$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.mft File: mG5BZ9azgH9J98JgDWD5wmCacJY.mft (raw, json) Hash identifier: E6CKRPg2zhtrN8uh4rkwwz1pSljjtzdtjaYrTuG1ASE= Subject key identifier: EC:E2:7C:B0:7B:40:A7:FA:28:48:2B:CC:67:29:4D:7F:54:1F:33:D4 Authority key identifier: 98:6E:41:67:D6:B3:80:7F:49:F7:C2:60:0D:60:F9:C2:60:9A:70:96 Certificate issuer: /CN=A91F3806/serialNumber=986E4167D6B3807F49F7C2600D60F9C2609A7096 Certificate serial: 0B61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mG5BZ9azgH9J98JgDWD5wmCacJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.mft Manifest number: 0B5C Signing time: Sat 18 May 2024 19:36:14 +0000 Manifest this update: Sat 18 May 2024 19:36:13 +0000 Manifest next update: Sat 25 May 2024 19:36:13 +0000 Files and hashes: 1: mG5BZ9azgH9J98JgDWD5wmCacJY.crl (hash: UbOrv9sEw6B4OvGTZhsg2m0aOg/C8IDqbKk1dwK5Enk=) 2: 4E54AA4C0B7E11EA9D8BA43CC4F9AE02.roa (hash: Ik5pp1wylHpAiU/ckyI2KJfx9vwcLeasLT5oJCTCKc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.crl rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mG5BZ9azgH9J98JgDWD5wmCacJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2913 (0xb61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3806/serialNumber=986E4167D6B3807F49F7C2600D60F9C2609A7096 Validity Not Before: May 18 19:36:13 2024 GMT Not After : May 25 19:36:13 2024 GMT Subject: CN=6649032e-985a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4d:3b:69:46:27:35:c2:52:5c:a6:5f:0f:b8: 4a:96:3e:aa:18:2c:82:9c:2c:a2:97:cb:1a:04:9c: 62:a2:29:17:8e:6c:44:4f:63:06:a3:68:41:3f:0a: 6c:fe:cf:b7:4b:49:e5:0d:39:69:66:af:2c:04:fb: cf:58:e1:bb:e0:35:3b:b0:73:ca:e7:ab:d8:89:5d: 9f:dc:79:80:75:1e:55:3c:0b:04:7f:cb:81:62:f4: eb:c1:fb:5c:fe:e7:3c:28:9f:2f:ff:98:1c:66:1b: a3:4f:74:8b:8c:1c:fe:c7:31:35:58:fa:c3:70:39: f0:b8:99:ca:9b:92:b3:4c:e6:18:0a:7b:1e:af:45: ee:22:03:a1:eb:ba:4f:a8:28:a5:d3:ea:2f:49:d2: 24:c4:02:7d:af:9f:0d:12:d6:83:88:a8:33:a0:99: 66:58:90:a6:b6:0b:3a:4b:f4:a6:e4:a1:f2:36:81: d2:b6:18:a2:b6:4d:17:7a:19:03:98:60:7b:92:e0: 87:27:2e:a7:66:9a:00:4f:c5:1a:32:fb:65:d8:80: 8b:0e:57:af:6f:23:63:f8:6b:52:8a:cf:46:08:72: 71:cb:5d:09:57:11:e3:98:36:07:2c:0d:e5:20:84: 57:ee:4f:fe:b2:89:f4:c7:50:30:82:67:68:26:ee: 10:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E2:7C:B0:7B:40:A7:FA:28:48:2B:CC:67:29:4D:7F:54:1F:33:D4 X509v3 Authority Key Identifier: keyid:98:6E:41:67:D6:B3:80:7F:49:F7:C2:60:0D:60:F9:C2:60:9A:70:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mG5BZ9azgH9J98JgDWD5wmCacJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:aa:f2:36:17:f1:46:6a:75:00:e9:cc:40:f8:bc:2c:40:82: 8e:21:f2:c9:d3:f6:fb:d8:3d:df:53:38:63:ff:09:74:03:7b: ca:75:19:cf:2b:83:73:1c:67:67:ba:18:13:02:4a:ab:ec:39: cf:8a:f6:d1:db:6c:da:4c:a6:99:61:c0:49:51:37:a6:77:a8: 13:1b:0d:a7:f7:23:c3:e3:5c:a6:98:6a:ce:00:3a:97:c8:5f: 54:30:6d:eb:dd:20:00:ab:49:f6:37:57:de:1e:60:8d:0a:f1: 54:8c:82:4c:82:65:aa:73:9f:3c:74:2e:b6:61:a6:cd:6b:32: 4c:36:ce:c8:06:a4:88:74:9e:34:ca:5d:56:44:28:1a:e2:7b: 05:32:5d:4b:bf:43:ae:ed:80:06:5b:74:7a:25:81:df:76:02: 69:13:44:70:5d:fb:2a:dc:1a:05:40:4c:6b:2a:14:c0:97:26: 30:b2:08:de:52:94:2a:36:65:7c:d8:9e:58:4a:04:a8:bb:71: bf:0b:e2:62:d3:ca:72:f2:55:62:b8:5f:cf:67:ad:54:49:eb: d5:6d:08:77:58:99:bd:1f:da:d1:a1:0c:ca:7a:19:ce:a0:52: b7:b8:79:aa:d3:19:19:ed:ef:15:99:e3:25:be:01:90:71:60: ad:c3:0b:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM4MDYxMTAvBgNVBAUTKDk4NkU0MTY3RDZCMzgwN0Y0OUY3QzI2MDBENjBGOUMy NjA5QTcwOTYwHhcNMjQwNTE4MTkzNjEzWhcNMjQwNTI1MTkzNjEzWjAYMRYwFAYD VQQDEw02NjQ5MDMyZS05ODVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArk07aUYnNcJSXKZfD7hKlj6qGCyCnCyil8saBJxioikXjmxET2MGo2hBPwps /s+3S0nlDTlpZq8sBPvPWOG74DU7sHPK56vYiV2f3HmAdR5VPAsEf8uBYvTrwftc /uc8KJ8v/5gcZhujT3SLjBz+xzE1WPrDcDnwuJnKm5KzTOYYCnser0XuIgOh67pP qCil0+ovSdIkxAJ9r58NEtaDiKgzoJlmWJCmtgs6S/Sm5KHyNoHSthiitk0XehkD mGB7kuCHJy6nZpoAT8UaMvtl2ICLDlevbyNj+GtSis9GCHJxy10JVxHjmDYHLA3l IIRX7k/+son0x1AwgmdoJu4QzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzifLB7 QKf6KEgrzGcpTX9UHzPUMB8GA1UdIwQYMBaAFJhuQWfWs4B/SffCYA1g+cJgmnCW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzgwNi9CNDcyRkUyQTBC N0MxMUVBODA4M0U5MzZDNEY5QUUwMi9tRzVCWjlhemdIOUo5OEpnRFdENXdtQ2Fj SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21HNUJaOWF6Z0g5Sjk4SmdEV0Q1d21DYWNKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzgwNi9CNDcyRkUyQTBCN0MxMUVBODA4M0U5MzZDNEY5QUUwMi9tRzVCWjlhemdI OUo5OEpnRFdENXdtQ2FjSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmqvI2F/FGanUA6cxA+LwsQIKOIfLJ0/b72D3fUzhj/wl0A3vKdRnP K4NzHGdnuhgTAkqr7DnPivbR22zaTKaZYcBJUTemd6gTGw2n9yPD41ymmGrOADqX yF9UMG3r3SAAq0n2N1feHmCNCvFUjIJMgmWqc588dC62YabNazJMNs7IBqSIdJ40 yl1WRCga4nsFMl1Lv0Ou7YAGW3R6JYHfdgJpE0RwXfsq3BoFQExrKhTAlyYwsgje UpQqNmV82J5YSgSou3G/C+Ji08py8lViuF/PZ61USevVbQh3WJm9H9rRoQzKehnO oFK3uHmq0xkZ7e8VmeMlvgGQcWCtwwuP -----END CERTIFICATE-----Generated at Sat May 18 20:16:07 2024 by rpki-client on console-ams.rpki-client.org