$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft File: 71ABp1tYBZ2TpdMWOFS0atZqnsg.mft (raw, json) Hash identifier: uNhVinWWNb8lijlmNIcwMGEBqGT09AE31sjqiolgwM4= Subject key identifier: CE:0D:79:52:00:12:12:F0:48:77:8C:5D:44:79:5D:85:C2:7C:C4:08 Authority key identifier: EF:50:01:A7:5B:58:05:9D:93:A5:D3:16:38:54:B4:6A:D6:6A:9E:C8 Certificate issuer: /CN=A91E0E19/serialNumber=EF5001A75B58059D93A5D3163854B46AD66A9EC8 Certificate serial: 049C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71ABp1tYBZ2TpdMWOFS0atZqnsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft Manifest number: 0493 Signing time: Sun 05 May 2024 01:45:40 +0000 Manifest this update: Sun 05 May 2024 01:45:39 +0000 Manifest next update: Sun 12 May 2024 01:45:39 +0000 Files and hashes: 1: 71ABp1tYBZ2TpdMWOFS0atZqnsg.crl (hash: DbJBgllREq5LvNfb44qohqekdDjqcuWlZZlQDXbB5uc=) 2: AB22314C35C211ED8FD8923EC4F9AE02.roa (hash: xSqsPdyhA6FQhFY9qCwl9wBS1fEwtwPFOeS76ovcU5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.crl rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71ABp1tYBZ2TpdMWOFS0atZqnsg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1180 (0x49c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0E19/serialNumber=EF5001A75B58059D93A5D3163854B46AD66A9EC8 Validity Not Before: May 5 01:45:39 2024 GMT Not After : May 12 01:45:39 2024 GMT Subject: CN=6636e4c3-78a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a6:0b:ff:80:21:b5:41:65:42:ca:7a:b1:0d: 91:6e:2d:6a:96:63:47:31:4a:3b:2b:b0:03:dc:9b: 61:d8:90:ef:93:c0:1b:69:f4:73:5d:58:71:6a:1e: 74:fb:ca:cf:ab:bb:39:1e:75:38:20:32:66:ac:df: e5:4a:0b:32:c3:9d:c5:dc:58:8d:72:8a:ce:df:4d: 57:bd:64:0e:d1:20:4e:62:61:8d:e9:ba:f5:3b:22: da:ce:d6:d0:18:08:09:17:c3:c6:ec:6c:ac:5b:bd: 3d:39:88:35:7e:51:22:f5:45:e8:1c:d1:14:53:b8: e1:d3:14:45:11:69:a8:bd:93:51:d1:64:3d:ae:bd: 32:89:52:ba:9b:68:d2:a9:b4:a4:18:4a:be:d1:26: 57:28:c6:8f:f7:9e:48:d8:a5:37:87:0f:44:42:cf: a3:a5:f6:87:cc:cb:6c:81:23:12:77:b2:f1:ea:03: a1:03:c9:56:11:fd:f4:36:9d:46:b4:e0:d1:7d:1c: ac:8f:12:f5:d6:b7:14:30:e2:a8:c1:f9:50:e9:e9: 3c:ce:42:dd:a2:52:0f:34:f6:88:7e:34:45:9f:fb: 4c:94:27:48:45:14:3a:0d:73:52:d3:4c:a7:d4:dc: 7a:29:aa:16:a7:f1:c9:fb:27:44:dc:d2:57:40:e2: 7f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:0D:79:52:00:12:12:F0:48:77:8C:5D:44:79:5D:85:C2:7C:C4:08 X509v3 Authority Key Identifier: keyid:EF:50:01:A7:5B:58:05:9D:93:A5:D3:16:38:54:B4:6A:D6:6A:9E:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71ABp1tYBZ2TpdMWOFS0atZqnsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:18:81:a7:6e:d0:49:7d:63:9e:6f:18:64:f2:79:6f:93:29: 5e:1a:e2:70:26:95:a7:a3:19:48:ad:70:17:73:0c:b6:87:2b: ee:4b:97:b3:16:0a:1a:0c:c6:bd:64:9b:ce:e9:60:2a:b5:cb: 60:50:9e:f1:40:a4:3d:3e:60:6d:ea:e9:3d:08:b2:f9:45:fa: 91:b6:08:9d:86:65:86:4b:81:eb:9d:27:83:f3:3e:75:1f:41: 83:67:5b:83:52:4d:b1:f0:ad:56:58:7a:c0:91:f0:9e:26:41: ac:31:94:7b:1b:e2:f0:31:3f:b3:fc:79:6e:ae:7b:f8:5c:a1: e8:4c:4b:a9:db:fa:c5:46:d0:f0:8c:c1:1f:4e:68:b8:2a:31: 27:70:af:12:92:ad:5e:02:60:c5:25:ba:36:8e:23:ee:1c:c7: 41:04:ff:66:af:e5:01:d6:90:65:81:c3:e2:da:c0:a2:5a:04: 9a:f3:88:37:50:4d:ad:3d:8c:5d:58:de:41:c0:39:e5:06:6e: 55:0e:80:16:c5:84:d5:dd:8c:06:af:61:b3:40:4e:cd:53:ee: 25:c4:80:78:69:35:ca:cc:54:dc:17:8f:8b:0a:91:bc:e6:06: 55:0d:0d:28:59:07:97:46:04:89:22:05:8a:25:84:2f:a1:23: e8:b0:78:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBFMTkxMTAvBgNVBAUTKEVGNTAwMUE3NUI1ODA1OUQ5M0E1RDMxNjM4NTRCNDZB RDY2QTlFQzgwHhcNMjQwNTA1MDE0NTM5WhcNMjQwNTEyMDE0NTM5WjAYMRYwFAYD VQQDEw02NjM2ZTRjMy03OGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0aYL/4AhtUFlQsp6sQ2Rbi1qlmNHMUo7K7AD3Jth2JDvk8AbafRzXVhxah50 +8rPq7s5HnU4IDJmrN/lSgsyw53F3FiNcorO301XvWQO0SBOYmGN6br1OyLaztbQ GAgJF8PG7GysW709OYg1flEi9UXoHNEUU7jh0xRFEWmovZNR0WQ9rr0yiVK6m2jS qbSkGEq+0SZXKMaP955I2KU3hw9EQs+jpfaHzMtsgSMSd7Lx6gOhA8lWEf30Np1G tODRfRysjxL11rcUMOKowflQ6ek8zkLdolIPNPaIfjRFn/tMlCdIRRQ6DXNS00yn 1Nx6KaoWp/HJ+ydE3NJXQOJ/FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM4NeVIA EhLwSHeMXUR5XYXCfMQIMB8GA1UdIwQYMBaAFO9QAadbWAWdk6XTFjhUtGrWap7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEUxOS83MDcxNDY0RUVE RUYxMUVCOEUyMURFMkRDNEY5QUUwMi83MUFCcDF0WUJaMlRwZE1XT0ZTMGF0WnFu c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcxQUJwMXRZQloyVHBkTVdPRlMwYXRacW5zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEUxOS83MDcxNDY0RUVERUYxMUVCOEUyMURFMkRDNEY5QUUwMi83MUFCcDF0WUJa MlRwZE1XT0ZTMGF0WnFuc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsGIGnbtBJfWOebxhk8nlvkyleGuJwJpWnoxlIrXAXcwy2hyvuS5ez FgoaDMa9ZJvO6WAqtctgUJ7xQKQ9PmBt6uk9CLL5RfqRtgidhmWGS4HrnSeD8z51 H0GDZ1uDUk2x8K1WWHrAkfCeJkGsMZR7G+LwMT+z/Hlurnv4XKHoTEup2/rFRtDw jMEfTmi4KjEncK8Skq1eAmDFJbo2jiPuHMdBBP9mr+UB1pBlgcPi2sCiWgSa84g3 UE2tPYxdWN5BwDnlBm5VDoAWxYTV3YwGr2GzQE7NU+4lxIB4aTXKzFTcF4+LCpG8 5gZVDQ0oWQeXRgSJIgWKJYQvoSPosHhJ -----END CERTIFICATE-----Generated at Sun May 5 03:09:57 2024 by rpki-client on console-ams.rpki-client.org