$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft File: aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft (raw, json) Hash identifier: CPLTrdMIuQ4QSiuv+BSbSC9Nx08yhh5E5SvZ7rSVKRU= Subject key identifier: 49:05:2A:B3:9C:FF:0C:99:2E:F7:80:00:C5:3F:42:AE:48:0C:78:02 Authority key identifier: 68:76:3E:92:A2:C1:78:53:16:75:76:65:11:03:F8:1F:59:AC:DC:1A Certificate issuer: /CN=A91C4750/serialNumber=68763E92A2C17853167576651103F81F59ACDC1A Certificate serial: 074D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft Manifest number: 0747 Signing time: Sat 04 May 2024 22:30:38 +0000 Manifest this update: Sat 04 May 2024 22:30:38 +0000 Manifest next update: Sat 11 May 2024 22:30:38 +0000 Files and hashes: 1: aHY-kqLBeFMWdXZlEQP4H1ms3Bo.crl (hash: nFEG1mUJSHSmo8Qk1HMLYGXvUNHfYMEwtuVQkr5k3Y8=) 2: DA1A98C4DABE11EAB12A5209C4F9AE02.roa (hash: lOFt9Ddz5HQ3WdVmfrLlyFdn9Z2DE/Ib30wpfd25yD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.crl rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1869 (0x74d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4750/serialNumber=68763E92A2C17853167576651103F81F59ACDC1A Validity Not Before: May 4 22:30:38 2024 GMT Not After : May 11 22:30:38 2024 GMT Subject: CN=6636b70e-2eaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:96:b3:68:dc:25:61:2a:f3:ae:18:f4:18:0b: 8b:27:ce:8e:76:e1:c1:62:35:d4:61:0c:db:4a:d8: 25:e9:26:6d:b6:32:43:f0:9a:fd:4b:ff:c5:1d:84: 59:63:4f:38:25:c2:ec:15:39:bc:f7:71:a9:c5:de: e0:68:42:a8:52:16:4f:1f:a3:34:71:c5:c3:0c:cd: b9:1d:b6:2d:06:a7:2c:95:49:b1:1a:01:c9:b7:48: 46:35:c7:de:fc:b0:34:55:9e:5f:f4:2c:4d:bf:c1: 13:f5:74:1d:5f:f6:76:65:a8:99:3e:6b:c5:fb:2c: fc:23:eb:c3:77:b1:e3:98:1d:ec:f0:6d:49:28:65: 74:80:48:4b:8d:3d:23:c2:fb:f0:a0:d9:2c:0e:a8: 56:89:86:ba:e7:73:26:18:02:8c:ba:2b:6e:81:d5: f4:b8:ef:a8:55:c1:b3:ee:3c:26:80:c3:5a:84:36: 00:0a:11:fc:32:ac:e9:d4:bf:10:9d:68:f5:54:54: e4:d0:c5:34:39:9a:f1:d0:e0:df:42:54:1a:be:4e: e6:44:70:b2:09:4d:95:90:df:64:e9:5e:48:10:9a: 93:67:21:1e:79:f8:10:b4:35:8f:ad:ee:1a:d4:d6: 0a:e6:2f:cb:b2:4a:f2:ae:00:f8:d4:cb:f0:e1:68: dc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:05:2A:B3:9C:FF:0C:99:2E:F7:80:00:C5:3F:42:AE:48:0C:78:02 X509v3 Authority Key Identifier: keyid:68:76:3E:92:A2:C1:78:53:16:75:76:65:11:03:F8:1F:59:AC:DC:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:ff:9a:c5:ef:d2:0d:e7:14:b4:4d:37:1f:fb:25:58:7d:50: 37:22:f1:1d:26:47:4b:fa:c2:65:b6:dd:21:89:d0:0b:2c:9f: ee:f5:c9:e5:1c:ba:6d:fb:cd:f5:0e:e9:41:38:f5:c0:3b:c9: 1f:49:bf:05:77:38:bc:31:6e:ae:06:70:3d:e9:57:38:8a:3e: 87:d8:b8:1a:f0:e2:e3:5a:d0:ea:aa:38:9b:a2:93:5b:47:64: 97:0b:0b:e4:41:4f:15:a3:84:3c:66:1f:df:de:49:92:21:e2: dc:0b:9e:d7:f6:e6:97:f5:c9:53:06:86:27:cc:be:be:ce:c9: b0:c3:b0:6a:9d:1b:27:ae:0f:bd:9f:55:80:a8:5a:54:24:01: 74:27:cb:8e:a2:4a:79:87:ee:73:72:81:67:eb:1a:75:ab:24: 52:8f:81:62:eb:c1:39:d5:6a:e3:6c:7c:dd:60:17:79:cb:33: 48:f2:8a:5e:bb:e7:47:a2:04:68:ab:d0:3d:3b:0e:29:08:ab: 3c:33:be:f7:c9:4b:ee:ca:7f:6b:f4:5a:0b:a4:23:25:79:d2: 7b:10:cf:c3:40:df:79:7e:66:ea:5e:76:57:23:6a:ab:62:43: 92:29:ed:c9:e7:31:8a:4d:49:b5:53:d8:bb:28:b8:bc:ce:7e: 89:78:f1:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ3NTAxMTAvBgNVBAUTKDY4NzYzRTkyQTJDMTc4NTMxNjc1NzY2NTExMDNGODFG NTlBQ0RDMUEwHhcNMjQwNTA0MjIzMDM4WhcNMjQwNTExMjIzMDM4WjAYMRYwFAYD VQQDEw02NjM2YjcwZS0yZWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5azaNwlYSrzrhj0GAuLJ86OduHBYjXUYQzbStgl6SZttjJD8Jr9S//FHYRZ Y084JcLsFTm893Gpxd7gaEKoUhZPH6M0ccXDDM25HbYtBqcslUmxGgHJt0hGNcfe /LA0VZ5f9CxNv8ET9XQdX/Z2ZaiZPmvF+yz8I+vDd7HjmB3s8G1JKGV0gEhLjT0j wvvwoNksDqhWiYa653MmGAKMuitugdX0uO+oVcGz7jwmgMNahDYAChH8Mqzp1L8Q nWj1VFTk0MU0OZrx0ODfQlQavk7mRHCyCU2VkN9k6V5IEJqTZyEeefgQtDWPre4a 1NYK5i/LskryrgD41Mvw4WjcrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEkFKrOc /wyZLveAAMU/Qq5IDHgCMB8GA1UdIwQYMBaAFGh2PpKiwXhTFnV2ZRED+B9ZrNwa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDc1MC85MEQ1RUM1QURB QkQxMUVBOEZDNjIzODdDNEY5QUUwMi9hSFkta3FMQmVGTVdkWFpsRVFQNEgxbXMz Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FIWS1rcUxCZUZNV2RYWmxFUVA0SDFtczNCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDc1MC85MEQ1RUM1QURBQkQxMUVBOEZDNjIzODdDNEY5QUUwMi9hSFkta3FMQmVG TVdkWFpsRVFQNEgxbXMzQm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCc/5rF79IN5xS0TTcf+yVYfVA3IvEdJkdL+sJltt0hidALLJ/u9cnl HLpt+831DulBOPXAO8kfSb8Fdzi8MW6uBnA96Vc4ij6H2Lga8OLjWtDqqjibopNb R2SXCwvkQU8Vo4Q8Zh/f3kmSIeLcC57X9uaX9clTBoYnzL6+zsmww7BqnRsnrg+9 n1WAqFpUJAF0J8uOokp5h+5zcoFn6xp1qyRSj4Fi68E51WrjbHzdYBd5yzNI8ope u+dHogRoq9A9Ow4pCKs8M773yUvuyn9r9FoLpCMledJ7EM/DQN95fmbqXnZXI2qr YkOSKe3J5zGKTUm1U9i7KLi8zn6JePGg -----END CERTIFICATE-----Generated at Sun May 5 00:12:30 2024 by rpki-client on console-fra.rpki-client.org