$ rpki-client -vvf rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft File: 9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft (raw, json) Hash identifier: i81A50xo/FmO62ie7qFxAulcFWzvi9TEwLdJX2PW0FM= Subject key identifier: 61:E1:F2:E1:98:98:38:CE:DD:37:9C:0E:E0:17:23:DB:54:2A:19:E3 Authority key identifier: F6:8D:CE:D2:E6:02:F4:46:56:74:10:99:4A:8E:8C:02:10:09:ED:89 Certificate issuer: /CN=A91487A2/serialNumber=F68DCED2E602F446567410994A8E8C021009ED89 Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft Manifest number: A0 Signing time: Sun 19 May 2024 06:48:22 +0000 Manifest this update: Sun 19 May 2024 06:48:21 +0000 Manifest next update: Sun 26 May 2024 06:48:21 +0000 Files and hashes: 1: 9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl (hash: zpmX6/vx5XCphc6NIlrs9Z5VzvGJOBtVHrFEVRX7A5k=) 2: E6F6831A26AF11EEA8E86146C4F9AE02.roa (hash: 9CpIxhJpqpZgP/T3ieG0/C13phYUk5BrcepNwd47BAg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91487A2/serialNumber=F68DCED2E602F446567410994A8E8C021009ED89 Validity Not Before: May 19 06:48:21 2024 GMT Not After : May 26 06:48:21 2024 GMT Subject: CN=6649a0b5-a6e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:69:8c:e5:e9:2e:f2:8e:a2:34:b5:66:ec:60: f4:0c:53:d9:50:d5:fd:8c:cb:25:23:7c:96:23:02: 3c:2e:59:4d:71:99:45:02:9d:51:40:4d:f2:46:cf: e4:a2:f2:d6:2b:ab:e6:92:79:5e:96:34:d4:9c:7c: b0:31:22:52:2f:16:97:93:c8:f8:36:86:ac:bf:32: e8:06:70:b8:12:ae:e9:77:4f:db:b4:7a:d9:ae:f7: e3:6a:fb:34:4a:e8:9e:79:36:4c:65:17:7f:18:42: eb:ec:f9:b1:05:35:db:dc:bf:7a:e1:6a:9f:6f:6b: f9:25:11:c2:3e:8f:f6:32:8e:c7:3e:b4:69:98:84: 38:62:ba:46:1d:56:cf:a9:9b:3d:02:26:69:ee:b6: 44:95:b0:f8:8c:aa:f1:f5:d1:42:1d:23:64:12:55: e2:4a:07:7b:da:f7:a2:6f:70:f1:80:9b:96:8a:1c: 16:23:49:c6:e0:de:76:47:a2:6e:a8:b0:26:ab:dd: b8:7d:f2:90:14:1f:2f:0d:f8:83:5b:ec:6d:68:f2: de:9f:4c:5d:07:fa:d2:bd:64:64:15:dc:4d:12:97: 26:7b:d3:84:41:86:d4:c2:74:92:f8:0b:f0:e8:b4: 49:e2:45:c4:44:34:38:1f:8d:02:fc:e9:f5:91:42: 4e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:E1:F2:E1:98:98:38:CE:DD:37:9C:0E:E0:17:23:DB:54:2A:19:E3 X509v3 Authority Key Identifier: keyid:F6:8D:CE:D2:E6:02:F4:46:56:74:10:99:4A:8E:8C:02:10:09:ED:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:31:8c:b5:c1:07:ac:73:7b:78:8f:ab:d9:30:14:26:0c:ca: 6f:e0:64:13:85:e2:5a:68:3f:cf:5d:1d:93:d6:4e:9c:41:22: 5d:db:12:36:ad:ad:4d:a1:5a:f7:e5:ef:06:2a:6d:06:43:40: 0a:86:d5:2a:10:55:f7:3f:fb:d3:c7:58:1c:14:6e:85:b9:95: cf:ba:a7:ea:3b:07:22:61:9e:b0:ba:81:47:e7:2c:e3:b7:a2: 4e:98:19:a0:e3:72:29:c1:06:d9:1d:eb:e2:a6:40:a1:6a:ee: 2f:84:ad:1d:f4:f8:c8:8a:f2:13:17:bb:62:bd:18:a0:66:9f: 2e:96:9f:78:7b:56:52:0c:5f:82:ea:df:ad:7f:94:da:e2:15: ac:0b:a3:f1:e2:06:f8:d7:3f:5d:d4:47:0f:84:6d:59:11:e1: 4b:8d:e8:4e:2c:fc:df:b0:a5:5b:7f:0a:f0:af:19:82:d4:d5: c9:aa:f9:2a:03:b0:a7:91:fd:1d:ee:e5:6e:33:e3:fc:1a:3e: 26:b7:f5:05:c6:68:49:7e:42:6c:ea:67:dc:99:b2:35:2c:5b: cc:af:c4:03:a9:3f:4e:90:b4:4f:dd:1b:4b:6f:7f:b1:bc:3d: 8e:f1:84:dc:73:e1:90:2a:3d:1e:9c:e2:97:f9:b1:50:a1:12: d3:c7:dd:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg3QTIxMTAvBgNVBAUTKEY2OERDRUQyRTYwMkY0NDY1Njc0MTA5OTRBOEU4QzAy MTAwOUVEODkwHhcNMjQwNTE5MDY0ODIxWhcNMjQwNTI2MDY0ODIxWjAYMRYwFAYD VQQDEw02NjQ5YTBiNS1hNmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWmM5eku8o6iNLVm7GD0DFPZUNX9jMslI3yWIwI8LllNcZlFAp1RQE3yRs/k ovLWK6vmknleljTUnHywMSJSLxaXk8j4NoasvzLoBnC4Eq7pd0/btHrZrvfjavs0 SuieeTZMZRd/GELr7PmxBTXb3L964Wqfb2v5JRHCPo/2Mo7HPrRpmIQ4YrpGHVbP qZs9AiZp7rZElbD4jKrx9dFCHSNkElXiSgd72veib3DxgJuWihwWI0nG4N52R6Ju qLAmq924ffKQFB8vDfiDW+xtaPLen0xdB/rSvWRkFdxNEpcme9OEQYbUwnSS+Avw 6LRJ4kXERDQ4H40C/On1kUJOWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGHh8uGY mDjO3TecDuAXI9tUKhnjMB8GA1UdIwQYMBaAFPaNztLmAvRGVnQQmUqOjAIQCe2J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODdBMi80MDZCNjEwMDI2 QUYxMUVFOEFFRDRGNDVDNEY5QUUwMi85bzNPMHVZQzlFWldkQkNaU282TUFoQUo3 WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlvM08wdVlDOUVaV2RCQ1pTbzZNQWhBSjdZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODdBMi80MDZCNjEwMDI2QUYxMUVFOEFFRDRGNDVDNEY5QUUwMi85bzNPMHVZQzlF WldkQkNaU282TUFoQUo3WWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpMYy1wQesc3t4j6vZMBQmDMpv4GQTheJaaD/PXR2T1k6cQSJd2xI2 ra1NoVr35e8GKm0GQ0AKhtUqEFX3P/vTx1gcFG6FuZXPuqfqOwciYZ6wuoFH5yzj t6JOmBmg43IpwQbZHevipkChau4vhK0d9PjIivITF7tivRigZp8ulp94e1ZSDF+C 6t+tf5Ta4hWsC6Px4gb41z9d1EcPhG1ZEeFLjehOLPzfsKVbfwrwrxmC1NXJqvkq A7Cnkf0d7uVuM+P8Gj4mt/UFxmhJfkJs6mfcmbI1LFvMr8QDqT9OkLRP3RtLb3+x vD2O8YTcc+GQKj0enOKX+bFQoRLTx92k -----END CERTIFICATE-----Generated at Sun May 19 07:40:38 2024 by rpki-client on console-fra.rpki-client.org