$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft File: sKQkzjnHjGXb8v_AKtuONUA2ycA.mft (raw, json) Hash identifier: zP4InukwSjkIeUWpD7f3AOAexpRL3WXrGJqYfsnFwbs= Subject key identifier: DC:95:41:C8:DA:18:69:63:12:A8:80:02:8B:1A:FF:38:83:0A:1A:A9 Authority key identifier: B0:A4:24:CE:39:C7:8C:65:DB:F2:FF:C0:2A:DB:8E:35:40:36:C9:C0 Certificate issuer: /CN=A91B7165/serialNumber=B0A424CE39C78C65DBF2FFC02ADB8E354036C9C0 Certificate serial: 09E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft Manifest number: 09DE Signing time: Sat 04 May 2024 20:55:17 +0000 Manifest this update: Sat 04 May 2024 20:55:16 +0000 Manifest next update: Sat 11 May 2024 20:55:16 +0000 Files and hashes: 1: sKQkzjnHjGXb8v_AKtuONUA2ycA.crl (hash: HxFGdMNDbFSytvpRLeMXHNs/K6Lf1W+cfYH0pKP3e/Y=) 2: 57422FE8E0D111EAA04F6C2DC4F9AE02.roa (hash: Rag1aXuB80ACmDGyM69D8d++hcvj12gly6XctNyZFFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.crl rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 20:55:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2535 (0x9e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7165/serialNumber=B0A424CE39C78C65DBF2FFC02ADB8E354036C9C0 Validity Not Before: May 4 20:55:16 2024 GMT Not After : May 11 20:55:16 2024 GMT Subject: CN=6636a0b5-8874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:49:6d:ca:d5:c8:4d:86:a6:9d:a0:4c:04:13: 1c:5e:e8:ea:56:78:80:d6:0f:4b:a2:74:2f:7a:d1: 7f:67:f4:34:85:46:b8:e0:16:b6:be:d7:f4:cc:b2: fc:7a:37:68:21:ac:12:41:4c:7c:4f:ad:a5:99:32: 2c:f0:01:64:f0:47:8d:08:ac:4c:fc:da:72:0a:c1: 0b:ba:81:9f:77:c9:84:32:24:6f:ad:c0:f8:71:8d: 83:e9:6e:9e:0a:9f:f7:7a:ed:aa:01:e5:57:8b:aa: ff:0b:58:3a:a7:85:28:17:6e:02:2a:07:de:f9:5c: 86:0f:5d:c8:02:82:35:30:e6:75:53:a4:67:4f:05: 5c:6e:bb:6e:39:eb:1d:e3:86:4b:31:dd:ac:2f:cf: c6:34:3b:5f:39:90:84:83:67:db:4a:d0:bd:8d:cd: 7a:81:67:eb:00:12:69:f0:90:1f:68:b3:35:e2:8e: bc:15:9e:24:f7:c0:0e:5c:fe:c8:cc:68:8c:95:6a: dd:c0:c0:36:83:b4:02:ff:03:aa:cb:c6:72:1b:49: 7a:53:cd:34:18:65:c9:20:cb:d9:e9:45:c3:30:ca: 73:c0:64:44:fc:94:f2:51:c7:11:c9:c6:b5:eb:b6: 1d:25:6e:64:80:a8:b9:fd:e9:56:9c:3d:c0:c6:c9: 3f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:95:41:C8:DA:18:69:63:12:A8:80:02:8B:1A:FF:38:83:0A:1A:A9 X509v3 Authority Key Identifier: keyid:B0:A4:24:CE:39:C7:8C:65:DB:F2:FF:C0:2A:DB:8E:35:40:36:C9:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:76:d0:84:bc:45:26:a0:ca:a6:9f:0c:97:72:f4:df:d6:f0: 9b:e8:92:92:d4:33:53:01:95:90:49:4e:42:d3:cb:a5:c9:bd: 21:56:c3:90:ab:20:f2:87:5c:8e:5c:68:08:0a:9f:4e:12:6b: e3:0f:31:ed:93:9c:6d:40:e0:51:c1:16:a7:d4:bf:8a:e1:a7: dc:8f:62:05:eb:00:33:56:38:b9:b5:c0:96:16:1d:dc:97:d1: 27:75:d8:9f:dc:60:f5:fb:07:c1:da:ce:ae:9a:4e:8e:36:4e: 2f:7b:cc:bb:91:a0:0f:e4:e2:d1:e4:7a:5c:43:e1:fd:e8:05: a3:f7:05:2b:35:9c:2c:a6:ae:2d:1e:df:35:77:db:e6:fd:45: 60:da:a9:26:12:9f:81:dc:02:f0:e6:c2:e2:c2:8f:9d:0a:64: 23:b7:91:28:61:35:96:cc:bf:54:67:29:41:82:91:60:74:c5: 81:48:f4:2d:f3:8a:63:c5:f8:6a:e5:0e:b9:e8:d5:8b:8a:85: 96:9c:7e:af:57:60:2b:90:59:7f:c0:ba:07:e8:b0:76:fc:60: d4:5b:a4:15:bb:65:b6:ee:08:42:f2:ba:a8:69:3a:7c:c6:0e: 1e:23:28:1c:28:93:e3:64:b7:26:9d:97:fb:85:91:5b:e7:b9: da:d0:30:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcxNjUxMTAvBgNVBAUTKEIwQTQyNENFMzlDNzhDNjVEQkYyRkZDMDJBREI4RTM1 NDAzNkM5QzAwHhcNMjQwNTA0MjA1NTE2WhcNMjQwNTExMjA1NTE2WjAYMRYwFAYD VQQDEw02NjM2YTBiNS04ODc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtkltytXITYamnaBMBBMcXujqVniA1g9LonQvetF/Z/Q0hUa44Ba2vtf0zLL8 ejdoIawSQUx8T62lmTIs8AFk8EeNCKxM/NpyCsELuoGfd8mEMiRvrcD4cY2D6W6e Cp/3eu2qAeVXi6r/C1g6p4UoF24CKgfe+VyGD13IAoI1MOZ1U6RnTwVcbrtuOesd 44ZLMd2sL8/GNDtfOZCEg2fbStC9jc16gWfrABJp8JAfaLM14o68FZ4k98AOXP7I zGiMlWrdwMA2g7QC/wOqy8ZyG0l6U800GGXJIMvZ6UXDMMpzwGRE/JTyUccRyca1 67YdJW5kgKi5/elWnD3Axsk/2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNyVQcja GGljEqiAAosa/ziDChqpMB8GA1UdIwQYMBaAFLCkJM45x4xl2/L/wCrbjjVANsnA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzE2NS8yMTVGRUZCNDU1 QjIxMUVBOEYzNUJFNDRDNEY5QUUwMi9zS1FrempuSGpHWGI4dl9BS3R1T05VQTJ5 Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NLUWt6am5IakdYYjh2X0FLdHVPTlVBMnljQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzE2NS8yMTVGRUZCNDU1QjIxMUVBOEYzNUJFNDRDNEY5QUUwMi9zS1FrempuSGpH WGI4dl9BS3R1T05VQTJ5Y0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrdtCEvEUmoMqmnwyXcvTf1vCb6JKS1DNTAZWQSU5C08ulyb0hVsOQ qyDyh1yOXGgICp9OEmvjDzHtk5xtQOBRwRan1L+K4afcj2IF6wAzVji5tcCWFh3c l9Enddif3GD1+wfB2s6umk6ONk4ve8y7kaAP5OLR5HpcQ+H96AWj9wUrNZwspq4t Ht81d9vm/UVg2qkmEp+B3ALw5sLiwo+dCmQjt5EoYTWWzL9UZylBgpFgdMWBSPQt 84pjxfhq5Q656NWLioWWnH6vV2ArkFl/wLoH6LB2/GDUW6QVu2W27ghC8rqoaTp8 xg4eIygcKJPjZLcmnZf7hZFb57na0DCL -----END CERTIFICATE-----Generated at Sat May 4 22:06:53 2024 by rpki-client on console-ams.rpki-client.org