$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft File: C71wWJDyeOHVk-mKdPA0cPeU_lw.mft (raw, json) Hash identifier: MurQodMqzjQ5xqPQVB1qzIg1fNKz6luO+JLT6hU2jLE= Subject key identifier: A7:35:BD:B3:64:4F:25:C8:78:23:D5:AB:1C:7D:82:0A:88:8C:18:E2 Authority key identifier: 0B:BD:70:58:90:F2:78:E1:D5:93:E9:8A:74:F0:34:70:F7:94:FE:5C Certificate issuer: /CN=A91A5E1F/serialNumber=0BBD705890F278E1D593E98A74F03470F794FE5C Certificate serial: 09E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C71wWJDyeOHVk-mKdPA0cPeU_lw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft Manifest number: 09D8 Signing time: Thu 02 May 2024 20:53:57 +0000 Manifest this update: Thu 02 May 2024 20:53:56 +0000 Manifest next update: Thu 09 May 2024 20:53:56 +0000 Files and hashes: 1: C71wWJDyeOHVk-mKdPA0cPeU_lw.crl (hash: bUbWT9x2awcc4/Yrh3WTBk521Z+BmhLTKDQU7H9drg8=) 2: FF723568A0F311EBA4E4D83CC4F9AE02.roa (hash: WiFMdpoeKCB3P3XOle4HVunfbx2gjAdkuka9ZHQkqv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.crl rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C71wWJDyeOHVk-mKdPA0cPeU_lw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 20:53:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2532 (0x9e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5E1F/serialNumber=0BBD705890F278E1D593E98A74F03470F794FE5C Validity Not Before: May 2 20:53:56 2024 GMT Not After : May 9 20:53:56 2024 GMT Subject: CN=6633fd64-70ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ee:ed:be:7b:09:52:a3:ba:88:2c:8f:fb:20: 05:13:46:2a:f6:2b:44:77:9a:31:be:15:f9:c0:47: a0:1a:3c:cd:14:92:c6:40:7d:ea:15:8d:c7:bc:8d: 3f:16:1e:42:a3:ab:59:d7:29:b1:a4:9c:e1:ed:57: ba:f2:c7:ef:61:be:cc:33:4a:dd:94:bb:1b:98:86: 48:56:6c:59:9f:2b:32:13:8c:60:45:56:cb:46:5a: c3:ef:50:3a:f5:e4:f0:bb:2d:fe:e8:05:49:93:37: 8c:ee:76:74:a6:72:4b:5b:44:89:73:61:ef:9b:70: c1:5f:88:0d:78:37:04:19:3a:fa:12:93:70:8d:71: 54:f7:c5:92:53:c2:19:ec:57:d2:5e:77:58:f0:1e: 83:94:2a:a1:c8:c6:ec:6c:f5:39:d8:af:0a:d0:6c: 39:ae:52:5c:35:22:90:68:63:1a:aa:3d:04:ca:ec: 91:d1:fe:ed:05:eb:0f:a9:5f:73:55:20:7b:d1:fb: 9d:6b:f9:1a:76:c4:21:4e:0b:f9:5b:be:9b:45:8a: 1d:18:23:e3:61:88:9f:09:68:3b:60:61:02:fa:00: b7:cb:44:2c:f2:15:22:46:49:64:76:4f:4e:b1:4c: cd:d2:cb:d6:5f:02:73:aa:5b:9b:8d:3d:20:ab:8c: f8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:35:BD:B3:64:4F:25:C8:78:23:D5:AB:1C:7D:82:0A:88:8C:18:E2 X509v3 Authority Key Identifier: keyid:0B:BD:70:58:90:F2:78:E1:D5:93:E9:8A:74:F0:34:70:F7:94:FE:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C71wWJDyeOHVk-mKdPA0cPeU_lw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:ee:81:2e:c6:2d:5d:9e:48:31:62:2b:28:7d:82:b6:2c:e9: cc:6f:aa:fe:41:39:76:67:f3:49:31:fa:4f:6e:1f:65:b2:4f: cb:b4:13:85:64:47:bc:b8:f9:e9:1d:33:32:ba:fb:92:40:21: 21:4b:be:7e:8c:16:f8:d7:da:6b:13:29:ab:6e:90:7d:e8:fb: bc:66:4e:0a:16:26:3a:bb:c1:6e:4c:9e:80:fe:30:22:5c:61: c8:47:87:12:98:bd:57:01:51:de:42:e0:17:69:86:97:6e:06: d2:a3:69:e0:24:74:f5:de:43:47:7a:6e:fd:8b:fd:94:ca:16: 63:33:99:88:96:e6:9a:26:e8:95:17:57:80:b0:46:7d:1a:42: 0c:19:c1:a1:36:a6:db:19:15:3f:0b:ad:78:e8:94:8b:e4:f8: 91:b2:90:34:59:00:d2:ae:19:6a:f0:bf:17:0b:ce:5c:4e:3b: 39:18:c2:1d:3d:d5:21:b8:7a:a8:b8:4f:b0:67:a5:e3:90:79: 78:17:d7:8e:82:f1:c1:c0:fb:1a:9c:94:45:26:85:47:11:b0: a6:58:a9:dc:be:47:3b:a8:8b:c5:47:79:d9:ce:f0:c4:a3:91: e0:f7:2d:f4:d4:88:73:3b:46:85:98:51:0a:cb:2f:19:83:d0: 3d:8d:b4:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVFMUYxMTAvBgNVBAUTKDBCQkQ3MDU4OTBGMjc4RTFENTkzRTk4QTc0RjAzNDcw Rjc5NEZFNUMwHhcNMjQwNTAyMjA1MzU2WhcNMjQwNTA5MjA1MzU2WjAYMRYwFAYD VQQDEw02NjMzZmQ2NC03MGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtu7tvnsJUqO6iCyP+yAFE0Yq9itEd5oxvhX5wEegGjzNFJLGQH3qFY3HvI0/ Fh5Co6tZ1ymxpJzh7Ve68sfvYb7MM0rdlLsbmIZIVmxZnysyE4xgRVbLRlrD71A6 9eTwuy3+6AVJkzeM7nZ0pnJLW0SJc2Hvm3DBX4gNeDcEGTr6EpNwjXFU98WSU8IZ 7FfSXndY8B6DlCqhyMbsbPU52K8K0Gw5rlJcNSKQaGMaqj0EyuyR0f7tBesPqV9z VSB70fuda/kadsQhTgv5W76bRYodGCPjYYifCWg7YGEC+gC3y0Qs8hUiRklkdk9O sUzN0svWXwJzqlubjT0gq4z4vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKc1vbNk TyXIeCPVqxx9ggqIjBjiMB8GA1UdIwQYMBaAFAu9cFiQ8njh1ZPpinTwNHD3lP5c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUUxRi8wMUY3RDZDQTU4 NjIxMUVBODE0RDg0NTlDNEY5QUUwMi9DNzF3V0pEeWVPSFZrLW1LZFBBMGNQZVVf bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M3MXdXSkR5ZU9IVmstbUtkUEEwY1BlVV9sdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUUxRi8wMUY3RDZDQTU4NjIxMUVBODE0RDg0NTlDNEY5QUUwMi9DNzF3V0pEeWVP SFZrLW1LZFBBMGNQZVVfbHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq7oEuxi1dnkgxYisofYK2LOnMb6r+QTl2Z/NJMfpPbh9lsk/LtBOF ZEe8uPnpHTMyuvuSQCEhS75+jBb419prEymrbpB96Pu8Zk4KFiY6u8FuTJ6A/jAi XGHIR4cSmL1XAVHeQuAXaYaXbgbSo2ngJHT13kNHem79i/2UyhZjM5mIluaaJuiV F1eAsEZ9GkIMGcGhNqbbGRU/C6146JSL5PiRspA0WQDSrhlq8L8XC85cTjs5GMId PdUhuHqouE+wZ6XjkHl4F9eOgvHBwPsanJRFJoVHEbCmWKncvkc7qIvFR3nZzvDE o5Hg9y301IhzO0aFmFEKyy8Zg9A9jbQL -----END CERTIFICATE-----Generated at Thu May 2 22:28:54 2024 by rpki-client on console-ams.rpki-client.org