$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFD4B/AA47893AABD911EB833D4C6AC4F9AE02/a4J2B8F85j5hIUwuZCxaqFHuOE4.mft File: a4J2B8F85j5hIUwuZCxaqFHuOE4.mft (raw, json) Hash identifier: 5D5auvFrw0siYvExQc+7wXtQ4aYoiWVuIVlOzvaIq0g= Subject key identifier: 33:D9:5E:6A:FB:96:7D:5C:4B:AB:C7:5C:63:68:6D:74:D1:D4:8D:46 Authority key identifier: 6B:82:76:07:C1:7C:E6:3E:61:21:4C:2E:64:2C:5A:A8:51:EE:38:4E Certificate issuer: /CN=A91BFD4B/serialNumber=6B827607C17CE63E61214C2E642C5AA851EE384E Certificate serial: 0537 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4J2B8F85j5hIUwuZCxaqFHuOE4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFD4B/AA47893AABD911EB833D4C6AC4F9AE02/a4J2B8F85j5hIUwuZCxaqFHuOE4.mft Manifest number: 0533 Signing time: Sun 05 May 2024 01:06:54 +0000 Manifest this update: Sun 05 May 2024 01:06:53 +0000 Manifest next update: Sun 12 May 2024 01:06:53 +0000 Files and hashes: 1: a4J2B8F85j5hIUwuZCxaqFHuOE4.crl (hash: us89Ozs26zOeg1EkUpx3p+od5OTVuj4LJD9d3XJA9tE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFD4B/AA47893AABD911EB833D4C6AC4F9AE02/a4J2B8F85j5hIUwuZCxaqFHuOE4.crl rsync://rpki.apnic.net/member_repository/A91BFD4B/AA47893AABD911EB833D4C6AC4F9AE02/a4J2B8F85j5hIUwuZCxaqFHuOE4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4J2B8F85j5hIUwuZCxaqFHuOE4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1335 (0x537) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFD4B/serialNumber=6B827607C17CE63E61214C2E642C5AA851EE384E Validity Not Before: May 5 01:06:53 2024 GMT Not After : May 12 01:06:53 2024 GMT Subject: CN=6636dbad-0520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f2:ed:7a:5a:1a:8b:0c:62:f9:05:7a:7b:86: 04:f7:e2:32:8c:20:9d:e0:12:97:7c:39:71:01:99: 0c:34:e7:07:72:ed:78:6b:f2:98:fd:48:a2:aa:c1: 86:1a:b2:d2:1e:14:7d:70:ee:f4:bf:b3:81:92:d6: 62:81:6f:0c:11:ad:fd:f7:dd:8e:21:7c:2b:35:1a: 1d:67:d0:85:d8:81:49:b3:73:06:69:4b:3f:d2:42: b7:40:69:cd:ae:30:46:34:34:96:9b:3a:b6:71:d1: 98:11:42:87:0e:52:7c:e1:29:a3:2f:66:e5:8e:c5: a7:7e:89:d6:77:46:b6:47:47:09:60:0b:c4:e0:c1: ea:e8:2b:22:fb:07:00:8d:4d:22:82:91:87:4c:f3: 35:4e:eb:71:75:c7:f9:48:7a:f4:bf:be:78:71:2f: 26:03:9b:0c:c0:e7:04:38:63:f6:6c:ed:78:9f:94: a9:ee:fe:03:b1:7b:d9:a7:ad:3a:44:31:ae:c3:a3: 2f:07:7b:6d:88:0a:7f:65:0d:a4:57:a4:ad:96:df: 5d:24:3a:ca:f6:68:5f:6c:39:dc:06:5e:12:ca:d5: 7b:81:03:d1:51:24:69:87:59:d6:b4:3c:8e:7c:78: 82:ee:12:4b:49:b8:f9:2c:a4:89:de:8a:01:c7:12: 88:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D9:5E:6A:FB:96:7D:5C:4B:AB:C7:5C:63:68:6D:74:D1:D4:8D:46 X509v3 Authority Key Identifier: keyid:6B:82:76:07:C1:7C:E6:3E:61:21:4C:2E:64:2C:5A:A8:51:EE:38:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFD4B/AA47893AABD911EB833D4C6AC4F9AE02/a4J2B8F85j5hIUwuZCxaqFHuOE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4J2B8F85j5hIUwuZCxaqFHuOE4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFD4B/AA47893AABD911EB833D4C6AC4F9AE02/a4J2B8F85j5hIUwuZCxaqFHuOE4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:91:6f:3f:53:25:ac:ae:04:70:fc:d1:ea:9e:98:0a:1a:dd: 01:ac:b9:d3:6d:31:4b:79:a9:bd:34:fb:62:e6:1d:56:b4:83: 8e:7d:7e:40:55:20:46:1f:db:5e:69:a5:de:be:91:24:ca:b9: cc:19:9e:80:60:a2:7f:df:ad:d2:e8:77:54:5d:f6:7e:4a:2a: e2:17:3f:1a:88:85:e8:a3:28:c4:b8:d7:0d:74:5d:2b:60:2b: 5a:99:a5:09:0d:69:e4:71:aa:aa:17:3c:a1:bb:89:85:b2:f4: 87:7d:98:5e:87:da:3a:ce:05:a9:19:c9:ac:8a:a7:11:59:39: 22:8b:a2:c4:6a:04:52:6b:d7:75:9e:33:20:ef:93:13:ab:8e: 83:f4:af:e1:c1:61:b6:bc:50:0e:95:44:8f:37:3d:dd:87:10: 7a:e7:5b:3c:8b:2a:e9:23:a6:80:74:6f:a7:fe:2d:53:26:78: 5c:a5:7a:a6:bc:fb:7b:0e:61:71:4a:d5:35:5d:76:93:96:e3: 27:66:76:a6:4e:c4:35:13:88:1c:2f:e1:8a:f6:ff:34:59:19: 5d:8a:cb:9a:1f:2e:43:8b:5c:d6:04:13:85:e8:87:06:8e:bb: d5:ad:20:3f:cf:2a:cc:0c:07:b7:0f:f2:1f:b3:93:ee:fc:db: 4d:2e:8c:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZENEIxMTAvBgNVBAUTKDZCODI3NjA3QzE3Q0U2M0U2MTIxNEMyRTY0MkM1QUE4 NTFFRTM4NEUwHhcNMjQwNTA1MDEwNjUzWhcNMjQwNTEyMDEwNjUzWjAYMRYwFAYD VQQDEw02NjM2ZGJhZC0wNTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvLteloaiwxi+QV6e4YE9+IyjCCd4BKXfDlxAZkMNOcHcu14a/KY/UiiqsGG GrLSHhR9cO70v7OBktZigW8MEa39992OIXwrNRodZ9CF2IFJs3MGaUs/0kK3QGnN rjBGNDSWmzq2cdGYEUKHDlJ84SmjL2bljsWnfonWd0a2R0cJYAvE4MHq6Csi+wcA jU0igpGHTPM1Tutxdcf5SHr0v754cS8mA5sMwOcEOGP2bO14n5Sp7v4DsXvZp606 RDGuw6MvB3ttiAp/ZQ2kV6Stlt9dJDrK9mhfbDncBl4SytV7gQPRUSRph1nWtDyO fHiC7hJLSbj5LKSJ3ooBxxKIOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDPZXmr7 ln1cS6vHXGNobXTR1I1GMB8GA1UdIwQYMBaAFGuCdgfBfOY+YSFMLmQsWqhR7jhO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkQ0Qi9BQTQ3ODkzQUFC RDkxMUVCODMzRDRDNkFDNEY5QUUwMi9hNEoyQjhGODVqNWhJVXd1WkN4YXFGSHVP RTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E0SjJCOEY4NWo1aElVd3VaQ3hhcUZIdU9FNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkQ0Qi9BQTQ3ODkzQUFCRDkxMUVCODMzRDRDNkFDNEY5QUUwMi9hNEoyQjhGODVq NWhJVXd1WkN4YXFGSHVPRTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCkW8/UyWsrgRw/NHqnpgKGt0BrLnTbTFLeam9NPti5h1WtIOOfX5A VSBGH9teaaXevpEkyrnMGZ6AYKJ/363S6HdUXfZ+SiriFz8aiIXooyjEuNcNdF0r YCtamaUJDWnkcaqqFzyhu4mFsvSHfZheh9o6zgWpGcmsiqcRWTkii6LEagRSa9d1 njMg75MTq46D9K/hwWG2vFAOlUSPNz3dhxB651s8iyrpI6aAdG+n/i1TJnhcpXqm vPt7DmFxStU1XXaTluMnZnamTsQ1E4gcL+GK9v80WRldisuaHy5Di1zWBBOF6IcG jrvVrSA/zyrMDAe3D/Ifs5Pu/NtNLoxS -----END CERTIFICATE-----Generated at Sun May 5 02:13:04 2024 by rpki-client on console-ams.rpki-client.org