$ rpki-client -vvf rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft File: MmYwanA43JsBUyfHJVZAXzn85gs.mft (raw, json) Hash identifier: xmbn+b2u9nAloXiXk2FhkKKBFbqj/bwP6e7Rb6m4uec= Subject key identifier: 83:55:A7:7A:5C:7C:5C:EA:AB:29:48:EE:D5:00:89:06:06:E0:14:D3 Authority key identifier: 32:66:30:6A:70:38:DC:9B:01:53:27:C7:25:56:40:5F:39:FC:E6:0B Certificate issuer: /CN=A91F644E/serialNumber=3266306A7038DC9B015327C72556405F39FCE60B Certificate serial: 19A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft Manifest number: 199B Signing time: Sat 18 May 2024 16:48:49 +0000 Manifest this update: Sat 18 May 2024 16:48:49 +0000 Manifest next update: Sat 25 May 2024 16:48:49 +0000 Files and hashes: 1: MmYwanA43JsBUyfHJVZAXzn85gs.crl (hash: v5Dvgc+QEDrQV6x06aKA1VM3gs55FCQaeDmSblSBDwo=) 2: 312DC5B8405E11E7A28FCE45C4F9AE02.roa (hash: eB5f0KsRSPaGm0VSEAJ3M5yoFhiAmx35EoQsgPCP3tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.crl rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6564 (0x19a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F644E/serialNumber=3266306A7038DC9B015327C72556405F39FCE60B Validity Not Before: May 18 16:48:49 2024 GMT Not After : May 25 16:48:49 2024 GMT Subject: CN=6648dbf1-03bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d6:14:4e:28:ed:5a:e4:c9:d5:db:ef:e3:f4: 19:20:5d:f8:65:a3:68:01:d0:53:91:b0:c4:7a:85: 50:d7:40:f7:bc:6d:30:72:11:42:4e:d3:50:84:f2: ca:d4:7d:6b:c0:6b:9f:52:9b:36:ee:8b:67:09:67: 97:52:dd:c4:0b:b1:e3:d5:8b:89:b5:2b:06:f0:9f: 4f:6c:82:e4:b2:d4:46:6b:1d:d8:76:13:b4:2e:86: d8:5c:84:da:ee:ec:11:0e:b7:f8:d4:4d:d4:fe:6f: b4:7d:f2:e8:24:2e:7b:23:00:f4:84:13:21:33:f4: 2b:93:c7:e8:f1:8f:28:a6:05:0c:27:ef:d3:26:d5: 8d:06:47:e7:09:10:51:e7:5e:02:40:76:8b:df:0d: 1f:26:ba:81:e5:ce:8f:77:dc:d8:05:ac:bd:23:0f: dd:a9:56:e6:71:e6:59:b4:f8:50:7f:11:4e:3f:78: c5:4c:7d:fa:99:1b:dc:7d:77:06:9d:b2:20:4f:b2: 5e:5b:16:89:1f:cf:b7:0c:da:85:8e:06:00:3a:e3: 9c:c9:c7:65:b3:34:0f:e6:1c:23:c4:d5:af:f7:81: 6f:e4:22:b1:88:dc:f6:d4:29:9f:ae:e0:24:f6:95: 35:95:66:2d:82:a9:80:7e:5b:03:c7:05:6a:e1:60: 39:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:55:A7:7A:5C:7C:5C:EA:AB:29:48:EE:D5:00:89:06:06:E0:14:D3 X509v3 Authority Key Identifier: keyid:32:66:30:6A:70:38:DC:9B:01:53:27:C7:25:56:40:5F:39:FC:E6:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:06:d5:9a:9e:6a:b0:a1:26:de:28:16:0c:2f:04:e5:b5:b0: 11:c6:b1:34:b8:60:d0:92:43:2a:46:81:25:b3:ef:fe:80:02: b9:15:6a:46:15:d4:e5:f3:f6:96:be:e6:f3:53:18:d0:a5:ea: 44:83:fc:46:4c:20:69:c7:f9:81:65:2b:d1:7c:b7:f4:26:52: 05:e8:d1:cc:bc:89:a6:bc:8e:28:63:7c:6f:5e:3b:99:ef:5a: fa:19:a2:b5:57:a1:75:31:20:95:35:05:4c:2f:85:eb:c5:f5: 09:20:a1:2b:f9:15:2e:99:78:2d:a5:b2:cd:4e:f6:f7:a5:94: ab:ef:8a:0a:30:75:8f:84:ce:6b:03:3c:bf:50:1b:77:80:54: a2:1f:26:e9:cb:5c:91:d7:0c:6f:9f:2b:a0:a8:32:0e:69:3d: 51:b0:e5:c6:6c:46:e6:c2:f2:34:56:c9:59:8f:d4:1d:ab:91: 05:04:99:2f:ef:e4:8b:35:14:77:5a:08:e6:4d:8f:cb:2d:8e: 35:4d:6e:bf:9e:d9:90:41:d8:05:62:f8:d2:50:65:c1:4e:44: 73:aa:d3:82:af:07:1e:65:60:fc:dc:95:27:0d:83:59:9a:c9: 3e:90:2e:f1:90:9a:a9:ec:93:f4:1b:a4:1f:81:4d:81:bc:ed: f5:6f:55:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY0NEUxMTAvBgNVBAUTKDMyNjYzMDZBNzAzOERDOUIwMTUzMjdDNzI1NTY0MDVG MzlGQ0U2MEIwHhcNMjQwNTE4MTY0ODQ5WhcNMjQwNTI1MTY0ODQ5WjAYMRYwFAYD VQQDEw02NjQ4ZGJmMS0wM2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NYUTijtWuTJ1dvv4/QZIF34ZaNoAdBTkbDEeoVQ10D3vG0wchFCTtNQhPLK 1H1rwGufUps27otnCWeXUt3EC7Hj1YuJtSsG8J9PbILkstRGax3YdhO0LobYXITa 7uwRDrf41E3U/m+0ffLoJC57IwD0hBMhM/Qrk8fo8Y8opgUMJ+/TJtWNBkfnCRBR 514CQHaL3w0fJrqB5c6Pd9zYBay9Iw/dqVbmceZZtPhQfxFOP3jFTH36mRvcfXcG nbIgT7JeWxaJH8+3DNqFjgYAOuOcycdlszQP5hwjxNWv94Fv5CKxiNz21CmfruAk 9pU1lWYtgqmAflsDxwVq4WA5+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFINVp3pc fFzqqylI7tUAiQYG4BTTMB8GA1UdIwQYMBaAFDJmMGpwONybAVMnxyVWQF85/OYL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjQ0RS9FNDNCNkU0QTQw NUQxMUU3QjAxQkExNDVDNEY5QUUwMi9NbVl3YW5BNDNKc0JVeWZISlZaQVh6bjg1 Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tWXdhbkE0M0pzQlV5ZkhKVlpBWHpuODVncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjQ0RS9FNDNCNkU0QTQwNUQxMUU3QjAxQkExNDVDNEY5QUUwMi9NbVl3YW5BNDNK c0JVeWZISlZaQVh6bjg1Z3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGBtWanmqwoSbeKBYMLwTltbARxrE0uGDQkkMqRoEls+/+gAK5FWpG FdTl8/aWvubzUxjQpepEg/xGTCBpx/mBZSvRfLf0JlIF6NHMvImmvI4oY3xvXjuZ 71r6GaK1V6F1MSCVNQVML4XrxfUJIKEr+RUumXgtpbLNTvb3pZSr74oKMHWPhM5r Azy/UBt3gFSiHybpy1yR1wxvnyugqDIOaT1RsOXGbEbmwvI0VslZj9Qdq5EFBJkv 7+SLNRR3WgjmTY/LLY41TW6/ntmQQdgFYvjSUGXBTkRzqtOCrwceZWD83JUnDYNZ msk+kC7xkJqp7JP0G6QfgU2BvO31b1Va -----END CERTIFICATE-----Generated at Sat May 18 18:21:40 2024 by rpki-client on console-ams.rpki-client.org