$ rpki-client -vvf rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft File: ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft (raw, json) Hash identifier: jrU/R2Vhh3As01PavnXHoUwWjohVISfBsY6anqQQm0w= Subject key identifier: 96:F4:93:1A:BF:D1:76:CA:B1:06:4F:6E:09:81:27:77:DC:7A:90:81 Authority key identifier: 91:AE:E9:60:DC:41:FF:98:ED:1B:37:23:34:31:73:93:81:26:DC:9F Certificate issuer: /CN=A91128B5/serialNumber=91AEE960DC41FF98ED1B3723343173938126DC9F Certificate serial: 0511 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft Manifest number: 050E Signing time: Fri 03 May 2024 01:13:47 +0000 Manifest this update: Fri 03 May 2024 01:13:47 +0000 Manifest next update: Fri 10 May 2024 01:13:47 +0000 Files and hashes: 1: ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl (hash: aK7Izjo06aUFFl79/MK5G+srUyx7AZC7JB7fIElRhUM=) 2: 74BDB7D0B96C11EB956C1D2DC4F9AE02.roa (hash: duFZi6Q3XuqBf2Nz0a24WEfK0dRXBPa2XCTdnAEvoe0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1297 (0x511) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128B5/serialNumber=91AEE960DC41FF98ED1B3723343173938126DC9F Validity Not Before: May 3 01:13:47 2024 GMT Not After : May 10 01:13:47 2024 GMT Subject: CN=66343a4b-8bb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c4:d4:10:6c:10:2f:c2:2a:2b:29:f5:c3:c0: 56:3a:40:6a:72:22:0f:4f:3f:5b:26:17:35:48:dc: 72:ad:af:36:5c:36:fd:2a:bf:2c:49:bf:82:9f:5a: 7f:e2:37:0a:a2:1d:bd:03:cf:57:bc:5d:93:3f:78: 4f:cb:ca:07:01:33:3a:42:c8:44:cc:f1:79:79:55: 67:be:9b:66:bd:52:a8:9b:97:07:73:eb:1f:bf:72: 36:5d:2a:47:81:32:ff:18:f2:8f:06:0c:5a:b9:27: 7b:db:2f:5a:52:e0:fb:b9:ca:11:94:ba:71:03:cf: 1b:4e:6b:3c:bb:f1:f0:78:28:1d:45:dc:20:54:ad: 72:92:e9:33:a6:fa:2d:3c:e0:97:b7:c9:f9:a4:60: 9a:5d:f9:b6:da:68:82:7c:21:ae:2b:cb:df:c8:1c: d5:6c:75:29:f2:9a:78:92:61:c6:ba:ce:b7:ff:9b: 42:cc:a7:f6:aa:31:a5:00:22:87:30:4d:9c:20:d8: 7f:43:06:90:e6:56:59:2b:33:0b:d1:71:d4:07:c9: b4:ae:aa:41:08:a8:fb:37:61:00:34:f6:78:bd:23: 23:af:6b:40:2c:86:22:1a:a9:cd:9b:29:f1:bb:0b: b2:52:f5:0b:60:3a:28:a3:85:33:0d:cf:99:a3:c4: 0d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F4:93:1A:BF:D1:76:CA:B1:06:4F:6E:09:81:27:77:DC:7A:90:81 X509v3 Authority Key Identifier: keyid:91:AE:E9:60:DC:41:FF:98:ED:1B:37:23:34:31:73:93:81:26:DC:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:6d:6d:7f:cc:6c:58:70:96:cb:e8:a2:8f:b9:67:16:c4:e2: 67:99:77:2a:c2:de:aa:69:2a:cd:92:70:7c:31:86:d4:a9:f8: 36:61:5a:09:ee:42:34:ff:2d:c9:a5:6b:25:b4:ab:16:45:8b: 3d:d5:a6:d2:33:ac:7a:37:7a:1a:bf:99:90:26:30:10:9a:e7: 58:68:41:c1:85:b1:01:70:99:60:2e:85:29:ee:5e:4a:82:f6: bd:7a:e2:9a:62:21:36:49:1f:6c:a9:35:1d:a2:16:2f:3f:a2: df:83:9c:95:71:cb:b2:c2:61:ff:6d:ed:f5:df:e8:7a:58:15: 6d:b0:98:0e:7e:61:6d:eb:c3:28:ff:c0:a1:27:89:78:05:ae: 44:c4:c9:58:ec:df:71:1f:f8:e2:86:17:1f:00:24:35:b9:61: b1:1b:56:22:1d:35:7d:ba:0c:4d:d7:fb:28:c1:70:02:d6:41: b6:34:f5:7d:74:91:9c:eb:20:bf:3b:84:1e:46:5b:45:4f:a4: f2:33:5d:6a:5d:99:62:44:48:6b:ee:da:3b:01:0d:ec:48:8b: 03:c9:e5:f4:21:55:d8:ef:4a:1e:23:30:f2:b6:ed:ef:0d:7d: fb:08:53:9a:a8:36:81:b4:10:2f:91:35:2d:6f:c6:a2:d5:79: 2c:24:05:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4QjUxMTAvBgNVBAUTKDkxQUVFOTYwREM0MUZGOThFRDFCMzcyMzM0MzE3Mzkz ODEyNkRDOUYwHhcNMjQwNTAzMDExMzQ3WhcNMjQwNTEwMDExMzQ3WjAYMRYwFAYD VQQDEw02NjM0M2E0Yi04YmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmsTUEGwQL8IqKyn1w8BWOkBqciIPTz9bJhc1SNxyra82XDb9Kr8sSb+Cn1p/ 4jcKoh29A89XvF2TP3hPy8oHATM6QshEzPF5eVVnvptmvVKom5cHc+sfv3I2XSpH gTL/GPKPBgxauSd72y9aUuD7ucoRlLpxA88bTms8u/HweCgdRdwgVK1ykukzpvot POCXt8n5pGCaXfm22miCfCGuK8vfyBzVbHUp8pp4kmHGus63/5tCzKf2qjGlACKH ME2cINh/QwaQ5lZZKzML0XHUB8m0rqpBCKj7N2EANPZ4vSMjr2tALIYiGqnNmynx uwuyUvULYDooo4UzDc+Zo8QNAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJb0kxq/ 0XbKsQZPbgmBJ3fcepCBMB8GA1UdIwQYMBaAFJGu6WDcQf+Y7Rs3IzQxc5OBJtyf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhCNS8zRUJDRDFEQUI5 NkIxMUVCQjE2RUVGMkNDNEY5QUUwMi9rYTdwWU54Ql81anRHemNqTkRGems0RW0z SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2thN3BZTnhCXzVqdEd6Y2pOREZ6azRFbTNKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhCNS8zRUJDRDFEQUI5NkIxMUVCQjE2RUVGMkNDNEY5QUUwMi9rYTdwWU54Ql81 anRHemNqTkRGems0RW0zSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzbW1/zGxYcJbL6KKPuWcWxOJnmXcqwt6qaSrNknB8MYbUqfg2YVoJ 7kI0/y3JpWsltKsWRYs91abSM6x6N3oav5mQJjAQmudYaEHBhbEBcJlgLoUp7l5K gva9euKaYiE2SR9sqTUdohYvP6Lfg5yVccuywmH/be313+h6WBVtsJgOfmFt68Mo /8ChJ4l4Ba5ExMlY7N9xH/jihhcfACQ1uWGxG1YiHTV9ugxN1/sowXAC1kG2NPV9 dJGc6yC/O4QeRltFT6TyM11qXZliREhr7to7AQ3sSIsDyeX0IVXY70oeIzDytu3v DX37CFOaqDaBtBAvkTUtb8ai1XksJAUK -----END CERTIFICATE-----Generated at Fri May 3 03:10:45 2024 by rpki-client on console-ams.rpki-client.org