$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft File: x52oqmnxJno4UemSoGnAL1DoArw.mft (raw, json) Hash identifier: ma+B7/0aj+L2GbngjBQNc7to342OWqfnvnx7Z8U7zvc= Subject key identifier: AC:06:AF:AA:36:45:E5:BC:59:6A:CF:B0:F9:8E:0D:DC:74:E3:50:A6 Authority key identifier: C7:9D:A8:AA:69:F1:26:7A:38:51:E9:92:A0:69:C0:2F:50:E8:02:BC Certificate issuer: /CN=A91DC524/serialNumber=C79DA8AA69F1267A3851E992A069C02F50E802BC Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x52oqmnxJno4UemSoGnAL1DoArw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft Manifest number: 99 Signing time: Fri 17 May 2024 06:58:16 +0000 Manifest this update: Fri 17 May 2024 06:58:15 +0000 Manifest next update: Fri 24 May 2024 06:58:15 +0000 Files and hashes: 1: x52oqmnxJno4UemSoGnAL1DoArw.crl (hash: QOIu8mIFYAyE0zeq8cWJ30NX9GccouSYsXtdIfWB798=) 2: 0D705F8A2C5911EEBB4C2C4BC4F9AE02.roa (hash: a1hfZfTwt/Bh2qSBtcc8YaWdNGdAJ0i4Jdou1l2/QfA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.crl rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x52oqmnxJno4UemSoGnAL1DoArw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 06:58:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC524/serialNumber=C79DA8AA69F1267A3851E992A069C02F50E802BC Validity Not Before: May 17 06:58:15 2024 GMT Not After : May 24 06:58:15 2024 GMT Subject: CN=66470007-776f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2b:37:0a:ff:f6:c9:20:8f:ab:25:9b:7e:cc: 33:1f:8e:12:3f:41:a1:27:bb:82:f4:6a:d0:04:a5: fa:20:b3:f3:ec:70:fb:61:cb:11:dd:8d:3a:c4:5e: c5:d9:52:e7:99:cd:d4:51:92:ef:74:89:67:a2:c5: 0f:f1:74:d3:b4:04:fe:a2:aa:48:1c:40:58:69:a6: fa:c2:b5:40:f8:40:6c:11:0d:05:ca:8c:3c:57:df: 80:ab:5f:0d:dd:a0:aa:0e:41:b0:79:0c:54:32:91: 1e:d8:d4:1d:8c:ce:28:89:f5:42:84:4c:77:80:6e: 25:5c:23:59:6b:80:33:5f:f6:54:a7:06:97:5b:f6: 37:03:91:08:48:57:80:3d:f0:fe:72:9b:a3:27:9a: 1b:2c:1c:c2:e3:d2:3d:86:c5:4b:14:68:dd:39:57: c0:ce:62:94:ac:95:9d:8a:b9:06:f6:2c:4e:37:a6: 85:6a:38:ca:fa:49:7a:09:d6:81:fe:3c:18:d9:18: 9d:b7:06:c5:8f:9a:8a:46:57:1d:fc:b3:0a:31:dc: 34:bd:90:9f:57:e1:41:06:ae:d9:c1:0b:11:6d:20: af:3e:7f:23:d3:f8:2f:df:f4:03:f5:86:48:6d:69: b8:39:09:31:3a:2e:a9:a6:a2:af:d8:72:3d:c8:b3: 25:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:06:AF:AA:36:45:E5:BC:59:6A:CF:B0:F9:8E:0D:DC:74:E3:50:A6 X509v3 Authority Key Identifier: keyid:C7:9D:A8:AA:69:F1:26:7A:38:51:E9:92:A0:69:C0:2F:50:E8:02:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x52oqmnxJno4UemSoGnAL1DoArw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:c0:1c:eb:d6:f4:2d:96:7e:90:18:cf:aa:95:36:7b:b5:26: d1:3e:21:a3:42:36:85:c5:76:03:21:5e:15:9f:66:fd:38:30: 78:b8:88:ea:79:12:8a:55:e2:fe:1e:1d:47:9a:cd:0c:f6:d0: 11:9e:77:97:97:e4:ad:6c:bd:bc:f4:5e:bc:c1:07:87:ea:a7: 2d:7e:64:16:fa:ac:f2:a2:4b:5f:ef:85:de:c3:e7:0c:52:99: 52:3d:d1:c5:51:d0:89:9b:13:da:ba:4e:0b:08:97:1c:cd:85: 58:3b:bb:34:14:88:b3:8b:35:85:04:70:75:2b:f5:5a:e8:56: e3:31:a2:7f:02:0f:a0:77:1b:f6:1f:f9:c1:da:eb:f3:0d:bd: c1:f8:94:e7:8e:d7:7a:30:95:5e:5b:84:c3:35:0a:dd:aa:d4: cd:6c:cd:b3:af:cf:87:8c:3b:fd:0d:ea:6e:e9:9a:64:a1:3e: 87:c5:73:af:33:a4:c2:93:c8:34:8b:8b:5e:83:75:a1:58:2c: 23:18:3f:4c:68:56:68:e7:98:14:1b:b0:21:34:b0:0a:02:56: 4c:8d:18:7c:81:bd:07:29:af:93:f7:5a:0e:9f:0f:cb:0d:8e: 7f:bf:5e:2d:41:b8:76:8d:33:fe:b4:4b:c8:19:89:24:51:8d: 19:60:7f:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM1MjQxMTAvBgNVBAUTKEM3OURBOEFBNjlGMTI2N0EzODUxRTk5MkEwNjlDMDJG NTBFODAyQkMwHhcNMjQwNTE3MDY1ODE1WhcNMjQwNTI0MDY1ODE1WjAYMRYwFAYD VQQDEw02NjQ3MDAwNy03NzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtCs3Cv/2ySCPqyWbfswzH44SP0GhJ7uC9GrQBKX6ILPz7HD7YcsR3Y06xF7F 2VLnmc3UUZLvdIlnosUP8XTTtAT+oqpIHEBYaab6wrVA+EBsEQ0Fyow8V9+Aq18N 3aCqDkGweQxUMpEe2NQdjM4oifVChEx3gG4lXCNZa4AzX/ZUpwaXW/Y3A5EISFeA PfD+cpujJ5obLBzC49I9hsVLFGjdOVfAzmKUrJWdirkG9ixON6aFajjK+kl6CdaB /jwY2RidtwbFj5qKRlcd/LMKMdw0vZCfV+FBBq7ZwQsRbSCvPn8j0/gv3/QD9YZI bWm4OQkxOi6ppqKv2HI9yLMl6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKwGr6o2 ReW8WWrPsPmODdx041CmMB8GA1UdIwQYMBaAFMedqKpp8SZ6OFHpkqBpwC9Q6AK8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzUyNC9CNUMyQjczNDJD NTcxMUVFQkIxODg2MjlDNEY5QUUwMi94NTJvcW1ueEpubzRVZW1Tb0duQUwxRG9B cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g1Mm9xbW54Sm5vNFVlbVNvR25BTDFEb0Fydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzUyNC9CNUMyQjczNDJDNTcxMUVFQkIxODg2MjlDNEY5QUUwMi94NTJvcW1ueEpu bzRVZW1Tb0duQUwxRG9BcncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNwBzr1vQtln6QGM+qlTZ7tSbRPiGjQjaFxXYDIV4Vn2b9ODB4uIjq eRKKVeL+Hh1Hms0M9tARnneXl+StbL289F68wQeH6qctfmQW+qzyoktf74Xew+cM UplSPdHFUdCJmxPauk4LCJcczYVYO7s0FIizizWFBHB1K/Va6FbjMaJ/Ag+gdxv2 H/nB2uvzDb3B+JTnjtd6MJVeW4TDNQrdqtTNbM2zr8+HjDv9Depu6ZpkoT6HxXOv M6TCk8g0i4teg3WhWCwjGD9MaFZo55gUG7AhNLAKAlZMjRh8gb0HKa+T91oOnw/L DY5/v14tQbh2jTP+tEvIGYkkUY0ZYH9a -----END CERTIFICATE-----Generated at Fri May 17 08:13:54 2024 by rpki-client on console-fra.rpki-client.org