$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF0BD/A67B277873D511EE8808CF71C4F9AE02/AhC5e8hmDE5anWo8udqHGaW6RRI.mft File: AhC5e8hmDE5anWo8udqHGaW6RRI.mft (raw, json) Hash identifier: LavLiE5S1xElHfi/LLuzP7sNX6xztQWBU+qWGcfkO78= Subject key identifier: 64:BB:E4:BD:7A:2A:F7:C1:71:7E:2A:3A:C8:7D:C4:E7:D8:3C:06:AB Authority key identifier: 02:10:B9:7B:C8:66:0C:4E:5A:9D:6A:3C:B9:DA:87:19:A5:BA:45:12 Certificate issuer: /CN=A91CF0BD/serialNumber=0210B97BC8660C4E5A9D6A3CB9DA8719A5BA4512 Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhC5e8hmDE5anWo8udqHGaW6RRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF0BD/A67B277873D511EE8808CF71C4F9AE02/AhC5e8hmDE5anWo8udqHGaW6RRI.mft Manifest number: 6B Signing time: Fri 17 May 2024 07:39:43 +0000 Manifest this update: Fri 17 May 2024 07:39:43 +0000 Manifest next update: Fri 24 May 2024 07:39:43 +0000 Files and hashes: 1: AhC5e8hmDE5anWo8udqHGaW6RRI.crl (hash: dmuEBuGunxbPBkwcBMc4jW32CTdOs7TT2wOjaA3KKr4=) 2: CC394F9C73D711EE87FD1F7BC4F9AE02.roa (hash: sPT+sP4oyT3F65pTsGpAo6OhKsejuKpWabi4hHyD+Bo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF0BD/A67B277873D511EE8808CF71C4F9AE02/AhC5e8hmDE5anWo8udqHGaW6RRI.crl rsync://rpki.apnic.net/member_repository/A91CF0BD/A67B277873D511EE8808CF71C4F9AE02/AhC5e8hmDE5anWo8udqHGaW6RRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhC5e8hmDE5anWo8udqHGaW6RRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:35:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF0BD/serialNumber=0210B97BC8660C4E5A9D6A3CB9DA8719A5BA4512 Validity Not Before: May 17 07:39:43 2024 GMT Not After : May 24 07:39:43 2024 GMT Subject: CN=664709bf-9761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c9:4a:2b:3c:e0:f8:31:3e:ce:73:2c:94:9e: 2c:b6:e1:2b:39:11:51:ad:73:36:2e:17:ab:b7:7f: 34:01:4e:54:a5:b8:f7:59:73:2e:e0:45:39:38:ae: 49:e7:fe:c9:99:4f:c6:90:7b:cc:1c:a3:62:b8:66: 57:b2:19:5e:d0:1b:de:a8:40:d9:6f:09:9a:ac:ae: ec:ce:62:2c:e1:34:4a:e4:5b:f7:8c:bb:16:38:ed: b0:df:7e:ff:be:08:af:8e:02:cd:fa:f9:50:eb:2d: cd:09:ac:5a:03:ce:ae:2d:80:01:f1:29:18:d4:13: b4:42:40:2b:07:dc:c0:72:4c:bc:b0:b4:f6:33:6f: fd:50:25:32:86:da:77:ed:11:65:02:d7:5c:dc:6c: 80:a9:3d:93:c6:c4:7c:c9:05:66:27:a8:3d:af:57: ef:0c:ab:8f:2d:9e:37:8b:27:95:95:f4:c2:91:5c: 3b:4d:fe:c1:fa:61:c9:15:91:73:7c:5e:5f:73:ee: ed:cf:64:bf:0c:ae:22:9a:c2:fa:d1:2f:62:ce:af: 9b:da:8c:97:0d:43:da:1d:2c:98:ed:9e:fd:6f:c1: 31:1d:5e:dc:5d:22:c8:fe:83:e7:38:9a:88:2a:54: 61:63:7c:4b:27:e1:5a:ae:cc:b5:65:cb:c8:6c:e4: c7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:BB:E4:BD:7A:2A:F7:C1:71:7E:2A:3A:C8:7D:C4:E7:D8:3C:06:AB X509v3 Authority Key Identifier: keyid:02:10:B9:7B:C8:66:0C:4E:5A:9D:6A:3C:B9:DA:87:19:A5:BA:45:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF0BD/A67B277873D511EE8808CF71C4F9AE02/AhC5e8hmDE5anWo8udqHGaW6RRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhC5e8hmDE5anWo8udqHGaW6RRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF0BD/A67B277873D511EE8808CF71C4F9AE02/AhC5e8hmDE5anWo8udqHGaW6RRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:f2:be:94:f1:11:7e:80:66:49:c6:49:58:10:49:10:06:99: 4a:be:3d:5f:f4:1d:da:18:af:13:00:d0:ea:b9:6f:83:14:31: 6b:4f:8f:20:a4:a3:7c:0a:9f:16:fe:34:9c:b2:39:d0:67:d2: a5:fa:ac:73:bd:13:50:98:7b:eb:56:3e:14:dc:e4:2d:c8:e9: 57:21:81:e1:94:9e:ac:1e:a0:20:e8:5d:55:f0:34:0a:6a:87: 39:27:1a:6b:4c:3d:79:3f:52:42:e1:78:96:e2:2a:91:bd:4a: 3e:a2:20:d2:54:60:74:1d:b9:17:ce:c4:00:46:b8:35:43:65: e1:de:2f:60:cd:d6:35:54:27:15:bf:82:f8:0b:2d:ac:09:26: c2:2d:28:be:8e:48:e4:36:5e:17:a0:bb:de:15:ff:97:62:64: d6:f3:d2:c0:48:de:dd:db:05:c1:d0:99:4e:d3:c3:d2:9b:a1: 80:f2:11:83:88:48:e3:f3:05:e7:4b:31:bd:75:b8:24:12:fb: 5e:dc:30:09:12:0a:b5:f6:6c:14:49:66:39:99:f9:0d:84:cb: 42:97:2b:39:21:c9:74:37:e6:ef:a2:72:8f:88:ee:67:2e:bc: e6:19:30:43:9e:b7:ae:fe:3e:6b:e9:cd:fc:97:c9:51:61:4e: 12:a1:57:a3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RjBCRDExMC8GA1UEBRMoMDIxMEI5N0JDODY2MEM0RTVBOUQ2QTNDQjlEQTg3MTlB NUJBNDUxMjAeFw0yNDA1MTcwNzM5NDNaFw0yNDA1MjQwNzM5NDNaMBgxFjAUBgNV BAMTDTY2NDcwOWJmLTk3NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfyUorPOD4MT7OcyyUniy24Ss5EVGtczYuF6u3fzQBTlSluPdZcy7gRTk4rknn /smZT8aQe8wco2K4ZleyGV7QG96oQNlvCZqsruzOYizhNErkW/eMuxY47bDffv++ CK+OAs36+VDrLc0JrFoDzq4tgAHxKRjUE7RCQCsH3MByTLywtPYzb/1QJTKG2nft EWUC11zcbICpPZPGxHzJBWYnqD2vV+8Mq48tnjeLJ5WV9MKRXDtN/sH6YckVkXN8 Xl9z7u3PZL8MriKawvrRL2LOr5vajJcNQ9odLJjtnv1vwTEdXtxdIsj+g+c4mogq VGFjfEsn4VquzLVly8hs5MdjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZLvkvXoq 98Fxfio6yH3E59g8BqswHwYDVR0jBBgwFoAUAhC5e8hmDE5anWo8udqHGaW6RRIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGMEJEL0E2N0IyNzc4NzNE NTExRUU4ODA4Q0Y3MUM0RjlBRTAyL0FoQzVlOGhtREU1YW5Xbzh1ZHFIR2FXNlJS SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQWhDNWU4aG1ERTVhbldvOHVkcUhHYVc2UlJJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG MEJEL0E2N0IyNzc4NzNENTExRUU4ODA4Q0Y3MUM0RjlBRTAyL0FoQzVlOGhtREU1 YW5Xbzh1ZHFIR2FXNlJSSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJTyvpTxEX6AZknGSVgQSRAGmUq+PV/0HdoYrxMA0Oq5b4MUMWtPjyCk o3wKnxb+NJyyOdBn0qX6rHO9E1CYe+tWPhTc5C3I6VchgeGUnqweoCDoXVXwNApq hzknGmtMPXk/UkLheJbiKpG9Sj6iINJUYHQduRfOxABGuDVDZeHeL2DN1jVUJxW/ gvgLLawJJsItKL6OSOQ2Xhegu94V/5diZNbz0sBI3t3bBcHQmU7Tw9KboYDyEYOI SOPzBedLMb11uCQS+17cMAkSCrX2bBRJZjmZ+Q2Ey0KXKzkhyXQ35u+ico+I7mcu vOYZMEOet67+PmvpzfyXyVFhThKhV6M= -----END CERTIFICATE-----Generated at Fri May 17 08:13:54 2024 by rpki-client on console-fra.rpki-client.org