$ rpki-client -vvf rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft File: 92dQUVu3YtGADFrmxsLbJP6VLQI.mft (raw, json) Hash identifier: HeQ5Q9HTJUWFOIKyS2BR87e0aKVBChCa56lozjL9j4U= Subject key identifier: 4B:95:43:3C:FF:69:41:33:84:1C:58:DF:B7:69:1E:52:66:5C:61:D1 Authority key identifier: F7:67:50:51:5B:B7:62:D1:80:0C:5A:E6:C6:C2:DB:24:FE:95:2D:02 Certificate issuer: /CN=A91C83EA/serialNumber=F76750515BB762D1800C5AE6C6C2DB24FE952D02 Certificate serial: 29C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft Manifest number: 29AE Signing time: Mon 06 May 2024 15:54:02 +0000 Manifest this update: Mon 06 May 2024 15:54:01 +0000 Manifest next update: Mon 13 May 2024 15:54:01 +0000 Files and hashes: 1: 92dQUVu3YtGADFrmxsLbJP6VLQI.crl (hash: UEklJH9yn9m0Ua/gyJJAxt9ffz47zBLciW3W/w1PnRs=) 2: 2ED1150C561D11E7B003DF26C4F9AE02.roa (hash: 4oR1w97MW2XXfha42d/ChZIX7GukMGo+Z3wi4PaFXKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.crl rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 15:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10691 (0x29c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C83EA/serialNumber=F76750515BB762D1800C5AE6C6C2DB24FE952D02 Validity Not Before: May 6 15:54:01 2024 GMT Not After : May 13 15:54:01 2024 GMT Subject: CN=6638fd19-4bc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:91:43:4f:4d:63:5a:7a:76:f2:32:5d:5e:da: 14:cf:83:81:f6:b5:98:9d:53:b2:c1:c5:28:cd:46: f0:03:c5:ae:d8:3c:e9:68:e9:bf:87:2c:18:3f:d4: 1f:28:64:01:70:52:3c:31:85:8a:38:d8:d0:c9:a2: 69:99:5c:9c:64:1b:5a:40:5c:c1:1f:64:32:d2:d3: 9f:cf:a3:db:91:37:c5:1c:ed:ef:00:cd:7c:a0:46: 40:1f:a1:f6:c0:ba:17:a8:e0:1f:58:aa:f8:19:db: fc:bd:c1:18:d6:18:75:da:4b:54:bd:a6:70:47:c9: 3f:a8:54:4d:20:c7:45:82:ae:35:f0:2d:6a:5e:7e: 83:f0:9a:24:a5:38:92:5e:f8:2c:88:0c:e4:1f:44: 75:29:76:52:d1:c2:b7:7b:dc:ea:1d:65:6b:64:d5: fd:8f:26:43:9b:1e:a9:75:f9:93:a1:bb:76:49:99: 82:5e:d1:13:19:51:4d:d0:94:07:91:be:56:4f:91: 92:1f:1c:e3:8b:1c:56:0a:d8:29:3c:c2:8c:57:9b: b8:84:91:f4:4c:57:58:e0:40:79:70:61:69:79:2f: 13:2d:07:09:cb:2d:09:5c:68:c1:1c:23:bd:a2:1a: b0:2b:7c:98:44:fb:19:b1:b0:65:f4:33:cc:f6:76: 97:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:95:43:3C:FF:69:41:33:84:1C:58:DF:B7:69:1E:52:66:5C:61:D1 X509v3 Authority Key Identifier: keyid:F7:67:50:51:5B:B7:62:D1:80:0C:5A:E6:C6:C2:DB:24:FE:95:2D:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:ea:76:ce:e9:ba:48:a8:8d:e1:b6:9b:52:88:d7:a9:ec:5a: f4:ae:f7:c4:f3:1b:8a:72:fc:d2:23:02:e3:2b:65:e1:35:9c: 77:03:33:d8:44:a5:b7:f9:2c:6f:a4:17:58:38:4b:55:01:17: 70:d5:0f:ad:dc:50:82:d5:e1:92:82:cc:a1:50:98:83:ef:16: 30:6f:e6:37:d1:85:a2:45:8b:af:e0:c2:e4:6d:ef:4b:bc:75: 79:0e:d2:bc:31:0f:c2:fe:2c:ca:4e:4e:92:05:3b:aa:db:bd: dd:c4:f6:6b:21:21:70:3e:43:a8:8b:ee:fb:1f:2e:bd:b1:b5: ec:6c:2b:54:bb:3b:da:54:17:26:65:08:43:3f:c4:1c:9d:44: 24:fe:a1:c5:01:63:d9:e6:15:aa:38:fb:69:77:3a:85:2a:36: 2d:99:d7:b4:7d:17:14:37:91:6b:fe:bd:1c:70:7a:8e:23:22: 2b:80:85:10:85:5e:d8:6e:24:35:fb:bd:fc:82:79:26:1f:8f: 5b:17:b0:eb:6b:eb:0e:75:4c:2f:9d:d5:97:40:ca:f1:3f:a5: af:c1:9b:d6:b3:73:58:92:1e:fe:70:eb:5a:5e:af:f8:db:22: 8b:87:62:fd:76:43:28:d2:0e:7a:dd:fd:4e:2f:6a:62:68:69: 74:0f:18:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgzRUExMTAvBgNVBAUTKEY3Njc1MDUxNUJCNzYyRDE4MDBDNUFFNkM2QzJEQjI0 RkU5NTJEMDIwHhcNMjQwNTA2MTU1NDAxWhcNMjQwNTEzMTU1NDAxWjAYMRYwFAYD VQQDEw02NjM4ZmQxOS00YmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwpFDT01jWnp28jJdXtoUz4OB9rWYnVOywcUozUbwA8Wu2DzpaOm/hywYP9Qf KGQBcFI8MYWKONjQyaJpmVycZBtaQFzBH2Qy0tOfz6PbkTfFHO3vAM18oEZAH6H2 wLoXqOAfWKr4Gdv8vcEY1hh12ktUvaZwR8k/qFRNIMdFgq418C1qXn6D8JokpTiS XvgsiAzkH0R1KXZS0cK3e9zqHWVrZNX9jyZDmx6pdfmTobt2SZmCXtETGVFN0JQH kb5WT5GSHxzjixxWCtgpPMKMV5u4hJH0TFdY4EB5cGFpeS8TLQcJyy0JXGjBHCO9 ohqwK3yYRPsZsbBl9DPM9naXewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEuVQzz/ aUEzhBxY37dpHlJmXGHRMB8GA1UdIwQYMBaAFPdnUFFbt2LRgAxa5sbC2yT+lS0C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODNFQS9EODJDNjFFODFD NDUxMUU0OTRBNzZGMUJDNEY5QUUwMi85MmRRVVZ1M1l0R0FERnJteHNMYkpQNlZM UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkyZFFVVnUzWXRHQURGcm14c0xiSlA2VkxRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODNFQS9EODJDNjFFODFDNDUxMUU0OTRBNzZGMUJDNEY5QUUwMi85MmRRVVZ1M1l0 R0FERnJteHNMYkpQNlZMUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDG6nbO6bpIqI3htptSiNep7Fr0rvfE8xuKcvzSIwLjK2XhNZx3AzPY RKW3+SxvpBdYOEtVARdw1Q+t3FCC1eGSgsyhUJiD7xYwb+Y30YWiRYuv4MLkbe9L vHV5DtK8MQ/C/izKTk6SBTuq273dxPZrISFwPkOoi+77Hy69sbXsbCtUuzvaVBcm ZQhDP8QcnUQk/qHFAWPZ5hWqOPtpdzqFKjYtmde0fRcUN5Fr/r0ccHqOIyIrgIUQ hV7YbiQ1+738gnkmH49bF7Dra+sOdUwvndWXQMrxP6WvwZvWs3NYkh7+cOtaXq/4 2yKLh2L9dkMo0g563f1OL2piaGl0Dxgx -----END CERTIFICATE-----Generated at Mon May 6 17:43:26 2024 by rpki-client on console-ams.rpki-client.org