$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4ED1/5FDD78B20B6411EA90923066C4F9AE02/5F9h77yy57HkFLLL3DRQ9_hGGJ0.mft File: 5F9h77yy57HkFLLL3DRQ9_hGGJ0.mft (raw, json) Hash identifier: 6mMEYEd+At8peKFc52A8gV9c1Nu3dhb05zDMhNDz9dU= Subject key identifier: 80:82:97:AE:F6:03:1D:D7:E9:F9:FE:92:17:F8:13:B3:0F:67:CE:17 Authority key identifier: E4:5F:61:EF:BC:B2:E7:B1:E4:14:B2:CB:DC:34:50:F7:F8:46:18:9D Certificate issuer: /CN=A91E4ED1/serialNumber=E45F61EFBCB2E7B1E414B2CBDC3450F7F846189D Certificate serial: 0B55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5F9h77yy57HkFLLL3DRQ9_hGGJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4ED1/5FDD78B20B6411EA90923066C4F9AE02/5F9h77yy57HkFLLL3DRQ9_hGGJ0.mft Manifest number: 0B54 Signing time: Tue 30 Apr 2024 19:55:20 +0000 Manifest this update: Tue 30 Apr 2024 19:55:19 +0000 Manifest next update: Tue 07 May 2024 19:55:19 +0000 Files and hashes: 1: 5F9h77yy57HkFLLL3DRQ9_hGGJ0.crl (hash: TQtP4uWKRQdl6JaGNhNnvBJj3T8yNFImCPUB02ynW3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4ED1/5FDD78B20B6411EA90923066C4F9AE02/5F9h77yy57HkFLLL3DRQ9_hGGJ0.crl rsync://rpki.apnic.net/member_repository/A91E4ED1/5FDD78B20B6411EA90923066C4F9AE02/5F9h77yy57HkFLLL3DRQ9_hGGJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5F9h77yy57HkFLLL3DRQ9_hGGJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 19:55:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2901 (0xb55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4ED1/serialNumber=E45F61EFBCB2E7B1E414B2CBDC3450F7F846189D Validity Not Before: Apr 30 19:55:19 2024 GMT Not After : May 7 19:55:19 2024 GMT Subject: CN=66314ca7-27e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:05:c9:41:17:0f:4b:7d:00:52:66:89:83:44: 24:a1:3f:88:9b:1f:5b:03:4f:d7:1e:c5:73:c0:aa: 3b:ea:54:68:2a:89:a0:9a:7d:67:f6:27:f3:be:d1: 90:6e:30:47:83:92:30:df:9f:d1:78:ea:03:29:18: 20:02:90:b2:e7:02:32:80:55:7b:52:8b:8a:49:7f: e7:3d:45:99:89:01:ef:4a:c4:67:be:72:02:d0:76: 14:09:a9:f8:54:f8:22:1c:b4:d4:19:b5:8e:8e:57: 41:bc:d5:37:0c:71:f5:3e:df:2e:57:54:2e:aa:0c: ad:62:bb:a3:36:ba:48:ae:64:d4:86:13:72:0d:d5: f3:6a:03:7f:a5:16:7c:a9:f4:fb:3a:3d:85:7f:f8: 11:eb:12:44:e4:63:83:c8:68:a1:b6:18:39:6e:46: db:84:47:76:ae:68:c1:fd:e6:a6:30:6e:aa:cd:7e: aa:13:2b:4d:67:9a:2d:93:7e:22:b0:fb:94:e6:a0: a6:5f:92:b1:dd:00:28:be:d5:59:39:24:4f:41:67: 0a:1b:af:9e:1a:db:04:2c:51:08:5f:e5:e0:0b:c1: d0:d0:74:01:17:46:34:9f:21:e5:a8:40:17:9b:50: c5:24:b2:66:9f:b3:07:e6:2a:c3:e3:e5:c2:af:94: ed:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:82:97:AE:F6:03:1D:D7:E9:F9:FE:92:17:F8:13:B3:0F:67:CE:17 X509v3 Authority Key Identifier: keyid:E4:5F:61:EF:BC:B2:E7:B1:E4:14:B2:CB:DC:34:50:F7:F8:46:18:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4ED1/5FDD78B20B6411EA90923066C4F9AE02/5F9h77yy57HkFLLL3DRQ9_hGGJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5F9h77yy57HkFLLL3DRQ9_hGGJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4ED1/5FDD78B20B6411EA90923066C4F9AE02/5F9h77yy57HkFLLL3DRQ9_hGGJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:54:04:e7:5a:fc:91:ea:cf:5e:77:3f:16:1c:9c:ea:1f:2d: 21:96:92:2d:13:a9:80:f9:f7:35:6d:be:2f:cf:41:3a:f1:5d: 10:7e:eb:81:02:ae:4b:fb:c8:11:92:d4:0e:d6:32:dc:77:3b: a2:ae:95:1a:7a:94:11:77:89:9c:4d:ea:10:d7:7c:b5:46:48: 08:16:d9:13:3d:32:79:8c:f2:33:1b:ac:f9:89:b2:51:df:8c: 24:72:80:f1:35:5c:1a:6e:f4:c9:fc:6a:53:ee:5a:8c:f4:7b: c2:e8:17:0e:1d:73:06:01:78:41:7d:65:ac:d2:01:36:31:67: d4:b5:4c:32:6a:c0:46:9f:5d:65:bd:8d:a4:a6:cc:67:bc:cf: 4d:8d:c7:d4:49:65:c8:93:60:81:d3:0d:ad:d1:3d:a7:5a:38: 4c:56:83:6d:fc:55:cc:03:8a:ce:1e:9a:cf:f0:7d:f9:99:fb: b5:f2:2d:ee:ac:a4:93:94:89:46:47:dd:e7:38:01:f1:a2:ea: 76:ad:dc:77:c2:a0:9a:6b:be:3a:20:fe:4e:2c:8b:23:a6:b1: 30:1e:92:22:e2:c5:af:17:c9:ce:2b:00:c2:58:ea:b4:3e:25: fc:e3:c6:e6:35:46:2e:d0:95:9b:38:84:90:13:ca:c1:70:f2: 61:b8:6b:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRDExMTAvBgNVBAUTKEU0NUY2MUVGQkNCMkU3QjFFNDE0QjJDQkRDMzQ1MEY3 Rjg0NjE4OUQwHhcNMjQwNDMwMTk1NTE5WhcNMjQwNTA3MTk1NTE5WjAYMRYwFAYD VQQDEw02NjMxNGNhNy0yN2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQXJQRcPS30AUmaJg0QkoT+Imx9bA0/XHsVzwKo76lRoKomgmn1n9ifzvtGQ bjBHg5Iw35/ReOoDKRggApCy5wIygFV7UouKSX/nPUWZiQHvSsRnvnIC0HYUCan4 VPgiHLTUGbWOjldBvNU3DHH1Pt8uV1QuqgytYrujNrpIrmTUhhNyDdXzagN/pRZ8 qfT7Oj2Ff/gR6xJE5GODyGihthg5bkbbhEd2rmjB/eamMG6qzX6qEytNZ5otk34i sPuU5qCmX5Kx3QAovtVZOSRPQWcKG6+eGtsELFEIX+XgC8HQ0HQBF0Y0nyHlqEAX m1DFJLJmn7MH5irD4+XCr5TtYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFICCl672 Ax3X6fn+khf4E7MPZ84XMB8GA1UdIwQYMBaAFORfYe+8suex5BSyy9w0UPf4Rhid MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVEMS81RkRENzhCMjBC NjQxMUVBOTA5MjMwNjZDNEY5QUUwMi81RjloNzd5eTU3SGtGTExMM0RSUTlfaEdH SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVGOWg3N3l5NTdIa0ZMTEwzRFJROV9oR0dKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVEMS81RkRENzhCMjBCNjQxMUVBOTA5MjMwNjZDNEY5QUUwMi81RjloNzd5eTU3 SGtGTExMM0RSUTlfaEdHSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsVATnWvyR6s9edz8WHJzqHy0hlpItE6mA+fc1bb4vz0E68V0QfuuB Aq5L+8gRktQO1jLcdzuirpUaepQRd4mcTeoQ13y1RkgIFtkTPTJ5jPIzG6z5ibJR 34wkcoDxNVwabvTJ/GpT7lqM9HvC6BcOHXMGAXhBfWWs0gE2MWfUtUwyasBGn11l vY2kpsxnvM9NjcfUSWXIk2CB0w2t0T2nWjhMVoNt/FXMA4rOHprP8H35mfu18i3u rKSTlIlGR93nOAHxoup2rdx3wqCaa746IP5OLIsjprEwHpIi4sWvF8nOKwDCWOq0 PiX848bmNUYu0JWbOISQE8rBcPJhuGvR -----END CERTIFICATE-----Generated at Tue Apr 30 21:59:08 2024 by rpki-client on console-ams.rpki-client.org