$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft File: -kF5Yn9bJllOVjA1Ogt3heDWksU.mft (raw, json) Hash identifier: BylSbwJL/2fZiKjm/ZBQJH+msRYl7fY5f7tVQBZNWRo= Subject key identifier: 82:F6:51:10:71:40:1B:EF:8B:34:01:EC:25:EC:65:24:0B:68:27:04 Authority key identifier: FA:41:79:62:7F:5B:26:59:4E:56:30:35:3A:0B:77:85:E0:D6:92:C5 Certificate issuer: /CN=A91C1621/serialNumber=FA4179627F5B26594E5630353A0B7785E0D692C5 Certificate serial: 33EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft Manifest number: 33D7 Signing time: Tue 30 Apr 2024 14:16:24 +0000 Manifest this update: Tue 30 Apr 2024 14:16:24 +0000 Manifest next update: Tue 07 May 2024 14:16:24 +0000 Files and hashes: 1: -kF5Yn9bJllOVjA1Ogt3heDWksU.crl (hash: Zm+RLugmdse1kjJhcXRMS0JNC3N0jE7aH2Y/bwWqUNE=) 2: CDE36D52DB9511E99F3F673EC4F9AE02.roa (hash: deoSM2eW9n8Ke+2Gwxfg5Vyb4bl8egcl1/He0/Cy4jM=) 3: BB8F87B4D4B011ECAA427351C4F9AE02.roa (hash: KmBdkHIjhU2Nm1oHzHefyN2rINFdSPmr51k5cRUbE8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.crl rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 14:16:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13292 (0x33ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1621/serialNumber=FA4179627F5B26594E5630353A0B7785E0D692C5 Validity Not Before: Apr 30 14:16:24 2024 GMT Not After : May 7 14:16:24 2024 GMT Subject: CN=6630fd38-e2fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e7:04:17:d7:f0:82:f2:6b:13:e3:e0:47:75: 87:e8:b7:ec:d5:aa:9b:fd:ea:b6:fb:8c:ad:c1:67: ca:07:26:5a:ae:62:a9:c9:1c:a9:7f:4c:61:f8:a1: 7c:67:51:6d:0d:26:8b:5f:86:ce:9e:ef:b1:7b:7f: 9c:e8:99:23:0f:52:e3:b9:ec:b0:1f:c2:cb:5e:37: 53:97:b0:0d:da:ec:5f:fd:7a:72:18:66:1d:b3:98: af:cb:0e:6d:91:d8:4d:55:db:47:f3:2b:b9:f3:93: d0:ba:74:69:e7:e1:86:cc:51:5a:4d:69:a4:68:50: de:67:1e:46:e9:6f:65:01:8d:65:1c:14:5b:e4:bf: 95:2a:9b:4d:12:83:53:17:2c:df:0e:05:1f:9b:60: 9e:7a:7e:07:4f:65:98:b3:c1:36:95:0d:23:a2:4f: 26:ba:0e:5d:6a:eb:29:fe:33:a2:17:aa:db:b5:7b: 3d:df:8a:a5:29:79:58:b8:34:68:9e:6c:b7:fd:b4: 8a:74:ac:e5:44:2d:e7:f3:21:09:d6:40:91:42:f3: 40:f3:28:1e:22:29:30:db:04:d6:c1:e7:29:1e:33: 85:b4:46:3e:62:0c:7b:9c:36:53:00:60:99:3b:14: 67:c3:df:2a:10:93:bd:9d:40:73:c7:11:1b:41:2f: 0f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F6:51:10:71:40:1B:EF:8B:34:01:EC:25:EC:65:24:0B:68:27:04 X509v3 Authority Key Identifier: keyid:FA:41:79:62:7F:5B:26:59:4E:56:30:35:3A:0B:77:85:E0:D6:92:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:85:d1:6a:4c:fd:55:d0:d4:37:33:07:13:de:37:3c:18:9c: 53:c7:1b:41:f7:0e:47:1b:33:f5:22:97:46:7b:c1:2d:d6:1f: 05:0c:05:33:9c:e3:c1:dd:22:44:24:dd:25:74:47:2a:f9:17: e0:78:b3:a2:c8:8b:04:80:5c:cd:f2:38:05:b6:d8:da:58:ff: d3:1c:a7:ce:0f:db:95:ed:53:d6:1b:7b:69:56:2e:fc:99:e3: 29:13:4b:84:a7:b0:10:7e:a9:c9:19:e8:a6:25:36:7d:43:75: 55:52:b5:82:e2:66:79:0b:95:32:d8:f0:8f:d2:51:6d:31:b5: d4:b9:5b:8c:9a:95:5a:7e:da:95:2e:d2:9d:1a:7e:f4:64:d3: bd:7d:61:cf:c2:d9:e9:df:c8:d5:1b:da:6b:cf:ac:c5:27:f4: 9d:e4:d3:3b:46:15:0e:fb:45:a7:10:1b:7e:bd:1b:90:65:b8: 99:af:8f:2f:62:77:af:e3:81:a0:8f:48:7c:7a:1d:da:db:cb: 49:49:37:dd:97:6e:63:29:b6:04:3a:74:20:0d:3f:a6:99:9e: bb:eb:ac:5f:cd:74:c6:05:82:41:4b:2b:e5:e1:4a:44:d5:b4: 54:a3:80:16:a8:53:b0:69:5e:85:5c:6d:83:59:ba:92:4b:ce: cf:d1:a5:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2MjExMTAvBgNVBAUTKEZBNDE3OTYyN0Y1QjI2NTk0RTU2MzAzNTNBMEI3Nzg1 RTBENjkyQzUwHhcNMjQwNDMwMTQxNjI0WhcNMjQwNTA3MTQxNjI0WjAYMRYwFAYD VQQDEw02NjMwZmQzOC1lMmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+cEF9fwgvJrE+PgR3WH6Lfs1aqb/eq2+4ytwWfKByZarmKpyRypf0xh+KF8 Z1FtDSaLX4bOnu+xe3+c6JkjD1LjueywH8LLXjdTl7AN2uxf/XpyGGYds5ivyw5t kdhNVdtH8yu585PQunRp5+GGzFFaTWmkaFDeZx5G6W9lAY1lHBRb5L+VKptNEoNT FyzfDgUfm2Ceen4HT2WYs8E2lQ0jok8mug5dausp/jOiF6rbtXs934qlKXlYuDRo nmy3/bSKdKzlRC3n8yEJ1kCRQvNA8ygeIikw2wTWwecpHjOFtEY+Ygx7nDZTAGCZ OxRnw98qEJO9nUBzxxEbQS8PmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIL2URBx QBvvizQB7CXsZSQLaCcEMB8GA1UdIwQYMBaAFPpBeWJ/WyZZTlYwNToLd4Xg1pLF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTYyMS85OUQ2OERDRTFE NjkxMUUyQTQ2NDBEQTcwOEIwMkNEMi8ta0Y1WW45YkpsbE9WakExT2d0M2hlRFdr c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1rRjVZbjliSmxsT1ZqQTFPZ3QzaGVEV2tzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTYyMS85OUQ2OERDRTFENjkxMUUyQTQ2NDBEQTcwOEIwMkNEMi8ta0Y1WW45Ykps bE9WakExT2d0M2hlRFdrc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyhdFqTP1V0NQ3MwcT3jc8GJxTxxtB9w5HGzP1IpdGe8Et1h8FDAUz nOPB3SJEJN0ldEcq+RfgeLOiyIsEgFzN8jgFttjaWP/THKfOD9uV7VPWG3tpVi78 meMpE0uEp7AQfqnJGeimJTZ9Q3VVUrWC4mZ5C5Uy2PCP0lFtMbXUuVuMmpVaftqV LtKdGn70ZNO9fWHPwtnp38jVG9prz6zFJ/Sd5NM7RhUO+0WnEBt+vRuQZbiZr48v Ynev44Ggj0h8eh3a28tJSTfdl25jKbYEOnQgDT+mmZ6766xfzXTGBYJBSyvl4UpE 1bRUo4AWqFOwaV6FXG2DWbqSS87P0aUy -----END CERTIFICATE-----Generated at Tue Apr 30 19:22:37 2024 by rpki-client on console-ams.rpki-client.org