$ rpki-client -vvf rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft File: 91rI3ARJV7GxWgsVxu2jGLI7QDM.mft (raw, json) Hash identifier: /8Fdzhjl28SZjyxFERdlod2kjf4j9SeGtPujdAqbXBk= Subject key identifier: 73:A9:DD:80:28:FD:D7:64:00:D1:82:9D:18:89:40:1B:46:0F:F4:6D Authority key identifier: F7:5A:C8:DC:04:49:57:B1:B1:5A:0B:15:C6:ED:A3:18:B2:3B:40:33 Certificate issuer: /CN=A919CDE4/serialNumber=F75AC8DC044957B1B15A0B15C6EDA318B23B4033 Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91rI3ARJV7GxWgsVxu2jGLI7QDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft Manifest number: D6 Signing time: Tue 07 May 2024 06:06:24 +0000 Manifest this update: Tue 07 May 2024 06:06:23 +0000 Manifest next update: Tue 14 May 2024 06:06:23 +0000 Files and hashes: 1: 91rI3ARJV7GxWgsVxu2jGLI7QDM.crl (hash: PZgdjY45F00r7TZu2HQR/81LMOOveEqbUN+qKpsRIJg=) 2: 955C43AAC99E11ED98E9BE5BC4F9AE02.roa (hash: aE6qh2l0CGRNRGlr9iC0PdOnxV9hvH0OTe2MxwwE0Qw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.crl rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91rI3ARJV7GxWgsVxu2jGLI7QDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 06:06:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CDE4/serialNumber=F75AC8DC044957B1B15A0B15C6EDA318B23B4033 Validity Not Before: May 7 06:06:23 2024 GMT Not After : May 14 06:06:23 2024 GMT Subject: CN=6639c4e0-18b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9f:ee:1d:db:21:bd:a4:3e:2f:8a:a4:f6:f1: ee:1b:db:bf:8f:58:04:f0:75:e4:0f:1d:18:ee:d4: b5:24:53:0e:45:ea:c6:bb:a6:e8:f5:8d:d8:7c:e7: 57:cb:6d:b1:09:f4:38:83:1f:5c:df:df:48:60:d2: 87:cf:cc:a4:8d:50:bf:6c:32:7c:c7:78:19:a9:e1: 01:3c:98:65:21:56:27:15:e0:47:75:54:e3:3d:1d: fd:f8:a5:ac:d9:04:c0:cc:98:52:ba:f4:32:21:f2: 33:96:1f:01:b4:68:ee:86:4b:cf:c8:fd:9b:4e:49: fc:1c:1e:c1:d4:79:9a:ff:17:87:89:a9:e7:f2:e7: d7:d0:54:26:cd:f6:24:3a:30:a2:7c:7a:8e:8f:d4: 8d:ed:f6:e9:86:72:79:6f:8a:ff:be:20:c7:8e:af: 85:35:c7:86:bd:1e:f3:47:97:2b:59:d9:87:02:6d: 8b:45:ad:d9:a3:af:82:79:85:4e:c2:24:df:a1:8b: 21:c4:ef:da:e2:17:64:b6:7b:b5:ec:8f:0f:fa:1a: 23:b4:1b:70:25:63:d8:0f:0a:d3:dc:2f:f4:ed:8f: c3:80:ef:56:23:ea:26:ae:b6:e5:c7:d2:d7:01:97: 53:bf:ea:27:9e:76:98:2f:df:c0:bc:1d:81:98:85: fa:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A9:DD:80:28:FD:D7:64:00:D1:82:9D:18:89:40:1B:46:0F:F4:6D X509v3 Authority Key Identifier: keyid:F7:5A:C8:DC:04:49:57:B1:B1:5A:0B:15:C6:ED:A3:18:B2:3B:40:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91rI3ARJV7GxWgsVxu2jGLI7QDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:e2:74:74:06:16:2a:c5:27:38:83:ce:43:44:3b:97:57:5a: 0f:92:d0:2f:57:4b:2e:77:e2:10:f7:11:5b:28:33:bd:0c:d1: 39:32:b2:88:a2:be:cf:3e:8a:fb:da:39:0e:42:60:41:d6:3b: 97:89:ef:1e:cb:8f:0a:2f:ba:f2:eb:6a:c2:2b:05:d3:65:bc: e8:d7:fb:54:07:87:6d:aa:76:02:f5:0e:d4:43:05:c6:90:84: 43:ab:9a:83:b8:ea:b8:a3:ab:30:77:52:e2:1f:11:0d:ce:5c: fe:6d:b0:92:f9:e7:fc:f4:6c:c4:4b:3a:53:57:45:0d:e5:00: 8a:cd:02:17:38:76:59:38:a6:be:46:65:dd:0d:bf:b0:99:de: 61:0b:0b:57:83:2d:7b:9f:ed:75:0a:a7:1b:3d:b4:2a:a7:f6: e6:09:bd:d6:e5:d0:78:41:d7:1c:b0:2b:9d:9f:35:5d:82:bf: 3c:c4:8e:da:9d:20:d4:0c:dd:8e:2b:8d:dd:d1:f3:8e:d4:f9: 01:4c:ed:6a:af:ab:cb:b9:f7:4e:13:31:ac:1d:f6:4e:99:a3: b0:a2:0e:8e:5d:e6:31:b4:fc:5a:71:f8:7a:b5:20:ab:23:38: 24:ff:47:c3:a5:c2:dd:a7:11:e8:f1:a9:60:49:c8:d5:da:a1: ea:f7:1b:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNERTQxMTAvBgNVBAUTKEY3NUFDOERDMDQ0OTU3QjFCMTVBMEIxNUM2RURBMzE4 QjIzQjQwMzMwHhcNMjQwNTA3MDYwNjIzWhcNMjQwNTE0MDYwNjIzWjAYMRYwFAYD VQQDEw02NjM5YzRlMC0xOGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzJ/uHdshvaQ+L4qk9vHuG9u/j1gE8HXkDx0Y7tS1JFMORerGu6bo9Y3YfOdX y22xCfQ4gx9c399IYNKHz8ykjVC/bDJ8x3gZqeEBPJhlIVYnFeBHdVTjPR39+KWs 2QTAzJhSuvQyIfIzlh8BtGjuhkvPyP2bTkn8HB7B1Hma/xeHiann8ufX0FQmzfYk OjCifHqOj9SN7fbphnJ5b4r/viDHjq+FNceGvR7zR5crWdmHAm2LRa3Zo6+CeYVO wiTfoYshxO/a4hdktnu17I8P+hojtBtwJWPYDwrT3C/07Y/DgO9WI+omrrblx9LX AZdTv+onnnaYL9/AvB2BmIX6awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHOp3YAo /ddkANGCnRiJQBtGD/RtMB8GA1UdIwQYMBaAFPdayNwESVexsVoLFcbtoxiyO0Az MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0RFNC9CNUE0NzM5MEM5 OTMxMUVEOUI0QjNCMTBDNEY5QUUwMi85MXJJM0FSSlY3R3hXZ3NWeHUyakdMSTdR RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkxckkzQVJKVjdHeFdnc1Z4dTJqR0xJN1FETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0RFNC9CNUE0NzM5MEM5OTMxMUVEOUI0QjNCMTBDNEY5QUUwMi85MXJJM0FSSlY3 R3hXZ3NWeHUyakdMSTdRRE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt4nR0BhYqxSc4g85DRDuXV1oPktAvV0sud+IQ9xFbKDO9DNE5MrKI or7PPor72jkOQmBB1juXie8ey48KL7ry62rCKwXTZbzo1/tUB4dtqnYC9Q7UQwXG kIRDq5qDuOq4o6swd1LiHxENzlz+bbCS+ef89GzESzpTV0UN5QCKzQIXOHZZOKa+ RmXdDb+wmd5hCwtXgy17n+11CqcbPbQqp/bmCb3W5dB4QdccsCudnzVdgr88xI7a nSDUDN2OK43d0fOO1PkBTO1qr6vLufdOEzGsHfZOmaOwog6OXeYxtPxacfh6tSCr Izgk/0fDpcLdpxHo8algScjV2qHq9xv9 -----END CERTIFICATE-----Generated at Tue May 7 07:13:01 2024 by rpki-client on console-ams.rpki-client.org