$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft File: l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft (raw, json) Hash identifier: VFa9qp2q/1zPdPl77TQ2PTZfYf0FU954WKtl+/xKgAw= Subject key identifier: D4:DD:AB:23:36:2B:8F:6B:DA:B7:24:08:B0:30:B9:34:05:0B:0E:38 Authority key identifier: 97:D2:9B:0D:32:45:5B:B5:C6:F1:25:78:5F:40:F5:BC:27:09:F7:D4 Certificate issuer: /CN=A91DF8DB/serialNumber=97D29B0D32455BB5C6F125785F40F5BC2709F7D4 Certificate serial: 12BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft Manifest number: 12B5 Signing time: Thu 02 May 2024 17:39:27 +0000 Manifest this update: Thu 02 May 2024 17:39:27 +0000 Manifest next update: Thu 09 May 2024 17:39:27 +0000 Files and hashes: 1: l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl (hash: yh3tDDSlWORTg7U5jpRY2qXrdYzjMH6t1VW4jS0ZeBQ=) 2: A6C9934CA74111E88B3EAB2BC4F9AE02.roa (hash: s7VpnTSLDsHZsGNqsZ/Rq45TDSa/M6doyP2DP45iRqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 17:39:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4796 (0x12bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF8DB/serialNumber=97D29B0D32455BB5C6F125785F40F5BC2709F7D4 Validity Not Before: May 2 17:39:27 2024 GMT Not After : May 9 17:39:27 2024 GMT Subject: CN=6633cfcf-553c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:24:45:a9:ac:5e:96:9b:65:17:25:e8:65:90: b2:c6:45:34:d5:c2:a8:63:6f:37:43:fd:77:a3:d2: 3d:92:7d:ef:8d:0a:64:e1:d6:3e:d5:a3:17:1a:f7: 71:ff:13:ed:f1:9c:37:8b:c4:4d:28:ea:ac:37:61: ac:2f:e8:f2:e2:5d:7a:cb:82:4d:17:9d:3c:01:1d: ba:82:80:be:ab:7f:76:a8:00:ce:ad:6e:b7:03:3c: fc:fb:65:cf:d9:d5:2f:67:cc:38:de:e0:d4:82:36: af:d5:78:a8:14:da:4d:7e:f1:14:6f:b0:0c:a9:b8: b4:9c:09:ac:d3:b3:16:fb:0a:8d:77:41:6b:dc:78: c4:27:4b:4e:50:77:da:a8:f4:6f:f6:19:89:53:f7: 6c:5e:ab:35:25:ed:82:53:6c:00:3f:ef:d1:18:34: 3d:4c:bc:ba:f0:ed:8d:b2:84:8f:6f:fe:ed:f2:d4: cd:44:40:39:9b:d1:15:55:8e:28:75:17:87:5e:17: ce:2b:67:5c:ff:61:39:6a:e1:70:cd:a0:e5:27:79: 48:34:35:d8:36:38:48:b5:f8:6a:fa:9a:e6:bb:e4: 80:53:1f:f6:f0:e8:48:88:19:a8:01:9e:f5:3f:46: df:d2:c6:f5:86:c9:c8:ce:00:0a:7c:af:30:c2:f7: b1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:DD:AB:23:36:2B:8F:6B:DA:B7:24:08:B0:30:B9:34:05:0B:0E:38 X509v3 Authority Key Identifier: keyid:97:D2:9B:0D:32:45:5B:B5:C6:F1:25:78:5F:40:F5:BC:27:09:F7:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:b4:a3:3c:f1:ea:60:18:7b:00:ba:88:be:9a:4d:53:25:4e: 0a:16:78:5a:53:86:76:4b:6a:2f:be:de:7b:50:7a:cd:a7:18: e7:74:11:83:06:35:f9:1c:e5:dc:06:a9:d0:86:20:32:14:64: d1:50:24:bc:d8:5b:d4:e4:1e:a4:c2:d3:3a:62:c2:b3:21:b0: 75:75:cf:55:2b:45:44:40:6d:ab:d4:6a:ba:f6:16:ec:5e:5a: a0:1a:69:9b:55:18:72:3d:86:10:fa:08:25:02:60:11:9c:2d: 6f:3a:d1:cf:b5:e7:a3:a8:c4:ba:bc:a4:f1:7c:b8:ba:ac:be: 7d:41:39:d6:15:a6:b2:61:dc:d4:a0:d7:24:76:5c:e5:b8:00: 2c:93:13:0a:b0:d1:03:aa:37:ec:26:1f:14:35:00:c9:18:a1: a3:62:42:9b:7b:0d:63:30:0a:5d:dc:c8:dd:f4:65:90:68:0d: f9:cb:f8:25:49:1f:42:bb:4d:13:93:eb:5e:60:d4:1b:7c:29: 02:f7:b2:69:d9:bc:6c:22:ef:0b:a3:45:ed:17:92:29:67:db: b0:b4:8c:47:51:ac:9f:b9:69:82:81:2c:15:4c:5b:90:5c:d1: 17:25:7d:30:b7:c4:d9:a4:69:1b:65:ba:56:57:82:e6:9f:94: 14:62:46:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICErwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4REIxMTAvBgNVBAUTKDk3RDI5QjBEMzI0NTVCQjVDNkYxMjU3ODVGNDBGNUJD MjcwOUY3RDQwHhcNMjQwNTAyMTczOTI3WhcNMjQwNTA5MTczOTI3WjAYMRYwFAYD VQQDEw02NjMzY2ZjZi01NTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtCRFqaxelptlFyXoZZCyxkU01cKoY283Q/13o9I9kn3vjQpk4dY+1aMXGvdx /xPt8Zw3i8RNKOqsN2GsL+jy4l16y4JNF508AR26goC+q392qADOrW63Azz8+2XP 2dUvZ8w43uDUgjav1XioFNpNfvEUb7AMqbi0nAms07MW+wqNd0Fr3HjEJ0tOUHfa qPRv9hmJU/dsXqs1Je2CU2wAP+/RGDQ9TLy68O2NsoSPb/7t8tTNREA5m9EVVY4o dReHXhfOK2dc/2E5auFwzaDlJ3lINDXYNjhItfhq+prmu+SAUx/28OhIiBmoAZ71 P0bf0sb1hsnIzgAKfK8wwvexYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTdqyM2 K49r2rckCLAwuTQFCw44MB8GA1UdIwQYMBaAFJfSmw0yRVu1xvEleF9A9bwnCffU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjhEQi82NTc5Mzc4Qzk5 MzQxMUU4QTAzNzM3MjRDNEY5QUUwMi9sOUtiRFRKRlc3WEc4U1Y0WDBEMXZDY0o5 OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w5S2JEVEpGVzdYRzhTVjRYMEQxdkNjSjk5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjhEQi82NTc5Mzc4Qzk5MzQxMUU4QTAzNzM3MjRDNEY5QUUwMi9sOUtiRFRKRlc3 WEc4U1Y0WDBEMXZDY0o5OVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7tKM88epgGHsAuoi+mk1TJU4KFnhaU4Z2S2ovvt57UHrNpxjndBGD BjX5HOXcBqnQhiAyFGTRUCS82FvU5B6kwtM6YsKzIbB1dc9VK0VEQG2r1Gq69hbs XlqgGmmbVRhyPYYQ+gglAmARnC1vOtHPteejqMS6vKTxfLi6rL59QTnWFaayYdzU oNckdlzluAAskxMKsNEDqjfsJh8UNQDJGKGjYkKbew1jMApd3Mjd9GWQaA35y/gl SR9Cu00Tk+teYNQbfCkC97Jp2bxsIu8Lo0XtF5IpZ9uwtIxHUayfuWmCgSwVTFuQ XNEXJX0wt8TZpGkbZbpWV4Lmn5QUYkZG -----END CERTIFICATE-----Generated at Thu May 2 20:05:00 2024 by rpki-client on console-ams.rpki-client.org