$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft File: MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft (raw, json) Hash identifier: PnV9ySUz6NbhUPH8yZ02molcADPb/DYXN3GlqTKFw/M= Subject key identifier: 95:C9:CE:CD:70:CE:FF:C8:F0:44:FC:54:A1:0F:A4:69:23:F2:26:20 Authority key identifier: 32:F2:6C:F3:9F:9F:BC:A7:F3:1F:53:95:F8:8D:D9:7D:94:70:D1:97 Certificate issuer: /CN=A91AF095/serialNumber=32F26CF39F9FBCA7F31F5395F88DD97D9470D197 Certificate serial: 1C9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft Manifest number: 1C91 Signing time: Wed 08 May 2024 16:38:18 +0000 Manifest this update: Wed 08 May 2024 16:38:18 +0000 Manifest next update: Wed 15 May 2024 16:38:18 +0000 Files and hashes: 1: MvJs85-fvKfzH1OV-I3ZfZRw0Zc.crl (hash: KzBLfdY9psiPo/LdbaLn7F6QrR7cwpZ9mu0zF/VO3uo=) 2: 9DC06B6E36A211E893BF3061C4F9AE02.roa (hash: w5zPHT/MnklfAHwgONGX9qlk6vPsgxlPKR5J+9H6c/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.crl rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7326 (0x1c9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF095/serialNumber=32F26CF39F9FBCA7F31F5395F88DD97D9470D197 Validity Not Before: May 8 16:38:18 2024 GMT Not After : May 15 16:38:18 2024 GMT Subject: CN=663baa7a-fe30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2b:c2:f3:a3:6e:c7:a9:3b:4b:0e:dd:8f:42: 48:68:ad:52:0a:2b:93:78:e6:ff:52:a6:bd:1d:4b: 35:f9:8b:40:55:75:8c:6c:2d:c2:52:c3:e3:12:a2: 31:c4:8d:d4:7b:2f:c8:f2:e5:f1:35:76:03:4e:18: d1:7a:96:94:ac:7d:66:1b:b7:b2:41:93:48:cc:82: e8:cc:4f:f0:f4:76:b3:de:43:6a:e7:b3:63:61:fe: 1d:b8:13:c8:9e:65:1c:c6:d8:cb:d6:fb:0e:74:73: 16:e9:62:e5:39:62:e9:97:1c:36:4b:c8:1b:a2:10: 51:20:85:80:6e:22:3f:7d:36:15:81:d8:ba:09:d5: 90:dc:8f:2c:2c:92:26:d7:f5:1a:c9:ff:03:ee:9a: 23:97:bb:71:13:80:35:a9:56:f0:c8:10:d2:93:b6: 63:d5:11:99:4f:d0:ca:75:2d:4a:25:5d:d2:05:3f: d6:dc:50:72:93:ef:fb:90:58:c2:bf:33:d1:e4:9f: 53:72:5a:3c:19:d7:64:0c:d4:9d:ff:1e:ef:e9:6a: a3:7d:01:09:4d:78:9e:a2:64:bf:01:08:d3:19:c0: 56:5a:b1:de:90:6a:dd:c1:eb:68:1a:c6:ff:8b:6d: b5:ba:53:f9:c0:cd:fe:86:d1:2a:81:ae:e1:5a:6f: 42:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C9:CE:CD:70:CE:FF:C8:F0:44:FC:54:A1:0F:A4:69:23:F2:26:20 X509v3 Authority Key Identifier: keyid:32:F2:6C:F3:9F:9F:BC:A7:F3:1F:53:95:F8:8D:D9:7D:94:70:D1:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:3c:60:00:06:fb:5e:44:07:35:77:0e:63:1b:87:01:b9:37: f2:e6:77:c1:b8:24:f9:fd:5a:77:e0:02:f8:07:f8:75:dd:10: 7d:dc:2d:56:d8:c4:0d:f8:86:ae:f6:9a:55:c9:99:d9:44:5e: 01:43:12:ef:82:7f:4a:47:6a:e3:ab:8b:a4:9d:a6:02:cc:76: 0d:f4:25:2f:b6:a9:47:6f:59:bf:43:ac:a9:27:4a:d8:95:d9: 1a:37:a9:1c:86:c4:bc:6c:ab:71:e9:29:cb:3d:0f:23:33:4d: 16:37:1a:04:fc:8b:6d:9c:94:d9:d6:60:8e:99:1d:20:da:9f: 3d:3b:1b:56:8e:a4:f8:2b:33:a4:02:8d:bd:40:02:41:0e:28: f9:d3:93:68:44:89:a5:c4:43:fe:6d:ac:aa:f1:89:05:ce:f2: fc:86:78:da:f9:12:4d:fe:a3:e6:88:4b:9e:eb:ac:c9:66:50: 41:ff:7d:d1:a6:1e:0d:e4:0b:b0:ec:0e:47:45:d0:b3:c7:2b: 26:66:a8:d4:8e:4a:1e:18:8b:43:99:94:db:10:6a:d4:57:53: 07:26:50:bc:4b:45:36:4e:6a:5e:c6:d9:c5:73:19:e1:3a:52: b7:e3:10:af:de:b5:3d:c4:b6:bb:db:0b:4d:36:c7:96:57:74: 9c:7e:da:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwOTUxMTAvBgNVBAUTKDMyRjI2Q0YzOUY5RkJDQTdGMzFGNTM5NUY4OEREOTdE OTQ3MEQxOTcwHhcNMjQwNTA4MTYzODE4WhcNMjQwNTE1MTYzODE4WjAYMRYwFAYD VQQDEw02NjNiYWE3YS1mZTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnivC86Nux6k7Sw7dj0JIaK1SCiuTeOb/Uqa9HUs1+YtAVXWMbC3CUsPjEqIx xI3Uey/I8uXxNXYDThjRepaUrH1mG7eyQZNIzILozE/w9Haz3kNq57NjYf4duBPI nmUcxtjL1vsOdHMW6WLlOWLplxw2S8gbohBRIIWAbiI/fTYVgdi6CdWQ3I8sLJIm 1/Uayf8D7pojl7txE4A1qVbwyBDSk7Zj1RGZT9DKdS1KJV3SBT/W3FByk+/7kFjC vzPR5J9Tclo8GddkDNSd/x7v6WqjfQEJTXieomS/AQjTGcBWWrHekGrdwetoGsb/ i221ulP5wM3+htEqga7hWm9CpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJXJzs1w zv/I8ET8VKEPpGkj8iYgMB8GA1UdIwQYMBaAFDLybPOfn7yn8x9TlfiN2X2UcNGX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjA5NS84Qzg5OUE0MkFC NTYxMUU2QjMyOUM0ODRDNEY5QUUwMi9NdkpzODUtZnZLZnpIMU9WLUkzWmZaUncw WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL012SnM4NS1mdktmekgxT1YtSTNaZlpSdzBaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjA5NS84Qzg5OUE0MkFCNTYxMUU2QjMyOUM0ODRDNEY5QUUwMi9NdkpzODUtZnZL ZnpIMU9WLUkzWmZaUncwWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALPGAABvteRAc1dw5jG4cBuTfy5nfBuCT5/Vp34AL4B/h13RB93C1W 2MQN+Iau9ppVyZnZRF4BQxLvgn9KR2rjq4uknaYCzHYN9CUvtqlHb1m/Q6ypJ0rY ldkaN6kchsS8bKtx6SnLPQ8jM00WNxoE/IttnJTZ1mCOmR0g2p89OxtWjqT4KzOk Ao29QAJBDij505NoRImlxEP+bayq8YkFzvL8hnja+RJN/qPmiEue66zJZlBB/33R ph4N5Auw7A5HRdCzxysmZqjUjkoeGItDmZTbEGrUV1MHJlC8S0U2TmpextnFcxnh OlK34xCv3rU9xLa72wtNNseWV3ScftrB -----END CERTIFICATE-----Generated at Wed May 8 17:47:40 2024 by rpki-client on console-ams.rpki-client.org