$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft File: CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft (raw, json) Hash identifier: l3xTncyMSV/moJNrlTDxJ/fj1EwatWw1N0kNz2sQhII= Subject key identifier: D3:1E:47:0D:7D:16:C9:EA:DA:3B:66:B5:FA:68:74:19:A2:42:11:90 Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft Manifest number: 90 Signing time: Fri 17 May 2024 07:19:02 +0000 Manifest this update: Fri 17 May 2024 07:19:01 +0000 Manifest next update: Fri 24 May 2024 07:19:01 +0000 Files and hashes: 1: CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl (hash: KJ9uBVPCZGwVeV1ntuBDq6K6VIDilQZ7fd0yGPdLFWU=) 2: 83834CF0F27411EEB974F03FC4F9AE02.roa (hash: jvjpWFYaCXma0ma4o/TEjxBFwv2uRxI2tIDo4tGz7oY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:19:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Validity Not Before: May 17 07:19:01 2024 GMT Not After : May 24 07:19:01 2024 GMT Subject: CN=664704e5-add6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:29:52:44:ad:f4:ad:30:cd:7b:8a:e3:52:00: a6:21:4f:42:90:de:f4:04:00:4b:fb:c4:10:86:e8: b8:95:0c:f8:40:49:93:fa:d1:5d:fc:e6:b0:0f:f8: ed:93:4f:e9:36:fa:9d:75:39:56:3f:2b:cb:83:0c: ac:13:dc:ec:7f:ca:06:15:e9:aa:95:45:96:fd:e4: fd:84:8f:81:c8:5f:28:b2:06:ab:c0:38:b9:c2:18: b9:9b:60:53:ee:60:a3:fc:47:40:05:f1:c9:6f:c5: 67:c6:49:90:9e:49:15:38:6a:3e:55:de:27:d5:9b: 90:4f:df:a6:cf:37:40:23:ad:44:a5:b8:d7:ba:0e: 9f:d5:75:62:df:b4:18:58:b6:4d:62:fc:8f:30:09: 5a:21:3d:f8:32:7d:47:6a:89:8c:ab:b9:fb:97:5b: b0:7d:56:c6:7a:12:5f:6c:fb:15:a3:1f:e2:c2:06: 4a:45:46:9a:08:a5:53:7d:75:aa:f7:36:da:8c:de: 09:e9:29:de:bb:0b:d9:2b:d5:c0:8a:f7:c1:3c:98: 08:3e:96:3f:9c:14:70:7d:7e:5f:ee:d6:43:b7:62: 2a:c4:f1:ab:b5:d1:47:96:ad:b9:77:2f:ec:c8:1d: 1d:ea:ee:b5:d5:8e:89:f0:17:fd:71:97:b7:7f:89: ca:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:1E:47:0D:7D:16:C9:EA:DA:3B:66:B5:FA:68:74:19:A2:42:11:90 X509v3 Authority Key Identifier: keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:d8:04:e2:4f:22:3e:c8:e1:7c:d5:22:a4:f3:6e:ae:e1:88: d7:1b:d5:a5:ca:5f:3b:6c:bc:0b:7b:94:27:66:31:4d:0f:a2: 8c:6d:ee:3c:0b:16:84:25:bf:25:b2:cc:e8:bd:95:6f:4b:52: 30:be:fe:08:46:84:0f:d4:a2:46:ea:82:61:25:de:41:e4:b5: 1a:37:af:8a:18:3f:47:5b:a3:e1:a1:25:ca:db:ee:3f:05:85: 00:69:70:91:64:98:81:65:07:6b:42:ca:db:af:84:35:34:3f: 0a:f9:30:af:13:1d:78:21:47:a5:93:75:ed:c0:2b:f0:7f:a8: 15:43:ab:66:fa:e6:a0:95:05:10:01:d4:cd:b1:74:7d:06:14: e8:25:ea:ec:ad:1a:79:1c:77:47:c2:4e:ac:ed:4c:cc:1c:d6: 96:0d:f7:0b:f7:74:f8:28:3b:a9:09:7a:e0:13:fb:dd:21:f9: 1e:35:e1:39:8e:b5:ee:98:18:bf:62:8f:d8:bc:6d:e2:21:e8: 0b:10:b7:42:b9:7a:fb:63:41:ce:66:c0:7a:cb:22:1e:ff:75: 91:9b:b2:38:02:f0:02:17:3a:73:a9:c0:ec:ee:69:16:c4:3a: 00:d3:6e:1c:4b:88:a5:a9:4e:80:d1:e2:c8:d4:97:a0:b9:1b: d6:87:bb:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3QUExMTAvBgNVBAUTKDA5NDcwNTFFRkE1MDQyOTIxNTc1MEE0OEJDMDMxQURB OTI2RUY2NkUwHhcNMjQwNTE3MDcxOTAxWhcNMjQwNTI0MDcxOTAxWjAYMRYwFAYD VQQDEw02NjQ3MDRlNS1hZGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1SlSRK30rTDNe4rjUgCmIU9CkN70BABL+8QQhui4lQz4QEmT+tFd/OawD/jt k0/pNvqddTlWPyvLgwysE9zsf8oGFemqlUWW/eT9hI+ByF8osgarwDi5whi5m2BT 7mCj/EdABfHJb8VnxkmQnkkVOGo+Vd4n1ZuQT9+mzzdAI61EpbjXug6f1XVi37QY WLZNYvyPMAlaIT34Mn1HaomMq7n7l1uwfVbGehJfbPsVox/iwgZKRUaaCKVTfXWq 9zbajN4J6SneuwvZK9XAivfBPJgIPpY/nBRwfX5f7tZDt2IqxPGrtdFHlq25dy/s yB0d6u611Y6J8Bf9cZe3f4nKFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNMeRw19 Fsnq2jtmtfpodBmiQhGQMB8GA1UdIwQYMBaAFAlHBR76UEKSFXUKSLwDGtqSbvZu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdBQS80MUYwRjk3RTUy QjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFwSVZkUXBJdkFNYTJwSnU5 bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVY0ZIdnBRUXBJVmRRcEl2QU1hMnBKdTltNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTdBQS80MUYwRjk3RTUyQjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFw SVZkUXBJdkFNYTJwSnU5bTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBw2ATiTyI+yOF81SKk826u4YjXG9Wlyl87bLwLe5QnZjFND6KMbe48 CxaEJb8lsszovZVvS1Iwvv4IRoQP1KJG6oJhJd5B5LUaN6+KGD9HW6PhoSXK2+4/ BYUAaXCRZJiBZQdrQsrbr4Q1ND8K+TCvEx14IUelk3XtwCvwf6gVQ6tm+uaglQUQ AdTNsXR9BhToJersrRp5HHdHwk6s7UzMHNaWDfcL93T4KDupCXrgE/vdIfkeNeE5 jrXumBi/Yo/YvG3iIegLELdCuXr7Y0HOZsB6yyIe/3WRm7I4AvACFzpzqcDs7mkW xDoA024cS4ilqU6A0eLI1JeguRvWh7uT -----END CERTIFICATE-----Generated at Fri May 17 08:52:56 2024 by rpki-client on console-ams.rpki-client.org