$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft File: 0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft (raw, json) Hash identifier: l7kn0WH+YKJRgKprDUG65GSTS6JzHRDlDAZgd8H2Ews= Subject key identifier: CD:A6:8C:C8:DF:37:48:71:F3:3E:25:BB:91:38:94:8A:BB:30:E7:1D Authority key identifier: D0:02:AB:EA:A5:B2:CD:C4:8F:EA:09:83:B0:4A:8E:C2:86:0C:F9:29 Certificate issuer: /CN=A91C9019/serialNumber=D002ABEAA5B2CDC48FEA0983B04A8EC2860CF929 Certificate serial: 014B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft Manifest number: 014B Signing time: Sun 05 May 2024 05:02:13 +0000 Manifest this update: Sun 05 May 2024 05:02:12 +0000 Manifest next update: Sun 12 May 2024 05:02:12 +0000 Files and hashes: 1: 0AKr6qWyzcSP6gmDsEqOwoYM-Sk.crl (hash: SRQ6tf8QxOwy0FrXIg1gGGWZiOu5gLHjYjetf+Yd1nM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.crl rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9019/serialNumber=D002ABEAA5B2CDC48FEA0983B04A8EC2860CF929 Validity Not Before: May 5 05:02:12 2024 GMT Not After : May 12 05:02:12 2024 GMT Subject: CN=663712d4-0351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:36:d9:64:b5:84:79:dc:52:72:31:5f:f4:13: 72:b7:4a:1e:f3:19:26:1d:13:93:08:7b:05:5a:e2: a0:3f:7b:08:58:ca:be:97:58:22:87:b4:b7:df:47: 8d:a1:2d:d5:02:5b:25:c2:44:0d:24:12:ab:fe:11: c3:b0:be:4a:95:60:4d:21:ab:51:ea:2b:43:cf:fc: 07:46:3e:e4:79:7e:95:db:c2:c6:3a:05:36:e1:18: 90:49:80:2e:62:c9:8e:e2:87:81:f5:e5:ad:98:09: e9:1d:b7:ed:5b:d0:86:81:83:21:00:31:5b:24:25: b1:c3:8a:f6:8c:92:64:5f:fe:b1:b4:a5:3f:1d:5c: c0:26:2f:3e:b5:91:7c:22:1b:99:81:3d:33:77:9b: ba:b4:0a:43:fe:67:56:c8:7d:08:c3:da:b6:6b:5e: e7:b1:f2:3c:36:9f:39:11:d9:19:32:e5:ba:a7:d9: 7a:50:0a:09:6c:0f:e5:e7:f4:c8:3a:05:9d:3d:4e: 74:8f:8c:dd:74:2a:b5:f5:2b:53:ce:93:ab:31:4a: 4c:d5:6f:94:cc:e2:87:0b:50:48:ab:3f:51:9b:2c: 47:15:e8:5d:63:14:29:56:c6:d3:e1:0f:0c:70:5d: e9:62:ec:e2:8a:a2:c6:c8:07:d5:d8:b9:b8:58:af: 91:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A6:8C:C8:DF:37:48:71:F3:3E:25:BB:91:38:94:8A:BB:30:E7:1D X509v3 Authority Key Identifier: keyid:D0:02:AB:EA:A5:B2:CD:C4:8F:EA:09:83:B0:4A:8E:C2:86:0C:F9:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:b9:8a:ed:02:34:50:d3:f2:b4:ee:c7:db:ca:dd:ab:ab:a7: ae:24:e7:82:36:a9:77:93:42:ec:31:d6:90:ea:45:fe:37:38: 09:a7:2f:5e:7c:a2:d8:35:76:13:90:90:01:ab:f4:81:9b:18: d3:91:d0:40:51:51:4b:50:aa:d8:22:24:a3:39:cd:c6:23:a8: 57:e5:0b:78:47:35:d1:20:f0:23:4d:63:94:9e:3d:a6:9a:4e: a3:8d:82:9a:b7:2f:e5:aa:0a:3f:9d:77:88:af:29:38:a8:49: a3:ad:d6:80:bb:85:aa:f1:30:2a:f1:2f:37:a3:95:f0:36:30: 27:89:6a:dd:ce:7f:41:8f:70:df:10:15:16:ab:46:e3:fd:0e: ab:3b:29:3b:c0:a0:9d:35:99:fc:b1:47:2b:3b:2c:a9:6a:50: f0:27:79:5a:71:5a:61:1f:94:a4:ff:62:15:af:df:e3:7e:25: b9:b4:2a:53:77:e2:50:81:c6:b3:0b:49:1d:d7:51:74:12:9d: ef:58:4c:a2:fb:8f:f2:80:30:18:0c:02:2d:e3:a6:58:b4:1f: fe:11:db:20:62:e6:f3:ab:a2:06:af:cb:fd:f2:d7:82:b4:0f: e4:a3:57:54:74:cb:1b:6d:6f:08:a3:ee:e5:af:4a:a9:ab:40: 30:04:c6:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkwMTkxMTAvBgNVBAUTKEQwMDJBQkVBQTVCMkNEQzQ4RkVBMDk4M0IwNEE4RUMy ODYwQ0Y5MjkwHhcNMjQwNTA1MDUwMjEyWhcNMjQwNTEyMDUwMjEyWjAYMRYwFAYD VQQDEw02NjM3MTJkNC0wMzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDbZZLWEedxScjFf9BNyt0oe8xkmHROTCHsFWuKgP3sIWMq+l1gih7S330eN oS3VAlslwkQNJBKr/hHDsL5KlWBNIatR6itDz/wHRj7keX6V28LGOgU24RiQSYAu YsmO4oeB9eWtmAnpHbftW9CGgYMhADFbJCWxw4r2jJJkX/6xtKU/HVzAJi8+tZF8 IhuZgT0zd5u6tApD/mdWyH0Iw9q2a17nsfI8Np85EdkZMuW6p9l6UAoJbA/l5/TI OgWdPU50j4zddCq19StTzpOrMUpM1W+UzOKHC1BIqz9RmyxHFehdYxQpVsbT4Q8M cF3pYuziiqLGyAfV2Lm4WK+RmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM2mjMjf N0hx8z4lu5E4lIq7MOcdMB8GA1UdIwQYMBaAFNACq+qlss3Ej+oJg7BKjsKGDPkp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTAxOS8yOEFFNDNEODM0 NzYxMUVEODY3RTk1MTJDNEY5QUUwMi8wQUtyNnFXeXpjU1A2Z21Ec0VxT3dvWU0t U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBBS3I2cVd5emNTUDZnbURzRXFPd29ZTS1Tay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTAxOS8yOEFFNDNEODM0NzYxMUVEODY3RTk1MTJDNEY5QUUwMi8wQUtyNnFXeXpj U1A2Z21Ec0VxT3dvWU0tU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLuYrtAjRQ0/K07sfbyt2rq6euJOeCNql3k0LsMdaQ6kX+NzgJpy9e fKLYNXYTkJABq/SBmxjTkdBAUVFLUKrYIiSjOc3GI6hX5Qt4RzXRIPAjTWOUnj2m mk6jjYKaty/lqgo/nXeIryk4qEmjrdaAu4Wq8TAq8S83o5XwNjAniWrdzn9Bj3Df EBUWq0bj/Q6rOyk7wKCdNZn8sUcrOyypalDwJ3lacVphH5Sk/2IVr9/jfiW5tCpT d+JQgcazC0kd11F0Ep3vWEyi+4/ygDAYDAIt46ZYtB/+EdsgYubzq6IGr8v98teC tA/ko1dUdMsbbW8Io+7lr0qpq0AwBMY3 -----END CERTIFICATE-----Generated at Sun May 5 06:13:37 2024 by rpki-client on console-ams.rpki-client.org