$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft File: Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft (raw, json) Hash identifier: vVeC6WtcDcFlT9oGLCBMItc0YFq+z7NwpNCPtJakP5s= Subject key identifier: 47:0F:22:F2:39:E7:27:F2:91:ED:21:C5:94:D8:77:B5:18:B3:E3:31 Authority key identifier: 32:6E:55:E7:4B:06:CD:83:F9:94:CC:1D:A6:65:65:42:1C:C9:E2:19 Certificate issuer: /CN=A91F7AC9/serialNumber=326E55E74B06CD83F994CC1DA66565421CC9E219 Certificate serial: 044B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft Manifest number: 0446 Signing time: Sun 19 May 2024 01:56:10 +0000 Manifest this update: Sun 19 May 2024 01:56:10 +0000 Manifest next update: Sun 26 May 2024 01:56:10 +0000 Files and hashes: 1: Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl (hash: 7i3pulW28XuiXUxY+MZ80xG+YUXKvVuyzSPtGKvvLWc=) 2: 66CA9E0C0C5C11ECBD37E846C4F9AE02.roa (hash: 9KrFu8rfuzGcElTJ+SW1V8KTmVUFQFDwJgp8Mmol+WA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1099 (0x44b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7AC9/serialNumber=326E55E74B06CD83F994CC1DA66565421CC9E219 Validity Not Before: May 19 01:56:10 2024 GMT Not After : May 26 01:56:10 2024 GMT Subject: CN=66495c3a-818f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c1:e8:2a:f8:5b:b9:c4:55:71:83:b3:37:87: 34:6a:81:07:a6:d0:63:68:3e:d3:6e:7e:db:a3:7e: 3a:fb:66:8b:73:cf:2f:fe:d6:db:4b:4e:f3:77:f2: 93:a0:56:77:76:d1:3b:4a:5d:24:f3:16:db:ad:19: 5c:d6:63:99:44:ca:38:36:c6:e1:e2:da:da:05:88: a2:8b:b1:ea:a1:40:f8:4e:79:f5:fb:67:35:7a:9e: 91:7f:fc:2b:ef:9e:a6:6f:53:b6:6e:7f:ec:25:a3: e8:3e:76:99:77:da:02:b8:b2:9b:11:36:d9:9c:2a: a2:c2:c6:02:bb:55:18:70:0f:78:6b:7a:af:ff:67: 54:b2:e4:4a:11:84:28:c6:98:39:dd:92:79:2c:c3: dc:ef:ae:c2:b0:cb:cc:77:2a:db:3b:5c:b3:06:c1: be:a1:fe:01:31:e1:4e:ca:8c:bf:1a:63:40:9b:4c: 50:b9:e3:a8:bd:3b:e4:01:63:1c:2b:57:a6:a7:50: cc:72:e8:f6:d3:81:28:73:a6:e4:bb:50:17:41:98: 48:a0:a1:d4:38:a0:18:d1:76:5b:3b:c2:67:83:43: d7:ac:34:8b:ef:14:7d:4e:c8:97:d2:07:47:5c:00: c4:25:35:f1:92:77:e9:8b:e2:dd:50:5a:0a:f2:a3: 54:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:0F:22:F2:39:E7:27:F2:91:ED:21:C5:94:D8:77:B5:18:B3:E3:31 X509v3 Authority Key Identifier: keyid:32:6E:55:E7:4B:06:CD:83:F9:94:CC:1D:A6:65:65:42:1C:C9:E2:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:de:51:d6:62:8c:52:96:b6:99:ae:91:be:b5:cd:8f:24:5a: f1:f7:33:40:68:32:72:93:20:54:37:14:dd:c7:59:59:31:54: 31:66:fd:b7:ca:bd:9b:cd:bf:5a:67:d4:3f:92:26:f9:91:36: 24:8c:e3:e1:17:9b:c4:10:ab:55:98:96:bb:52:10:b4:a2:4f: 77:52:45:1b:7f:72:c2:58:b0:75:31:b9:77:f0:62:53:83:46: 22:f9:1a:b1:10:2b:0c:d7:49:a6:e5:65:0b:5f:34:bc:bf:c2: e4:e4:11:35:5a:d5:69:f7:d8:21:c1:d6:14:2c:4b:7b:ed:02: 04:bc:8e:6e:81:c9:7a:5e:b0:de:67:10:b1:50:33:50:17:80: b2:f7:d7:89:e8:16:8d:1b:2c:33:69:25:2a:1d:e3:fe:6a:34: 5c:41:0b:98:63:78:43:7f:90:8f:36:ca:72:41:91:59:b6:9a: 90:98:b2:b0:35:ac:6b:54:8c:e9:e2:7e:15:10:38:10:9b:57: a3:98:ae:a5:60:e4:48:9e:5a:9d:0d:41:76:29:b6:0e:52:55: 54:cb:c1:7a:99:8c:45:27:bb:f0:a5:b0:c1:3c:19:a8:c8:5b: 94:16:cc:8e:a5:cd:69:e6:57:77:b8:bd:7f:f6:2e:fb:22:50: 04:16:03:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdBQzkxMTAvBgNVBAUTKDMyNkU1NUU3NEIwNkNEODNGOTk0Q0MxREE2NjU2NTQy MUNDOUUyMTkwHhcNMjQwNTE5MDE1NjEwWhcNMjQwNTI2MDE1NjEwWjAYMRYwFAYD VQQDEw02NjQ5NWMzYS04MThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqsHoKvhbucRVcYOzN4c0aoEHptBjaD7Tbn7bo346+2aLc88v/tbbS07zd/KT oFZ3dtE7Sl0k8xbbrRlc1mOZRMo4Nsbh4traBYiii7HqoUD4Tnn1+2c1ep6Rf/wr 756mb1O2bn/sJaPoPnaZd9oCuLKbETbZnCqiwsYCu1UYcA94a3qv/2dUsuRKEYQo xpg53ZJ5LMPc767CsMvMdyrbO1yzBsG+of4BMeFOyoy/GmNAm0xQueOovTvkAWMc K1emp1DMcuj204Eoc6bku1AXQZhIoKHUOKAY0XZbO8Jng0PXrDSL7xR9TsiX0gdH XADEJTXxknfpi+LdUFoK8qNU5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEcPIvI5 5yfyke0hxZTYd7UYs+MxMB8GA1UdIwQYMBaAFDJuVedLBs2D+ZTMHaZlZUIcyeIZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0FDOS8wRDlGNDBFNjBD NUExMUVDOUY0MTUzNDVDNEY5QUUwMi9NbTVWNTBzR3pZUDVsTXdkcG1WbFFoeko0 aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tNVY1MHNHellQNWxNd2RwbVZsUWh6SjRoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0FDOS8wRDlGNDBFNjBDNUExMUVDOUY0MTUzNDVDNEY5QUUwMi9NbTVWNTBzR3pZ UDVsTXdkcG1WbFFoeko0aGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC83lHWYoxSlraZrpG+tc2PJFrx9zNAaDJykyBUNxTdx1lZMVQxZv23 yr2bzb9aZ9Q/kib5kTYkjOPhF5vEEKtVmJa7UhC0ok93UkUbf3LCWLB1Mbl38GJT g0Yi+RqxECsM10mm5WULXzS8v8Lk5BE1WtVp99ghwdYULEt77QIEvI5ugcl6XrDe ZxCxUDNQF4Cy99eJ6BaNGywzaSUqHeP+ajRcQQuYY3hDf5CPNspyQZFZtpqQmLKw NaxrVIzp4n4VEDgQm1ejmK6lYORInlqdDUF2KbYOUlVUy8F6mYxFJ7vwpbDBPBmo yFuUFsyOpc1p5ld3uL1/9i77IlAEFgN/ -----END CERTIFICATE-----Generated at Sun May 19 02:39:38 2024 by rpki-client on console-fra.rpki-client.org