$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft File: 2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft (raw, json) Hash identifier: SR0MdReeKjRmVSYx9e3+fGjgh6Q1K9CtbbvjMb/dqc8= Subject key identifier: 7F:71:C1:40:25:4E:B8:6F:C4:3E:E1:52:AA:89:E5:1D:13:6E:A2:36 Authority key identifier: D8:AF:07:D4:3A:9B:8B:BB:81:D6:0E:4C:17:7E:A8:18:EC:8B:73:E5 Certificate issuer: /CN=A91D5BDA/serialNumber=D8AF07D43A9B8BBB81D60E4C177EA818EC8B73E5 Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft Manifest number: 98 Signing time: Fri 17 May 2024 06:59:58 +0000 Manifest this update: Fri 17 May 2024 06:59:58 +0000 Manifest next update: Fri 24 May 2024 06:59:58 +0000 Files and hashes: 1: 2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl (hash: b9ShOfFedu0QgDxpYpLAtfQWpSFLfnkdrTCc/L0XVY4=) 2: 98DB93A4301011EEA92BE919C4F9AE02.roa (hash: U86j7UjADgM2E45QTk1FhQ37u/QVFr1IVoMXiU/NlC8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 06:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5BDA/serialNumber=D8AF07D43A9B8BBB81D60E4C177EA818EC8B73E5 Validity Not Before: May 17 06:59:58 2024 GMT Not After : May 24 06:59:58 2024 GMT Subject: CN=6647006e-d4b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:63:0a:94:aa:b1:a6:6c:95:ca:47:e3:80:e7: 48:e3:a2:bb:7a:7e:91:5e:5a:62:67:1d:72:9a:77: b4:21:ce:94:04:c9:8d:5d:81:15:b9:e7:54:dc:6a: 4a:f3:7c:85:d3:eb:01:8f:49:71:01:78:91:03:c9: 19:7a:ae:0a:46:2b:e1:aa:58:74:29:c5:a3:62:26: 21:9b:86:30:d6:34:6b:14:4d:89:94:e5:df:03:88: 30:fc:83:22:92:db:87:98:94:17:94:18:4d:11:d2: 23:3c:f3:83:bd:96:2b:91:09:06:b4:1b:8a:15:59: 67:6a:b7:80:9d:b9:8d:75:de:09:c4:bb:c4:68:a1: 0b:7a:fc:1e:79:a7:ab:02:3c:ad:85:d0:85:97:ef: 25:b6:48:5f:cf:65:5e:07:db:6b:ab:f2:04:86:27: 18:4e:f0:48:67:fa:01:de:46:eb:64:49:ef:b1:49: 9a:21:91:93:6b:fd:cf:65:57:47:f9:86:ee:c9:be: 71:19:0c:56:1d:60:e1:39:2d:1f:72:37:40:6e:48: 46:6d:18:83:48:e5:00:d8:87:f2:56:cb:97:eb:bb: 6f:40:4c:fa:d2:56:88:82:d5:a8:6b:00:83:e4:17: 3e:e2:23:16:70:e1:b1:6b:91:9d:50:75:e7:55:56: 1e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:71:C1:40:25:4E:B8:6F:C4:3E:E1:52:AA:89:E5:1D:13:6E:A2:36 X509v3 Authority Key Identifier: keyid:D8:AF:07:D4:3A:9B:8B:BB:81:D6:0E:4C:17:7E:A8:18:EC:8B:73:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:2d:4d:29:d7:d9:1b:be:9f:9f:6b:db:83:b9:2d:7f:0b:3b: 98:76:78:80:b8:9b:da:64:24:8a:06:c9:c5:e8:43:b8:1d:0a: 61:f5:62:d2:48:6d:bb:da:8d:49:97:a2:ed:28:2e:a6:90:94: d5:13:e4:3d:66:40:e1:2c:1d:81:15:c3:ca:6e:59:41:d6:6c: 44:f0:d0:06:58:da:57:ba:b2:36:7d:42:59:ce:80:18:dc:61: 93:b5:80:97:db:51:6a:0f:47:24:ac:9e:46:28:b8:4d:db:ce: d2:83:ba:ed:62:eb:5b:fe:ce:c9:d5:bc:72:8e:8d:bb:fb:66: c2:f0:65:4c:a8:52:0f:79:91:80:0e:fc:95:54:95:09:80:81: 8e:be:43:6f:63:40:2f:44:af:0d:d6:2c:5a:ac:24:b2:9e:18: a8:0c:a1:90:e4:6e:8e:e8:0d:77:b0:5d:d3:ce:fe:c7:f0:cc: 13:79:86:c7:24:70:89:7d:9b:6b:59:a9:60:8f:ea:8f:55:26: ad:d3:ef:d4:88:50:d3:3a:37:04:5e:76:37:24:f4:bd:3e:ba: ba:7c:50:e5:c7:de:ff:55:eb:d0:89:6d:20:48:13:ea:82:bd: 2f:fc:47:52:d3:aa:1f:52:83:97:83:f5:d9:ce:24:e2:88:dc: 8c:02:20:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVCREExMTAvBgNVBAUTKEQ4QUYwN0Q0M0E5QjhCQkI4MUQ2MEU0QzE3N0VBODE4 RUM4QjczRTUwHhcNMjQwNTE3MDY1OTU4WhcNMjQwNTI0MDY1OTU4WjAYMRYwFAYD VQQDEw02NjQ3MDA2ZS1kNGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWMKlKqxpmyVykfjgOdI46K7en6RXlpiZx1ymne0Ic6UBMmNXYEVuedU3GpK 83yF0+sBj0lxAXiRA8kZeq4KRivhqlh0KcWjYiYhm4Yw1jRrFE2JlOXfA4gw/IMi ktuHmJQXlBhNEdIjPPODvZYrkQkGtBuKFVlnareAnbmNdd4JxLvEaKELevweeaer AjythdCFl+8ltkhfz2VeB9trq/IEhicYTvBIZ/oB3kbrZEnvsUmaIZGTa/3PZVdH +Ybuyb5xGQxWHWDhOS0fcjdAbkhGbRiDSOUA2IfyVsuX67tvQEz60laIgtWoawCD 5Bc+4iMWcOGxa5GdUHXnVVYeDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH9xwUAl TrhvxD7hUqqJ5R0TbqI2MB8GA1UdIwQYMBaAFNivB9Q6m4u7gdYOTBd+qBjsi3Pl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUJEQS9GNzNGMjBBNjMw MEYxMUVFODVFQTA0MTVDNEY5QUUwMi8ySzhIMURxYmk3dUIxZzVNRjM2b0dPeUxj LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJLOEgxRHFiaTd1QjFnNU1GMzZvR095TGMtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUJEQS9GNzNGMjBBNjMwMEYxMUVFODVFQTA0MTVDNEY5QUUwMi8ySzhIMURxYmk3 dUIxZzVNRjM2b0dPeUxjLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHLU0p19kbvp+fa9uDuS1/CzuYdniAuJvaZCSKBsnF6EO4HQph9WLS SG272o1Jl6LtKC6mkJTVE+Q9ZkDhLB2BFcPKbllB1mxE8NAGWNpXurI2fUJZzoAY 3GGTtYCX21FqD0ckrJ5GKLhN287Sg7rtYutb/s7J1bxyjo27+2bC8GVMqFIPeZGA DvyVVJUJgIGOvkNvY0AvRK8N1ixarCSynhioDKGQ5G6O6A13sF3Tzv7H8MwTeYbH JHCJfZtrWalgj+qPVSat0+/UiFDTOjcEXnY3JPS9Prq6fFDlx97/VevQiW0gSBPq gr0v/EdS06ofUoOXg/XZziTiiNyMAiAk -----END CERTIFICATE-----Generated at Fri May 17 08:52:54 2024 by rpki-client on console-ams.rpki-client.org