$ rpki-client -vvf rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft File: m5TObjVVCnQlu0QWLfN8v74FPCU.mft (raw, json) Hash identifier: BLRqE+AosJaY7GXG5QH69OXP1YX/y5BSFTFNqsy1+qw= Subject key identifier: F7:C1:37:12:A8:81:FF:50:71:27:AB:E5:93:E2:33:30:A3:78:2A:35 Authority key identifier: 9B:94:CE:6E:35:55:0A:74:25:BB:44:16:2D:F3:7C:BF:BE:05:3C:25 Certificate issuer: /CN=A91776C9/serialNumber=9B94CE6E35550A7425BB44162DF37CBFBE053C25 Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5TObjVVCnQlu0QWLfN8v74FPCU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft Manifest number: 99 Signing time: Wed 15 May 2024 06:56:04 +0000 Manifest this update: Wed 15 May 2024 06:56:04 +0000 Manifest next update: Wed 22 May 2024 06:56:04 +0000 Files and hashes: 1: m5TObjVVCnQlu0QWLfN8v74FPCU.crl (hash: QTCHWXIeB8vFfr++gtSrdNxDKADoC0Jv+t4XQx9sbLA=) 2: 6AA1772E2A9D11EEA9539254C4F9AE02.roa (hash: tKCmRZYtL0BV34USb1C7Reme5eZarfRor10ZiTaG6E8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.crl rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5TObjVVCnQlu0QWLfN8v74FPCU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 06:56:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91776C9/serialNumber=9B94CE6E35550A7425BB44162DF37CBFBE053C25 Validity Not Before: May 15 06:56:04 2024 GMT Not After : May 22 06:56:04 2024 GMT Subject: CN=66445c84-c0de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f4:bb:d7:7a:2e:62:bf:19:68:48:27:a6:61: ad:5a:a5:45:be:ef:dc:1e:0d:0d:e9:12:03:f7:ba: 7c:30:3f:74:91:1b:29:e0:16:3f:57:82:5d:88:77: 6d:5e:ff:f9:8b:29:3e:38:38:ff:c1:41:ce:c8:08: 18:60:ba:3a:f3:cb:52:a7:8f:0e:7b:9e:f1:c1:b1: bf:03:7c:19:f0:46:28:b3:6d:2b:0d:a9:e4:8b:1c: a3:85:13:64:2b:b1:c4:47:65:bb:27:e8:be:90:83: 52:12:44:98:4b:4a:49:dd:00:c0:5d:a2:de:cf:9f: f6:53:b5:35:c6:99:ab:a2:73:47:08:79:17:6b:5c: 0f:00:3b:3d:f9:48:40:93:96:1c:a3:16:18:72:95: 92:70:06:04:cb:55:50:76:34:a8:25:06:11:cb:31: a0:d3:01:d9:07:de:ea:a6:e5:0d:69:fe:35:2c:29: 5b:33:74:cb:0f:bf:e2:60:7d:58:f8:ac:49:74:18: 08:7e:13:1e:2a:d8:ad:d2:6a:20:a0:72:96:3f:23: fc:38:b0:9a:83:50:b6:57:17:cc:f9:33:b6:e8:46: 55:f2:06:0b:02:34:b8:7b:44:18:64:7d:f0:b3:c4: b1:44:b5:91:c1:df:5a:05:6f:2e:8b:0d:3b:e7:17: 1d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C1:37:12:A8:81:FF:50:71:27:AB:E5:93:E2:33:30:A3:78:2A:35 X509v3 Authority Key Identifier: keyid:9B:94:CE:6E:35:55:0A:74:25:BB:44:16:2D:F3:7C:BF:BE:05:3C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5TObjVVCnQlu0QWLfN8v74FPCU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:2a:0e:a0:b4:06:e6:65:9f:e6:ac:e4:be:ec:e9:ea:3d:67: 5e:74:ed:f4:cf:45:aa:ac:06:e1:04:00:37:17:32:cd:b3:7a: 17:b1:b0:36:5c:14:cf:9a:41:c6:0e:c2:df:59:e7:bc:45:3b: 0b:e9:64:f7:f4:d4:cb:7d:96:93:a3:1c:4c:76:9c:70:f0:3b: 7b:85:f8:43:45:aa:2f:61:ff:db:d0:5a:bc:a3:18:8f:b7:1d: fe:0a:0c:d4:37:87:fe:4d:9a:8e:0d:3d:eb:bb:b2:26:d3:7f: 84:0c:a7:fd:39:6e:41:2e:0d:0c:93:b4:dd:74:51:4a:43:bc: 00:41:bb:25:3d:53:bb:57:ae:34:b5:f6:57:c5:ca:2f:15:71: cb:f2:ae:8b:c9:c1:ec:05:b7:05:05:e7:86:c7:e2:bc:af:48: 4c:2c:93:04:74:1f:f4:e6:d9:28:e6:55:bf:5a:a1:67:5b:d1: bd:09:9c:3d:5f:62:4b:63:1d:25:3e:3f:78:4d:1f:90:29:54: 55:39:61:a0:7a:92:42:67:70:08:a7:0c:ea:da:f1:76:db:b4: ff:b8:00:a9:fd:a2:e8:62:0c:25:eb:81:5e:ca:b6:c3:40:45: 8e:ab:c9:0e:5e:b9:24:d0:52:53:ce:58:cc:b9:a2:3a:6e:35: a6:85:df:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc2QzkxMTAvBgNVBAUTKDlCOTRDRTZFMzU1NTBBNzQyNUJCNDQxNjJERjM3Q0JG QkUwNTNDMjUwHhcNMjQwNTE1MDY1NjA0WhcNMjQwNTIyMDY1NjA0WjAYMRYwFAYD VQQDEw02NjQ0NWM4NC1jMGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufS713ouYr8ZaEgnpmGtWqVFvu/cHg0N6RID97p8MD90kRsp4BY/V4JdiHdt Xv/5iyk+ODj/wUHOyAgYYLo688tSp48Oe57xwbG/A3wZ8EYos20rDankixyjhRNk K7HER2W7J+i+kINSEkSYS0pJ3QDAXaLez5/2U7U1xpmronNHCHkXa1wPADs9+UhA k5YcoxYYcpWScAYEy1VQdjSoJQYRyzGg0wHZB97qpuUNaf41LClbM3TLD7/iYH1Y +KxJdBgIfhMeKtit0mogoHKWPyP8OLCag1C2VxfM+TO26EZV8gYLAjS4e0QYZH3w s8SxRLWRwd9aBW8uiw075xcdjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPfBNxKo gf9QcSer5ZPiMzCjeCo1MB8GA1UdIwQYMBaAFJuUzm41VQp0JbtEFi3zfL++BTwl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzZDOS8xOEMzQzc2ODJB OUQxMUVFQUFCNUM5NTNDNEY5QUUwMi9tNVRPYmpWVkNuUWx1MFFXTGZOOHY3NEZQ Q1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201VE9ialZWQ25RbHUwUVdMZk44djc0RlBDVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzZDOS8xOEMzQzc2ODJBOUQxMUVFQUFCNUM5NTNDNEY5QUUwMi9tNVRPYmpWVkNu UWx1MFFXTGZOOHY3NEZQQ1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1Kg6gtAbmZZ/mrOS+7OnqPWdedO30z0WqrAbhBAA3FzLNs3oXsbA2 XBTPmkHGDsLfWee8RTsL6WT39NTLfZaToxxMdpxw8Dt7hfhDRaovYf/b0Fq8oxiP tx3+CgzUN4f+TZqODT3ru7Im03+EDKf9OW5BLg0Mk7TddFFKQ7wAQbslPVO7V640 tfZXxcovFXHL8q6LycHsBbcFBeeGx+K8r0hMLJMEdB/05tko5lW/WqFnW9G9CZw9 X2JLYx0lPj94TR+QKVRVOWGgepJCZ3AIpwzq2vF227T/uACp/aLoYgwl64FeyrbD QEWOq8kOXrkk0FJTzljMuaI6bjWmhd8M -----END CERTIFICATE-----Generated at Wed May 15 09:04:13 2024 by rpki-client on console-ams.rpki-client.org