$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft File: cNpFkZHpBoa9sKxHq9owqcPhdPo.mft (raw, json) Hash identifier: hKp92xNQ6QXKRzdqEXnZzU3evnmLeVLy4uSODlWCgUo= Subject key identifier: B7:B1:25:38:2C:3C:29:47:C6:77:7E:3F:1E:24:B6:85:07:AD:91:D1 Authority key identifier: 70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA Certificate issuer: /CN=A91AF145/serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft Manifest number: 96 Signing time: Fri 17 May 2024 07:05:03 +0000 Manifest this update: Fri 17 May 2024 07:05:03 +0000 Manifest next update: Fri 24 May 2024 07:05:03 +0000 Files and hashes: 1: cNpFkZHpBoa9sKxHq9owqcPhdPo.crl (hash: LY2DgQuH9zaRfZ4NJv82pW4G+iEPmONfQXxw3Y3UUqQ=) 2: 971B23D236EA11EE802E9246C4F9AE02.roa (hash: fD87KQzwm9qKp1IVjcCJ2vaovBXqn6b5QBx0LG3czZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:05:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF145/serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA Validity Not Before: May 17 07:05:03 2024 GMT Not After : May 24 07:05:03 2024 GMT Subject: CN=6647019f-c4e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:29:53:63:e6:43:25:cb:8e:6f:72:72:58:45: 1f:29:c9:6a:56:68:68:6d:15:26:4d:85:35:00:58: dc:09:f9:bc:9b:12:30:12:18:4b:ef:67:ce:54:e8: b9:00:b0:61:dd:ed:31:e2:67:05:22:c5:f9:e4:a0: 86:72:f9:44:4a:68:70:4f:84:5f:29:b9:92:1a:3a: 3f:17:07:06:b4:00:3c:08:1a:d7:8b:14:4a:c9:16: 65:0a:50:f3:8d:e8:d4:1a:84:be:fe:47:c3:b3:27: bd:cc:79:2e:60:ad:ec:d9:d7:2e:45:cb:69:2d:d5: f2:4d:ff:15:5e:27:af:53:52:f4:56:bf:ee:75:db: 9f:46:6f:30:a9:5a:ce:42:16:36:99:ff:5a:f2:56: 89:85:53:7b:e0:55:bf:a8:ad:92:35:73:9f:3a:ac: 79:66:85:00:08:54:d9:74:67:3f:f4:65:83:b0:af: 94:ae:ae:b7:f7:3d:fe:09:d0:94:3a:71:7d:7e:66: 55:c7:0c:b2:b4:f6:76:68:30:47:bf:0d:5d:ea:5b: 8f:a3:33:94:e0:ff:ee:27:a7:76:c4:26:f5:97:b5: 99:f0:9b:10:f6:c8:7a:fe:40:92:ee:16:a6:43:17: 2e:05:e1:a2:1a:84:7b:4d:fe:0b:bd:1a:7b:51:1e: 08:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:B1:25:38:2C:3C:29:47:C6:77:7E:3F:1E:24:B6:85:07:AD:91:D1 X509v3 Authority Key Identifier: keyid:70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:0c:48:93:0b:05:98:28:30:7e:a6:2c:90:8a:a2:e1:dd:8d: 09:e6:5e:74:2c:12:31:15:21:38:ac:1e:f3:e5:bd:2b:df:65: de:30:da:9f:ba:18:1d:bb:04:b5:c8:9d:3b:07:79:bc:6c:a3: 46:b5:5d:cd:e1:47:be:42:b0:81:31:5a:4d:e1:b3:35:8b:cc: a6:ad:a1:86:be:70:9c:26:0e:bd:f8:96:b3:08:b2:25:37:d8: 7e:cd:20:b0:75:99:c1:48:eb:6c:56:aa:e0:70:98:56:f4:00: 8c:11:07:de:86:21:e5:9c:c9:d3:e8:9c:67:ff:55:e2:7c:4d: 90:4d:72:79:58:ed:72:55:2f:45:1e:ba:07:e7:8f:57:59:d1: d0:3e:f8:44:22:3f:1f:2b:c2:cb:01:a2:e7:48:95:b5:7a:b9: 47:5c:5a:0a:ed:ff:5a:94:2c:ae:00:60:76:53:23:bf:f6:25: 69:a3:97:2c:f0:a2:6f:9c:4f:51:c6:9f:12:d3:cc:be:e5:de: 60:69:06:2b:a3:9a:d9:c3:e6:2b:78:cd:af:77:59:bb:80:78: c1:d4:11:fb:54:0a:d4:52:b6:a9:32:68:1b:cb:85:fc:2b:30: 26:09:11:c6:92:ed:ff:c9:64:49:72:f2:09:56:15:00:df:57: 33:6e:e9:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYxNDUxMTAvBgNVBAUTKDcwREE0NTkxOTFFOTA2ODZCREIwQUM0N0FCREEzMEE5 QzNFMTc0RkEwHhcNMjQwNTE3MDcwNTAzWhcNMjQwNTI0MDcwNTAzWjAYMRYwFAYD VQQDEw02NjQ3MDE5Zi1jNGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ilTY+ZDJcuOb3JyWEUfKclqVmhobRUmTYU1AFjcCfm8mxIwEhhL72fOVOi5 ALBh3e0x4mcFIsX55KCGcvlESmhwT4RfKbmSGjo/FwcGtAA8CBrXixRKyRZlClDz jejUGoS+/kfDsye9zHkuYK3s2dcuRctpLdXyTf8VXievU1L0Vr/uddufRm8wqVrO QhY2mf9a8laJhVN74FW/qK2SNXOfOqx5ZoUACFTZdGc/9GWDsK+Urq639z3+CdCU OnF9fmZVxwyytPZ2aDBHvw1d6luPozOU4P/uJ6d2xCb1l7WZ8JsQ9sh6/kCS7ham QxcuBeGiGoR7Tf4LvRp7UR4IJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLexJTgs PClHxnd+Px4ktoUHrZHRMB8GA1UdIwQYMBaAFHDaRZGR6QaGvbCsR6vaMKnD4XT6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjE0NS8yNzgwNzNDRTM2 RUExMUVFQUUxMEFBNDVDNEY5QUUwMi9jTnBGa1pIcEJvYTlzS3hIcTlvd3FjUGhk UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOcEZrWkhwQm9hOXNLeEhxOW93cWNQaGRQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjE0NS8yNzgwNzNDRTM2RUExMUVFQUUxMEFBNDVDNEY5QUUwMi9jTnBGa1pIcEJv YTlzS3hIcTlvd3FjUGhkUG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhDEiTCwWYKDB+piyQiqLh3Y0J5l50LBIxFSE4rB7z5b0r32XeMNqf uhgduwS1yJ07B3m8bKNGtV3N4Ue+QrCBMVpN4bM1i8ymraGGvnCcJg69+JazCLIl N9h+zSCwdZnBSOtsVqrgcJhW9ACMEQfehiHlnMnT6Jxn/1XifE2QTXJ5WO1yVS9F HroH549XWdHQPvhEIj8fK8LLAaLnSJW1erlHXFoK7f9alCyuAGB2UyO/9iVpo5cs 8KJvnE9Rxp8S08y+5d5gaQYro5rZw+YreM2vd1m7gHjB1BH7VArUUrapMmgby4X8 KzAmCRHGku3/yWRJcvIJVhUA31czbums -----END CERTIFICATE-----Generated at Fri May 17 08:52:52 2024 by rpki-client on console-ams.rpki-client.org