$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft File: 9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft (raw, json) Hash identifier: LPhqwH6BLpPAzuGMNxSkspBx+rP5eMzVcs7idGeZr84= Subject key identifier: 77:8E:77:9D:A5:6D:C1:8F:4C:2F:B5:98:35:B6:05:C9:B3:00:00:A5 Authority key identifier: F5:3E:56:40:76:98:C1:FA:A7:5D:25:76:55:13:B5:07:65:2C:97:AB Certificate issuer: /CN=A91A1B9F/serialNumber=F53E56407698C1FAA75D25765513B507652C97AB Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9T5WQHaYwfqnXSV2VRO1B2Usl6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft Manifest number: 6C Signing time: Wed 15 May 2024 07:35:05 +0000 Manifest this update: Wed 15 May 2024 07:35:05 +0000 Manifest next update: Wed 22 May 2024 07:35:05 +0000 Files and hashes: 1: 9T5WQHaYwfqnXSV2VRO1B2Usl6s.crl (hash: 8hYWGQ7HYlENzU6EbB53immPk6oauH3Rb1bKUuoHiHk=) 2: 37E179CC6F0011EEAFD97016C4F9AE02.roa (hash: Un+Z3Gbkw13LeqQHwF6QsntnQss6CAfhF5vXIpVmBv4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.crl rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9T5WQHaYwfqnXSV2VRO1B2Usl6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:35:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1B9F/serialNumber=F53E56407698C1FAA75D25765513B507652C97AB Validity Not Before: May 15 07:35:05 2024 GMT Not After : May 22 07:35:05 2024 GMT Subject: CN=664465a9-1539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0d:ae:69:36:50:37:20:cf:6e:b4:4e:26:c8: 55:3c:23:8c:3e:1e:f1:7e:46:9e:fa:9c:16:d2:1f: 29:75:8a:e3:f0:7d:6c:1b:63:d5:a2:13:64:99:19: f0:5d:95:23:fc:97:00:d5:45:d7:79:2a:b6:7e:a4: 6a:04:a2:15:5c:f2:6f:f6:21:fc:10:a6:ef:1e:7f: a8:4d:1d:73:ea:40:2a:82:d6:57:12:cb:4d:89:6b: 87:c6:b7:97:95:b6:9e:86:62:cb:f6:3a:ac:1f:61: 2e:e2:e3:41:72:cc:e0:46:1d:c1:b8:33:d4:3c:c2: 8d:f4:ed:fc:48:64:0c:b2:92:27:b9:66:87:3b:e3: b3:e8:9b:b6:ee:54:1a:58:d9:85:60:41:ed:a0:bb: ce:e5:0f:0b:5b:19:7c:c5:1c:66:67:82:26:00:4e: fc:90:f8:dd:37:27:e2:92:61:9f:db:91:5d:5f:79: ef:3b:50:55:f7:fc:19:16:e6:19:2e:91:4d:cf:39: bf:b5:e4:23:9c:ef:fe:83:0f:9d:ef:42:32:89:1d: b0:c2:91:66:96:5c:90:54:7b:0a:84:4d:bd:0c:52: 25:f1:e7:67:39:37:b8:91:2a:f5:6a:0a:76:80:68: a6:af:42:7d:fc:d1:43:1a:82:f5:6d:79:52:84:49: 46:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:8E:77:9D:A5:6D:C1:8F:4C:2F:B5:98:35:B6:05:C9:B3:00:00:A5 X509v3 Authority Key Identifier: keyid:F5:3E:56:40:76:98:C1:FA:A7:5D:25:76:55:13:B5:07:65:2C:97:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9T5WQHaYwfqnXSV2VRO1B2Usl6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:c1:1f:eb:71:fd:39:97:57:0c:88:b0:c7:28:58:67:3c:7c: 8f:7f:a2:44:8b:d5:46:bd:b6:cf:b7:76:05:75:00:6e:44:75: 10:82:72:39:6d:9f:ea:97:0d:5b:09:f0:7a:70:cd:26:53:b2: 44:fb:16:a3:89:3b:a1:ae:41:9f:19:ac:28:ef:3c:12:3a:56: 20:4f:82:97:45:49:0e:91:93:9e:33:7e:e5:31:dc:c0:60:20: ce:94:18:a9:22:c3:7a:97:0b:4b:9b:ce:06:50:f1:9a:0a:f6: 54:3e:98:33:8e:0f:3e:d8:8d:9c:5a:1d:3a:d2:56:8b:48:cd: c1:84:63:8f:5e:bc:30:59:4e:fd:3a:6d:69:ad:af:e4:23:46: 3c:77:a7:ba:7f:19:16:bc:ce:c4:61:a8:de:94:4f:a0:cd:b9: 40:39:23:a8:9a:11:a4:20:02:9a:70:f8:c6:90:a7:3d:aa:36: 5a:4e:4b:a9:be:0a:dd:87:f9:e3:d2:37:d7:62:2a:16:33:43: 75:aa:66:34:9a:96:08:de:f7:d1:42:bd:07:53:28:73:1a:2b: c8:d3:48:2f:fc:9a:c9:e4:63:e4:ef:aa:c7:64:25:81:5d:4b: 7d:5d:ff:26:2c:67:46:4a:43:26:91:3f:cc:90:2c:42:cd:b6: 7d:aa:2c:e1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MUI5RjExMC8GA1UEBRMoRjUzRTU2NDA3Njk4QzFGQUE3NUQyNTc2NTUxM0I1MDc2 NTJDOTdBQjAeFw0yNDA1MTUwNzM1MDVaFw0yNDA1MjIwNzM1MDVaMBgxFjAUBgNV BAMTDTY2NDQ2NWE5LTE1MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJDa5pNlA3IM9utE4myFU8I4w+HvF+Rp76nBbSHyl1iuPwfWwbY9WiE2SZGfBd lSP8lwDVRdd5KrZ+pGoEohVc8m/2IfwQpu8ef6hNHXPqQCqC1lcSy02Ja4fGt5eV tp6GYsv2OqwfYS7i40FyzOBGHcG4M9Q8wo307fxIZAyykie5Zoc747Pom7buVBpY 2YVgQe2gu87lDwtbGXzFHGZngiYATvyQ+N03J+KSYZ/bkV1fee87UFX3/BkW5hku kU3POb+15COc7/6DD53vQjKJHbDCkWaWXJBUewqETb0MUiXx52c5N7iRKvVqCnaA aKavQn380UMagvVteVKESUZFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUd453naVt wY9ML7WYNbYFybMAAKUwHwYDVR0jBBgwFoAU9T5WQHaYwfqnXSV2VRO1B2Usl6sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUExQjlGLzU2OTIyOTAyNkUx NTExRUU4RDZFRDQ1OEM0RjlBRTAyLzlUNVdRSGFZd2ZxblhTVjJWUk8xQjJVc2w2 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOVQ1V1FIYVl3ZnFuWFNWMlZSTzFCMlVzbDZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEx QjlGLzU2OTIyOTAyNkUxNTExRUU4RDZFRDQ1OEM0RjlBRTAyLzlUNVdRSGFZd2Zx blhTVjJWUk8xQjJVc2w2cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFfBH+tx/TmXVwyIsMcoWGc8fI9/okSL1Ua9ts+3dgV1AG5EdRCCcjlt n+qXDVsJ8HpwzSZTskT7FqOJO6GuQZ8ZrCjvPBI6ViBPgpdFSQ6Rk54zfuUx3MBg IM6UGKkiw3qXC0ubzgZQ8ZoK9lQ+mDOODz7YjZxaHTrSVotIzcGEY49evDBZTv06 bWmtr+QjRjx3p7p/GRa8zsRhqN6UT6DNuUA5I6iaEaQgAppw+MaQpz2qNlpOS6m+ Ct2H+ePSN9diKhYzQ3WqZjSalgje99FCvQdTKHMaK8jTSC/8msnkY+TvqsdkJYFd S31d/yYsZ0ZKQyaRP8yQLELNtn2qLOE= -----END CERTIFICATE-----Generated at Wed May 15 09:04:42 2024 by rpki-client on console-ams.rpki-client.org