$ rpki-client -vvf rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft File: asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft (raw, json) Hash identifier: 3MN1Kkrz2F0H80HPVAXsuc0HBP7Nlgn+XZ02K2UqO40= Subject key identifier: 58:71:0B:3A:50:92:A6:96:F3:1D:79:9C:90:DB:72:78:C3:51:97:C0 Authority key identifier: 6A:C4:C1:B4:B6:91:BE:CF:12:DD:F7:26:5F:96:26:D5:9A:C7:66:CC Certificate issuer: /CN=A91D415B/serialNumber=6AC4C1B4B691BECF12DDF7265F9626D59AC766CC Certificate serial: 01FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft Manifest number: 01F9 Signing time: Tue 07 May 2024 04:13:04 +0000 Manifest this update: Tue 07 May 2024 04:13:03 +0000 Manifest next update: Tue 14 May 2024 04:13:03 +0000 Files and hashes: 1: asTBtLaRvs8S3fcmX5Ym1ZrHZsw.crl (hash: 31eHxw53atD63kO7KDpcn1xWt/wdQfCt56huSzqv3pg=) 2: A98754E2F1D011ECA4B56760C4F9AE02.roa (hash: 93C3ip8IAc66vxePjOVcSjubt03Yf9sEjcjXT+Nlxb8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.crl rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 04:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 508 (0x1fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D415B/serialNumber=6AC4C1B4B691BECF12DDF7265F9626D59AC766CC Validity Not Before: May 7 04:13:03 2024 GMT Not After : May 14 04:13:03 2024 GMT Subject: CN=6639aa50-3f3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9f:1a:52:57:d8:80:c7:41:20:1e:2c:46:8e: 2c:21:06:f6:6b:eb:22:35:81:f2:a7:e0:a0:25:48: 5a:e4:aa:8b:c9:91:16:54:6e:ad:68:e1:69:3c:bf: 7f:d1:07:75:e3:74:10:f4:32:6d:45:b7:8f:8e:fc: 03:7c:92:1e:90:31:24:cf:c9:ba:f6:5b:6e:b9:ef: 65:39:38:13:6e:1e:ab:e0:b6:9d:33:a4:b7:2b:69: 92:79:77:76:58:8e:60:6e:41:0c:93:e7:7d:d4:23: b3:b3:71:8e:76:d5:45:bc:48:e9:11:9e:65:d8:cf: 9e:04:0c:25:68:25:82:00:81:b3:13:66:02:f8:00: 46:4f:e1:13:d3:bd:76:4d:c6:44:66:67:ce:59:9e: d5:1c:5c:e1:4b:39:fb:8d:e9:ef:de:7a:60:4f:fd: d5:1a:90:ce:3b:a3:fa:64:aa:26:86:0a:3d:e2:cc: 7f:6d:8a:cd:d5:0c:00:5e:a6:95:7b:63:fe:a7:86: bd:db:b2:9f:db:06:34:52:44:34:2a:e4:ed:f4:c9: 01:fb:f2:a5:f4:52:2f:69:fb:51:9b:09:a0:f2:13: b7:fc:1f:73:c2:44:51:26:c2:29:38:b7:0d:5b:42: 12:43:89:cf:21:c5:72:7a:78:68:61:8c:fe:ba:19: 90:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:71:0B:3A:50:92:A6:96:F3:1D:79:9C:90:DB:72:78:C3:51:97:C0 X509v3 Authority Key Identifier: keyid:6A:C4:C1:B4:B6:91:BE:CF:12:DD:F7:26:5F:96:26:D5:9A:C7:66:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:ca:32:e8:c3:fc:69:0f:c4:96:09:77:fd:7a:64:a1:27:be: 2b:95:c8:4b:86:67:0e:09:96:a1:23:b3:41:63:ae:2a:8c:4e: 39:06:5d:fc:ad:5d:01:d3:21:fa:80:d7:b8:2e:71:83:ce:00: c7:11:bb:1e:98:07:4c:b2:57:44:db:fd:a1:38:32:0e:9b:95: 4f:f5:71:39:ab:e4:2b:7d:b7:b6:72:c6:c9:f9:28:97:1c:b4: 24:77:91:3a:e8:c6:94:43:82:36:b9:fa:14:d2:67:8b:7f:04: f4:61:de:90:df:16:6e:a6:55:12:d6:d3:9f:6e:c2:55:cc:cc: 37:ff:b8:a6:86:23:d0:ed:4a:dd:79:a1:03:b1:29:95:c4:73: c8:40:f5:41:0b:4c:71:80:02:d0:77:7b:60:2e:e1:12:e3:ce: 20:17:b8:40:d2:73:d4:d8:f0:44:c4:12:7c:99:75:ea:75:60: 1a:31:85:be:f5:c3:72:ff:5f:7d:66:78:52:72:3f:fb:02:f0: 5c:fc:2f:b9:81:96:1c:9a:40:63:ca:29:20:06:fb:df:5d:42: 73:d9:08:05:88:d4:86:2b:35:c9:20:a3:17:5f:1f:18:3c:b6: 9b:38:28:a3:56:88:07:8b:6b:c3:5e:43:59:2c:9a:b6:6f:f8: 25:12:5c:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQxNUIxMTAvBgNVBAUTKDZBQzRDMUI0QjY5MUJFQ0YxMkRERjcyNjVGOTYyNkQ1 OUFDNzY2Q0MwHhcNMjQwNTA3MDQxMzAzWhcNMjQwNTE0MDQxMzAzWjAYMRYwFAYD VQQDEw02NjM5YWE1MC0zZjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlJ8aUlfYgMdBIB4sRo4sIQb2a+siNYHyp+CgJUha5KqLyZEWVG6taOFpPL9/ 0Qd143QQ9DJtRbePjvwDfJIekDEkz8m69ltuue9lOTgTbh6r4LadM6S3K2mSeXd2 WI5gbkEMk+d91COzs3GOdtVFvEjpEZ5l2M+eBAwlaCWCAIGzE2YC+ABGT+ET0712 TcZEZmfOWZ7VHFzhSzn7jenv3npgT/3VGpDOO6P6ZKomhgo94sx/bYrN1QwAXqaV e2P+p4a927Kf2wY0UkQ0KuTt9MkB+/Kl9FIvaftRmwmg8hO3/B9zwkRRJsIpOLcN W0ISQ4nPIcVyenhoYYz+uhmQPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFhxCzpQ kqaW8x15nJDbcnjDUZfAMB8GA1UdIwQYMBaAFGrEwbS2kb7PEt33Jl+WJtWax2bM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDE1Qi81QzU0MzY4NEYx Q0QxMUVDOTMzOUI5NUZDNEY5QUUwMi9hc1RCdExhUnZzOFMzZmNtWDVZbTFackha c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FzVEJ0TGFSdnM4UzNmY21YNVltMVpySFpzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDE1Qi81QzU0MzY4NEYxQ0QxMUVDOTMzOUI5NUZDNEY5QUUwMi9hc1RCdExhUnZz OFMzZmNtWDVZbTFackhac3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBryjLow/xpD8SWCXf9emShJ74rlchLhmcOCZahI7NBY64qjE45Bl38 rV0B0yH6gNe4LnGDzgDHEbsemAdMsldE2/2hODIOm5VP9XE5q+Qrfbe2csbJ+SiX HLQkd5E66MaUQ4I2ufoU0meLfwT0Yd6Q3xZuplUS1tOfbsJVzMw3/7imhiPQ7Urd eaEDsSmVxHPIQPVBC0xxgALQd3tgLuES484gF7hA0nPU2PBExBJ8mXXqdWAaMYW+ 9cNy/199ZnhScj/7AvBc/C+5gZYcmkBjyikgBvvfXUJz2QgFiNSGKzXJIKMXXx8Y PLabOCijVogHi2vDXkNZLJq2b/glElyb -----END CERTIFICATE-----Generated at Tue May 7 05:34:57 2024 by rpki-client on console-ams.rpki-client.org