$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft File: 4ed5yzH_53MaM7Xrfq_GsqvbROM.mft (raw, json) Hash identifier: vpCnKv7lSCYNRr/TeH9O2F8FlDdB0vpW3L1XlAD9A2A= Subject key identifier: 6C:CE:01:77:F8:ED:FB:C4:88:54:73:A6:31:67:D5:65:8A:06:1F:F9 Authority key identifier: E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3 Certificate issuer: /CN=A91D3737/serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3 Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft Manifest number: 97 Signing time: Fri 17 May 2024 07:02:45 +0000 Manifest this update: Fri 17 May 2024 07:02:45 +0000 Manifest next update: Fri 24 May 2024 07:02:45 +0000 Files and hashes: 1: 4ed5yzH_53MaM7Xrfq_GsqvbROM.crl (hash: 6SmseRNlznTj3AHRkv4H+ihO63d/A5fmHhO7a7M/XtU=) 2: 9E6C93C6372311EEACE5BF61C4F9AE02.roa (hash: eupERph+xflkMgOeRf/X5lh42oDlNvhYtIatghcqcLA=) 3: 9F1B80CA372311EEACE5BF61C4F9AE02.roa (hash: v9lyQtjtYWy+9wvU05wZNHA4sTJm6Xiwl/FoG5KIk+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3737/serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3 Validity Not Before: May 17 07:02:45 2024 GMT Not After : May 24 07:02:45 2024 GMT Subject: CN=66470115-9857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:18:95:94:19:b7:92:c3:bb:ab:a5:3b:0d:1f: bd:24:d6:9d:79:d6:66:9f:48:c7:e6:7b:57:44:cd: c1:20:68:ec:5c:2e:c0:81:25:c5:2a:06:55:fb:27: 1c:d8:8e:0b:36:8f:cc:98:25:49:de:8a:62:c2:46: 1a:59:82:28:4a:ab:03:e8:ea:de:76:df:84:7e:19: f9:b9:b0:47:8e:1b:22:ac:a0:35:4e:f1:59:fb:c6: 99:06:70:d1:4f:3f:3d:28:b0:74:c7:07:dc:7d:25: ad:12:f3:d9:dd:33:66:84:13:ef:9b:d5:d2:90:56: e2:ea:e6:0c:6b:67:4a:a5:56:f0:6a:6d:2a:24:86: 54:cc:ac:81:ef:97:ac:bb:90:31:1b:c5:b2:8a:04: e8:b0:f7:f0:53:4f:19:1b:cf:0b:45:e8:d5:40:c5: 9b:d1:49:e0:b4:27:66:fd:fe:6f:c8:36:dc:f7:b9: 0e:52:2a:69:40:4b:db:6c:72:d4:49:97:e8:0f:eb: a9:83:e2:6c:6e:37:3b:13:08:d7:04:76:e6:d3:d6: 86:13:24:54:9d:d5:f8:07:8b:db:dc:8e:cf:ba:57: 34:ec:4b:50:dd:bf:4d:68:5b:e0:b1:a9:f8:9f:5e: c8:e6:6c:8e:11:18:3c:68:44:e0:57:05:97:ea:5c: 82:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:CE:01:77:F8:ED:FB:C4:88:54:73:A6:31:67:D5:65:8A:06:1F:F9 X509v3 Authority Key Identifier: keyid:E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:32:00:18:62:fd:7f:64:89:b6:80:18:c6:8f:c0:b0:83:9f: 8c:a4:5a:b6:3f:8e:05:14:8d:5d:ac:17:b7:cf:5b:24:b7:af: f6:87:98:8b:fd:28:16:5f:65:b3:00:9f:85:c3:d6:fd:64:f7: 47:e9:a3:b0:ba:1d:b7:51:c7:47:4c:54:cf:e8:60:60:e4:81: c5:cc:6c:45:95:58:ea:6e:ac:fe:af:29:47:16:74:38:5b:d4: df:17:d2:cd:f5:4b:11:28:18:49:c8:26:5a:16:06:d9:95:1f: 47:9b:22:e5:2f:db:95:16:75:d4:26:66:be:1a:f5:50:7d:16: c2:1b:85:5b:31:a4:0c:ab:55:35:93:0a:a1:65:60:a2:b6:f5: b2:d4:7e:6d:0f:02:f0:47:2d:03:2c:d3:6c:09:28:e5:a1:82: e6:e5:5d:e1:85:0b:51:25:2b:bd:77:11:ca:dc:d4:0b:8b:b3: 4c:96:b3:58:4a:a5:06:34:f2:7b:a3:89:a7:16:02:28:07:0d: 9d:39:57:c9:15:6f:7f:07:e1:c7:f2:be:3b:86:fa:93:31:e7: 75:99:9e:54:07:97:4a:5f:25:ff:f3:3a:cc:e6:8e:be:5f:a8: da:54:b0:25:99:b4:78:97:d9:1e:62:30:71:d4:17:ea:53:50: 1e:09:43:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM3MzcxMTAvBgNVBAUTKEUxRTc3OUNCMzFGRkU3NzMxQTMzQjVFQjdFQUZDNkIy QUJEQjQ0RTMwHhcNMjQwNTE3MDcwMjQ1WhcNMjQwNTI0MDcwMjQ1WjAYMRYwFAYD VQQDEw02NjQ3MDExNS05ODU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhiVlBm3ksO7q6U7DR+9JNadedZmn0jH5ntXRM3BIGjsXC7AgSXFKgZV+ycc 2I4LNo/MmCVJ3opiwkYaWYIoSqsD6Oredt+Efhn5ubBHjhsirKA1TvFZ+8aZBnDR Tz89KLB0xwfcfSWtEvPZ3TNmhBPvm9XSkFbi6uYMa2dKpVbwam0qJIZUzKyB75es u5AxG8WyigTosPfwU08ZG88LRejVQMWb0UngtCdm/f5vyDbc97kOUippQEvbbHLU SZfoD+upg+Jsbjc7EwjXBHbm09aGEyRUndX4B4vb3I7Pulc07EtQ3b9NaFvgsan4 n17I5myOERg8aETgVwWX6lyCMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGzOAXf4 7fvEiFRzpjFn1WWKBh/5MB8GA1UdIwQYMBaAFOHnecsx/+dzGjO1636vxrKr20Tj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzczNy84Mjk0MzYzRTMz NTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUzTWFNN1hyZnFfR3NxdmJS T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRlZDV5ekhfNTNNYU03WHJmcV9Hc3F2YlJPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzczNy84Mjk0MzYzRTMzNTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUz TWFNN1hyZnFfR3NxdmJST00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzMgAYYv1/ZIm2gBjGj8Cwg5+MpFq2P44FFI1drBe3z1skt6/2h5iL /SgWX2WzAJ+Fw9b9ZPdH6aOwuh23UcdHTFTP6GBg5IHFzGxFlVjqbqz+rylHFnQ4 W9TfF9LN9UsRKBhJyCZaFgbZlR9HmyLlL9uVFnXUJma+GvVQfRbCG4VbMaQMq1U1 kwqhZWCitvWy1H5tDwLwRy0DLNNsCSjloYLm5V3hhQtRJSu9dxHK3NQLi7NMlrNY SqUGNPJ7o4mnFgIoBw2dOVfJFW9/B+HH8r47hvqTMed1mZ5UB5dKXyX/8zrM5o6+ X6jaVLAlmbR4l9keYjBx1BfqU1AeCUO5 -----END CERTIFICATE-----Generated at Fri May 17 08:52:54 2024 by rpki-client on console-ams.rpki-client.org