$ rpki-client -vvf rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft File: Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft (raw, json) Hash identifier: DbnNBoPr52wMsu+GnQkhP/M2EoJGcOXyKb5gZgA57UM= Subject key identifier: F0:26:48:48:59:1A:03:49:49:36:D3:FD:67:F0:47:38:33:42:35:B6 Authority key identifier: 05:BE:F3:B7:64:63:56:CE:40:9F:C5:63:F2:A6:90:78:67:79:5E:F7 Certificate issuer: /CN=A91D795B/serialNumber=05BEF3B7646356CE409FC563F2A6907867795EF7 Certificate serial: 0459 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft Manifest number: 0456 Signing time: Fri 03 May 2024 01:57:32 +0000 Manifest this update: Fri 03 May 2024 01:57:32 +0000 Manifest next update: Fri 10 May 2024 01:57:32 +0000 Files and hashes: 1: Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.crl (hash: DRTjfTImG21obUZ60Z7gFyU2zLh3eB9PvnpHhLkEeso=) 2: C22EEEAA00C311ECA542BE87C4F9AE02.roa (hash: qn7dntcvJsUzGewQHSLfmzXiQsa45mbpXFIq/3spaRQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.crl rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1113 (0x459) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D795B/serialNumber=05BEF3B7646356CE409FC563F2A6907867795EF7 Validity Not Before: May 3 01:57:32 2024 GMT Not After : May 10 01:57:32 2024 GMT Subject: CN=6634448c-0bd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:87:3b:a8:33:90:9e:35:4f:a2:a2:e3:8e:63: 18:0f:20:d5:60:f9:80:91:ce:d9:c2:51:30:75:30: 56:75:9f:b9:1e:a8:d0:e1:30:17:96:26:f4:4e:7e: 2c:68:6b:ca:ce:0c:ff:7f:a5:a5:d7:25:de:15:93: 65:24:8e:97:6f:28:a2:77:b7:bd:ed:74:be:36:fc: f7:37:6c:4e:82:48:cb:05:18:cf:ec:de:3e:21:8a: b1:03:f9:5e:a8:c4:58:c0:8c:97:5b:16:e1:3e:09: d1:c7:b8:a3:f4:37:0c:b4:49:9b:ed:b6:14:ce:16: 50:6d:7d:a9:11:ca:93:4b:00:80:10:de:89:b5:2a: a6:f9:ce:8b:21:6a:3a:12:bf:9f:38:05:bc:f2:f3: 06:ae:78:92:a2:c0:be:17:e3:f3:e9:c3:24:54:de: 00:05:b4:b2:c1:b1:a3:25:98:b0:c7:69:d6:18:67: 51:b3:bd:e1:e0:fd:3c:d7:a3:25:57:50:09:3b:b9: 1c:4d:67:94:e7:98:d2:ac:a2:78:a5:54:02:56:a1: fe:fd:7d:63:ce:b1:19:8e:54:1e:86:a1:dc:17:13: 5a:11:3e:b4:7c:85:c5:73:2a:81:05:25:9c:43:78: 40:62:d8:e9:d1:e1:25:9e:7d:42:28:1c:8a:51:96: a1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:26:48:48:59:1A:03:49:49:36:D3:FD:67:F0:47:38:33:42:35:B6 X509v3 Authority Key Identifier: keyid:05:BE:F3:B7:64:63:56:CE:40:9F:C5:63:F2:A6:90:78:67:79:5E:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:a4:57:e5:41:54:11:3e:8e:3b:f1:a5:b4:f4:d7:c1:2c:63: 86:8a:7a:4e:90:9f:96:b8:6a:d2:60:b5:a5:1c:24:c2:d4:75: 22:51:f2:9b:62:78:c7:cc:37:52:21:41:ef:48:a3:5d:a4:85: e4:d1:46:04:13:3d:6a:1b:7b:4c:00:ac:7e:4f:e1:25:c7:23: 46:ca:e8:c3:97:47:4f:f3:ed:81:26:4b:ec:0c:18:61:0a:bf: e4:49:ad:44:72:c0:c6:79:5b:d7:26:d5:85:be:52:5e:3d:00: cf:10:80:c4:fd:af:6e:bc:b5:f6:28:22:88:25:ab:3d:87:89: 93:fd:2a:0c:45:56:5d:cb:eb:d7:73:c0:56:04:6e:29:d9:7b: 3d:15:0a:80:c0:d5:27:18:df:28:6e:07:09:0d:ae:0c:a9:66: 7a:02:7b:00:13:8c:0d:57:ff:7c:17:53:1c:13:00:28:87:02: 98:d3:bf:12:43:37:7e:a5:8f:26:1a:f6:d7:98:e2:33:6e:3b: aa:13:17:a7:af:08:83:23:28:f9:5c:0b:6d:d0:4c:f2:85:5c: 69:75:16:5a:86:90:0a:ac:29:26:01:63:42:ce:29:0c:1f:c8: 81:36:15:9d:25:a8:66:7c:7e:2b:66:9c:08:4a:22:a5:07:bf: 3e:f2:d1:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc5NUIxMTAvBgNVBAUTKDA1QkVGM0I3NjQ2MzU2Q0U0MDlGQzU2M0YyQTY5MDc4 Njc3OTVFRjcwHhcNMjQwNTAzMDE1NzMyWhcNMjQwNTEwMDE1NzMyWjAYMRYwFAYD VQQDEw02NjM0NDQ4Yy0wYmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2oc7qDOQnjVPoqLjjmMYDyDVYPmAkc7ZwlEwdTBWdZ+5HqjQ4TAXlib0Tn4s aGvKzgz/f6Wl1yXeFZNlJI6Xbyiid7e97XS+Nvz3N2xOgkjLBRjP7N4+IYqxA/le qMRYwIyXWxbhPgnRx7ij9DcMtEmb7bYUzhZQbX2pEcqTSwCAEN6JtSqm+c6LIWo6 Er+fOAW88vMGrniSosC+F+Pz6cMkVN4ABbSywbGjJZiwx2nWGGdRs73h4P0816Ml V1AJO7kcTWeU55jSrKJ4pVQCVqH+/X1jzrEZjlQehqHcFxNaET60fIXFcyqBBSWc Q3hAYtjp0eElnn1CKByKUZahHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPAmSEhZ GgNJSTbT/WfwRzgzQjW2MB8GA1UdIwQYMBaAFAW+87dkY1bOQJ/FY/KmkHhneV73 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzk1Qi9BODhGQjNFMjAw QzAxMUVDOTZDMkQ1ODNDNEY5QUUwMi9CYjd6dDJSalZzNUFuOFZqOHFhUWVHZDVY dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JiN3p0MlJqVnM1QW44Vmo4cWFRZUdkNVh2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Nzk1Qi9BODhGQjNFMjAwQzAxMUVDOTZDMkQ1ODNDNEY5QUUwMi9CYjd6dDJSalZz NUFuOFZqOHFhUWVHZDVYdmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKpFflQVQRPo478aW09NfBLGOGinpOkJ+WuGrSYLWlHCTC1HUiUfKb YnjHzDdSIUHvSKNdpIXk0UYEEz1qG3tMAKx+T+ElxyNGyujDl0dP8+2BJkvsDBhh Cr/kSa1EcsDGeVvXJtWFvlJePQDPEIDE/a9uvLX2KCKIJas9h4mT/SoMRVZdy+vX c8BWBG4p2Xs9FQqAwNUnGN8obgcJDa4MqWZ6AnsAE4wNV/98F1McEwAohwKY078S Qzd+pY8mGvbXmOIzbjuqExenrwiDIyj5XAtt0EzyhVxpdRZahpAKrCkmAWNCzikM H8iBNhWdJahmfH4rZpwISiKlB78+8tEf -----END CERTIFICATE-----Generated at Fri May 3 03:10:56 2024 by rpki-client on console-ams.rpki-client.org