$ rpki-client -vvf rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft File: 31OLuqk3tpugC7J7caS3dubkGf4.mft (raw, json) Hash identifier: 023Rhpii5Y8tHiHuA2OrQ88hJxnStHDjyPpOLkdsKuQ= Subject key identifier: 61:73:9C:FF:7F:FF:5A:A2:AD:FA:9A:4C:A7:8F:01:55:95:FD:34:59 Authority key identifier: DF:53:8B:BA:A9:37:B6:9B:A0:0B:B2:7B:71:A4:B7:76:E6:E4:19:FE Certificate issuer: /CN=A9191170/serialNumber=DF538BBAA937B69BA00BB27B71A4B776E6E419FE Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft Manifest number: B2 Signing time: Fri 17 May 2024 06:37:19 +0000 Manifest this update: Fri 17 May 2024 06:37:19 +0000 Manifest next update: Fri 24 May 2024 06:37:19 +0000 Files and hashes: 1: 31OLuqk3tpugC7J7caS3dubkGf4.crl (hash: pFHV1wx6J8GcJsoITWhggy5cqX1v2VjJGT+6uoqoAXg=) 2: 0FB9EB64042F11EEB364B741C4F9AE02.roa (hash: DuUc0YimiRCNq8wW/zdjd8VTBY4NbqXjLDx9fEGix6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.crl rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 06:37:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191170/serialNumber=DF538BBAA937B69BA00BB27B71A4B776E6E419FE Validity Not Before: May 17 06:37:19 2024 GMT Not After : May 24 06:37:19 2024 GMT Subject: CN=6646fb1f-0d98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:52:6f:bc:eb:a0:52:bc:c0:32:1d:f9:1a:0b: d3:26:b2:9d:95:7a:79:b8:32:56:ef:51:83:bb:bc: b7:f9:f7:95:9d:cf:99:2a:4c:2d:04:bf:20:aa:83: c0:e0:73:5e:8e:98:a2:da:81:31:a0:86:40:0f:13: d3:67:37:3a:9a:e5:0b:66:20:e2:69:df:2f:66:c7: 18:35:7f:79:ad:a7:c4:48:32:01:7d:04:f6:67:42: 08:78:46:0b:73:ac:f6:51:c4:9d:d0:14:4e:c1:35: 1f:89:d8:28:57:3d:62:f9:8a:f7:bd:49:e7:41:16: db:42:25:8f:4f:af:47:ed:9d:1c:a0:43:c6:21:c2: bd:38:30:7f:d4:83:96:a0:d4:b9:13:b6:c1:e7:53: e0:99:b4:3a:6d:c0:09:c6:ed:6d:c0:45:c0:e5:a9: de:82:0d:51:79:5e:b1:70:da:e0:46:30:c4:c6:3a: 52:2e:02:49:9f:09:ac:95:5a:09:9a:61:8c:05:82: 57:85:8b:c6:ea:50:dd:b8:49:df:56:b0:ff:99:2a: f8:66:d3:49:a4:df:87:36:8e:6f:b9:fd:ad:38:a3: 2f:84:96:b6:47:b7:b1:c8:56:ff:94:97:ea:87:99: 18:29:d0:c5:4a:33:89:8b:f1:39:6e:cd:f0:a6:c7: 87:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:73:9C:FF:7F:FF:5A:A2:AD:FA:9A:4C:A7:8F:01:55:95:FD:34:59 X509v3 Authority Key Identifier: keyid:DF:53:8B:BA:A9:37:B6:9B:A0:0B:B2:7B:71:A4:B7:76:E6:E4:19:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:30:75:da:6c:05:59:32:b3:61:2d:da:ce:0e:b7:ff:97:17: 8b:e8:52:0c:8b:91:2b:72:e4:aa:e4:3b:85:4b:f7:d6:f7:91: ae:ae:15:f8:97:b9:4c:17:43:da:18:91:9c:9c:29:85:5d:f8: ab:6a:97:ee:76:de:26:e2:7d:a8:7d:4e:b0:a8:24:65:50:71: eb:1d:6f:63:6a:bc:41:91:79:ca:9e:eb:71:a6:b2:a3:48:67: 52:35:bc:e3:40:51:e1:9b:3e:f9:49:46:97:90:55:80:60:19: a8:a9:ae:61:83:4a:1c:f7:37:6d:9e:4b:61:c7:17:c6:34:45: 0a:8e:07:80:27:91:79:76:66:7c:6a:32:ed:88:cc:c8:07:d1: b3:4a:f5:22:33:16:94:52:a7:f6:19:1a:fa:d1:3f:c9:0d:bd: bc:dc:4d:2d:96:8d:a2:30:f1:3f:34:a6:bf:ca:02:c0:bc:01: ef:9c:52:df:31:9a:77:79:b6:7f:8a:fb:eb:ae:c9:13:62:00: 7f:db:9c:1f:3f:e1:05:dd:2a:57:b6:b0:3d:96:6e:91:cc:4e: 6f:dc:c7:21:c7:00:aa:49:42:94:06:12:d5:16:2b:3b:5e:d2: c0:f7:a7:25:00:0c:31:f4:f9:41:92:7a:13:29:d4:f8:0b:03: 8b:26:f9:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTExNzAxMTAvBgNVBAUTKERGNTM4QkJBQTkzN0I2OUJBMDBCQjI3QjcxQTRCNzc2 RTZFNDE5RkUwHhcNMjQwNTE3MDYzNzE5WhcNMjQwNTI0MDYzNzE5WjAYMRYwFAYD VQQDEw02NjQ2ZmIxZi0wZDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFJvvOugUrzAMh35GgvTJrKdlXp5uDJW71GDu7y3+feVnc+ZKkwtBL8gqoPA 4HNejpii2oExoIZADxPTZzc6muULZiDiad8vZscYNX95rafESDIBfQT2Z0IIeEYL c6z2UcSd0BROwTUfidgoVz1i+Yr3vUnnQRbbQiWPT69H7Z0coEPGIcK9ODB/1IOW oNS5E7bB51PgmbQ6bcAJxu1twEXA5anegg1ReV6xcNrgRjDExjpSLgJJnwmslVoJ mmGMBYJXhYvG6lDduEnfVrD/mSr4ZtNJpN+HNo5vuf2tOKMvhJa2R7exyFb/lJfq h5kYKdDFSjOJi/E5bs3wpseH0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGFznP9/ /1qirfqaTKePAVWV/TRZMB8GA1UdIwQYMBaAFN9Ti7qpN7aboAuye3Gkt3bm5Bn+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTE3MC9GMzIzMDhDMjA0 MkExMUVFOTRBODQ5NDFDNEY5QUUwMi8zMU9MdXFrM3RwdWdDN0o3Y2FTM2R1YmtH ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMxT0x1cWszdHB1Z0M3SjdjYVMzZHVia0dmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTE3MC9GMzIzMDhDMjA0MkExMUVFOTRBODQ5NDFDNEY5QUUwMi8zMU9MdXFrM3Rw dWdDN0o3Y2FTM2R1YmtHZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFMHXabAVZMrNhLdrODrf/lxeL6FIMi5ErcuSq5DuFS/fW95GurhX4 l7lMF0PaGJGcnCmFXfirapfudt4m4n2ofU6wqCRlUHHrHW9jarxBkXnKnutxprKj SGdSNbzjQFHhmz75SUaXkFWAYBmoqa5hg0oc9zdtnkthxxfGNEUKjgeAJ5F5dmZ8 ajLtiMzIB9GzSvUiMxaUUqf2GRr60T/JDb283E0tlo2iMPE/NKa/ygLAvAHvnFLf MZp3ebZ/ivvrrskTYgB/25wfP+EF3SpXtrA9lm6RzE5v3MchxwCqSUKUBhLVFis7 XtLA96clAAwx9PlBknoTKdT4CwOLJvlk -----END CERTIFICATE-----Generated at Fri May 17 08:52:51 2024 by rpki-client on console-ams.rpki-client.org