$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft File: akXWGoN3DJDQWMdBUx2NnGtnk1o.mft (raw, json) Hash identifier: doiN09lZcYyXa6RZQizlT8MYNOgO0rasMsgG7pwzXPE= Subject key identifier: 55:7A:29:CE:6A:90:A5:B4:5B:C2:52:7C:54:7F:CD:5C:17:F8:ED:7D Authority key identifier: 6A:45:D6:1A:83:77:0C:90:D0:58:C7:41:53:1D:8D:9C:6B:67:93:5A Certificate issuer: /CN=A91D1AC7/serialNumber=6A45D61A83770C90D058C741531D8D9C6B67935A Certificate serial: 0977 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft Manifest number: 0963 Signing time: Tue 30 Apr 2024 21:22:57 +0000 Manifest this update: Tue 30 Apr 2024 21:22:56 +0000 Manifest next update: Tue 07 May 2024 21:22:56 +0000 Files and hashes: 1: akXWGoN3DJDQWMdBUx2NnGtnk1o.crl (hash: yRAE7dX9U2FT9nZPENOvIMPXNrom3xe4OkSBru110lc=) 2: 57C25DB2E42811EA881AB667C4F9AE02.roa (hash: ciI39fi2c3oXroOIDaWusfSq44fRwlz++9AgtGTTQ/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.crl rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 20:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2423 (0x977) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1AC7/serialNumber=6A45D61A83770C90D058C741531D8D9C6B67935A Validity Not Before: Apr 30 21:22:56 2024 GMT Not After : May 7 21:22:56 2024 GMT Subject: CN=66316131-3d79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:45:a4:42:a7:c7:fb:98:8e:96:a3:76:37:c7: 25:91:60:4b:fc:88:e1:6d:84:2e:af:f9:34:87:bc: 03:2a:4c:9f:fc:9a:d2:51:f2:8c:77:7f:ad:07:0f: f3:00:ca:e4:1a:5e:47:2a:be:cc:8a:1d:b9:7d:70: 71:10:dc:61:e9:3a:e9:14:5f:d9:f6:96:9d:a3:7b: ef:96:0a:48:10:56:f8:2f:07:48:e4:88:db:26:93: 6b:28:cc:4b:54:9b:ff:86:92:89:a9:c4:b6:1e:dd: 49:5f:42:03:47:99:50:f3:4b:33:97:1b:c9:0b:50: a5:33:7b:c6:37:11:1e:5b:66:29:b1:0c:79:26:15: a1:9a:58:1d:f5:d5:58:cb:85:19:00:e7:ec:be:19: 59:6e:6a:4e:a6:fb:a9:25:be:48:db:03:49:ea:88: 73:3a:f2:5d:7c:4c:e7:53:8e:85:ba:32:23:da:b8: 50:b4:91:93:79:58:67:8c:1c:97:5a:e3:36:49:24: 37:a8:37:68:0e:65:de:f9:0a:37:3a:82:84:ac:70: 77:61:92:a5:81:b5:ea:98:da:ab:5c:c8:e5:71:ac: 8c:a2:ce:08:0e:36:da:e5:08:f1:6e:02:b1:ad:99: f4:c7:dc:43:b0:6a:36:5c:36:81:c1:9a:be:a5:f8: d0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:7A:29:CE:6A:90:A5:B4:5B:C2:52:7C:54:7F:CD:5C:17:F8:ED:7D X509v3 Authority Key Identifier: keyid:6A:45:D6:1A:83:77:0C:90:D0:58:C7:41:53:1D:8D:9C:6B:67:93:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:f1:f2:65:45:11:73:63:75:35:47:a1:9f:51:6f:37:ec:29: ac:83:f0:fa:15:f3:85:39:c2:5f:83:12:c8:a2:68:a6:16:a8: 37:20:1b:1e:a3:26:a2:df:b3:93:34:e4:6a:87:b9:de:c8:43: fd:8f:9a:9d:82:c0:d3:4b:15:b7:00:c3:b0:cf:83:33:1d:f3: 9b:9c:75:74:a0:ec:53:d0:31:e4:42:f0:99:73:1a:f6:96:f6: 81:e1:94:0f:8f:c0:cb:29:9d:12:23:25:82:ff:15:66:69:65: f9:a6:b3:31:74:a4:ea:a4:68:a3:24:90:42:43:20:f7:75:b6: 1b:44:e7:cf:d6:54:6c:05:13:ce:69:5a:9f:9f:a1:ee:38:16: 25:7e:9d:3e:fd:e6:62:e9:01:ac:65:7a:63:f8:69:c4:e5:08: a7:09:e2:ac:cc:14:68:5e:80:61:9f:f8:a2:8d:ab:98:db:ca: a1:5b:14:8a:2a:86:4c:8a:82:85:11:88:4c:c5:c0:ef:a9:be: 2a:49:4a:c6:39:f4:dd:fe:09:88:45:19:e4:8a:66:50:60:e2: 13:0a:82:f6:95:19:f9:d8:c2:5d:fd:c0:4c:32:2e:3a:8d:00: 70:9f:92:28:24:05:c2:9c:3a:08:bc:b6:14:76:a8:f9:19:9c: af:65:b1:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFBQzcxMTAvBgNVBAUTKDZBNDVENjFBODM3NzBDOTBEMDU4Qzc0MTUzMUQ4RDlD NkI2NzkzNUEwHhcNMjQwNDMwMjEyMjU2WhcNMjQwNTA3MjEyMjU2WjAYMRYwFAYD VQQDEw02NjMxNjEzMS0zZDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5UWkQqfH+5iOlqN2N8clkWBL/IjhbYQur/k0h7wDKkyf/JrSUfKMd3+tBw/z AMrkGl5HKr7Mih25fXBxENxh6TrpFF/Z9pado3vvlgpIEFb4LwdI5IjbJpNrKMxL VJv/hpKJqcS2Ht1JX0IDR5lQ80szlxvJC1ClM3vGNxEeW2YpsQx5JhWhmlgd9dVY y4UZAOfsvhlZbmpOpvupJb5I2wNJ6ohzOvJdfEznU46FujIj2rhQtJGTeVhnjByX WuM2SSQ3qDdoDmXe+Qo3OoKErHB3YZKlgbXqmNqrXMjlcayMos4IDjba5QjxbgKx rZn0x9xDsGo2XDaBwZq+pfjQcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFV6Kc5q kKW0W8JSfFR/zVwX+O19MB8GA1UdIwQYMBaAFGpF1hqDdwyQ0FjHQVMdjZxrZ5Na MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUFDNy84MUE0QzRENjZF NDMxMUVBOTQ5RDk5MjJDNEY5QUUwMi9ha1hXR29OM0RKRFFXTWRCVXgyTm5HdG5r MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrWFdHb04zREpEUVdNZEJVeDJObkd0bmsxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUFDNy84MUE0QzRENjZFNDMxMUVBOTQ5RDk5MjJDNEY5QUUwMi9ha1hXR29OM0RK RFFXTWRCVXgyTm5HdG5rMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAD8fJlRRFzY3U1R6GfUW837Cmsg/D6FfOFOcJfgxLIomimFqg3IBse oyai37OTNORqh7neyEP9j5qdgsDTSxW3AMOwz4MzHfObnHV0oOxT0DHkQvCZcxr2 lvaB4ZQPj8DLKZ0SIyWC/xVmaWX5prMxdKTqpGijJJBCQyD3dbYbROfP1lRsBRPO aVqfn6HuOBYlfp0+/eZi6QGsZXpj+GnE5QinCeKszBRoXoBhn/iijauY28qhWxSK KoZMioKFEYhMxcDvqb4qSUrGOfTd/gmIRRnkimZQYOITCoL2lRn52MJd/cBMMi46 jQBwn5IoJAXCnDoIvLYUdqj5GZyvZbGZ -----END CERTIFICATE-----Generated at Tue Apr 30 21:59:07 2024 by rpki-client on console-ams.rpki-client.org