$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft File: 1M9fCWc28k6iQQeSpgPNut2Cfc0.mft (raw, json) Hash identifier: CP0tzgt0NWAyI1N33tBJhPKvQ25fnaeJfgT4SaHmLaM= Subject key identifier: EB:A3:D1:3E:75:4E:74:39:2E:A3:C8:2A:3F:AF:88:E4:72:1C:FC:2B Authority key identifier: D4:CF:5F:09:67:36:F2:4E:A2:41:07:92:A6:03:CD:BA:DD:82:7D:CD Certificate issuer: /CN=A91D50FB/serialNumber=D4CF5F096736F24EA2410792A603CDBADD827DCD Certificate serial: 0B83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft Manifest number: 0B7B Signing time: Sat 18 May 2024 19:29:02 +0000 Manifest this update: Sat 18 May 2024 19:29:02 +0000 Manifest next update: Sat 25 May 2024 19:29:02 +0000 Files and hashes: 1: 1M9fCWc28k6iQQeSpgPNut2Cfc0.crl (hash: rtt13WRzTqUZA8WwrU+YPg0A/W6ko5/hwTapQRux9eA=) 2: 97BB54A2070E11EA80718B7BC4F9AE02.roa (hash: d2AEQk5w3NurRVGhpZSG1nxkoC612NCAz7ZDhZGIagU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.crl rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2947 (0xb83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D50FB/serialNumber=D4CF5F096736F24EA2410792A603CDBADD827DCD Validity Not Before: May 18 19:29:02 2024 GMT Not After : May 25 19:29:02 2024 GMT Subject: CN=6649017e-cbda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f0:5a:9d:5f:f9:58:1f:91:9d:fd:4a:d9:d6: b7:a5:46:10:94:fb:d7:df:de:9a:99:6e:48:85:6e: d0:3d:8f:cb:10:d6:c6:25:77:2c:3c:ac:ac:28:09: 04:db:c7:cd:3d:96:ff:f5:cf:1c:59:42:0e:2a:7e: bf:43:5e:66:4a:2b:38:93:42:81:1f:83:95:19:8d: 35:f6:26:e4:56:98:ee:71:6a:3a:c7:51:53:5a:04: 71:f0:02:ec:15:bc:46:9a:cf:0e:3c:8d:b4:1a:db: 68:a9:9a:30:d5:58:44:85:36:5c:40:9b:9a:cc:45: 04:c7:75:ac:f5:c6:e3:5f:ae:39:8d:c6:7c:65:54: c1:e2:e0:ce:fb:ae:fa:8c:fd:f4:c9:fe:05:66:fd: 5d:82:59:80:c3:fa:c4:a3:1a:6a:b6:4b:85:52:b5: 12:22:6a:bc:cc:f8:da:49:0e:13:cb:39:23:0e:62: ec:2e:52:59:98:af:9b:05:fd:d9:27:14:65:c2:b6: 03:e8:97:df:d1:d3:04:a7:54:0a:d4:46:bb:94:c3: de:24:6b:34:14:8c:8e:dd:ee:a1:b8:0b:bb:4a:2e: 1d:f5:01:56:0f:ae:49:19:a2:34:7a:e4:a2:cc:cc: 19:95:05:36:bc:81:91:ea:b3:9f:1b:38:64:ea:13: d1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A3:D1:3E:75:4E:74:39:2E:A3:C8:2A:3F:AF:88:E4:72:1C:FC:2B X509v3 Authority Key Identifier: keyid:D4:CF:5F:09:67:36:F2:4E:A2:41:07:92:A6:03:CD:BA:DD:82:7D:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:f1:ab:ea:a0:31:7b:8a:33:09:cd:ca:20:53:39:20:bd:17: 60:4d:da:a0:59:a2:38:67:f6:82:c1:61:cf:65:6c:47:00:48: 36:56:89:27:53:43:96:df:41:ba:c0:4a:97:4a:b3:bb:f7:34: 3e:cd:9d:53:0e:2e:4e:e0:f5:13:a2:2e:f7:b6:3c:9b:c1:98: 2e:41:66:ac:ac:1a:1c:86:f3:77:bc:9b:a7:31:4a:d9:0c:e1: f2:89:84:19:bf:db:eb:55:29:93:01:2d:32:65:83:91:a9:4d: e7:c7:7e:82:e5:78:40:60:8f:f2:4f:f4:04:83:38:b9:e6:c9: 69:07:b6:c5:b5:36:d3:06:2c:97:e0:4a:11:7c:80:37:3e:0f: f5:56:30:6d:f4:b0:1f:a4:79:33:e7:94:64:77:7e:5f:a2:b0: 5f:09:8c:13:f2:64:3a:ff:f8:9c:59:5c:d9:2c:6a:0a:86:6f: bb:7f:a5:11:27:68:0e:dc:28:a5:57:3d:c6:70:fb:5e:1b:71: 5a:c5:c8:d1:f1:bf:90:2f:d7:c9:e5:a3:16:d0:8a:af:45:34: b7:10:27:b7:b5:ad:38:7c:47:6e:c8:17:b9:37:f5:43:c2:c5: 5c:d3:fc:f7:f6:d1:99:73:6a:dd:fc:68:d4:96:79:1b:bd:9b: f2:1f:f6:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUwRkIxMTAvBgNVBAUTKEQ0Q0Y1RjA5NjczNkYyNEVBMjQxMDc5MkE2MDNDREJB REQ4MjdEQ0QwHhcNMjQwNTE4MTkyOTAyWhcNMjQwNTI1MTkyOTAyWjAYMRYwFAYD VQQDEw02NjQ5MDE3ZS1jYmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPBanV/5WB+Rnf1K2da3pUYQlPvX396amW5IhW7QPY/LENbGJXcsPKysKAkE 28fNPZb/9c8cWUIOKn6/Q15mSis4k0KBH4OVGY019ibkVpjucWo6x1FTWgRx8ALs FbxGms8OPI20GttoqZow1VhEhTZcQJuazEUEx3Ws9cbjX645jcZ8ZVTB4uDO+676 jP30yf4FZv1dglmAw/rEoxpqtkuFUrUSImq8zPjaSQ4TyzkjDmLsLlJZmK+bBf3Z JxRlwrYD6Jff0dMEp1QK1Ea7lMPeJGs0FIyO3e6huAu7Si4d9QFWD65JGaI0euSi zMwZlQU2vIGR6rOfGzhk6hPR7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOuj0T51 TnQ5LqPIKj+viORyHPwrMB8GA1UdIwQYMBaAFNTPXwlnNvJOokEHkqYDzbrdgn3N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTBGQi8yNTdCQjJDNDA3 MEUxMUVBQTYxMzcyN0JDNEY5QUUwMi8xTTlmQ1djMjhrNmlRUWVTcGdQTnV0MkNm YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFNOWZDV2MyOGs2aVFRZVNwZ1BOdXQyQ2ZjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTBGQi8yNTdCQjJDNDA3MEUxMUVBQTYxMzcyN0JDNEY5QUUwMi8xTTlmQ1djMjhr NmlRUWVTcGdQTnV0MkNmYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCh8avqoDF7ijMJzcogUzkgvRdgTdqgWaI4Z/aCwWHPZWxHAEg2Vokn U0OW30G6wEqXSrO79zQ+zZ1TDi5O4PUToi73tjybwZguQWasrBochvN3vJunMUrZ DOHyiYQZv9vrVSmTAS0yZYORqU3nx36C5XhAYI/yT/QEgzi55slpB7bFtTbTBiyX 4EoRfIA3Pg/1VjBt9LAfpHkz55Rkd35forBfCYwT8mQ6//icWVzZLGoKhm+7f6UR J2gO3CilVz3GcPteG3FaxcjR8b+QL9fJ5aMW0IqvRTS3ECe3ta04fEduyBe5N/VD wsVc0/z39tGZc2rd/GjUlnkbvZvyH/bV -----END CERTIFICATE-----Generated at Sat May 18 20:16:06 2024 by rpki-client on console-ams.rpki-client.org