$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft File: mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft (raw, json) Hash identifier: offCGKKCgJmdL2qOL1rHfmOO9nPRB+Qq9KUEJxVAf9w= Subject key identifier: D1:7F:1F:BC:D3:28:85:AD:F9:24:54:31:FC:26:FF:2E:02:EC:F2:80 Authority key identifier: 99:BE:08:5D:1C:69:6C:BC:21:B6:78:F9:18:8E:CC:E5:DB:CD:D4:CA Certificate issuer: /CN=A91FD378/serialNumber=99BE085D1C696CBC21B678F9188ECCE5DBCDD4CA Certificate serial: 0A05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft Manifest number: 09FB Signing time: Sat 18 May 2024 20:40:19 +0000 Manifest this update: Sat 18 May 2024 20:40:19 +0000 Manifest next update: Sat 25 May 2024 20:40:19 +0000 Files and hashes: 1: mb4IXRxpbLwhtnj5GI7M5dvN1Mo.crl (hash: dXa4I2Js+nbtldszNae5B8jc6z813EoKHeeK+Xs+gxg=) 2: EF44A44E51EB11EABC11800DC4F9AE02.roa (hash: 0pOyw8LF7RGBw1qxoeNfF21Qn2Gqg0oqE4beQcmEP58=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.crl rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2565 (0xa05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD378/serialNumber=99BE085D1C696CBC21B678F9188ECCE5DBCDD4CA Validity Not Before: May 18 20:40:19 2024 GMT Not After : May 25 20:40:19 2024 GMT Subject: CN=66491233-e0d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:2d:75:54:0c:f9:78:59:18:f2:65:46:a9:bc: 19:7c:68:31:c4:bb:b7:c5:fe:ac:8f:78:16:4b:5b: c5:13:32:ca:31:26:b2:40:38:43:7b:1a:28:ac:fe: fb:f7:26:08:70:86:8c:a8:fa:b8:0a:52:eb:4a:6f: b8:5c:38:d1:7d:04:c3:b3:30:47:ab:45:a3:fe:dd: c2:fb:88:cd:38:f4:49:28:4b:64:f1:4a:88:d4:b6: 76:1d:2c:95:43:f4:41:ac:af:06:9a:d3:7f:95:dd: d4:5a:84:c2:ea:fa:7e:9d:cd:f5:52:17:47:cc:a5: b6:48:88:6a:00:99:d2:82:33:9e:c0:2b:7c:90:ff: 2b:b0:c7:4a:c5:e0:d6:ed:e1:8a:b7:26:4a:67:7d: 06:58:14:9a:e5:5a:e7:6b:52:21:19:50:7f:c0:a9: de:f8:7f:18:d2:b1:ed:ab:07:5f:a4:37:93:58:b3: 7b:25:53:10:16:90:2b:5e:76:24:4f:a6:2e:81:13: 65:29:b3:8f:32:1b:5b:58:5f:a9:cb:a8:c4:78:7a: f2:86:10:6a:72:83:d2:93:4c:b7:73:a5:e6:4c:cc: 29:cb:ac:66:ff:4c:9f:9b:05:fc:ba:f5:04:71:f4: 50:49:6b:d6:11:fc:3f:0d:0c:15:48:6d:4b:c2:50: f9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:7F:1F:BC:D3:28:85:AD:F9:24:54:31:FC:26:FF:2E:02:EC:F2:80 X509v3 Authority Key Identifier: keyid:99:BE:08:5D:1C:69:6C:BC:21:B6:78:F9:18:8E:CC:E5:DB:CD:D4:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:10:3b:70:ba:e8:95:04:6b:d5:0f:39:6f:13:3a:97:05:21: bc:79:24:71:95:65:a2:dc:58:8f:b2:1e:1f:5f:75:51:df:6e: f7:b9:71:b1:a6:1b:6f:26:9c:79:9a:d2:fe:1c:5b:63:d6:d2: 49:f0:2f:23:81:25:21:c3:ff:02:b1:bb:4b:b9:fe:44:8b:25: 1b:4f:6c:f8:26:28:8e:0b:81:fa:62:88:d4:5b:6d:3c:67:2e: 4e:91:ab:24:88:0f:44:a2:c8:03:77:38:58:39:32:41:d6:66: e8:1d:f1:f2:69:51:8d:d6:ce:b8:6e:1a:98:35:c3:c5:f2:f6: 26:65:65:62:99:3c:07:df:27:29:7c:a3:1d:06:75:f8:ed:b1: 5e:ec:64:a8:b3:73:93:65:22:8a:76:f8:b4:56:43:bd:64:6d: 5c:89:1e:f9:b4:23:db:6e:61:40:1d:03:7e:2c:60:93:fd:ab: 52:3b:d5:a3:5f:30:42:5d:4e:d7:b4:b1:89:d1:55:e6:fa:a6: 87:6d:e1:05:cd:ec:a5:c9:be:38:64:98:6c:85:79:55:d2:39: 08:73:c5:9f:fe:08:92:a8:28:e1:75:57:7f:0b:47:19:6a:4a: 64:5d:cc:48:7f:11:3e:a6:5b:c9:51:1f:63:90:b5:8e:a0:ce: a9:ee:b2:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQzNzgxMTAvBgNVBAUTKDk5QkUwODVEMUM2OTZDQkMyMUI2NzhGOTE4OEVDQ0U1 REJDREQ0Q0EwHhcNMjQwNTE4MjA0MDE5WhcNMjQwNTI1MjA0MDE5WjAYMRYwFAYD VQQDEw02NjQ5MTIzMy1lMGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6i11VAz5eFkY8mVGqbwZfGgxxLu3xf6sj3gWS1vFEzLKMSayQDhDexoorP77 9yYIcIaMqPq4ClLrSm+4XDjRfQTDszBHq0Wj/t3C+4jNOPRJKEtk8UqI1LZ2HSyV Q/RBrK8GmtN/ld3UWoTC6vp+nc31UhdHzKW2SIhqAJnSgjOewCt8kP8rsMdKxeDW 7eGKtyZKZ30GWBSa5Vrna1IhGVB/wKne+H8Y0rHtqwdfpDeTWLN7JVMQFpArXnYk T6YugRNlKbOPMhtbWF+py6jEeHryhhBqcoPSk0y3c6XmTMwpy6xm/0yfmwX8uvUE cfRQSWvWEfw/DQwVSG1LwlD5hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNF/H7zT KIWt+SRUMfwm/y4C7PKAMB8GA1UdIwQYMBaAFJm+CF0caWy8IbZ4+RiOzOXbzdTK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDM3OC82MzJGQThDRTUx RUExMUVBQjZBNUNEODZDNEY5QUUwMi9tYjRJWFJ4cGJMd2h0bmo1R0k3TTVkdk4x TW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21iNElYUnhwYkx3aHRuajVHSTdNNWR2TjFNby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDM3OC82MzJGQThDRTUxRUExMUVBQjZBNUNEODZDNEY5QUUwMi9tYjRJWFJ4cGJM d2h0bmo1R0k3TTVkdk4xTW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVEDtwuuiVBGvVDzlvEzqXBSG8eSRxlWWi3FiPsh4fX3VR3273uXGx phtvJpx5mtL+HFtj1tJJ8C8jgSUhw/8CsbtLuf5EiyUbT2z4JiiOC4H6YojUW208 Zy5OkaskiA9EosgDdzhYOTJB1mboHfHyaVGN1s64bhqYNcPF8vYmZWVimTwH3ycp fKMdBnX47bFe7GSos3OTZSKKdvi0VkO9ZG1ciR75tCPbbmFAHQN+LGCT/atSO9Wj XzBCXU7XtLGJ0VXm+qaHbeEFzeylyb44ZJhshXlV0jkIc8Wf/giSqCjhdVd/C0cZ akpkXcxIfxE+plvJUR9jkLWOoM6p7rJ0 -----END CERTIFICATE-----Generated at Sat May 18 21:31:32 2024 by rpki-client on console-ams.rpki-client.org