$ rpki-client -vvf rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft File: t9PrYcwCjDi_0_eigPNpBGhlWwY.mft (raw, json) Hash identifier: dqN64+Qulrx/g19a9jZoPxz7UeV0lS++VSSfPDXE2HA= Subject key identifier: 37:4A:DB:4E:42:1E:66:3F:F8:8F:64:9E:C3:B5:F7:7C:45:18:20:69 Authority key identifier: B7:D3:EB:61:CC:02:8C:38:BF:D3:F7:A2:80:F3:69:04:68:65:5B:06 Certificate issuer: /CN=A91FED7C/serialNumber=B7D3EB61CC028C38BFD3F7A280F3690468655B06 Certificate serial: 0869 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft Manifest number: 0864 Signing time: Sat 18 May 2024 21:38:13 +0000 Manifest this update: Sat 18 May 2024 21:38:13 +0000 Manifest next update: Sat 25 May 2024 21:38:13 +0000 Files and hashes: 1: t9PrYcwCjDi_0_eigPNpBGhlWwY.crl (hash: gRnH5B/IWXqYz6DMLINryu1sSckQjoNOYlrTnQFF/g4=) 2: E5DA330E9FF411EABA55D530C4F9AE02.roa (hash: WPNbmXIljXf5DGJzTyP9mhxu+4YyVGP6cfR3qyAMYCc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.crl rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2153 (0x869) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FED7C/serialNumber=B7D3EB61CC028C38BFD3F7A280F3690468655B06 Validity Not Before: May 18 21:38:13 2024 GMT Not After : May 25 21:38:13 2024 GMT Subject: CN=66491fc5-fb07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:10:ec:cc:33:06:d9:c6:0c:b4:16:e1:11:22: 32:50:a2:55:b8:5e:b4:92:92:87:31:86:b5:f2:56: e3:72:ec:0e:e3:cc:bf:4b:ae:15:4b:b3:33:0b:11: a5:26:85:55:fd:84:be:27:34:d7:fd:65:9b:5d:99: 83:da:fe:13:0d:42:04:30:5b:8a:58:c7:cf:20:8e: 59:4f:1d:a2:69:fd:43:40:c2:f6:8e:84:c4:86:6d: b2:a5:87:0a:75:d8:0a:ae:5b:d4:48:f6:c2:e2:c2: c9:c1:71:74:6d:b2:7f:fd:25:9c:6f:4b:ea:9d:32: cc:83:2d:0b:8c:8e:3d:2e:0f:d4:fe:f1:47:ca:c9: ad:ab:53:9e:4a:12:d5:b4:0b:b8:32:50:cb:db:31: 68:4f:d9:28:cb:68:f0:8b:58:79:cf:79:54:7a:38: 53:1f:5c:cb:fa:15:65:6f:a7:04:6d:84:98:db:fb: 91:da:e9:07:c8:bf:40:e8:76:6e:e1:7e:78:bb:9a: 14:f2:0b:c2:70:99:1c:84:3e:35:c1:a2:3f:f9:ad: 32:5d:1e:48:b3:f1:c6:97:70:b5:31:88:a8:0c:cc: 38:d1:a0:b9:cd:23:f5:94:02:86:a8:e7:86:4a:87: 32:d6:2a:c3:f7:ab:78:63:77:59:fa:8e:b9:87:34: 77:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:4A:DB:4E:42:1E:66:3F:F8:8F:64:9E:C3:B5:F7:7C:45:18:20:69 X509v3 Authority Key Identifier: keyid:B7:D3:EB:61:CC:02:8C:38:BF:D3:F7:A2:80:F3:69:04:68:65:5B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:c1:a4:2b:31:a1:5d:df:16:63:4c:4a:d2:e8:24:55:c2:5a: 9c:b2:a7:cd:ed:c4:54:ca:19:9b:90:ef:3c:7d:54:1d:5e:2b: 09:73:7d:9c:16:da:3e:0e:18:3a:b4:8d:2c:04:11:3b:c8:39: b4:0e:65:d8:cd:cb:71:ab:43:8a:ac:b4:2e:76:71:33:77:5e: dc:58:ec:df:7f:19:cd:7f:6f:ca:d5:52:b3:18:fd:4e:a7:b8: fa:b8:9d:87:f1:13:ed:6d:99:a0:a5:e5:0c:eb:ee:c6:e4:28: 3f:22:e8:48:2c:6e:7b:55:d5:f2:4a:1a:2b:a2:3e:75:e2:ea: f6:f2:1b:2c:cd:e4:a1:fd:4d:fa:d5:a2:cf:f6:2c:48:2f:bd: cc:04:bf:46:45:ca:75:5a:51:3e:b7:84:85:61:eb:55:ae:cd: 4d:b1:5c:e6:c2:77:30:8f:c2:4b:cd:5a:7a:7d:43:c9:ad:52: 90:83:d8:e6:3d:08:bb:4c:a1:0e:27:bc:a1:62:67:17:75:d6: 06:53:d4:ee:f1:ea:f8:51:f6:f5:a9:8d:1a:66:6f:0e:2b:2d: 40:db:88:47:8c:79:8a:74:70:20:ac:ef:c1:47:16:18:86:7b: f3:56:10:92:fd:9c:db:48:a2:4d:4c:e3:57:84:5a:3f:b4:a1: e7:6b:92:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVEN0MxMTAvBgNVBAUTKEI3RDNFQjYxQ0MwMjhDMzhCRkQzRjdBMjgwRjM2OTA0 Njg2NTVCMDYwHhcNMjQwNTE4MjEzODEzWhcNMjQwNTI1MjEzODEzWjAYMRYwFAYD VQQDEw02NjQ5MWZjNS1mYjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhDszDMG2cYMtBbhESIyUKJVuF60kpKHMYa18lbjcuwO48y/S64VS7MzCxGl JoVV/YS+JzTX/WWbXZmD2v4TDUIEMFuKWMfPII5ZTx2iaf1DQML2joTEhm2ypYcK ddgKrlvUSPbC4sLJwXF0bbJ//SWcb0vqnTLMgy0LjI49Lg/U/vFHysmtq1OeShLV tAu4MlDL2zFoT9koy2jwi1h5z3lUejhTH1zL+hVlb6cEbYSY2/uR2ukHyL9A6HZu 4X54u5oU8gvCcJkchD41waI/+a0yXR5Is/HGl3C1MYioDMw40aC5zSP1lAKGqOeG Socy1irD96t4Y3dZ+o65hzR3KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDdK205C HmY/+I9knsO193xFGCBpMB8GA1UdIwQYMBaAFLfT62HMAow4v9P3ooDzaQRoZVsG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUQ3Qy9GRkQzQjNGRTlG RjIxMUVBOERCMjY3MkNDNEY5QUUwMi90OVByWWN3Q2pEaV8wX2VpZ1BOcEJHaGxX d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q5UHJZY3dDakRpXzBfZWlnUE5wQkdobFd3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUQ3Qy9GRkQzQjNGRTlGRjIxMUVBOERCMjY3MkNDNEY5QUUwMi90OVByWWN3Q2pE aV8wX2VpZ1BOcEJHaGxXd1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANwaQrMaFd3xZjTErS6CRVwlqcsqfN7cRUyhmbkO88fVQdXisJc32c Fto+Dhg6tI0sBBE7yDm0DmXYzctxq0OKrLQudnEzd17cWOzffxnNf2/K1VKzGP1O p7j6uJ2H8RPtbZmgpeUM6+7G5Cg/IuhILG57VdXyShoroj514ur28hsszeSh/U36 1aLP9ixIL73MBL9GRcp1WlE+t4SFYetVrs1NsVzmwncwj8JLzVp6fUPJrVKQg9jm PQi7TKEOJ7yhYmcXddYGU9Tu8er4Ufb1qY0aZm8OKy1A24hHjHmKdHAgrO/BRxYY hnvzVhCS/ZzbSKJNTONXhFo/tKHna5In -----END CERTIFICATE-----Generated at Sat May 18 22:28:02 2024 by rpki-client on console-ams.rpki-client.org