$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft File: 0Ll9wB2J8jqAX75YYe43vwmcP_A.mft (raw, json) Hash identifier: QuK1BBqs/IoNGspWxqqQtY6jTMj4AdApptatcQWJR30= Subject key identifier: 4F:59:2B:EA:98:F1:6A:49:61:02:28:7F:CF:C5:5E:55:AE:DF:3D:82 Authority key identifier: D0:B9:7D:C0:1D:89:F2:3A:80:5F:BE:58:61:EE:37:BF:09:9C:3F:F0 Certificate issuer: /CN=A91B62BF/serialNumber=D0B97DC01D89F23A805FBE5861EE37BF099C3FF0 Certificate serial: 0B63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft Manifest number: 0B52 Signing time: Thu 02 May 2024 19:48:37 +0000 Manifest this update: Thu 02 May 2024 19:48:36 +0000 Manifest next update: Thu 09 May 2024 19:48:36 +0000 Files and hashes: 1: 0Ll9wB2J8jqAX75YYe43vwmcP_A.crl (hash: y1sghfDsgJQGQDgUNVVSUCGZygo9gX9rp9nbt21y3gU=) 2: 498ED6046FD011EDA007D478C4F9AE02.roa (hash: pK01oVo+gCZKxEOHwAayzXnpDV9OalCfPxrHTb2LSTA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.crl rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 19:48:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2915 (0xb63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B62BF/serialNumber=D0B97DC01D89F23A805FBE5861EE37BF099C3FF0 Validity Not Before: May 2 19:48:36 2024 GMT Not After : May 9 19:48:36 2024 GMT Subject: CN=6633ee14-9207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d8:5e:e7:89:09:f3:38:e3:a4:8e:f9:6d:8d: 1b:65:96:3a:d1:2e:bf:24:60:cc:ef:d0:77:37:e6: b4:f1:46:16:43:4a:65:9f:f4:6c:e4:54:3a:de:88: 56:05:dc:69:a4:7b:8a:ac:36:1c:18:d6:8d:84:42: 28:92:52:7e:2f:26:14:05:71:51:f0:ab:de:47:0f: 64:d9:b3:7e:b9:6f:22:98:91:3b:36:d8:59:27:4a: 41:2d:5b:9d:a3:b5:55:91:7b:ba:98:06:3f:de:30: 28:40:02:7c:e7:0a:60:90:6b:09:24:42:03:ea:a6: 47:2d:62:56:71:4a:9e:ab:3b:0b:57:2a:92:44:93: 17:57:8b:79:b5:7c:82:8d:26:aa:38:ac:db:4c:b3: c4:e1:bb:39:f6:b2:5d:f6:52:5d:aa:2b:8c:fc:a0: ea:1b:f9:27:40:de:c2:79:70:bb:72:2b:ed:11:00: fb:94:e8:a2:ed:fb:56:6b:70:1a:36:e6:29:8e:33: f3:c2:e3:c5:2e:81:f3:86:14:be:e8:04:92:9c:8c: fe:a1:c9:3d:6d:67:c9:a4:1a:00:6b:ba:17:28:6b: 95:52:5a:e4:f7:c6:24:a4:1e:ab:82:8d:4d:5f:a9: 8c:49:a3:34:a4:f9:45:ee:e4:d2:3a:ab:ff:c1:80: 72:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:59:2B:EA:98:F1:6A:49:61:02:28:7F:CF:C5:5E:55:AE:DF:3D:82 X509v3 Authority Key Identifier: keyid:D0:B9:7D:C0:1D:89:F2:3A:80:5F:BE:58:61:EE:37:BF:09:9C:3F:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:57:c6:10:3c:45:03:99:92:08:46:f6:a8:5e:1f:89:68:ae: 78:27:7d:22:25:c0:9a:61:b7:15:a8:98:2e:6d:4c:3a:82:f8: 5b:b1:c9:87:0d:c5:a3:64:39:5b:d2:10:2b:83:a9:1e:5c:61: 9f:03:75:96:3e:a1:8b:a6:a7:36:14:36:25:81:44:54:22:90: 1d:d7:03:be:25:00:23:55:a8:84:20:1a:fb:ab:80:52:8c:52: 3f:fd:9e:dc:1e:89:ba:88:a3:b5:a3:78:98:fa:96:a8:f8:08: bc:dd:b7:77:f7:5e:f8:89:98:9d:9f:04:9f:fd:2d:30:3e:33: d5:73:fd:4d:24:1e:08:54:11:33:15:91:d7:3e:13:68:b7:4e: 97:c1:c5:68:62:11:f0:ee:0b:b4:17:b5:fa:83:e6:9a:40:58: b1:ab:59:4e:e6:30:47:82:ab:33:02:38:5f:5a:b9:76:15:10: 00:01:18:1a:3b:8b:10:5e:1d:73:0a:51:e4:a7:4f:f2:94:34: 72:ca:e5:55:27:02:cc:30:9b:6a:36:84:b6:83:cb:06:a4:a9: 8d:d8:4a:33:7d:d0:ca:07:cd:14:99:0b:48:1a:e8:7d:4b:fd: bd:3b:6b:21:5f:1b:61:7c:52:f7:0b:ab:57:27:d9:eb:02:72: 4d:0d:f0:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyQkYxMTAvBgNVBAUTKEQwQjk3REMwMUQ4OUYyM0E4MDVGQkU1ODYxRUUzN0JG MDk5QzNGRjAwHhcNMjQwNTAyMTk0ODM2WhcNMjQwNTA5MTk0ODM2WjAYMRYwFAYD VQQDEw02NjMzZWUxNC05MjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl9he54kJ8zjjpI75bY0bZZY60S6/JGDM79B3N+a08UYWQ0pln/Rs5FQ63ohW BdxppHuKrDYcGNaNhEIoklJ+LyYUBXFR8KveRw9k2bN+uW8imJE7NthZJ0pBLVud o7VVkXu6mAY/3jAoQAJ85wpgkGsJJEID6qZHLWJWcUqeqzsLVyqSRJMXV4t5tXyC jSaqOKzbTLPE4bs59rJd9lJdqiuM/KDqG/knQN7CeXC7civtEQD7lOii7ftWa3Aa NuYpjjPzwuPFLoHzhhS+6ASSnIz+ock9bWfJpBoAa7oXKGuVUlrk98YkpB6rgo1N X6mMSaM0pPlF7uTSOqv/wYBylwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE9ZK+qY 8WpJYQIof8/FXlWu3z2CMB8GA1UdIwQYMBaAFNC5fcAdifI6gF++WGHuN78JnD/w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjJCRi80NEVDNTEwNjEw MzAxMUVBQjExMkEyMzJDNEY5QUUwMi8wTGw5d0IySjhqcUFYNzVZWWU0M3Z3bWNQ X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBMbDl3QjJKOGpxQVg3NVlZZTQzdndtY1BfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjJCRi80NEVDNTEwNjEwMzAxMUVBQjExMkEyMzJDNEY5QUUwMi8wTGw5d0IySjhq cUFYNzVZWWU0M3Z3bWNQX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5V8YQPEUDmZIIRvaoXh+JaK54J30iJcCaYbcVqJgubUw6gvhbscmH DcWjZDlb0hArg6keXGGfA3WWPqGLpqc2FDYlgURUIpAd1wO+JQAjVaiEIBr7q4BS jFI//Z7cHom6iKO1o3iY+pao+Ai83bd39174iZidnwSf/S0wPjPVc/1NJB4IVBEz FZHXPhNot06XwcVoYhHw7gu0F7X6g+aaQFixq1lO5jBHgqszAjhfWrl2FRAAARga O4sQXh1zClHkp0/ylDRyyuVVJwLMMJtqNoS2g8sGpKmN2EozfdDKB80UmQtIGuh9 S/29O2shXxthfFL3C6tXJ9nrAnJNDfBN -----END CERTIFICATE-----Generated at Thu May 2 22:28:56 2024 by rpki-client on console-ams.rpki-client.org