$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft File: u5rRr2kxSy7y9klB8Db94PfMTwI.mft (raw, json) Hash identifier: xI1EvZXFQRmO4BLigQLMXTJ1+jj52hgFMNZ6/AFQ+sE= Subject key identifier: 2A:39:01:41:F5:07:BD:3C:97:45:CD:C3:23:60:A2:3B:82:8C:C7:51 Authority key identifier: BB:9A:D1:AF:69:31:4B:2E:F2:F6:49:41:F0:36:FD:E0:F7:CC:4F:02 Certificate issuer: /CN=A911DA8C/serialNumber=BB9AD1AF69314B2EF2F64941F036FDE0F7CC4F02 Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft Manifest number: 86 Signing time: Fri 17 May 2024 04:01:50 +0000 Manifest this update: Fri 17 May 2024 04:01:50 +0000 Manifest next update: Fri 24 May 2024 04:01:50 +0000 Files and hashes: 1: u5rRr2kxSy7y9klB8Db94PfMTwI.crl (hash: jP+aZA7DnXNNTtOz/GsNiUgBteRx/h/OBRW6ZIFWFOA=) 2: B6369EA2521711EE899DAC80C4F9AE02.roa (hash: xuCx/RBnsBpgZFOhauVuk4dGW5HAynFqSYETruU/9ss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.crl rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DA8C/serialNumber=BB9AD1AF69314B2EF2F64941F036FDE0F7CC4F02 Validity Not Before: May 17 04:01:50 2024 GMT Not After : May 24 04:01:50 2024 GMT Subject: CN=6646d6ae-8cc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ad:49:04:59:dd:a5:ce:7f:34:38:68:17:52: f3:4f:af:4e:9a:ed:f4:81:20:91:e5:9f:da:9b:65: a1:29:27:39:15:ee:29:9a:6e:ec:ec:24:e9:5b:30: 89:85:33:a9:79:fb:a0:8b:c4:b7:22:a9:81:e6:6e: f0:e5:87:57:b3:19:47:26:79:8e:cb:0c:a2:eb:19: 54:9a:5a:82:1c:21:d8:5e:62:4d:89:bc:b5:b8:41: e6:98:b6:19:e3:8d:89:30:ad:d5:50:cf:ae:08:6a: 16:5b:90:eb:14:cd:1d:eb:ca:b7:d7:b2:d7:37:65: a5:c5:b7:f6:5f:c6:4a:50:df:54:a1:11:9b:7e:0d: 0d:d9:d2:8d:cd:b7:7c:bc:99:ae:44:71:ee:58:79: ca:05:63:cf:e3:9e:e7:37:f4:07:6c:86:d7:10:e5: 23:53:f6:fd:b0:21:3d:40:5f:2b:60:6f:2b:5d:cb: 7b:23:ac:7f:ec:66:2d:66:0c:41:0a:47:39:93:a2: 66:65:10:23:f5:5c:3a:5d:4d:9d:d2:15:3f:fb:64: b3:df:84:b9:b4:2d:db:f0:ad:2d:6a:a9:99:bb:86: 89:ca:3e:ba:2b:bf:11:99:fc:f0:8c:82:1b:89:f8: 95:49:a3:13:1a:3d:4f:8f:8a:17:4e:d7:41:9b:c2: e1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:39:01:41:F5:07:BD:3C:97:45:CD:C3:23:60:A2:3B:82:8C:C7:51 X509v3 Authority Key Identifier: keyid:BB:9A:D1:AF:69:31:4B:2E:F2:F6:49:41:F0:36:FD:E0:F7:CC:4F:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:64:d1:b4:bc:b3:2f:4a:52:94:8a:67:20:a1:cd:8c:ea:6e: 0b:0b:0b:1f:a1:3d:63:52:82:ee:01:e7:3c:d8:d3:0b:8a:5d: bc:05:19:64:94:b7:54:96:7c:f7:5b:fa:07:e4:d7:56:3a:34: 45:05:81:c5:28:0e:80:4e:9e:e0:eb:83:f7:c8:de:56:bf:d1: ea:52:88:89:55:67:3b:76:43:d4:e8:5c:fd:fe:ed:87:de:4c: 2f:cb:ba:ea:e1:f2:52:30:cc:e1:52:7a:5a:a9:bd:bf:03:d2: e1:86:d5:cd:78:81:6e:22:ad:4c:8a:3c:13:ab:b6:99:4b:f6: e6:c5:63:7d:d6:ae:62:19:61:75:a2:e1:9e:57:1c:d4:bf:94: f2:40:e0:3c:4a:15:cc:6c:9a:bc:08:0d:c7:4c:ac:5c:03:c1: a1:3c:2e:67:45:ed:98:23:22:24:b4:99:3c:16:3b:c4:4e:24: 6a:56:09:0a:58:31:64:db:3e:98:bd:15:9b:05:a6:a2:a0:f4: 84:0a:22:dc:ed:39:e7:c5:6e:94:c3:d1:61:bf:b0:3c:f2:41: 23:98:c8:57:4a:14:f4:b7:b9:25:3f:80:f1:85:57:ad:b2:c8: 5e:5f:2c:1a:6e:5a:ab:21:9c:b2:27:53:f6:f0:0c:47:86:94: ed:5e:f8:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURBOEMxMTAvBgNVBAUTKEJCOUFEMUFGNjkzMTRCMkVGMkY2NDk0MUYwMzZGREUw RjdDQzRGMDIwHhcNMjQwNTE3MDQwMTUwWhcNMjQwNTI0MDQwMTUwWjAYMRYwFAYD VQQDEw02NjQ2ZDZhZS04Y2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuK1JBFndpc5/NDhoF1LzT69Omu30gSCR5Z/am2WhKSc5Fe4pmm7s7CTpWzCJ hTOpefugi8S3IqmB5m7w5YdXsxlHJnmOywyi6xlUmlqCHCHYXmJNiby1uEHmmLYZ 442JMK3VUM+uCGoWW5DrFM0d68q317LXN2Wlxbf2X8ZKUN9UoRGbfg0N2dKNzbd8 vJmuRHHuWHnKBWPP457nN/QHbIbXEOUjU/b9sCE9QF8rYG8rXct7I6x/7GYtZgxB Ckc5k6JmZRAj9Vw6XU2d0hU/+2Sz34S5tC3b8K0taqmZu4aJyj66K78RmfzwjIIb ifiVSaMTGj1Pj4oXTtdBm8LhbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCo5AUH1 B708l0XNwyNgojuCjMdRMB8GA1UdIwQYMBaAFLua0a9pMUsu8vZJQfA2/eD3zE8C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREE4Qy81NDZFRjNCQTRC OTkxMUVFQkIzNjBCNTVDNEY5QUUwMi91NXJScjJreFN5N3k5a2xCOERiOTRQZk1U d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3U1clJyMmt4U3k3eTlrbEI4RGI5NFBmTVR3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REE4Qy81NDZFRjNCQTRCOTkxMUVFQkIzNjBCNTVDNEY5QUUwMi91NXJScjJreFN5 N3k5a2xCOERiOTRQZk1Ud0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfZNG0vLMvSlKUimcgoc2M6m4LCwsfoT1jUoLuAec82NMLil28BRlk lLdUlnz3W/oH5NdWOjRFBYHFKA6ATp7g64P3yN5Wv9HqUoiJVWc7dkPU6Fz9/u2H 3kwvy7rq4fJSMMzhUnpaqb2/A9LhhtXNeIFuIq1MijwTq7aZS/bmxWN91q5iGWF1 ouGeVxzUv5TyQOA8ShXMbJq8CA3HTKxcA8GhPC5nRe2YIyIktJk8FjvETiRqVgkK WDFk2z6YvRWbBaaioPSECiLc7TnnxW6Uw9Fhv7A88kEjmMhXShT0t7klP4DxhVet ssheXywablqrIZyyJ1P28AxHhpTtXvjC -----END CERTIFICATE-----Generated at Fri May 17 04:44:30 2024 by rpki-client on console-ams.rpki-client.org