$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6805/9C005F88792F11EAB4505841C4F9AE02/0m3dRZwIWSJhDP72YHCQEbIVyU4.mft File: 0m3dRZwIWSJhDP72YHCQEbIVyU4.mft (raw, json) Hash identifier: J0VmnAAwZg2RlOsKoCLePecWYvfR2O+zgTm45ijoJwM= Subject key identifier: 16:9C:C0:A7:C5:6D:22:70:B9:8E:9A:20:A4:E7:40:9E:97:F2:FC:15 Authority key identifier: D2:6D:DD:45:9C:08:59:22:61:0C:FE:F6:60:70:90:11:B2:15:C9:4E Certificate issuer: /CN=A91F6805/serialNumber=D26DDD459C085922610CFEF660709011B215C94E Certificate serial: 093D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m3dRZwIWSJhDP72YHCQEbIVyU4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6805/9C005F88792F11EAB4505841C4F9AE02/0m3dRZwIWSJhDP72YHCQEbIVyU4.mft Manifest number: 0935 Signing time: Sat 18 May 2024 21:08:31 +0000 Manifest this update: Sat 18 May 2024 21:08:31 +0000 Manifest next update: Sat 25 May 2024 21:08:31 +0000 Files and hashes: 1: 0m3dRZwIWSJhDP72YHCQEbIVyU4.crl (hash: eJBcHt4d6KyrjZqg+4bBl116zMqsZ15B7kQVNltUUGU=) 2: 70B72EB4F7C111EE8AFA9D2BC4F9AE02.roa (hash: 9LdNWEZZU/w7CgJQR6XieRsUyJf6z+vLtFXOdCAfNEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6805/9C005F88792F11EAB4505841C4F9AE02/0m3dRZwIWSJhDP72YHCQEbIVyU4.crl rsync://rpki.apnic.net/member_repository/A91F6805/9C005F88792F11EAB4505841C4F9AE02/0m3dRZwIWSJhDP72YHCQEbIVyU4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m3dRZwIWSJhDP72YHCQEbIVyU4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2365 (0x93d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6805/serialNumber=D26DDD459C085922610CFEF660709011B215C94E Validity Not Before: May 18 21:08:31 2024 GMT Not After : May 25 21:08:31 2024 GMT Subject: CN=664918cf-c26f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:09:6d:fe:64:b3:16:5c:7b:39:10:c9:61:99: 45:6e:77:b0:32:ec:32:bc:b6:cc:33:1c:50:da:2b: 95:4f:3e:1a:98:26:50:47:da:ef:8b:93:cc:41:b9: 74:5f:97:48:df:03:80:33:26:62:d0:11:50:e3:fa: c4:61:c3:1b:64:39:28:7a:7d:fc:fe:8f:13:4f:de: b7:6b:b1:de:88:63:0b:45:12:bf:99:7c:0f:63:80: 59:2e:41:e4:66:96:e2:14:25:77:a7:da:37:c1:6e: 17:60:0d:88:3a:58:ad:d9:46:f3:53:bb:35:f5:23: 3e:d8:77:6d:76:c4:05:a0:3c:85:9c:78:e7:68:fe: 9a:cc:c3:e1:5a:9c:91:f7:2c:6a:f2:90:92:6b:5b: 7b:1f:5a:97:f1:2d:62:cb:7a:26:6c:1c:be:44:81: 94:6f:9b:12:67:9a:08:4b:62:59:df:eb:58:8a:94: 7f:f9:48:09:87:c6:cc:e6:d4:16:fb:e2:7a:8a:11: 3a:ab:fd:c1:30:dc:cf:4a:1e:ec:05:51:c0:90:f0: 0b:94:3a:db:b3:45:20:e7:3c:74:f1:6b:65:62:86: aa:21:b8:d0:31:a4:19:6e:f7:ee:3e:f6:1e:f2:19: 99:61:f9:20:38:76:c1:c4:34:0e:62:7c:ab:57:8b: c7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:9C:C0:A7:C5:6D:22:70:B9:8E:9A:20:A4:E7:40:9E:97:F2:FC:15 X509v3 Authority Key Identifier: keyid:D2:6D:DD:45:9C:08:59:22:61:0C:FE:F6:60:70:90:11:B2:15:C9:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6805/9C005F88792F11EAB4505841C4F9AE02/0m3dRZwIWSJhDP72YHCQEbIVyU4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m3dRZwIWSJhDP72YHCQEbIVyU4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6805/9C005F88792F11EAB4505841C4F9AE02/0m3dRZwIWSJhDP72YHCQEbIVyU4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ce:f4:64:6c:65:65:db:19:04:00:f1:9b:75:ad:34:0b:5e: a2:a1:4f:3e:50:73:78:9f:7c:25:89:b7:67:97:92:6e:a4:58: d8:70:a7:f7:ba:69:05:35:40:e9:59:40:70:4a:84:5e:24:b8: c3:65:08:54:58:3a:68:a9:a0:ef:4f:27:94:ff:e0:b6:11:5d: 0a:51:19:8d:4f:de:40:ed:6a:f4:70:5b:7c:0c:a1:2d:c8:49: f8:62:8c:d7:5e:16:8a:73:6f:d1:b2:c6:c7:06:b2:5d:ef:ef: f6:72:05:9b:e6:2f:4d:0c:5a:f3:35:3a:e6:62:4a:3f:4b:76: 21:92:a7:c3:e5:70:f9:5a:ee:6a:98:8c:aa:4c:b6:d0:06:db: 56:de:d2:7c:3e:25:2c:5c:c3:7b:52:5d:9c:9b:58:eb:91:5b: 6c:ef:ed:09:50:f3:b9:ed:d8:ed:dc:1a:7b:73:ff:d3:85:95: 8f:75:57:e9:38:79:42:a0:af:a1:90:e9:39:a1:57:b7:7c:a4: 37:11:39:a4:28:48:3d:b5:ce:17:18:81:e5:b7:24:d9:55:53: ce:38:df:11:1b:64:d6:eb:75:d1:30:f5:40:cc:92:91:57:11: 02:2e:85:13:6e:9f:82:e0:14:91:6b:bf:23:25:55:a8:e5:df: 3f:6e:28:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY4MDUxMTAvBgNVBAUTKEQyNkRERDQ1OUMwODU5MjI2MTBDRkVGNjYwNzA5MDEx QjIxNUM5NEUwHhcNMjQwNTE4MjEwODMxWhcNMjQwNTI1MjEwODMxWjAYMRYwFAYD VQQDEw02NjQ5MThjZi1jMjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQlt/mSzFlx7ORDJYZlFbnewMuwyvLbMMxxQ2iuVTz4amCZQR9rvi5PMQbl0 X5dI3wOAMyZi0BFQ4/rEYcMbZDkoen38/o8TT963a7HeiGMLRRK/mXwPY4BZLkHk ZpbiFCV3p9o3wW4XYA2IOlit2UbzU7s19SM+2HdtdsQFoDyFnHjnaP6azMPhWpyR 9yxq8pCSa1t7H1qX8S1iy3ombBy+RIGUb5sSZ5oIS2JZ3+tYipR/+UgJh8bM5tQW ++J6ihE6q/3BMNzPSh7sBVHAkPALlDrbs0Ug5zx08WtlYoaqIbjQMaQZbvfuPvYe 8hmZYfkgOHbBxDQOYnyrV4vHRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBacwKfF bSJwuY6aIKTnQJ6X8vwVMB8GA1UdIwQYMBaAFNJt3UWcCFkiYQz+9mBwkBGyFclO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjgwNS85QzAwNUY4ODc5 MkYxMUVBQjQ1MDU4NDFDNEY5QUUwMi8wbTNkUlp3SVdTSmhEUDcyWUhDUUViSVZ5 VTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBtM2RSWndJV1NKaERQNzJZSENRRWJJVnlVNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjgwNS85QzAwNUY4ODc5MkYxMUVBQjQ1MDU4NDFDNEY5QUUwMi8wbTNkUlp3SVdT SmhEUDcyWUhDUUViSVZ5VTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPzvRkbGVl2xkEAPGbda00C16ioU8+UHN4n3wlibdnl5JupFjYcKf3 umkFNUDpWUBwSoReJLjDZQhUWDpoqaDvTyeU/+C2EV0KURmNT95A7Wr0cFt8DKEt yEn4YozXXhaKc2/RssbHBrJd7+/2cgWb5i9NDFrzNTrmYko/S3YhkqfD5XD5Wu5q mIyqTLbQBttW3tJ8PiUsXMN7Ul2cm1jrkVts7+0JUPO57djt3Bp7c//ThZWPdVfp OHlCoK+hkOk5oVe3fKQ3ETmkKEg9tc4XGIHltyTZVVPOON8RG2TW63XRMPVAzJKR VxECLoUTbp+C4BSRa78jJVWo5d8/big+ -----END CERTIFICATE-----Generated at Sat May 18 22:28:01 2024 by rpki-client on console-ams.rpki-client.org