$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft File: -gEnQNykk8ziA6-q3o68cZqsI7Q.mft (raw, json) Hash identifier: 7XIHyeUZNjhNPA2IozwbVBWsviGSWE61Cnj4C5hCwHw= Subject key identifier: BF:0F:EA:50:EE:D2:52:12:83:FA:DB:72:9F:8B:62:56:73:C9:25:DF Authority key identifier: FA:01:27:40:DC:A4:93:CC:E2:03:AF:AA:DE:8E:BC:71:9A:AC:23:B4 Certificate issuer: /CN=A91AF404/serialNumber=FA012740DCA493CCE203AFAADE8EBC719AAC23B4 Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft Manifest number: BB Signing time: Sun 05 May 2024 06:32:21 +0000 Manifest this update: Sun 05 May 2024 06:32:20 +0000 Manifest next update: Sun 12 May 2024 06:32:20 +0000 Files and hashes: 1: -gEnQNykk8ziA6-q3o68cZqsI7Q.crl (hash: WSKuD6cvYZEgeo/rg4tq4bNdPvgVol5H7dnR52kZGYo=) 2: D8674A0C0ED911EE8A4E0A23C4F9AE02.roa (hash: cIij3sN4HH4JyeT7dq6JCTUMkfEDdpSpPGISH3QnUL8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.crl rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 06:32:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF404/serialNumber=FA012740DCA493CCE203AFAADE8EBC719AAC23B4 Validity Not Before: May 5 06:32:20 2024 GMT Not After : May 12 06:32:20 2024 GMT Subject: CN=663727f4-3101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6e:6e:94:bd:dc:85:78:bc:3d:b4:e0:66:e6: 2b:4d:0d:d5:6a:ad:d8:1c:34:d2:57:3d:ae:54:03: 0b:db:38:6d:6b:ee:63:6b:14:3b:24:75:f7:c0:1a: 35:d0:b1:7c:d6:ae:34:43:8b:fd:16:bb:ca:19:79: a9:7c:a3:7b:e7:c8:5b:d0:79:b1:d7:eb:d9:44:be: 21:d0:05:c0:bd:bf:b6:a6:f4:55:16:b6:62:57:af: cc:39:2f:fb:ed:be:62:59:c5:a1:6a:a7:94:ae:68: 28:59:20:1e:14:25:23:28:bc:5f:d4:c7:84:09:20: a1:08:f5:7c:59:28:07:ba:ba:a9:5f:c5:cd:42:23: 55:09:9a:1b:91:1a:06:5b:38:ef:6e:80:df:dc:54: f7:ff:57:a7:7c:b2:09:ee:b4:8e:39:5a:24:36:89: c7:ab:fd:e1:89:2e:66:1a:c3:62:f9:84:d2:ec:5d: d3:c6:8b:94:6e:e0:29:81:59:e9:fc:53:0a:90:9d: 81:bc:7f:b2:3b:95:f8:c0:36:ae:9e:48:bf:e7:94: 2d:70:6a:3c:80:24:4a:89:d4:42:83:a4:3b:a8:e6: 96:3e:75:73:c1:a9:16:7e:a4:09:1e:f3:5a:60:b1: 78:bb:2c:45:8f:7d:db:30:2e:fa:34:16:29:f7:dd: 42:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:0F:EA:50:EE:D2:52:12:83:FA:DB:72:9F:8B:62:56:73:C9:25:DF X509v3 Authority Key Identifier: keyid:FA:01:27:40:DC:A4:93:CC:E2:03:AF:AA:DE:8E:BC:71:9A:AC:23:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:75:09:fa:13:b1:4f:95:ee:4f:da:bf:03:ce:62:79:a5:2a: c6:8a:45:d6:7f:50:09:df:49:da:6e:67:f9:c1:e2:92:f4:37: b3:24:97:66:e7:12:5f:32:47:58:76:c0:cd:2c:55:7a:27:b5: 59:4b:c3:58:5f:3e:df:f7:4f:3a:f7:3c:9f:7b:4d:d2:90:91: 29:8e:47:ab:ce:6a:84:4c:10:9b:27:0b:63:54:1e:95:8f:a0: ca:eb:60:64:5e:c5:65:d4:1c:66:c4:75:71:22:96:57:36:71: a2:c0:a0:9c:6f:9d:55:98:d5:5d:34:7e:70:01:57:c7:1a:0d: 65:d0:01:09:af:0c:5d:cd:b1:b4:3d:ca:d4:29:f6:9f:0c:62: bb:44:49:35:a5:46:e3:ad:8c:39:3f:81:25:05:ec:0c:1d:8c: 30:c2:37:c9:5b:8c:00:fa:f0:4b:31:fd:d1:ea:35:cb:af:ef: 5a:5b:54:e9:f3:2c:64:45:d4:79:81:f8:78:05:d0:11:ef:ec: 47:b8:f3:dd:fa:c7:2a:d5:22:58:de:e5:b1:b4:60:74:1f:1e: 3d:fd:14:f1:d8:29:b7:79:d5:16:55:b7:4f:9e:9f:4d:36:18: 2c:b7:04:02:55:32:02:a3:59:f9:93:d2:8c:44:5b:d9:3d:0f: 0b:4d:01:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY0MDQxMTAvBgNVBAUTKEZBMDEyNzQwRENBNDkzQ0NFMjAzQUZBQURFOEVCQzcx OUFBQzIzQjQwHhcNMjQwNTA1MDYzMjIwWhcNMjQwNTEyMDYzMjIwWjAYMRYwFAYD VQQDEw02NjM3MjdmNC0zMTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv25ulL3chXi8PbTgZuYrTQ3Vaq3YHDTSVz2uVAML2zhta+5jaxQ7JHX3wBo1 0LF81q40Q4v9FrvKGXmpfKN758hb0Hmx1+vZRL4h0AXAvb+2pvRVFrZiV6/MOS/7 7b5iWcWhaqeUrmgoWSAeFCUjKLxf1MeECSChCPV8WSgHurqpX8XNQiNVCZobkRoG WzjvboDf3FT3/1enfLIJ7rSOOVokNonHq/3hiS5mGsNi+YTS7F3TxouUbuApgVnp /FMKkJ2BvH+yO5X4wDaunki/55QtcGo8gCRKidRCg6Q7qOaWPnVzwakWfqQJHvNa YLF4uyxFj33bMC76NBYp991CaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL8P6lDu 0lISg/rbcp+LYlZzySXfMB8GA1UdIwQYMBaAFPoBJ0DcpJPM4gOvqt6OvHGarCO0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjQwNC81NDQwODFEMkY0 RDgxMUVEOTgwNDZDNEFDNEY5QUUwMi8tZ0VuUU55a2s4emlBNi1xM282OGNacXNJ N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1nRW5RTnlrazh6aUE2LXEzbzY4Y1pxc0k3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjQwNC81NDQwODFEMkY0RDgxMUVEOTgwNDZDNEFDNEY5QUUwMi8tZ0VuUU55a2s4 emlBNi1xM282OGNacXNJN1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFdQn6E7FPle5P2r8DzmJ5pSrGikXWf1AJ30nabmf5weKS9DezJJdm 5xJfMkdYdsDNLFV6J7VZS8NYXz7f90869zyfe03SkJEpjkerzmqETBCbJwtjVB6V j6DK62BkXsVl1BxmxHVxIpZXNnGiwKCcb51VmNVdNH5wAVfHGg1l0AEJrwxdzbG0 PcrUKfafDGK7REk1pUbjrYw5P4ElBewMHYwwwjfJW4wA+vBLMf3R6jXLr+9aW1Tp 8yxkRdR5gfh4BdAR7+xHuPPd+scq1SJY3uWxtGB0Hx49/RTx2Cm3edUWVbdPnp9N NhgstwQCVTICo1n5k9KMRFvZPQ8LTQHu -----END CERTIFICATE-----Generated at Sun May 5 08:21:09 2024 by rpki-client on console-ams.rpki-client.org