$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.mft File: 96B_epkcIaJc05qyCt5Po7XgXRU.mft (raw, json) Hash identifier: DdVexcPPC9dt5lUP6DK63QNejUxB1Uat7yHY/Wz9tRo= Subject key identifier: B5:AF:58:9D:73:2D:EC:FB:28:9C:C8:D2:AB:23:A3:26:42:DC:79:BB Authority key identifier: F7:A0:7F:7A:99:1C:21:A2:5C:D3:9A:B2:0A:DE:4F:A3:B5:E0:5D:15 Certificate issuer: /CN=A91BEC2F/serialNumber=F7A07F7A991C21A25CD39AB20ADE4FA3B5E05D15 Certificate serial: 0305 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/96B_epkcIaJc05qyCt5Po7XgXRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.mft Manifest number: 02F9 Signing time: Sun 05 May 2024 03:27:59 +0000 Manifest this update: Sun 05 May 2024 03:27:59 +0000 Manifest next update: Sun 12 May 2024 03:27:59 +0000 Files and hashes: 1: 96B_epkcIaJc05qyCt5Po7XgXRU.crl (hash: DgQ+n6+D7w1Pz5kpSBYrA/YuDYuhuHdJSjpGMMWFOo4=) 2: B843A2DE29B011ED8AB64660C4F9AE02.roa (hash: 2oGhBOAUeKiO0kn+liVmvoXj1nadq1Mgyp+xnUDfEdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.crl rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/96B_epkcIaJc05qyCt5Po7XgXRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 773 (0x305) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEC2F/serialNumber=F7A07F7A991C21A25CD39AB20ADE4FA3B5E05D15 Validity Not Before: May 5 03:27:59 2024 GMT Not After : May 12 03:27:59 2024 GMT Subject: CN=6636fcbf-3c5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:be:76:7d:84:a6:72:ef:90:59:c8:5b:67:52: 37:44:ee:cf:4d:07:73:2e:be:7f:aa:da:2d:37:3a: 8b:e5:a6:f3:d8:5e:61:b6:d0:2c:4d:8b:16:b6:fe: fe:fb:fd:45:2e:4f:a7:34:58:89:5a:1a:22:8b:fb: a1:65:6f:e0:1a:fb:da:ad:6c:56:c2:ee:72:92:f3: 20:41:6c:37:e3:c9:cb:90:ff:95:f8:44:8e:ac:be: f1:42:5e:c1:55:1a:08:bc:28:10:de:9b:ac:8b:a1: d8:00:fb:f8:28:e7:8d:67:39:d8:b2:a5:51:21:24: af:82:19:30:dc:86:41:8a:63:f6:28:ce:d7:1a:62: 29:dc:81:9d:b9:7a:21:60:69:a9:99:87:0f:c3:99: 1e:25:6a:7c:d7:3c:88:a3:da:43:ee:92:e1:eb:df: d7:4d:75:d0:4b:4a:06:d5:67:0b:30:46:20:6b:d2: 84:aa:77:65:b2:51:1d:c9:d2:bf:5c:e0:53:aa:bc: d2:61:c3:12:d0:d8:cd:a0:0e:97:64:cb:48:a6:7e: 28:e0:21:14:2a:2f:7b:be:48:0f:d7:7e:55:b5:fc: a1:ac:80:e3:cb:39:69:20:bf:16:09:07:e3:77:cf: 2a:e1:60:9a:73:e2:05:93:7d:af:77:49:f8:bc:ac: 02:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:AF:58:9D:73:2D:EC:FB:28:9C:C8:D2:AB:23:A3:26:42:DC:79:BB X509v3 Authority Key Identifier: keyid:F7:A0:7F:7A:99:1C:21:A2:5C:D3:9A:B2:0A:DE:4F:A3:B5:E0:5D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/96B_epkcIaJc05qyCt5Po7XgXRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:36:07:6e:f5:e7:94:96:fb:8f:e3:cd:31:20:83:ad:54:47: 62:f8:32:e5:54:e5:d6:2b:6e:9b:f0:03:60:b9:9e:3b:fa:93: d3:5d:8a:61:57:ad:b4:b2:10:f5:d7:92:71:97:b5:fc:59:80: d0:c9:3c:2b:b0:9a:8c:7c:60:d4:05:b8:b1:1a:5f:a9:d1:82: dd:38:92:69:80:ae:c6:51:37:f0:c5:c7:75:21:97:d9:07:9a: 37:12:73:57:a5:bc:a7:7f:9e:bc:88:05:f1:67:08:4d:d4:60: 33:cd:ff:3c:b3:00:00:f9:03:e3:3c:af:24:e0:28:d1:e9:2b: 23:30:ff:b0:f8:4b:dc:f8:80:65:3c:08:41:e3:76:3e:3d:37: 77:d8:7f:04:df:4c:46:9a:87:2d:a0:85:d8:1a:c6:79:b4:8e: 69:16:84:4c:4a:19:e1:bd:34:c8:d1:45:0b:c0:f0:d2:b2:c3: 66:33:0f:ba:b0:78:88:f1:b9:1e:5d:cd:68:e3:66:4d:8c:25: 3f:10:7e:0f:fa:10:c8:f2:2c:ca:7d:b7:18:a8:7f:62:91:f7: bc:d1:39:12:cc:31:10:a0:0e:ab:6d:52:a3:36:95:24:e9:5a: a5:55:74:b7:a4:a4:60:20:0b:99:b4:96:5f:18:99:4a:be:f7: 12:61:9e:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVDMkYxMTAvBgNVBAUTKEY3QTA3RjdBOTkxQzIxQTI1Q0QzOUFCMjBBREU0RkEz QjVFMDVEMTUwHhcNMjQwNTA1MDMyNzU5WhcNMjQwNTEyMDMyNzU5WjAYMRYwFAYD VQQDEw02NjM2ZmNiZi0zYzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtb52fYSmcu+QWchbZ1I3RO7PTQdzLr5/qtotNzqL5abz2F5httAsTYsWtv7+ +/1FLk+nNFiJWhoii/uhZW/gGvvarWxWwu5ykvMgQWw348nLkP+V+ESOrL7xQl7B VRoIvCgQ3pusi6HYAPv4KOeNZznYsqVRISSvghkw3IZBimP2KM7XGmIp3IGduXoh YGmpmYcPw5keJWp81zyIo9pD7pLh69/XTXXQS0oG1WcLMEYga9KEqndlslEdydK/ XOBTqrzSYcMS0NjNoA6XZMtIpn4o4CEUKi97vkgP135VtfyhrIDjyzlpIL8WCQfj d88q4WCac+IFk32vd0n4vKwC3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLWvWJ1z Lez7KJzI0qsjoyZC3Hm7MB8GA1UdIwQYMBaAFPegf3qZHCGiXNOasgreT6O14F0V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUMyRi83MjFCMzFENDk2 MzgxMUVDQjgzQzE2ODJDNEY5QUUwMi85NkJfZXBrY0lhSmMwNXF5Q3Q1UG83WGdY UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk2Ql9lcGtjSWFKYzA1cXlDdDVQbzdYZ1hSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUMyRi83MjFCMzFENDk2MzgxMUVDQjgzQzE2ODJDNEY5QUUwMi85NkJfZXBrY0lh SmMwNXF5Q3Q1UG83WGdYUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATNgdu9eeUlvuP480xIIOtVEdi+DLlVOXWK26b8ANguZ47+pPTXYph V620shD115Jxl7X8WYDQyTwrsJqMfGDUBbixGl+p0YLdOJJpgK7GUTfwxcd1IZfZ B5o3EnNXpbynf568iAXxZwhN1GAzzf88swAA+QPjPK8k4CjR6SsjMP+w+Evc+IBl PAhB43Y+PTd32H8E30xGmoctoIXYGsZ5tI5pFoRMShnhvTTI0UULwPDSssNmMw+6 sHiI8bkeXc1o42ZNjCU/EH4P+hDI8izKfbcYqH9ikfe80TkSzDEQoA6rbVKjNpUk 6VqlVXS3pKRgIAuZtJZfGJlKvvcSYZ7Q -----END CERTIFICATE-----Generated at Sun May 5 04:40:00 2024 by rpki-client on console-ams.rpki-client.org