$ rpki-client -vvf rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft File: CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft (raw, json) Hash identifier: D3p2s8mVE80oJ0R/ytWbTM3y/OOjmYoxEK4LuKX1LuY= Subject key identifier: 5C:74:29:E5:38:AF:C4:A6:52:1D:92:25:46:C3:C2:D4:43:B8:B1:51 Authority key identifier: 09:5F:6C:6B:B3:87:C6:93:2F:DA:01:C0:BF:A6:26:F6:AA:C7:BB:00 Certificate issuer: /CN=A91F05B5/serialNumber=095F6C6BB387C6932FDA01C0BFA626F6AAC7BB00 Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft Manifest number: 9D Signing time: Sun 19 May 2024 06:49:18 +0000 Manifest this update: Sun 19 May 2024 06:49:18 +0000 Manifest next update: Sun 26 May 2024 06:49:18 +0000 Files and hashes: 1: CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl (hash: d5x+CN2WhU2FPo81MPcaGO1t7PKSQ58LzOyyE6qVh64=) 2: E0A69DBC2AB311EE9CA5E515C4F9AE02.roa (hash: Q1Ci8XSusOlbJiaQgnsA9zwbSmyc3pDAXKY43VYpnTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F05B5/serialNumber=095F6C6BB387C6932FDA01C0BFA626F6AAC7BB00 Validity Not Before: May 19 06:49:18 2024 GMT Not After : May 26 06:49:18 2024 GMT Subject: CN=6649a0ee-8f4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:39:94:d0:0c:ba:85:b4:71:d0:20:62:58:35: 3b:4b:62:9c:2d:9f:25:de:8c:45:7d:ca:5b:e8:df: 6c:d3:db:bc:0e:eb:cd:8c:d3:3e:e8:45:31:13:8b: 23:20:9a:6b:29:c8:df:0b:6d:d3:1a:49:58:7d:4b: 2b:06:5c:d8:f0:75:a3:3e:be:a8:e3:04:be:0c:d2: 3f:ab:0c:5b:ee:5c:31:1d:8c:a9:d1:82:ef:97:2b: cb:d4:72:67:e0:c0:6f:b9:cc:5c:20:9d:be:54:ec: cb:b7:cd:c4:eb:20:e5:47:d1:40:40:46:8a:66:d7: be:4e:29:0d:82:e6:7c:43:b3:89:7a:8e:0d:9d:93: 7d:92:30:e7:91:2d:07:f5:48:fe:51:0f:88:95:81: af:77:68:09:e1:28:f2:e4:f3:80:70:d4:d8:bf:d1: 55:39:b9:9a:fc:7c:e0:6b:bd:70:cc:3a:44:a4:b9: 2a:c2:f1:ba:19:c5:51:33:32:2a:30:8b:d2:cb:2b: 92:27:02:d3:b0:33:35:95:44:6c:f0:de:d1:cd:88: 3d:e0:4d:33:78:5a:1a:92:87:2b:f9:78:0d:ec:53: 19:4d:f4:4f:0c:ea:98:c8:16:c9:5c:75:84:36:93: c2:46:1c:e0:25:8e:11:23:96:f4:f0:08:eb:06:23: 02:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:74:29:E5:38:AF:C4:A6:52:1D:92:25:46:C3:C2:D4:43:B8:B1:51 X509v3 Authority Key Identifier: keyid:09:5F:6C:6B:B3:87:C6:93:2F:DA:01:C0:BF:A6:26:F6:AA:C7:BB:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:8d:82:66:27:32:ed:c5:c1:34:4d:ec:b7:14:27:b4:e2:42: 17:9e:0b:44:69:19:04:a0:20:58:0a:1d:90:16:71:49:5b:95: 7b:0b:b0:bf:43:db:49:6b:08:43:40:5a:5c:09:5f:9b:9b:ac: 5f:56:e6:ed:a9:00:68:48:4e:33:59:4d:9c:3e:ff:52:75:72: c3:cc:0b:df:d8:41:26:81:f1:ca:98:de:eb:83:fd:32:af:4f: 64:de:9a:27:f3:b5:4b:0b:e8:71:df:0d:21:02:b5:d1:b7:7c: 7d:7d:0b:94:dc:d8:5c:29:eb:0f:ac:f6:e6:b7:87:9e:05:ef: 00:49:0e:f9:a4:43:21:56:b2:55:59:47:fc:91:df:d7:55:5a: 90:28:45:1e:bc:79:a8:0a:ce:f3:3a:05:29:4f:21:32:a6:18: e2:9c:28:e5:a4:98:9e:a8:da:ad:b3:e7:e6:9a:7d:4b:94:a9: 05:bd:00:08:19:46:06:fe:25:b4:2e:93:c7:8b:79:3c:b8:f7: fd:bd:56:70:13:6e:c6:0a:5b:30:b3:42:68:e9:95:3c:ae:10: 16:2a:52:a7:aa:f0:fa:9d:9c:76:d8:f2:7f:78:8f:20:ba:94: 44:08:23:bb:24:c9:8b:c2:94:5f:55:dd:c9:27:01:63:02:5b: 53:33:94:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA1QjUxMTAvBgNVBAUTKDA5NUY2QzZCQjM4N0M2OTMyRkRBMDFDMEJGQTYyNkY2 QUFDN0JCMDAwHhcNMjQwNTE5MDY0OTE4WhcNMjQwNTI2MDY0OTE4WjAYMRYwFAYD VQQDEw02NjQ5YTBlZS04ZjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDmU0Ay6hbRx0CBiWDU7S2KcLZ8l3oxFfcpb6N9s09u8DuvNjNM+6EUxE4sj IJprKcjfC23TGklYfUsrBlzY8HWjPr6o4wS+DNI/qwxb7lwxHYyp0YLvlyvL1HJn 4MBvucxcIJ2+VOzLt83E6yDlR9FAQEaKZte+TikNguZ8Q7OJeo4NnZN9kjDnkS0H 9Uj+UQ+IlYGvd2gJ4Sjy5POAcNTYv9FVObma/Hzga71wzDpEpLkqwvG6GcVRMzIq MIvSyyuSJwLTsDM1lURs8N7RzYg94E0zeFoakocr+XgN7FMZTfRPDOqYyBbJXHWE NpPCRhzgJY4RI5b08AjrBiMCRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFx0KeU4 r8SmUh2SJUbDwtRDuLFRMB8GA1UdIwQYMBaAFAlfbGuzh8aTL9oBwL+mJvaqx7sA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDVCNS80NzUwMTIwNjJB QjMxMUVFOEZBRTcyMTRDNEY5QUUwMi9DVjlzYTdPSHhwTXYyZ0hBdjZZbTlxckh1 d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NWOXNhN09IeHBNdjJnSEF2NlltOXFySHV3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDVCNS80NzUwMTIwNjJBQjMxMUVFOEZBRTcyMTRDNEY5QUUwMi9DVjlzYTdPSHhw TXYyZ0hBdjZZbTlxckh1d0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGjYJmJzLtxcE0Tey3FCe04kIXngtEaRkEoCBYCh2QFnFJW5V7C7C/ Q9tJawhDQFpcCV+bm6xfVubtqQBoSE4zWU2cPv9SdXLDzAvf2EEmgfHKmN7rg/0y r09k3pon87VLC+hx3w0hArXRt3x9fQuU3NhcKesPrPbmt4eeBe8ASQ75pEMhVrJV WUf8kd/XVVqQKEUevHmoCs7zOgUpTyEyphjinCjlpJieqNqts+fmmn1LlKkFvQAI GUYG/iW0LpPHi3k8uPf9vVZwE27GClsws0Jo6ZU8rhAWKlKnqvD6nZx22PJ/eI8g upRECCO7JMmLwpRfVd3JJwFjAltTM5Qe -----END CERTIFICATE-----Generated at Sun May 19 07:40:46 2024 by rpki-client on console-fra.rpki-client.org