$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft File: Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft (raw, json) Hash identifier: ckbwFpdg0auGpPdBHsbh0IDg1Mqta3Sylz0bXiQDd0Y= Subject key identifier: 9B:44:54:0A:37:BC:B4:86:7E:5D:93:1C:3D:4C:E2:65:A9:B3:CB:10 Authority key identifier: 02:9F:82:12:43:0A:8D:D7:E7:95:4F:EC:31:3F:15:DA:47:CB:44:DD Certificate issuer: /CN=A91D2FC0/serialNumber=029F8212430A8DD7E7954FEC313F15DA47CB44DD Certificate serial: 0A34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft Manifest number: 0A2C Signing time: Mon 06 May 2024 20:40:14 +0000 Manifest this update: Mon 06 May 2024 20:40:14 +0000 Manifest next update: Mon 13 May 2024 20:40:14 +0000 Files and hashes: 1: Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl (hash: m/goeo/ytzR0nQYXMTLeIx5Vf87G70t9A3ChtZK3mjk=) 2: 81D0374C475111EA82F8B821C4F9AE02.roa (hash: WtyrulsdejF5XDbIrnH7eySluYuKPV92/ol6mKYzbjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:40:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2612 (0xa34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2FC0/serialNumber=029F8212430A8DD7E7954FEC313F15DA47CB44DD Validity Not Before: May 6 20:40:14 2024 GMT Not After : May 13 20:40:14 2024 GMT Subject: CN=6639402e-09ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6e:9b:10:4f:44:e0:68:08:d2:23:4a:f2:b8: df:56:84:3f:e2:4d:d7:3b:f3:9b:f3:5b:ba:3a:04: b0:e7:ec:3f:32:0a:dc:bf:c9:3a:4c:da:e4:c7:85: 07:6d:0d:74:29:33:53:bc:2d:48:4b:71:4f:38:45: 2e:1f:01:2e:3d:50:0a:00:75:2d:10:55:85:ca:a5: e1:08:8b:9a:14:39:3a:96:a0:85:78:0d:ff:4b:5c: aa:d6:70:6c:51:e3:dc:12:32:02:de:aa:be:fe:6f: 45:10:ea:b4:83:73:a9:86:ac:89:10:9a:50:e7:ea: 02:9f:c2:84:ba:60:ec:94:fb:7e:99:43:99:cf:8f: ef:c8:d9:12:00:99:a5:c0:5a:d4:3b:c6:86:cf:30: 17:90:77:3a:04:28:a7:b4:f7:53:07:4a:01:90:38: 7e:6f:65:ca:97:a0:b0:b1:17:19:94:c6:01:db:4d: be:ae:19:24:db:ce:a1:2c:5f:1f:70:bf:fd:0c:39: 23:57:04:66:e3:f4:95:a7:67:4f:84:ee:a2:6c:af: 29:d4:0d:3f:50:3f:44:8f:30:d3:86:dd:7d:15:5a: 46:68:ff:a9:45:7e:03:86:ed:a6:a2:ef:68:14:7c: 4b:b3:bc:ab:76:db:ac:26:cf:8b:86:35:7d:2f:09: 2e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:44:54:0A:37:BC:B4:86:7E:5D:93:1C:3D:4C:E2:65:A9:B3:CB:10 X509v3 Authority Key Identifier: keyid:02:9F:82:12:43:0A:8D:D7:E7:95:4F:EC:31:3F:15:DA:47:CB:44:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:63:fe:76:de:b0:12:b6:93:57:bc:06:92:ca:73:53:65:50: ae:2e:90:88:04:ed:a9:93:4e:82:4d:37:e4:ea:f1:a4:8c:ec: 89:8a:56:b6:12:2f:0b:7f:1a:62:ef:5f:c4:96:37:d9:15:cd: 9a:03:1c:d1:61:f7:bf:98:ea:be:f7:d0:4f:8e:10:78:ab:1d: d5:98:7b:f5:68:20:3c:da:62:12:8d:6a:6b:23:d0:10:42:17: 56:65:d9:2d:d4:49:f1:01:91:d3:1f:59:17:c1:47:c1:75:0a: 90:a1:f1:d5:be:55:78:e0:2d:74:8d:0f:c3:d2:44:7f:46:f9: b6:56:fb:a0:7c:18:49:44:d3:72:28:92:4b:5c:f7:df:a0:3d: 98:b7:b1:25:1d:5e:05:b2:4e:ae:12:f0:9d:68:80:5a:3b:f5: 6d:29:6e:30:5c:1c:ff:c2:74:61:b1:2e:58:4d:a4:c1:ca:9f: eb:bb:c9:27:e6:71:94:38:51:2c:06:df:28:b6:8a:c8:83:07: 45:e8:6f:1f:65:55:bc:07:97:58:2c:95:d1:2e:da:c0:eb:fa: 8d:4c:29:5b:6c:f0:94:87:b6:fb:43:a8:f1:a4:9f:87:63:3f: 4f:af:01:26:68:f4:e7:f3:25:54:e3:9e:a3:99:4a:f2:6f:30: f5:47:69:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJGQzAxMTAvBgNVBAUTKDAyOUY4MjEyNDMwQThERDdFNzk1NEZFQzMxM0YxNURB NDdDQjQ0REQwHhcNMjQwNTA2MjA0MDE0WhcNMjQwNTEzMjA0MDE0WjAYMRYwFAYD VQQDEw02NjM5NDAyZS0wOWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArm6bEE9E4GgI0iNK8rjfVoQ/4k3XO/Ob81u6OgSw5+w/Mgrcv8k6TNrkx4UH bQ10KTNTvC1IS3FPOEUuHwEuPVAKAHUtEFWFyqXhCIuaFDk6lqCFeA3/S1yq1nBs UePcEjIC3qq+/m9FEOq0g3OphqyJEJpQ5+oCn8KEumDslPt+mUOZz4/vyNkSAJml wFrUO8aGzzAXkHc6BCintPdTB0oBkDh+b2XKl6CwsRcZlMYB202+rhkk286hLF8f cL/9DDkjVwRm4/SVp2dPhO6ibK8p1A0/UD9EjzDTht19FVpGaP+pRX4Dhu2mou9o FHxLs7yrdtusJs+LhjV9LwkunwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJtEVAo3 vLSGfl2THD1M4mWps8sQMB8GA1UdIwQYMBaAFAKfghJDCo3X55VP7DE/FdpHy0Td MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkZDMC8yQTgxNUEwODQ3 NTAxMUVBOENEOTc2MUZDNEY5QUUwMi9BcC1DRWtNS2pkZm5sVV9zTVQ4VjJrZkxS TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FwLUNFa01LamRmbmxVX3NNVDhWMmtmTFJOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkZDMC8yQTgxNUEwODQ3NTAxMUVBOENEOTc2MUZDNEY5QUUwMi9BcC1DRWtNS2pk Zm5sVV9zTVQ4VjJrZkxSTjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7Y/523rAStpNXvAaSynNTZVCuLpCIBO2pk06CTTfk6vGkjOyJila2 Ei8Lfxpi71/EljfZFc2aAxzRYfe/mOq+99BPjhB4qx3VmHv1aCA82mISjWprI9AQ QhdWZdkt1EnxAZHTH1kXwUfBdQqQofHVvlV44C10jQ/D0kR/Rvm2VvugfBhJRNNy KJJLXPffoD2Yt7ElHV4Fsk6uEvCdaIBaO/VtKW4wXBz/wnRhsS5YTaTByp/ru8kn 5nGUOFEsBt8otorIgwdF6G8fZVW8B5dYLJXRLtrA6/qNTClbbPCUh7b7Q6jxpJ+H Yz9PrwEmaPTn8yVU456jmUrybzD1R2mQ -----END CERTIFICATE-----Generated at Mon May 6 23:05:50 2024 by rpki-client on console-fra.rpki-client.org