b8:fc:a7:72:c2:87: bb:14:4d:07:6b:88:ea:27:3d:4b:ff:0c:d9:63:e4:7b:58:9b: 45:79:97:a7:d2:06:a2:e1:f6:e9:a6:a9:4d:28:70:69:ba:d5: fb:de:01:33:9c:3a:f1:24:d0:0b:46:e2:64:87:1d:19:61:3d: 22:a1:8a:7e:32:d1:57:7a:6c:23:db:6f:26:32:97:3e:f3:8f: de:0e:43:9f:4f:42:78:12:ab:a7:55:02:b8:10:ad:88:ec:c5: 01:7a:39:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3QzkxMTAvBgNVBAUTKDlBNTREMTAxNzUwMTlDRjgwODZCMzBCMzFFNjUyQUUw NjAyRkY2QkMwHhcNMjQwNTE5MDQxNTQ1WhcNMjQwNTI2MDQxNTQ1WjAYMRYwFAYD VQQDEw02NjQ5N2NmMS1iYjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszq6mlmxtmLp1uLb/YC7BVxXU1cCfEhgifyYVowhf4Exp4ZaQQRHh4iMyiok B8Ahm9OIeJNKYNOIaiJHzGNooI63YaBqkUXgdGHnVbrxEOb8vztbJx9RgDkLaDwa pXh5kda+JmjtnCPTMB2QNtGA2tINEFv0XGVy+QFv4EpNBYrGDjJH7Z1TJXPhmBlT Gs+v1vyo9jmJrRYqjzCLgF8A6e1QaI7ed0pJvfzSvqEoTVuuZRgSgqEme5xpGKCa CMicBswqObvD98+Sysuyy64JvqIZ7KY4CtyJ4fehHh8QtU5p4kxVTasnuYq3Xxpd hJRJkWVnz35E2MZaRCiVVAoVyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKWe1qUN tlwZVI4RNeKO2z2+D9M5MB8GA1UdIwQYMBaAFJpU0QF1AZz4CGswsx5lKuBgL/a8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdDOS85QzZFRjc0RUY5 RDUxMUVDQjZEQ0FENTRDNEY5QUUwMi9tbFRSQVhVQm5QZ0lhekN6SG1VcTRHQXY5 cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21sVFJBWFVCblBnSWF6Q3pIbVVxNEdBdjlydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdDOS85QzZFRjc0RUY5RDUxMUVDQjZEQ0FENTRDNEY5QUUwMi9tbFRSQVhVQm5Q Z0lhekN6SG1VcTRHQXY5cncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwzQk6zYQViXmvAxJYcJXvtXys8SlmgGkL1jnJYyoV/fzgDK/jyZj5 C+wWpnjCV6DUNv5ByYg1egYGlqbs5C59DEZhLBJMaIDLWe+2OZnnd8YcF9MxxRFX 2HNvTogygtbDrhCnNsLUfw8t2myd3ozgpQ11HjCSYR2xfEdeH0vckmPAiQZ8hPay 1woWuK5lRW8Q09bsAgabr79a7qO4/Kdywoe7FE0Ha4jqJz1L/wzZY+R7WJtFeZen 0gai4fbppqlNKHBputX73gEznDrxJNALRuJkhx0ZYT0ioYp+MtFXemwj228mMpc+ 84/eDkOfT0J4EqunVQK4EK2I7MUBejmj -----END CERTIFICATE-----Generated at Sun May 19 05:08:06 2024 by rpki-client on console-ams.rpki-client.org