$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft File: RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft (raw, json) Hash identifier: zh3d2YTJWkAdWaxIE0ZM42WdWZ/cfrC8bPXHEbmDz7k= Subject key identifier: 0A:93:19:E5:10:0A:CE:31:4C:3C:D9:C5:0D:48:3B:4E:78:4D:45:C2 Authority key identifier: 44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78 Certificate issuer: /CN=A91E5C49/serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078 Certificate serial: 06AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft Manifest number: 0D4F Signing time: Sat 18 May 2024 23:13:13 +0000 Manifest this update: Sat 18 May 2024 23:13:11 +0000 Manifest next update: Sat 25 May 2024 23:13:11 +0000 Files and hashes: 1: RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl (hash: ZwhlV+sKNjW5fvLvthm9XOqRRvBB18pbWFo1L/jF6l8=) 2: 84FDF25A396711ED8AF52966C4F9AE02.roa (hash: EBXyk7J1juUSCo9ffavc5zkC50I9TkO5JanIZPMY63A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1709 (0x6ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5C49/serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078 Validity Not Before: May 18 23:13:11 2024 GMT Not After : May 25 23:13:11 2024 GMT Subject: CN=66493607-5537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c0:24:ae:d8:f5:28:39:ad:87:6c:03:f0:d9: ba:d9:4f:61:f5:a9:32:12:55:68:92:a1:e6:5b:f6: aa:f1:a2:65:ce:a9:cf:3b:c0:45:85:c9:23:30:bd: e9:6a:cf:17:d8:11:7b:87:8b:24:d2:69:99:e6:ef: 5a:01:50:00:a1:00:06:ac:a4:2d:d9:2e:ae:4c:d2: d9:a4:9b:d7:f1:e3:15:63:2d:9a:a5:fe:69:f5:fd: d0:7c:66:98:24:88:68:9c:43:32:d6:de:a9:b3:9f: 1b:73:26:b9:17:16:8e:69:1f:e9:86:21:77:61:a0: e9:53:a5:4c:49:de:e4:ee:4c:d4:a1:a5:90:d2:9b: b6:3a:08:fb:69:17:6a:72:6a:ba:6f:a8:e1:c7:05: 80:c2:e4:dd:8f:e6:92:b3:25:a5:f7:e9:b8:fc:2e: a6:a7:43:2d:5e:3b:b2:d2:b5:2d:b5:cd:49:7b:0a: c3:83:24:59:df:7d:ca:c3:2d:44:9e:b4:7b:81:bd: 09:8f:58:da:84:34:7d:40:a1:3a:4c:e5:36:39:73: 8a:fc:71:d3:5e:95:67:a6:10:5f:d7:e5:67:c9:3e: cf:7e:21:1a:a6:04:2f:61:45:a1:ad:f7:e4:4f:97: f1:80:a8:ed:58:eb:f7:cb:06:d1:4a:ca:c7:b9:ff: 7b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:93:19:E5:10:0A:CE:31:4C:3C:D9:C5:0D:48:3B:4E:78:4D:45:C2 X509v3 Authority Key Identifier: keyid:44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:02:78:f4:59:a8:0c:a5:65:84:8e:26:88:44:01:ee:e5:d0: 5e:89:ce:6d:ee:f9:78:76:6f:1a:29:f7:26:e6:91:55:a9:23: 1a:59:ad:4d:b1:cc:a2:d9:37:55:5c:8e:df:5a:4f:43:44:6d: e6:8a:c4:fe:40:06:6e:46:07:59:7d:de:72:d4:e9:0e:c2:e6: 29:af:f0:ed:d7:a6:77:ef:de:e1:da:22:b5:8b:74:22:78:20: 33:2f:0b:f7:58:6b:52:91:85:27:38:03:b4:cc:31:4b:ad:f8: 3e:9c:a0:aa:71:3b:14:1f:00:6a:f5:56:95:70:bd:aa:1e:40: 11:ab:d1:82:55:1a:83:79:62:5e:e0:12:87:7c:e8:cf:86:f6: fc:4c:1f:15:d8:7a:41:f7:11:a4:a8:0a:7f:db:6a:7b:fc:94: 01:8f:48:79:c1:e3:d3:b3:5f:ea:08:7f:13:7d:6c:8e:9d:38: 7d:34:e5:a2:0c:ad:80:c1:24:97:3b:17:08:89:2f:5b:44:43: e0:45:9c:dd:8d:48:43:53:34:8f:f9:06:b2:15:61:f6:15:f9: 01:a2:ce:1f:4c:f4:2e:01:7a:53:d0:83:97:d3:fa:1c:2f:9d: 58:43:39:53:45:12:17:7b:df:91:f7:9e:2f:07:ae:ae:93:fa: 37:b2:1b:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVDNDkxMTAvBgNVBAUTKDQ0MTZFODk4NThEQTY3N0IwQ0RBMzNCODdCMkU4QzhB RkQxQzYwNzgwHhcNMjQwNTE4MjMxMzExWhcNMjQwNTI1MjMxMzExWjAYMRYwFAYD VQQDEw02NjQ5MzYwNy01NTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnsAkrtj1KDmth2wD8Nm62U9h9akyElVokqHmW/aq8aJlzqnPO8BFhckjML3p as8X2BF7h4sk0mmZ5u9aAVAAoQAGrKQt2S6uTNLZpJvX8eMVYy2apf5p9f3QfGaY JIhonEMy1t6ps58bcya5FxaOaR/phiF3YaDpU6VMSd7k7kzUoaWQ0pu2Ogj7aRdq cmq6b6jhxwWAwuTdj+aSsyWl9+m4/C6mp0MtXjuy0rUttc1JewrDgyRZ333Kwy1E nrR7gb0Jj1jahDR9QKE6TOU2OXOK/HHTXpVnphBf1+VnyT7PfiEapgQvYUWhrffk T5fxgKjtWOv3ywbRSsrHuf97KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAqTGeUQ Cs4xTDzZxQ1IO054TUXCMB8GA1UdIwQYMBaAFEQW6JhY2md7DNozuHsujIr9HGB4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUM0OS84QTg3RUZDMjFB NDgxMUVCOEYxNDMyNDZDNEY5QUUwMi9SQmJvbUZqYVozc00yak80ZXk2TWl2MGNZ SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JCYm9tRmphWjNzTTJqTzRleTZNaXYwY1lIZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUM0OS84QTg3RUZDMjFBNDgxMUVCOEYxNDMyNDZDNEY5QUUwMi9SQmJvbUZqYVoz c00yak80ZXk2TWl2MGNZSGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcAnj0WagMpWWEjiaIRAHu5dBeic5t7vl4dm8aKfcm5pFVqSMaWa1N scyi2TdVXI7fWk9DRG3misT+QAZuRgdZfd5y1OkOwuYpr/Dt16Z3797h2iK1i3Qi eCAzLwv3WGtSkYUnOAO0zDFLrfg+nKCqcTsUHwBq9VaVcL2qHkARq9GCVRqDeWJe 4BKHfOjPhvb8TB8V2HpB9xGkqAp/22p7/JQBj0h5wePTs1/qCH8TfWyOnTh9NOWi DK2AwSSXOxcIiS9bREPgRZzdjUhDUzSP+QayFWH2FfkBos4fTPQuAXpT0IOX0/oc L51YQzlTRRIXe9+R954vB66uk/o3shuq -----END CERTIFICATE-----Generated at Sun May 19 00:30:23 2024 by rpki-client on console-ams.rpki-client.org