$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft File: aXYgUV57Huisfz9tE76uumLE7ak.mft (raw, json) Hash identifier: uJ5tINzeRrUubm5yYAp8o7DCAABTt8+FNGOraOmuCIo= Subject key identifier: C9:9A:18:D9:96:52:76:0E:0D:FA:31:7C:AD:86:18:AA:EB:3F:DB:03 Authority key identifier: 69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 Certificate issuer: /CN=A91DE2AE/serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft Manifest number: 0105 Signing time: Sun 05 May 2024 05:43:28 +0000 Manifest this update: Sun 05 May 2024 05:43:27 +0000 Manifest next update: Sun 12 May 2024 05:43:27 +0000 Files and hashes: 1: aXYgUV57Huisfz9tE76uumLE7ak.crl (hash: BN9/gJ9YbEIX+SgmP2+GD+uTZW0MPZDhmqnqmhbgylY=) 2: 38E45CE08C2511EDB64DB410C4F9AE02.roa (hash: wwhddg3RMeo3ysiKpZIkpJZYnoyXbvI39OLMxKPP5Xg=) 3: F3B716768F2F11EE86964D62C4F9AE02.roa (hash: 1/DvyxegSe9VNjEpPkSKtnMnOpXbnNm973Ain9lFciA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE2AE/serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Validity Not Before: May 5 05:43:27 2024 GMT Not After : May 12 05:43:27 2024 GMT Subject: CN=66371c7f-4874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:de:1c:dd:ea:cb:6c:bb:c6:77:c3:8d:d8:d7: d0:a6:13:a4:1e:c9:33:96:31:e4:3a:2a:5c:0a:23: ea:c2:82:a4:e2:f6:ae:f8:a6:5d:8d:fa:73:24:ca: c9:65:35:7c:eb:dc:17:30:88:1a:73:ee:af:49:cd: ff:b5:b3:ec:a3:19:ac:68:25:b0:f8:5c:f3:89:e0: f2:25:6b:b1:4e:54:14:79:66:08:1e:34:40:85:06: 08:ca:93:cd:31:86:07:9e:97:97:fe:3f:af:cb:b2: a2:a2:fb:ab:ca:35:34:80:99:d2:21:27:94:26:8b: 23:c6:e5:57:e1:32:86:78:8e:71:ae:df:84:48:8a: 10:54:6f:4c:fe:36:02:1d:70:fb:5a:97:55:d8:e2: bb:5b:5a:2a:30:29:9e:cd:b6:28:fb:51:eb:cc:ab: fd:1c:5b:b5:70:fc:29:f5:a2:52:a6:f6:35:29:5a: 61:00:03:c4:b5:b0:05:6d:78:d1:2a:ea:7b:3d:9b: 91:2c:d7:78:e7:ad:1a:59:ba:90:e5:a8:8c:3f:60: 8d:32:4c:56:5e:12:73:7f:b1:7e:49:ce:c8:fd:6c: f1:ba:fd:db:4b:8e:e1:65:c7:e8:34:08:c6:35:16: cc:fe:7e:16:9c:9d:80:9a:2a:b2:4a:12:4b:cd:71: 02:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:9A:18:D9:96:52:76:0E:0D:FA:31:7C:AD:86:18:AA:EB:3F:DB:03 X509v3 Authority Key Identifier: keyid:69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:d2:66:cb:66:1e:89:4b:af:20:cd:28:10:8c:c5:b9:ca:94: db:0e:5b:db:bb:ba:47:0c:1d:71:8c:9d:87:55:21:1a:14:49: 3f:7d:c6:3a:5e:5d:b0:e3:e5:be:63:28:ef:ec:e3:3d:6d:ec: 1f:47:cc:9e:2b:86:ba:1a:4a:e7:c7:5e:28:1b:64:b9:fc:5f: 82:1f:6c:f3:3e:d6:33:48:7d:24:ba:f1:c7:89:2c:25:10:e0: 66:68:12:eb:30:cc:48:e4:f7:4c:1c:17:66:61:a8:3e:5e:6b: 79:91:95:e9:20:3a:c6:c5:d3:25:8d:05:48:d7:f8:23:47:03: 42:e0:a9:c5:8f:4c:b3:6c:b9:df:2a:41:2a:52:4f:cd:0e:12: d7:a4:bf:d5:05:55:3f:db:5d:bc:2b:ad:fc:70:31:58:97:ad: f7:1d:f3:f5:3e:93:14:aa:6c:b9:c9:85:49:b7:68:52:34:23: 82:f0:76:6e:bf:fd:d4:9f:42:70:1c:52:85:8f:2f:ce:04:9e: e3:dc:6e:9f:d9:b7:17:1e:e6:c9:4b:71:66:b5:51:02:83:43: 99:d4:d5:b3:99:99:08:99:96:12:c0:0c:93:41:10:ea:d5:d2: cc:a2:4e:7e:1a:92:b4:5c:95:a6:0a:3c:18:fc:06:75:ef:f0: 90:98:33:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUyQUUxMTAvBgNVBAUTKDY5NzYyMDUxNUU3QjFFRThBQzdGM0Y2RDEzQkVBRUJB NjJDNEVEQTkwHhcNMjQwNTA1MDU0MzI3WhcNMjQwNTEyMDU0MzI3WjAYMRYwFAYD VQQDEw02NjM3MWM3Zi00ODc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7d4c3erLbLvGd8ON2NfQphOkHskzljHkOipcCiPqwoKk4vau+KZdjfpzJMrJ ZTV869wXMIgac+6vSc3/tbPsoxmsaCWw+FzzieDyJWuxTlQUeWYIHjRAhQYIypPN MYYHnpeX/j+vy7KiovuryjU0gJnSISeUJosjxuVX4TKGeI5xrt+ESIoQVG9M/jYC HXD7WpdV2OK7W1oqMCmezbYo+1HrzKv9HFu1cPwp9aJSpvY1KVphAAPEtbAFbXjR Kup7PZuRLNd4560aWbqQ5aiMP2CNMkxWXhJzf7F+Sc7I/Wzxuv3bS47hZcfoNAjG NRbM/n4WnJ2AmiqyShJLzXECTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMmaGNmW UnYODfoxfK2GGKrrP9sDMB8GA1UdIwQYMBaAFGl2IFFeex7orH8/bRO+rrpixO2p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTJBRS9DNzBGRUEyQThD MjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1aXNmejl0RTc2dXVtTEU3 YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FYWWdVVjU3SHVpc2Z6OXRFNzZ1dW1MRTdhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTJBRS9DNzBGRUEyQThDMjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1 aXNmejl0RTc2dXVtTEU3YWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq0mbLZh6JS68gzSgQjMW5ypTbDlvbu7pHDB1xjJ2HVSEaFEk/fcY6 Xl2w4+W+Yyjv7OM9bewfR8yeK4a6Gkrnx14oG2S5/F+CH2zzPtYzSH0kuvHHiSwl EOBmaBLrMMxI5PdMHBdmYag+Xmt5kZXpIDrGxdMljQVI1/gjRwNC4KnFj0yzbLnf KkEqUk/NDhLXpL/VBVU/2128K638cDFYl633HfP1PpMUqmy5yYVJt2hSNCOC8HZu v/3Un0JwHFKFjy/OBJ7j3G6f2bcXHubJS3FmtVECg0OZ1NWzmZkImZYSwAyTQRDq 1dLMok5+GpK0XJWmCjwY/AZ17/CQmDNP -----END CERTIFICATE-----Generated at Sun May 5 06:13:37 2024 by rpki-client on console-ams.rpki-client.org