$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft File: ABN5IHjRGy-UAw18O-71ATKibUA.mft (raw, json) Hash identifier: ISEPktJH30QYK9Dr7ei1UMYukdHqWBexbTA99kZEdZY= Subject key identifier: 2C:51:5E:F0:62:59:3C:D3:BA:81:FE:5A:A4:AC:0E:6F:60:9F:F1:1B Authority key identifier: 00:13:79:20:78:D1:1B:2F:94:03:0D:7C:3B:EE:F5:01:32:A2:6D:40 Certificate issuer: /CN=A91B9C74/serialNumber=0013792078D11B2F94030D7C3BEEF50132A26D40 Certificate serial: 0130 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft Manifest number: 0129 Signing time: Fri 03 May 2024 05:12:28 +0000 Manifest this update: Fri 03 May 2024 05:12:28 +0000 Manifest next update: Fri 10 May 2024 05:12:28 +0000 Files and hashes: 1: ABN5IHjRGy-UAw18O-71ATKibUA.crl (hash: AvardywF/bwRDHg/FI7HdNRIoT9fXDCyLuaKDT+HRSM=) 2: F853742A5A9911EDA14F453FC4F9AE02.roa (hash: Ppu4V4sxE97CST+ha/G90tNQFksFJ/RFtH/H94X5UAU=) 3: 273E7B284E2311EDB6F68A4AC4F9AE02.roa (hash: ZCU9wADiGjKZPO2Myu43lfQA0GsQ7R6m2WdsfHDP6UE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.crl rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9C74/serialNumber=0013792078D11B2F94030D7C3BEEF50132A26D40 Validity Not Before: May 3 05:12:28 2024 GMT Not After : May 10 05:12:28 2024 GMT Subject: CN=6634723c-bd2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ad:94:2f:df:98:59:86:32:74:bb:7c:dd:af: ea:7b:de:2b:6d:b3:82:7e:39:fc:c2:6d:f8:ac:09: f4:92:93:0b:1c:d4:63:1b:0c:88:e3:9f:e0:c4:35: e2:93:54:e1:46:c8:69:5b:1d:01:9a:62:33:8b:1f: ce:50:29:2e:ed:7e:3e:e7:d4:9f:14:03:40:8e:1f: 14:5b:2d:a3:28:54:b5:71:5a:3d:de:57:3c:27:a0: d2:5f:ec:5b:71:3e:8d:2c:da:53:3a:c7:30:5c:9d: b1:6e:bf:ca:12:6f:6a:20:cb:e8:51:5c:9e:0b:01: 33:28:bc:4f:39:c0:80:1a:5f:6a:53:6f:f9:f2:e1: 68:c0:02:89:a6:5e:c1:da:37:19:5e:5d:2b:a2:13: 0e:1f:37:2f:ff:57:42:07:a2:57:e2:07:f4:dc:69: e4:98:51:b4:fa:8f:86:89:f9:1a:d2:ca:47:dc:69: 5b:58:04:b7:3e:e8:64:c4:e4:6d:5d:3f:c7:87:11: e0:7c:51:d3:9b:08:78:d5:10:7e:6c:65:7d:c9:2c: 67:1c:ea:96:87:94:f1:c9:33:5c:15:98:95:55:53: a6:c1:99:87:6a:18:b9:be:5a:f3:5a:90:61:35:00: 37:37:97:92:29:c1:42:e0:45:ac:c5:93:bf:28:e4: 22:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:51:5E:F0:62:59:3C:D3:BA:81:FE:5A:A4:AC:0E:6F:60:9F:F1:1B X509v3 Authority Key Identifier: keyid:00:13:79:20:78:D1:1B:2F:94:03:0D:7C:3B:EE:F5:01:32:A2:6D:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:54:b7:02:be:6b:c7:4a:5b:e2:0e:31:1c:38:fa:ab:97:ea: db:46:21:12:f7:58:7c:ac:0a:17:3d:c5:84:49:45:c8:75:e7: e4:a9:53:8d:13:88:81:b5:e5:45:c0:a2:df:86:2b:ce:b5:91: 8f:f7:71:74:e9:83:dc:46:ca:b6:f6:c8:27:67:25:a1:f4:7d: 3f:c7:13:62:d3:43:7c:ac:42:6e:82:db:18:f9:b7:fb:1f:f9: e2:d1:99:4d:38:67:89:96:e5:21:d8:b1:f2:82:d0:88:8e:ae: ee:9a:69:5d:fe:d2:e9:02:f2:36:f5:c5:00:d1:37:ed:a0:74: 77:61:2a:d4:32:00:20:0e:28:ff:40:e4:8a:7f:0d:7b:3d:87: e7:af:e1:38:8e:e1:c9:cb:62:24:b6:7e:41:74:fd:dd:d6:20: 61:b0:97:6b:43:c0:f8:0b:d5:0f:b2:37:b3:97:b8:43:de:54: a5:d4:05:5d:87:45:49:ae:c9:91:f3:8a:83:e6:3f:ac:77:e9: c5:58:b2:53:2e:32:28:ab:af:6f:47:ad:02:89:ca:2f:a6:63: 20:4f:7f:f4:e3:d9:c8:d0:48:82:ec:67:6d:85:8e:b5:ef:ed: 5d:14:4a:d5:cb:9b:c0:58:13:59:02:30:b3:ea:a6:bd:ca:34: 5c:8c:bb:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlDNzQxMTAvBgNVBAUTKDAwMTM3OTIwNzhEMTFCMkY5NDAzMEQ3QzNCRUVGNTAx MzJBMjZENDAwHhcNMjQwNTAzMDUxMjI4WhcNMjQwNTEwMDUxMjI4WjAYMRYwFAYD VQQDEw02NjM0NzIzYy1iZDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAla2UL9+YWYYydLt83a/qe94rbbOCfjn8wm34rAn0kpMLHNRjGwyI45/gxDXi k1ThRshpWx0BmmIzix/OUCku7X4+59SfFANAjh8UWy2jKFS1cVo93lc8J6DSX+xb cT6NLNpTOscwXJ2xbr/KEm9qIMvoUVyeCwEzKLxPOcCAGl9qU2/58uFowAKJpl7B 2jcZXl0rohMOHzcv/1dCB6JX4gf03GnkmFG0+o+Gifka0spH3GlbWAS3PuhkxORt XT/HhxHgfFHTmwh41RB+bGV9ySxnHOqWh5TxyTNcFZiVVVOmwZmHahi5vlrzWpBh NQA3N5eSKcFC4EWsxZO/KOQiXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCxRXvBi WTzTuoH+WqSsDm9gn/EbMB8GA1UdIwQYMBaAFAATeSB40RsvlAMNfDvu9QEyom1A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUM3NC80NENDOTcxRTRF MUYxMUVEQjNFNkNDMkZDNEY5QUUwMi9BQk41SUhqUkd5LVVBdzE4Ty03MUFUS2li VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FCTjVJSGpSR3ktVUF3MThPLTcxQVRLaWJVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUM3NC80NENDOTcxRTRFMUYxMUVEQjNFNkNDMkZDNEY5QUUwMi9BQk41SUhqUkd5 LVVBdzE4Ty03MUFUS2liVUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6VLcCvmvHSlviDjEcOPqrl+rbRiES91h8rAoXPcWESUXIdefkqVON E4iBteVFwKLfhivOtZGP93F06YPcRsq29sgnZyWh9H0/xxNi00N8rEJugtsY+bf7 H/ni0ZlNOGeJluUh2LHygtCIjq7ummld/tLpAvI29cUA0TftoHR3YSrUMgAgDij/ QOSKfw17PYfnr+E4juHJy2Iktn5BdP3d1iBhsJdrQ8D4C9UPsjezl7hD3lSl1AVd h0VJrsmR84qD5j+sd+nFWLJTLjIoq69vR60CicovpmMgT3/049nI0EiC7GdthY61 7+1dFErVy5vAWBNZAjCz6qa9yjRcjLvB -----END CERTIFICATE-----Generated at Fri May 3 06:29:22 2024 by rpki-client on console-fra.rpki-client.org