$ rpki-client -vvf rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft File: b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft (raw, json) Hash identifier: /zZMNE+9YmlbTVQjox8Hslr/XajKmcP66BUdU5/iYWo= Subject key identifier: 1F:F4:9B:51:F0:91:61:0F:1E:41:50:1C:88:06:69:18:5B:1E:6A:41 Authority key identifier: 6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 Certificate issuer: /CN=A91A54FE/serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft Manifest number: 17 Signing time: Wed 15 May 2024 08:57:45 +0000 Manifest this update: Wed 15 May 2024 08:57:44 +0000 Manifest next update: Wed 22 May 2024 08:57:44 +0000 Files and hashes: 1: b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl (hash: NZscY4bwMrm+Czh0xxgO/zcG6/U3RbTyMdT4BPyQoc4=) 2: CD24A702015411EF83144341C4F9AE02.roa (hash: IQlxGBDm0ccdjlpT18ECed9Odt+DoMhDg+up6Oc4ECg=) 3: CC9ED4E2015411EF83144341C4F9AE02.roa (hash: J2KwLe8SPWIWD1mMVkmMfy+3ZRxSXbUQ7iUXVfTcvng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:57:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A54FE/serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Validity Not Before: May 15 08:57:44 2024 GMT Not After : May 22 08:57:44 2024 GMT Subject: CN=66447909-0ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:78:13:2b:19:14:98:08:76:30:44:3d:35:43: 5d:74:f4:9a:c0:88:c8:e6:52:21:07:d6:3a:37:48: 1d:57:4c:9a:ef:c7:3b:10:7e:29:d3:18:a7:58:5b: 97:7a:c2:9b:f6:1a:b6:61:7a:89:d0:c9:57:24:47: 93:c5:05:f7:c5:e6:d7:bc:32:70:89:03:d0:fa:92: db:55:be:7e:a4:1d:54:ae:a4:69:94:f6:d3:17:30: 9a:d7:7b:a3:a9:53:da:54:2f:27:35:4f:1f:92:fa: 57:9b:ed:fc:88:b9:1e:92:7a:eb:4c:52:0f:29:02: 76:c5:ea:db:7a:d7:51:d6:e2:2e:a7:84:cc:0e:a8: 5e:71:82:c8:b6:94:86:08:45:66:af:25:fe:fb:b3: 0f:4a:f7:ca:2b:2f:4d:06:52:fe:d3:fb:18:1d:45: ab:45:4e:5a:72:25:74:f1:4f:b0:43:a6:b9:36:9c: 07:d3:ec:b3:8b:89:16:1f:c6:25:59:39:53:ee:0f: 80:ce:48:8b:af:1c:11:6d:15:45:f3:7c:08:9d:49: 4d:3a:ce:b8:ec:f7:b5:dd:3c:49:61:34:81:db:99: c8:b9:d4:f4:31:c0:d5:37:a1:0d:6a:03:36:13:c2: 43:e3:09:97:0d:3f:35:a8:ba:9a:3b:fe:17:4a:f9: 3b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F4:9B:51:F0:91:61:0F:1E:41:50:1C:88:06:69:18:5B:1E:6A:41 X509v3 Authority Key Identifier: keyid:6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:48:b6:13:c2:f5:fe:72:ed:3a:92:9e:96:58:9f:db:ba:21: 9a:36:9b:67:f0:84:fd:0e:3e:d2:72:e9:90:b0:31:a1:1d:44: 5d:9e:32:9f:90:1d:5b:ba:2b:c3:d2:73:7a:6d:67:4a:06:fc: 47:39:70:3c:80:79:7a:c8:b0:f1:5b:47:f0:34:a8:90:fd:af: 15:a0:28:ab:a6:cd:e9:e3:09:b2:99:42:5c:c6:5b:76:91:1f: b7:ec:d9:f6:3e:a1:60:76:d3:08:d7:1d:84:8e:a1:af:8a:0f: 41:75:55:c8:a0:84:a1:be:5b:61:91:65:be:f0:66:06:e9:7b: 57:10:9c:de:55:60:27:bb:0e:b9:4c:e7:26:25:97:cb:fa:70: dd:db:4a:4a:c1:28:f2:c8:dc:e8:bb:8b:14:eb:a2:76:c2:d4: 39:32:8b:1f:c1:d1:03:7a:d8:47:85:47:be:2c:80:f2:52:70: 0b:c1:f5:83:54:f8:ff:92:53:7d:ea:cf:50:2d:3c:c9:d2:99: f1:28:f3:98:1e:bd:ce:05:fd:37:73:30:35:71:99:c8:72:2c: 83:a7:09:bc:ad:a7:36:2a:96:7d:09:2a:69:7e:48:30:ea:8a: 5d:5c:f0:8b:98:dd:6f:9e:4d:e0:25:c2:29:0a:0e:af:4a:76: 3b:c1:e6:b8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NTRGRTExMC8GA1UEBRMoNkZDNzA5MDZGQkE2RjQ1Mzk0NTIwOTE5MzJDNDVGRkE0 RDg1NzJCODAeFw0yNDA1MTUwODU3NDRaFw0yNDA1MjIwODU3NDRaMBgxFjAUBgNV BAMTDTY2NDQ3OTA5LTBjYTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdeBMrGRSYCHYwRD01Q1109JrAiMjmUiEH1jo3SB1XTJrvxzsQfinTGKdYW5d6 wpv2GrZheonQyVckR5PFBffF5te8MnCJA9D6kttVvn6kHVSupGmU9tMXMJrXe6Op U9pULyc1Tx+S+leb7fyIuR6SeutMUg8pAnbF6tt611HW4i6nhMwOqF5xgsi2lIYI RWavJf77sw9K98orL00GUv7T+xgdRatFTlpyJXTxT7BDprk2nAfT7LOLiRYfxiVZ OVPuD4DOSIuvHBFtFUXzfAidSU06zrjs97XdPElhNIHbmci51PQxwNU3oQ1qAzYT wkPjCZcNPzWoupo7/hdK+Tu1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUH/SbUfCR YQ8eQVAciAZpGFseakEwHwYDVR0jBBgwFoAUb8cJBvum9FOUUgkZMsRf+k2Fcrgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1NEZFL0Q2MTE3REY2RjZF OTExRUVBREJGRkI1MkM0RjlBRTAyL2I4Y0pCdnVtOUZPVVVna1pNc1JmLWsyRmNy Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYjhjSkJ2dW05Rk9VVWdrWk1zUmYtazJGY3JnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1 NEZFL0Q2MTE3REY2RjZFOTExRUVBREJGRkI1MkM0RjlBRTAyL2I4Y0pCdnVtOUZP VVVna1pNc1JmLWsyRmNyZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAdIthPC9f5y7TqSnpZYn9u6IZo2m2fwhP0OPtJy6ZCwMaEdRF2eMp+Q HVu6K8PSc3ptZ0oG/Ec5cDyAeXrIsPFbR/A0qJD9rxWgKKumzenjCbKZQlzGW3aR H7fs2fY+oWB20wjXHYSOoa+KD0F1VcighKG+W2GRZb7wZgbpe1cQnN5VYCe7DrlM 5yYll8v6cN3bSkrBKPLI3Oi7ixTronbC1Dkyix/B0QN62EeFR74sgPJScAvB9YNU +P+SU33qz1AtPMnSmfEo85gevc4F/TdzMDVxmchyLIOnCbytpzYqln0JKml+SDDq il1c8IuY3W+eTeAlwikKDq9KdjvB5rg= -----END CERTIFICATE-----Generated at Wed May 15 11:17:43 2024 by rpki-client on console-ams.rpki-client.org