$ rpki-client -vvf rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft File: x40eWVkb4MdSTTa9-FyKxuoZD44.mft (raw, json) Hash identifier: p8S0ZIxnX+7BOF7T9fQu8+NuOQ807eqwogGZYTEZOv4= Subject key identifier: E9:97:46:87:A1:5E:F3:69:E3:17:11:02:43:D7:A8:3F:C3:6A:FF:0C Authority key identifier: C7:8D:1E:59:59:1B:E0:C7:52:4D:36:BD:F8:5C:8A:C6:EA:19:0F:8E Certificate issuer: /CN=A91554E6/serialNumber=C78D1E59591BE0C7524D36BDF85C8AC6EA190F8E Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x40eWVkb4MdSTTa9-FyKxuoZD44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft Manifest number: 027B Signing time: Fri 17 May 2024 04:15:37 +0000 Manifest this update: Fri 17 May 2024 04:15:36 +0000 Manifest next update: Fri 24 May 2024 04:15:36 +0000 Files and hashes: 1: x40eWVkb4MdSTTa9-FyKxuoZD44.crl (hash: tb+2L5eIcBIZjaWREbKGeYTwTtSqtpJDlOfly4PdL1c=) 2: 2F9887306F0D11EE9B369C60C4F9AE02.roa (hash: 9q9oTcb4ioXwSsphGFckf19Bd13gyTER6v0uANu9tWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.crl rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x40eWVkb4MdSTTa9-FyKxuoZD44.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 04:15:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91554E6/serialNumber=C78D1E59591BE0C7524D36BDF85C8AC6EA190F8E Validity Not Before: May 17 04:15:36 2024 GMT Not After : May 24 04:15:36 2024 GMT Subject: CN=6646d9e8-64d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e9:1a:13:ba:7e:de:05:b1:f6:3f:8d:20:ab: 01:ed:04:84:5a:50:47:ce:21:f2:92:b1:40:90:29: e3:a1:f6:80:6b:36:96:08:a7:f4:53:7f:86:c8:f3: 80:48:9c:78:e4:bc:95:97:46:eb:83:9b:9c:5f:28: 79:61:32:7f:e4:af:f1:76:4c:12:f3:ef:cf:b7:ca: e5:66:2c:28:6d:81:8f:d4:d9:51:fc:95:d0:9c:6c: 9c:98:05:3f:f8:24:ad:20:87:59:9f:fe:9c:5b:6e: 89:d2:66:9f:ed:5c:86:fd:2d:5f:39:c7:8c:a2:95: 5b:71:a0:9c:78:f8:e4:ab:f1:ec:46:f0:3b:2e:52: 44:4f:ba:3e:02:02:3b:2e:40:2d:40:33:cb:f0:cd: 2b:5e:b3:6b:ea:03:71:fb:32:81:44:13:0a:79:be: 9d:c8:a5:16:f2:b6:5e:44:06:e8:0a:ba:11:e5:ca: a9:f1:9e:47:94:de:84:a8:fd:2e:1f:cd:94:52:c9: 6d:11:15:26:21:0f:e1:b1:c9:7e:4e:8c:5b:48:34: 51:71:8f:b2:9f:3e:bd:93:bf:0d:ae:20:9d:1f:54: 54:86:e9:63:fd:a6:69:43:24:55:7e:69:f5:0d:76: 52:87:61:b1:82:00:ba:6e:4f:6b:3e:55:03:42:5f: 18:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:97:46:87:A1:5E:F3:69:E3:17:11:02:43:D7:A8:3F:C3:6A:FF:0C X509v3 Authority Key Identifier: keyid:C7:8D:1E:59:59:1B:E0:C7:52:4D:36:BD:F8:5C:8A:C6:EA:19:0F:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x40eWVkb4MdSTTa9-FyKxuoZD44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:65:98:d8:03:61:c3:b8:47:f2:52:d0:22:49:9a:e7:a9:01: f6:45:08:19:3c:79:cf:a9:a0:9e:e8:61:2f:c4:c9:4a:af:bf: 8e:3d:75:2d:fe:a8:7d:25:2c:e0:0b:f5:1f:ac:23:bf:62:74: dd:cc:c1:d6:b1:df:48:ec:a1:7b:f2:4a:b9:32:4f:75:b8:1e: 91:2c:32:d3:47:5d:e4:fc:2a:34:97:f8:cd:d0:87:21:04:a4: a6:cb:2b:8e:8f:b1:bf:45:7e:96:7f:f7:39:c1:22:1c:ea:a3: 6a:7a:65:2c:f5:e6:fd:7e:db:ec:ab:3d:0a:c7:26:e5:18:e8: f0:b6:94:18:b4:5f:f8:97:8e:d7:24:47:0c:44:c0:0e:7d:f7: d0:28:b0:05:a2:d1:25:81:37:2b:fa:40:cb:16:f3:09:db:52: fd:d5:42:9e:77:18:c0:24:6d:8f:9d:f4:36:b0:20:49:22:42: 93:22:e4:6e:90:6f:24:c8:c1:e0:7a:71:28:8f:e9:2e:cc:b0: 2b:18:55:46:2b:4a:1c:a3:15:58:98:1e:12:c3:82:61:11:82: ed:a8:42:2e:9f:eb:af:e2:13:9e:77:dc:28:fb:7a:34:b8:5b: 86:c5:4b:09:95:b0:5c:4f:8e:cd:85:b8:b5:cb:79:2c:1b:d7: 1a:bf:ca:fe -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NTRFNjExMC8GA1UEBRMoQzc4RDFFNTk1OTFCRTBDNzUyNEQzNkJERjg1QzhBQzZF QTE5MEY4RTAeFw0yNDA1MTcwNDE1MzZaFw0yNDA1MjQwNDE1MzZaMBgxFjAUBgNV BAMTDTY2NDZkOWU4LTY0ZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCt6RoTun7eBbH2P40gqwHtBIRaUEfOIfKSsUCQKeOh9oBrNpYIp/RTf4bI84BI nHjkvJWXRuuDm5xfKHlhMn/kr/F2TBLz78+3yuVmLChtgY/U2VH8ldCcbJyYBT/4 JK0gh1mf/pxbbonSZp/tXIb9LV85x4yilVtxoJx4+OSr8exG8DsuUkRPuj4CAjsu QC1AM8vwzStes2vqA3H7MoFEEwp5vp3IpRbytl5EBugKuhHlyqnxnkeU3oSo/S4f zZRSyW0RFSYhD+GxyX5OjFtINFFxj7KfPr2Tvw2uIJ0fVFSG6WP9pmlDJFV+afUN dlKHYbGCALpuT2s+VQNCXxiPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6ZdGh6Fe 82njFxECQ9eoP8Nq/wwwHwYDVR0jBBgwFoAUx40eWVkb4MdSTTa9+FyKxuoZD44w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1NEU2LzlGMDY3NzQ4RUQ0 QjExRUNBQjhGQUE3N0M0RjlBRTAyL3g0MGVXVmtiNE1kU1RUYTktRnlLeHVvWkQ0 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveDQwZVdWa2I0TWRTVFRhOS1GeUt4dW9aRDQ0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1 NEU2LzlGMDY3NzQ4RUQ0QjExRUNBQjhGQUE3N0M0RjlBRTAyL3g0MGVXVmtiNE1k U1RUYTktRnlLeHVvWkQ0NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHVlmNgDYcO4R/JS0CJJmuepAfZFCBk8ec+poJ7oYS/EyUqvv449dS3+ qH0lLOAL9R+sI79idN3Mwdax30jsoXvySrkyT3W4HpEsMtNHXeT8KjSX+M3QhyEE pKbLK46Psb9FfpZ/9znBIhzqo2p6ZSz15v1+2+yrPQrHJuUY6PC2lBi0X/iXjtck RwxEwA5999AosAWi0SWBNyv6QMsW8wnbUv3VQp53GMAkbY+d9DawIEkiQpMi5G6Q byTIweB6cSiP6S7MsCsYVUYrShyjFViYHhLDgmERgu2oQi6f66/iE5533Cj7ejS4 W4bFSwmVsFxPjs2FuLXLeSwb1xq/yv4= -----END CERTIFICATE-----Generated at Fri May 17 06:46:22 2024 by rpki-client on console-ams.rpki-client.org