$ rpki-client -vvf rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft File: sumTicSsA0jYrsh1t0aJ0E5wyDo.mft (raw, json) Hash identifier: VHdWcLyjDzr/l6AbAwcBNtPSCGmucLumKdlUdM9kswQ= Subject key identifier: 19:8B:E7:DC:B0:9C:F4:22:83:E0:17:86:13:4E:96:9D:4C:F5:A7:1B Authority key identifier: B2:E9:93:89:C4:AC:03:48:D8:AE:C8:75:B7:46:89:D0:4E:70:C8:3A Certificate issuer: /CN=A91E77A1/serialNumber=B2E99389C4AC0348D8AEC875B74689D04E70C83A Certificate serial: 06C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft Manifest number: 06B9 Signing time: Sat 18 May 2024 23:09:01 +0000 Manifest this update: Sat 18 May 2024 23:09:01 +0000 Manifest next update: Sat 25 May 2024 23:09:01 +0000 Files and hashes: 1: sumTicSsA0jYrsh1t0aJ0E5wyDo.crl (hash: J/ak9x2/29w8/N76XQx/VKvtRkDfpTrdGlYHmrm5y/I=) 2: 4F7AD592169311EB89C20F1DC4F9AE02.roa (hash: XKVyEB5gGMdbZZklWgaxiu1Qm2EFMmnpQEz2Juw2PmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.crl rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1728 (0x6c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E77A1/serialNumber=B2E99389C4AC0348D8AEC875B74689D04E70C83A Validity Not Before: May 18 23:09:01 2024 GMT Not After : May 25 23:09:01 2024 GMT Subject: CN=6649350d-273e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f2:f5:14:46:a1:1e:53:02:45:25:b1:96:62: 5d:fe:40:2d:7f:20:94:5d:0c:d4:f1:45:79:cc:13: 78:4e:8f:f9:f1:fe:cf:98:67:b8:92:7a:da:6a:71: 07:ec:39:6d:3c:d3:f9:9c:51:97:cb:41:8d:99:33: 3e:8a:ed:aa:22:42:bf:46:91:e4:e9:b0:fb:99:1b: ff:aa:fc:49:cf:38:ad:74:a7:91:42:68:96:9d:7c: aa:8d:08:58:09:69:6e:b5:cc:6a:37:e2:f9:26:b2: 99:6c:de:49:ae:ff:97:0d:3b:7d:a4:61:c2:91:94: bd:ae:a0:a1:12:97:44:81:62:56:97:d1:5a:59:5d: f6:0e:31:f9:45:30:45:be:7f:2b:4c:d7:c9:ff:2f: d5:2a:37:38:77:ba:d4:35:68:b4:84:99:ec:f5:05: c2:e0:da:6f:97:7d:8c:b4:91:52:89:43:aa:af:3a: 0a:fc:3a:e9:0e:8e:41:c0:15:af:7e:41:fa:e1:6f: 2f:73:a2:21:b0:52:73:b6:0b:06:f0:a0:5f:e3:7d: 74:65:74:b5:15:94:a6:69:77:ec:9c:2f:37:3f:7d: 4d:be:a9:9b:c7:99:24:92:0c:09:96:38:f5:77:6d: 9c:b6:ad:ef:61:a2:22:6a:b7:30:2c:07:2d:4e:13: 02:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:8B:E7:DC:B0:9C:F4:22:83:E0:17:86:13:4E:96:9D:4C:F5:A7:1B X509v3 Authority Key Identifier: keyid:B2:E9:93:89:C4:AC:03:48:D8:AE:C8:75:B7:46:89:D0:4E:70:C8:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:8a:ae:ec:17:0c:a6:c9:a3:d5:f2:3e:8b:0a:85:c6:b7:fe: 30:4d:0c:e7:47:f7:8d:93:52:d0:e0:0f:de:ca:0d:af:ef:3e: e5:40:19:06:5e:e0:9d:a8:99:e8:a6:89:75:c7:5d:7d:00:01: 29:4a:e8:b2:ec:62:da:de:6e:a4:b9:48:57:ec:6d:21:cf:90: d2:a1:9a:7b:33:92:54:ae:1b:ec:73:9b:f5:1e:04:81:a2:42: 05:6d:7c:7c:3c:73:c5:d4:5d:17:1c:3e:97:4d:bc:94:8b:83: e1:bd:99:a9:1e:ae:ca:fb:0e:44:0e:46:e0:b0:c7:fd:7d:82: 01:6f:11:26:06:24:fb:a3:cd:94:8a:ed:84:28:d9:8e:5c:ec: 31:bf:c9:a5:3f:83:ed:b5:00:75:57:dd:f7:d4:23:ca:09:06: 6e:57:f6:4b:1d:9c:4c:cc:26:c8:ef:d1:1e:18:2e:93:13:e8: 16:eb:2f:38:b5:67:13:45:83:df:b5:ad:29:39:5e:64:01:e5: c9:21:2e:af:86:fe:e5:da:94:e4:38:3e:f7:23:49:16:f5:0a: c3:6d:1f:05:43:e9:2d:1f:21:7f:81:3e:ac:b9:8b:80:76:52: 95:61:9c:c8:eb:16:bf:58:fd:91:cb:9e:3f:32:e5:78:84:6b: a3:d1:ef:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc3QTExMTAvBgNVBAUTKEIyRTk5Mzg5QzRBQzAzNDhEOEFFQzg3NUI3NDY4OUQw NEU3MEM4M0EwHhcNMjQwNTE4MjMwOTAxWhcNMjQwNTI1MjMwOTAxWjAYMRYwFAYD VQQDEw02NjQ5MzUwZC0yNzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPL1FEahHlMCRSWxlmJd/kAtfyCUXQzU8UV5zBN4To/58f7PmGe4knraanEH 7DltPNP5nFGXy0GNmTM+iu2qIkK/RpHk6bD7mRv/qvxJzzitdKeRQmiWnXyqjQhY CWlutcxqN+L5JrKZbN5Jrv+XDTt9pGHCkZS9rqChEpdEgWJWl9FaWV32DjH5RTBF vn8rTNfJ/y/VKjc4d7rUNWi0hJns9QXC4Npvl32MtJFSiUOqrzoK/DrpDo5BwBWv fkH64W8vc6IhsFJztgsG8KBf4310ZXS1FZSmaXfsnC83P31Nvqmbx5kkkgwJljj1 d22ctq3vYaIiarcwLActThMC7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBmL59yw nPQig+AXhhNOlp1M9acbMB8GA1UdIwQYMBaAFLLpk4nErANI2K7IdbdGidBOcMg6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzdBMS9CNUMyN0E4QzE2 OTExMUVCQUFCMzA0MUJDNEY5QUUwMi9zdW1UaWNTc0Ewallyc2gxdDBhSjBFNXd5 RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N1bVRpY1NzQTBqWXJzaDF0MGFKMEU1d3lEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzdBMS9CNUMyN0E4QzE2OTExMUVCQUFCMzA0MUJDNEY5QUUwMi9zdW1UaWNTc0Ew allyc2gxdDBhSjBFNXd5RG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgiq7sFwymyaPV8j6LCoXGt/4wTQznR/eNk1LQ4A/eyg2v7z7lQBkG XuCdqJnopol1x119AAEpSuiy7GLa3m6kuUhX7G0hz5DSoZp7M5JUrhvsc5v1HgSB okIFbXx8PHPF1F0XHD6XTbyUi4PhvZmpHq7K+w5EDkbgsMf9fYIBbxEmBiT7o82U iu2EKNmOXOwxv8mlP4PttQB1V9331CPKCQZuV/ZLHZxMzCbI79EeGC6TE+gW6y84 tWcTRYPfta0pOV5kAeXJIS6vhv7l2pTkOD73I0kW9QrDbR8FQ+ktHyF/gT6suYuA dlKVYZzI6xa/WP2Ry54/MuV4hGuj0e9r -----END CERTIFICATE-----Generated at Sun May 19 00:30:23 2024 by rpki-client on console-ams.rpki-client.org