$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft File: aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft (raw, json) Hash identifier: ybXhUn2+1TiZgP8mdRzcqjmD72bbgPe/V7X8jQ/EGio= Subject key identifier: 1A:72:82:0E:AC:54:D3:4D:79:EA:F4:63:FD:F7:28:37:EE:46:61:AA Authority key identifier: 69:0C:72:9F:18:39:05:64:D6:70:B1:8F:77:74:75:4E:5D:27:99:51 Certificate issuer: /CN=A91DC146/serialNumber=690C729F18390564D670B18F7774754E5D279951 Certificate serial: 052F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQxynxg5BWTWcLGPd3R1Tl0nmVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft Manifest number: 052B Signing time: Sun 05 May 2024 01:09:07 +0000 Manifest this update: Sun 05 May 2024 01:09:06 +0000 Manifest next update: Sun 12 May 2024 01:09:06 +0000 Files and hashes: 1: aQxynxg5BWTWcLGPd3R1Tl0nmVE.crl (hash: deX6yW9SgWUBqlSdyMosm564FizNtOtBou/vRWcrQZw=) 2: 4BB44892AE1111EBB4C2DA11C4F9AE02.roa (hash: mMnOi+eys5qq8N+NeN/zjXPwIANf7lKUZxSBya3MUE4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.crl rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQxynxg5BWTWcLGPd3R1Tl0nmVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1327 (0x52f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC146/serialNumber=690C729F18390564D670B18F7774754E5D279951 Validity Not Before: May 5 01:09:06 2024 GMT Not After : May 12 01:09:06 2024 GMT Subject: CN=6636dc32-36cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c9:70:cc:c2:73:ad:a6:d0:b9:80:d2:3d:5c: dc:d5:7b:a6:62:f5:f8:5d:68:2f:da:d3:72:db:8e: 80:72:7b:3a:3a:d0:d7:ec:6b:a4:4c:e0:96:16:6d: 01:7c:6e:f9:ac:99:3f:54:fe:c7:51:c3:4b:7a:4f: 61:f3:95:57:af:af:d7:93:a2:a2:90:55:19:12:e0: f9:7b:2c:50:b5:e6:17:cb:95:0d:19:58:17:b8:51: 71:9e:96:e4:6b:95:4c:aa:ff:11:05:c0:5b:88:cf: d0:dc:f6:31:4a:74:04:21:2c:53:17:5c:ad:50:a7: 72:1a:23:b4:3f:03:46:56:ae:51:42:ce:e2:fc:44: fb:eb:e7:74:f9:93:66:e0:c5:18:0f:c6:ce:aa:c9: 1d:31:21:39:28:5c:9c:9e:3b:48:8e:e2:83:69:97: 50:52:0e:bd:e2:7e:be:43:e2:0d:d2:b9:e4:1d:aa: f3:bc:01:e0:cb:1a:04:a8:b9:c2:c1:83:b5:1d:be: 26:06:fa:72:56:76:07:f8:79:c9:6b:db:d7:a6:c7: 0d:79:33:f3:99:e7:5c:c6:08:b9:84:8a:44:b9:58: 95:da:c1:ba:a9:41:cd:56:74:1a:c1:c0:1e:5c:5a: cf:da:08:42:72:9e:64:69:64:6c:24:8b:96:68:48: 71:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:72:82:0E:AC:54:D3:4D:79:EA:F4:63:FD:F7:28:37:EE:46:61:AA X509v3 Authority Key Identifier: keyid:69:0C:72:9F:18:39:05:64:D6:70:B1:8F:77:74:75:4E:5D:27:99:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQxynxg5BWTWcLGPd3R1Tl0nmVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:4f:8c:a2:e6:d3:98:dd:c7:ab:6d:52:48:a2:e7:9c:ff:5e: 34:ba:4d:5c:a1:24:38:a8:d4:b7:4f:ff:3b:4d:22:93:c1:9e: f1:9d:c3:f8:7b:b9:b4:16:74:56:97:01:09:be:f2:77:d0:7a: 98:d1:c0:e5:98:b8:2d:6a:01:13:6c:4f:70:7a:ad:4d:80:de: 6b:8b:85:e2:6c:29:2f:a7:f9:a5:35:08:1d:16:2c:6a:58:10: d6:04:6f:ca:87:59:96:f0:6e:71:1c:eb:4e:c8:95:f6:b2:ba: be:64:bc:4d:33:76:4b:5c:01:06:1d:00:78:82:8e:b9:49:39: 9d:c0:68:76:d9:6b:0b:f7:fb:18:0b:75:ef:05:d5:ca:14:54: 29:3b:ec:25:ae:82:50:dd:9f:3f:4d:0b:9e:63:61:6a:cd:4d: 40:a0:38:95:49:dc:fd:82:80:a7:ab:7b:8e:65:f7:09:d4:da: 04:9e:4c:23:ed:a9:d6:fe:1d:a2:4f:57:ca:b6:4e:3c:c2:9d: ba:55:3c:89:51:e2:2f:9c:d1:80:af:9d:16:fe:8b:d6:59:cf: 7b:03:a4:c1:2f:e8:d7:4a:fd:8b:ad:c7:83:33:f1:6a:f7:90: 7b:f3:d9:3a:38:43:05:83:c6:8a:59:73:84:ba:67:e2:07:85: 00:e8:1a:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMxNDYxMTAvBgNVBAUTKDY5MEM3MjlGMTgzOTA1NjRENjcwQjE4Rjc3NzQ3NTRF NUQyNzk5NTEwHhcNMjQwNTA1MDEwOTA2WhcNMjQwNTEyMDEwOTA2WjAYMRYwFAYD VQQDEw02NjM2ZGMzMi0zNmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmMlwzMJzrabQuYDSPVzc1XumYvX4XWgv2tNy246Acns6OtDX7GukTOCWFm0B fG75rJk/VP7HUcNLek9h85VXr6/Xk6KikFUZEuD5eyxQteYXy5UNGVgXuFFxnpbk a5VMqv8RBcBbiM/Q3PYxSnQEISxTF1ytUKdyGiO0PwNGVq5RQs7i/ET76+d0+ZNm 4MUYD8bOqskdMSE5KFycnjtIjuKDaZdQUg694n6+Q+IN0rnkHarzvAHgyxoEqLnC wYO1Hb4mBvpyVnYH+HnJa9vXpscNeTPzmedcxgi5hIpEuViV2sG6qUHNVnQawcAe XFrP2ghCcp5kaWRsJIuWaEhxqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBpygg6s VNNNeer0Y/33KDfuRmGqMB8GA1UdIwQYMBaAFGkMcp8YOQVk1nCxj3d0dU5dJ5lR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzE0Ni9EQUE3NjQ5MkFF MEUxMUVCOEFCQTMzNERDNEY5QUUwMi9hUXh5bnhnNUJXVFdjTEdQZDNSMVRsMG5t VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FReHlueGc1QldUV2NMR1BkM1IxVGwwbm1WRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzE0Ni9EQUE3NjQ5MkFFMEUxMUVCOEFCQTMzNERDNEY5QUUwMi9hUXh5bnhnNUJX VFdjTEdQZDNSMVRsMG5tVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLT4yi5tOY3cerbVJIouec/140uk1coSQ4qNS3T/87TSKTwZ7xncP4 e7m0FnRWlwEJvvJ30HqY0cDlmLgtagETbE9weq1NgN5ri4XibCkvp/mlNQgdFixq WBDWBG/Kh1mW8G5xHOtOyJX2srq+ZLxNM3ZLXAEGHQB4go65STmdwGh22WsL9/sY C3XvBdXKFFQpO+wlroJQ3Z8/TQueY2FqzU1AoDiVSdz9goCnq3uOZfcJ1NoEnkwj 7anW/h2iT1fKtk48wp26VTyJUeIvnNGAr50W/ovWWc97A6TBL+jXSv2LrceDM/Fq 95B789k6OEMFg8aKWXOEumfiB4UA6BoL -----END CERTIFICATE-----Generated at Sun May 5 02:13:04 2024 by rpki-client on console-ams.rpki-client.org