$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF15E/94B2D376031D11ED99F29E1CC4F9AE02/u759h-rKuKMp6DvLD_fVAIi-Cc0.mft File: u759h-rKuKMp6DvLD_fVAIi-Cc0.mft (raw, json) Hash identifier: XvKv37kCj1EWPzIV/3jZV4bsr+xa4RKL32/SGJ9dq1A= Subject key identifier: 24:46:C4:17:3B:7A:60:6E:D9:CB:C3:89:7C:4F:F3:99:42:69:BF:44 Authority key identifier: BB:BE:7D:87:EA:CA:B8:A3:29:E8:3B:CB:0F:F7:D5:00:88:BE:09:CD Certificate issuer: /CN=A91AF15E/serialNumber=BBBE7D87EACAB8A329E83BCB0FF7D50088BE09CD Certificate serial: 01C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u759h-rKuKMp6DvLD_fVAIi-Cc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF15E/94B2D376031D11ED99F29E1CC4F9AE02/u759h-rKuKMp6DvLD_fVAIi-Cc0.mft Manifest number: 01C6 Signing time: Wed 01 May 2024 04:43:32 +0000 Manifest this update: Wed 01 May 2024 04:43:32 +0000 Manifest next update: Wed 08 May 2024 04:43:32 +0000 Files and hashes: 1: u759h-rKuKMp6DvLD_fVAIi-Cc0.crl (hash: EFS27o4IpNsoSxjmi0eWa5xojAtM/PRawtXz2V4jUjE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF15E/94B2D376031D11ED99F29E1CC4F9AE02/u759h-rKuKMp6DvLD_fVAIi-Cc0.crl rsync://rpki.apnic.net/member_repository/A91AF15E/94B2D376031D11ED99F29E1CC4F9AE02/u759h-rKuKMp6DvLD_fVAIi-Cc0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u759h-rKuKMp6DvLD_fVAIi-Cc0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 454 (0x1c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF15E/serialNumber=BBBE7D87EACAB8A329E83BCB0FF7D50088BE09CD Validity Not Before: May 1 04:43:32 2024 GMT Not After : May 8 04:43:32 2024 GMT Subject: CN=6631c874-47e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:47:53:47:3e:23:43:24:6f:97:03:f7:14:6d: 77:56:ad:fe:00:0b:13:41:ec:88:94:cd:51:f4:c2: 66:cf:b9:4e:09:78:da:d8:94:f9:4a:6b:7c:a9:bd: 2d:08:fe:44:18:ef:d2:47:dc:c6:a4:93:53:43:94: 63:1b:cc:4a:90:43:da:a0:2a:73:bb:9e:d8:5a:80: 73:d0:39:c0:e2:dd:8b:a8:c9:f8:85:53:4c:cc:ec: 8a:80:0e:33:b7:2b:2b:66:60:3f:c0:5c:8a:26:c8: 55:26:8d:00:53:db:d2:48:d1:80:e8:64:83:6e:c3: 0b:c8:96:95:fc:5f:50:13:24:48:a7:c7:03:4a:e4: 96:fd:4c:1c:df:d9:ca:8a:c6:ba:13:da:5e:e3:76: 1d:c3:55:95:1a:6f:dc:0f:4a:fb:a8:c2:81:9c:9d: 0c:1b:9e:91:e8:57:9b:8a:f5:ca:3b:67:2f:f2:01: be:29:bc:fe:e8:05:f4:d2:42:bd:47:4e:8b:5c:cf: 75:87:13:89:c5:be:b0:19:23:29:71:12:bf:8c:fb: 10:c8:20:55:c3:30:3d:88:53:e8:d3:f8:65:33:4f: fb:81:40:29:59:a6:6e:54:df:58:67:16:87:07:67: f5:f2:5e:84:49:25:69:a4:c6:5c:bc:03:52:2d:e9: 7f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:46:C4:17:3B:7A:60:6E:D9:CB:C3:89:7C:4F:F3:99:42:69:BF:44 X509v3 Authority Key Identifier: keyid:BB:BE:7D:87:EA:CA:B8:A3:29:E8:3B:CB:0F:F7:D5:00:88:BE:09:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF15E/94B2D376031D11ED99F29E1CC4F9AE02/u759h-rKuKMp6DvLD_fVAIi-Cc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u759h-rKuKMp6DvLD_fVAIi-Cc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF15E/94B2D376031D11ED99F29E1CC4F9AE02/u759h-rKuKMp6DvLD_fVAIi-Cc0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:1c:32:97:9f:90:89:be:18:0e:7b:80:63:7d:d8:97:7d:86: b9:33:90:4e:d6:7f:98:78:62:87:56:82:b2:26:ff:30:e2:7a: 8c:88:f4:d3:57:81:ae:b2:ba:c8:0d:11:e5:11:57:bd:e7:4b: 24:df:9a:7f:97:08:c0:c2:91:e9:fc:db:29:33:de:6e:76:8f: 12:96:a4:01:af:55:62:52:ed:57:43:41:8f:73:e2:35:39:5f: 47:ee:21:28:75:b4:1b:4c:5e:aa:1d:25:89:1e:21:85:60:fa: 3b:db:d9:0c:07:9a:8a:86:c5:fe:8b:97:f9:11:03:d6:df:37: b7:82:fc:36:96:f7:64:22:38:05:ef:8d:e9:56:bc:cb:47:8f: e2:a9:8e:c0:7e:82:45:03:7d:3f:88:0f:45:dd:65:17:7d:0a: 46:4a:22:5f:f3:dd:93:9c:c2:44:5d:76:ff:c6:f8:58:3f:20: 8a:31:cf:b8:11:1f:87:09:89:ae:f6:4b:1a:c0:1f:d4:0f:ea: b7:d1:d8:44:38:2a:d9:a5:ad:3b:aa:2b:0d:41:bb:3f:dc:76: 51:7e:18:51:75:5c:c8:99:be:c2:0d:f2:42:6d:70:37:e0:75: be:74:fc:4e:14:b1:03:03:f6:dd:4b:a8:c8:a1:51:73:8d:03: c8:27:a9:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYxNUUxMTAvBgNVBAUTKEJCQkU3RDg3RUFDQUI4QTMyOUU4M0JDQjBGRjdENTAw ODhCRTA5Q0QwHhcNMjQwNTAxMDQ0MzMyWhcNMjQwNTA4MDQ0MzMyWjAYMRYwFAYD VQQDEw02NjMxYzg3NC00N2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0dTRz4jQyRvlwP3FG13Vq3+AAsTQeyIlM1R9MJmz7lOCXja2JT5Smt8qb0t CP5EGO/SR9zGpJNTQ5RjG8xKkEPaoCpzu57YWoBz0DnA4t2LqMn4hVNMzOyKgA4z tysrZmA/wFyKJshVJo0AU9vSSNGA6GSDbsMLyJaV/F9QEyRIp8cDSuSW/Uwc39nK isa6E9pe43Ydw1WVGm/cD0r7qMKBnJ0MG56R6FebivXKO2cv8gG+Kbz+6AX00kK9 R06LXM91hxOJxb6wGSMpcRK/jPsQyCBVwzA9iFPo0/hlM0/7gUApWaZuVN9YZxaH B2f18l6ESSVppMZcvANSLel/QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCRGxBc7 emBu2cvDiXxP85lCab9EMB8GA1UdIwQYMBaAFLu+fYfqyrijKeg7yw/31QCIvgnN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjE1RS85NEIyRDM3NjAz MUQxMUVEOTlGMjlFMUNDNEY5QUUwMi91NzU5aC1yS3VLTXA2RHZMRF9mVkFJaS1D YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U3NTloLXJLdUtNcDZEdkxEX2ZWQUlpLUNjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjE1RS85NEIyRDM3NjAzMUQxMUVEOTlGMjlFMUNDNEY5QUUwMi91NzU5aC1yS3VL TXA2RHZMRF9mVkFJaS1DYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChHDKXn5CJvhgOe4BjfdiXfYa5M5BO1n+YeGKHVoKyJv8w4nqMiPTT V4GusrrIDRHlEVe950sk35p/lwjAwpHp/NspM95udo8SlqQBr1ViUu1XQ0GPc+I1 OV9H7iEodbQbTF6qHSWJHiGFYPo729kMB5qKhsX+i5f5EQPW3ze3gvw2lvdkIjgF 743pVrzLR4/iqY7AfoJFA30/iA9F3WUXfQpGSiJf892TnMJEXXb/xvhYPyCKMc+4 ER+HCYmu9ksawB/UD+q30dhEOCrZpa07qisNQbs/3HZRfhhRdVzImb7CDfJCbXA3 4HW+dPxOFLEDA/bdS6jIoVFzjQPIJ6le -----END CERTIFICATE-----Generated at Wed May 1 05:55:44 2024 by rpki-client on console-ams.rpki-client.org