$ rpki-client -vvf rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft File: 4bmm6wyPr_f1TGjAViSijP0_rew.mft (raw, json) Hash identifier: DFt25GEq/DnlQS6xW8B7R4f1r1CUaTluyeAwboLaRfA= Subject key identifier: 87:EB:34:2D:39:B6:C9:8E:6D:58:36:94:48:B6:6D:8A:2D:46:6E:51 Authority key identifier: E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC Certificate issuer: /CN=A91F39EC/serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft Manifest number: 75 Signing time: Fri 17 May 2024 07:30:28 +0000 Manifest this update: Fri 17 May 2024 07:30:27 +0000 Manifest next update: Fri 24 May 2024 07:30:27 +0000 Files and hashes: 1: 4bmm6wyPr_f1TGjAViSijP0_rew.crl (hash: KrZKsrGv8ElSZwJIfzD20ln5Ull9fTKSr08XWP436+o=) 2: B5408BB266BB11EEB2022486C4F9AE02.roa (hash: bZsgoJd9cGpYXB7WjrWrxQ8lxtqhEkb+fTSOxr1ZyCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:30:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F39EC/serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC Validity Not Before: May 17 07:30:27 2024 GMT Not After : May 24 07:30:27 2024 GMT Subject: CN=66470793-712d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:59:39:a8:4d:44:2c:51:a7:b2:a3:59:8c:e7: 0b:7c:a9:33:f6:e7:ae:c9:bc:7f:50:13:b1:1e:35: e3:58:9b:e8:87:99:bd:01:96:04:3f:0c:2f:57:a6: d9:7f:d4:bb:1d:78:d4:7c:2e:62:fc:f4:a9:73:91: eb:f0:f8:91:ac:02:b6:7e:98:d3:0f:6d:01:bb:20: e7:3d:cb:eb:85:66:37:df:df:e5:c7:ff:52:fc:e1: b4:84:b1:87:a8:06:b4:ac:10:5c:c1:30:11:d8:f2: e1:02:1e:d4:a8:70:45:9c:47:66:96:2d:ae:2e:12: 0e:e7:29:2c:aa:16:2f:a1:7d:ad:a7:1d:3c:00:5f: 3e:30:9e:29:8d:18:bd:2f:ca:d7:1b:a9:d7:b5:25: 21:86:91:2c:e9:31:54:e4:82:73:a6:fc:60:c7:f2: 93:6e:99:34:43:f8:56:cd:1b:e8:57:2b:7e:fa:b3: db:54:41:84:49:d3:6b:1a:06:39:d7:b7:15:cb:33: c8:d9:0f:4c:73:9b:52:23:73:58:87:90:bc:83:2a: 69:98:2b:a8:69:04:d0:b2:02:bb:58:70:5c:4b:ae: 01:82:b8:87:b5:08:26:a0:0d:30:13:7c:7b:c0:77: 92:a8:1c:fb:74:2f:a9:10:62:62:ef:f0:e5:67:c0: 8c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:EB:34:2D:39:B6:C9:8E:6D:58:36:94:48:B6:6D:8A:2D:46:6E:51 X509v3 Authority Key Identifier: keyid:E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:9e:3f:f7:1d:15:de:5d:d4:b3:95:75:e8:6c:26:66:e3:47: 56:76:c2:44:a4:0d:e1:89:66:40:86:19:05:cc:88:f0:58:78: 30:d2:b8:31:7e:fc:8c:9c:35:e6:6a:2d:ee:a7:29:cc:7b:12: 0b:14:36:b8:33:ca:01:d9:3f:5e:25:d4:32:e5:bc:b3:93:f5: fb:dc:28:2e:32:2e:f9:0d:3f:a9:dc:2a:85:6e:2c:d1:18:73: 60:42:0f:51:62:15:6c:d1:b5:5f:87:a3:be:fe:d2:db:4c:ab: 52:2c:5a:ac:bc:83:5e:b3:81:51:95:14:c2:18:3d:b3:a0:c5: 91:14:a6:ec:88:af:6f:08:d7:e1:57:3e:7e:47:e2:a9:4f:8f: 83:01:9c:ae:ce:06:e7:84:05:12:8f:7a:02:5f:01:7b:92:f6: c4:5a:34:7a:80:d6:3f:cc:91:58:e7:03:6f:bc:41:60:e5:e0: b3:43:1c:ef:38:0a:25:52:7a:5a:70:c4:c6:5a:11:ca:e4:e9: b2:03:1f:f8:3e:4a:02:a3:2a:9e:da:ca:c3:79:11:3a:b9:d9: 08:29:dd:62:b4:1d:b2:4c:02:6c:0e:06:21:ed:61:7b:06:e2: a2:bd:a1:2d:42:43:4c:41:9d:9a:03:ac:85:56:3e:13:83:5d: 89:d4:a5:83 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzlFQzExMC8GA1UEBRMoRTFCOUE2RUIwQzhGQUZGN0Y1NEM2OEMwNTYyNEEyOENG RDNGQURFQzAeFw0yNDA1MTcwNzMwMjdaFw0yNDA1MjQwNzMwMjdaMBgxFjAUBgNV BAMTDTY2NDcwNzkzLTcxMmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrWTmoTUQsUaeyo1mM5wt8qTP2567JvH9QE7EeNeNYm+iHmb0BlgQ/DC9Xptl/ 1LsdeNR8LmL89Klzkevw+JGsArZ+mNMPbQG7IOc9y+uFZjff3+XH/1L84bSEsYeo BrSsEFzBMBHY8uECHtSocEWcR2aWLa4uEg7nKSyqFi+hfa2nHTwAXz4wnimNGL0v ytcbqde1JSGGkSzpMVTkgnOm/GDH8pNumTRD+FbNG+hXK376s9tUQYRJ02saBjnX txXLM8jZD0xzm1Ijc1iHkLyDKmmYK6hpBNCyArtYcFxLrgGCuIe1CCagDTATfHvA d5KoHPt0L6kQYmLv8OVnwIy9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUh+s0LTm2 yY5tWDaUSLZtii1GblEwHwYDVR0jBBgwFoAU4bmm6wyPr/f1TGjAViSijP0/reww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzOUVDLzEzNTVFNzUyNjZC QjExRUU4NDYyRUU4NEM0RjlBRTAyLzRibW02d3lQcl9mMVRHakFWaVNpalAwX3Jl dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNGJtbTZ3eVByX2YxVEdqQVZpU2lqUDBfcmV3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz OUVDLzEzNTVFNzUyNjZCQjExRUU4NDYyRUU4NEM0RjlBRTAyLzRibW02d3lQcl9m MVRHakFWaVNpalAwX3Jldy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJueP/cdFd5d1LOVdehsJmbjR1Z2wkSkDeGJZkCGGQXMiPBYeDDSuDF+ /IycNeZqLe6nKcx7EgsUNrgzygHZP14l1DLlvLOT9fvcKC4yLvkNP6ncKoVuLNEY c2BCD1FiFWzRtV+Ho77+0ttMq1IsWqy8g16zgVGVFMIYPbOgxZEUpuyIr28I1+FX Pn5H4qlPj4MBnK7OBueEBRKPegJfAXuS9sRaNHqA1j/MkVjnA2+8QWDl4LNDHO84 CiVSelpwxMZaEcrk6bIDH/g+SgKjKp7aysN5ETq52Qgp3WK0HbJMAmwOBiHtYXsG 4qK9oS1CQ0xBnZoDrIVWPhODXYnUpYM= -----END CERTIFICATE-----Generated at Fri May 17 08:52:56 2024 by rpki-client on console-ams.rpki-client.org