$ rpki-client -vvf rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.mft File: aWYanwY1V84rVDewGIk9fZ_dvtA.mft (raw, json) Hash identifier: /PnUZGwcY5ZGIt8lXP+eKvIoNWAf0nuj1jKiH0snIUo= Subject key identifier: 10:A9:EE:3D:22:5F:17:EF:32:2C:C6:27:87:E6:7C:15:E5:1C:0E:26 Authority key identifier: 69:66:1A:9F:06:35:57:CE:2B:54:37:B0:18:89:3D:7D:9F:DD:BE:D0 Certificate issuer: /CN=A91431A6/serialNumber=69661A9F063557CE2B5437B018893D7D9FDDBED0 Certificate serial: 0583 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWYanwY1V84rVDewGIk9fZ_dvtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.mft Manifest number: 057D Signing time: Sun 05 May 2024 00:45:04 +0000 Manifest this update: Sun 05 May 2024 00:45:04 +0000 Manifest next update: Sun 12 May 2024 00:45:04 +0000 Files and hashes: 1: aWYanwY1V84rVDewGIk9fZ_dvtA.crl (hash: L7xtxyx1c962tu4OCC2owaFoyy6VjmLl5t1hOa72MCs=) 2: DDCD4C168EC611EBAB7F3476C4F9AE02.roa (hash: XgqjCFFv8OvHgcyHmr4FpMdTjHkJB/4NbQ4b1FrOS50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.crl rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWYanwY1V84rVDewGIk9fZ_dvtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1411 (0x583) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91431A6/serialNumber=69661A9F063557CE2B5437B018893D7D9FDDBED0 Validity Not Before: May 5 00:45:04 2024 GMT Not After : May 12 00:45:04 2024 GMT Subject: CN=6636d690-da12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e5:14:83:ea:5b:d6:50:c1:45:a0:e8:e7:72: 0f:bb:33:80:a3:e9:ab:c4:5e:c8:8f:0e:bd:1d:c8: 8d:ed:26:3a:8b:60:fc:04:da:d2:31:2d:a4:79:70: a4:41:35:aa:bf:f8:76:57:9a:16:c5:d9:33:ee:5b: db:30:09:c7:b1:c2:7f:1b:72:2a:68:3e:4d:28:1b: a6:1a:7a:46:5f:c2:eb:13:07:12:a5:09:dc:19:8a: 2c:9d:49:89:00:d9:c1:9c:9d:d5:7f:12:6f:77:cb: 6d:15:e2:2d:16:31:16:7f:34:fa:98:c3:87:41:8f: 8f:87:46:ca:6d:f1:86:6c:e6:a4:fd:88:5b:04:e8: fc:f1:93:47:12:f2:a3:e1:01:f6:38:9b:71:10:04: aa:45:63:3c:08:13:35:8a:28:8b:a0:7b:36:14:00: 2d:a5:39:9f:cb:33:ea:ea:ce:d4:45:b0:c3:2c:81: 05:bc:27:f3:35:d2:77:2c:04:42:de:b2:98:1a:7c: 47:99:fd:1d:31:9c:d0:f0:b9:05:e5:10:0f:71:2b: a8:08:31:d1:34:dd:8b:88:45:4a:58:08:1e:85:61: fd:62:f3:e9:a7:ad:b6:02:68:af:7b:a5:bd:6f:2a: 3a:a9:be:22:a9:9c:7c:c1:56:e5:d7:0d:98:f5:6a: 09:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A9:EE:3D:22:5F:17:EF:32:2C:C6:27:87:E6:7C:15:E5:1C:0E:26 X509v3 Authority Key Identifier: keyid:69:66:1A:9F:06:35:57:CE:2B:54:37:B0:18:89:3D:7D:9F:DD:BE:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWYanwY1V84rVDewGIk9fZ_dvtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:59:ae:98:85:e1:91:5a:8f:d8:8d:47:4c:5b:a9:47:3d:ef: 82:59:0a:ec:2f:88:12:02:cd:7e:44:4d:8e:d1:07:d5:48:b7: bc:7c:0f:8a:78:5c:1c:08:6c:e7:5a:13:a6:ec:5d:fa:ce:99: 7c:d3:a0:06:d4:38:d1:38:03:b9:d5:d4:54:bc:4d:56:24:a0: fe:cd:05:15:70:46:a3:06:1b:9e:39:c5:3b:10:39:2e:55:58: 18:05:ec:99:6a:2c:ad:af:01:3c:16:d6:f8:29:96:4b:6a:29: 55:cf:18:86:43:5a:90:f8:62:37:16:6a:07:de:c8:f9:44:26: 43:df:ab:f4:59:cd:72:76:9a:7d:4e:f4:d6:a0:6a:3c:6c:17: 19:53:ad:4a:4e:d0:95:66:e3:66:0f:94:ea:b8:e6:62:ed:42: 29:56:d4:3e:f6:86:2c:5f:77:27:eb:97:52:95:bf:3c:7e:88: d9:35:ea:83:c8:ac:e0:4c:43:cf:2a:4a:14:62:70:a3:f0:f4: 28:57:44:c5:88:f4:39:d3:79:1c:fd:82:ad:23:a1:b0:59:f0: 47:20:b9:90:a1:0b:6e:14:c8:cb:46:ff:96:bc:3d:12:55:7d: b3:bc:6a:b6:2c:47:f4:8f:2a:fa:3f:0a:93:26:46:f8:7c:4e: 8e:b6:81:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMxQTYxMTAvBgNVBAUTKDY5NjYxQTlGMDYzNTU3Q0UyQjU0MzdCMDE4ODkzRDdE OUZEREJFRDAwHhcNMjQwNTA1MDA0NTA0WhcNMjQwNTEyMDA0NTA0WjAYMRYwFAYD VQQDEw02NjM2ZDY5MC1kYTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAruUUg+pb1lDBRaDo53IPuzOAo+mrxF7Ijw69HciN7SY6i2D8BNrSMS2keXCk QTWqv/h2V5oWxdkz7lvbMAnHscJ/G3IqaD5NKBumGnpGX8LrEwcSpQncGYosnUmJ ANnBnJ3VfxJvd8ttFeItFjEWfzT6mMOHQY+Ph0bKbfGGbOak/YhbBOj88ZNHEvKj 4QH2OJtxEASqRWM8CBM1iiiLoHs2FAAtpTmfyzPq6s7URbDDLIEFvCfzNdJ3LARC 3rKYGnxHmf0dMZzQ8LkF5RAPcSuoCDHRNN2LiEVKWAgehWH9YvPpp622Amive6W9 byo6qb4iqZx8wVbl1w2Y9WoJIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCp7j0i XxfvMizGJ4fmfBXlHA4mMB8GA1UdIwQYMBaAFGlmGp8GNVfOK1Q3sBiJPX2f3b7Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzFBNi80NEQ4OTBDQThF QzUxMUVCOTdCMTIwNzRDNEY5QUUwMi9hV1lhbndZMVY4NHJWRGV3R0lrOWZaX2R2 dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FXWWFud1kxVjg0clZEZXdHSWs5ZlpfZHZ0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzFBNi80NEQ4OTBDQThFQzUxMUVCOTdCMTIwNzRDNEY5QUUwMi9hV1lhbndZMVY4 NHJWRGV3R0lrOWZaX2R2dEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6Wa6YheGRWo/YjUdMW6lHPe+CWQrsL4gSAs1+RE2O0QfVSLe8fA+K eFwcCGznWhOm7F36zpl806AG1DjROAO51dRUvE1WJKD+zQUVcEajBhueOcU7EDku VVgYBeyZaiytrwE8Ftb4KZZLailVzxiGQ1qQ+GI3FmoH3sj5RCZD36v0Wc1ydpp9 TvTWoGo8bBcZU61KTtCVZuNmD5TquOZi7UIpVtQ+9oYsX3cn65dSlb88fojZNeqD yKzgTEPPKkoUYnCj8PQoV0TFiPQ503kc/YKtI6GwWfBHILmQoQtuFMjLRv+WvD0S VX2zvGq2LEf0jyr6PwqTJkb4fE6OtoHq -----END CERTIFICATE-----Generated at Sun May 5 01:22:19 2024 by rpki-client on console-fra.rpki-client.org