$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.mft File: AuOHDsPGHid3cW1wGLNMszV6AsQ.mft (raw, json) Hash identifier: 0JpGdSck2F2h+K2dPgS8QJUI+1mGRGbryet2gjLzNas= Subject key identifier: B5:E1:03:48:C0:C8:D5:AE:7B:6C:9D:73:76:19:0C:53:78:D3:B1:E6 Authority key identifier: 02:E3:87:0E:C3:C6:1E:27:77:71:6D:70:18:B3:4C:B3:35:7A:02:C4 Certificate issuer: /CN=A91F5B0D/serialNumber=02E3870EC3C61E2777716D7018B34CB3357A02C4 Certificate serial: 05AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuOHDsPGHid3cW1wGLNMszV6AsQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.mft Manifest number: 0597 Signing time: Sun 05 May 2024 00:39:56 +0000 Manifest this update: Sun 05 May 2024 00:39:55 +0000 Manifest next update: Sun 12 May 2024 00:39:55 +0000 Files and hashes: 1: AuOHDsPGHid3cW1wGLNMszV6AsQ.crl (hash: Tqpw/s2mFmmeJuNE/nUTJ++vvLTcCvLVuf4O16kdnTg=) 2: 78A3D4AE6AC011ED9C15EE6BC4F9AE02.roa (hash: YFHfbdx8wgYWAxYOVlgp/hr70vcAcV/rrs+TbpjVf/8=) 3: 79B5BD3A6AC011ED9C15EE6BC4F9AE02.roa (hash: 9aH+/7xznxPMFLG7CgTB3Ooqrmms0m+t0XS2siHKwhA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.crl rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuOHDsPGHid3cW1wGLNMszV6AsQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1451 (0x5ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5B0D/serialNumber=02E3870EC3C61E2777716D7018B34CB3357A02C4 Validity Not Before: May 5 00:39:55 2024 GMT Not After : May 12 00:39:55 2024 GMT Subject: CN=6636d55b-97f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:59:9b:c2:bc:03:e8:e4:10:31:7b:88:7c:f9: 96:55:e0:4b:29:f0:8d:a8:c4:f0:60:52:7d:26:2f: c5:a5:d8:3b:52:36:44:e4:6c:bf:01:cf:16:3a:9b: fa:92:d2:aa:5f:d4:33:e8:77:9a:12:1f:a0:0c:3f: 3a:5e:db:c4:a7:37:74:73:bc:98:97:14:6b:42:38: 40:2a:40:13:a2:b8:40:4d:91:7f:b8:db:9e:4c:77: 93:cf:21:24:62:26:ce:50:a5:72:0e:76:25:f8:2a: 87:fd:00:de:79:93:f0:f8:a3:d0:0c:2a:9c:39:09: b9:e3:de:75:a0:d8:8c:ac:6e:28:89:21:98:e3:6a: b3:e6:df:a3:98:e1:e2:69:2d:c7:86:5c:0f:3a:b8: 68:01:a6:96:cb:6b:68:7d:1a:ad:20:7d:b4:32:98: 59:0c:6c:73:42:a9:cb:b0:f1:65:60:d2:b7:b7:58: f3:82:c1:8e:74:0c:c3:49:a4:92:fc:33:08:dc:ed: b4:13:c6:0e:7f:91:9c:14:8e:a3:a1:1d:6a:6e:77: 35:b8:7c:e9:c4:aa:77:88:fc:9c:d4:86:41:71:7d: a4:01:9b:99:be:9a:f9:ba:b2:62:eb:54:f0:f5:fb: 3d:cf:c7:69:83:36:b3:de:e2:5b:dc:fe:ae:a1:4b: ec:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E1:03:48:C0:C8:D5:AE:7B:6C:9D:73:76:19:0C:53:78:D3:B1:E6 X509v3 Authority Key Identifier: keyid:02:E3:87:0E:C3:C6:1E:27:77:71:6D:70:18:B3:4C:B3:35:7A:02:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuOHDsPGHid3cW1wGLNMszV6AsQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:9c:ae:76:c2:5d:91:a1:57:7d:69:7c:3e:31:61:c7:06:bd: 60:a1:3e:5e:93:38:70:59:6d:78:e0:67:fd:0e:8b:1e:af:0a: 05:8a:18:3a:d9:6e:8e:dd:4d:a6:f8:53:f4:84:83:04:0d:1d: d4:5e:01:95:ba:11:9d:ef:cc:2c:46:ce:f5:44:99:4d:1b:73: 83:0b:0f:3d:2d:6c:5d:38:ef:3f:b8:e3:6e:14:2c:9c:02:48: 25:17:c1:71:f3:06:fb:7f:95:57:35:22:ed:62:1d:04:33:7d: 50:d9:e5:6c:b1:73:c9:30:7a:82:62:18:89:1a:75:0a:6e:1f: 3f:bc:22:64:1c:5f:83:9e:52:35:af:54:9e:6b:b4:c0:b8:2b: d9:79:5e:9a:01:88:44:dc:0d:74:19:fd:09:da:f3:7b:27:10: 48:96:b8:81:68:ff:f5:ba:71:8b:87:61:33:a9:24:76:fa:89: 83:6a:da:55:d1:98:8d:36:7a:2e:d6:96:cf:1b:5e:0a:68:99: 84:4f:99:68:c2:7b:59:fc:48:a3:b3:31:5e:06:93:68:6a:19: e1:b9:b8:ce:b3:ee:fb:4d:18:43:dd:bd:6b:00:96:16:f2:95: f0:39:f7:84:45:28:85:90:16:94:33:dd:1c:8a:96:87:26:e4: 47:ec:07:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjVCMEQxMTAvBgNVBAUTKDAyRTM4NzBFQzNDNjFFMjc3NzcxNkQ3MDE4QjM0Q0Iz MzU3QTAyQzQwHhcNMjQwNTA1MDAzOTU1WhcNMjQwNTEyMDAzOTU1WjAYMRYwFAYD VQQDEw02NjM2ZDU1Yi05N2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslmbwrwD6OQQMXuIfPmWVeBLKfCNqMTwYFJ9Ji/Fpdg7UjZE5Gy/Ac8WOpv6 ktKqX9Qz6HeaEh+gDD86XtvEpzd0c7yYlxRrQjhAKkATorhATZF/uNueTHeTzyEk YibOUKVyDnYl+CqH/QDeeZPw+KPQDCqcOQm54951oNiMrG4oiSGY42qz5t+jmOHi aS3HhlwPOrhoAaaWy2tofRqtIH20MphZDGxzQqnLsPFlYNK3t1jzgsGOdAzDSaSS /DMI3O20E8YOf5GcFI6joR1qbnc1uHzpxKp3iPyc1IZBcX2kAZuZvpr5urJi61Tw 9fs9z8dpgzaz3uJb3P6uoUvsYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLXhA0jA yNWue2ydc3YZDFN407HmMB8GA1UdIwQYMBaAFALjhw7Dxh4nd3FtcBizTLM1egLE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNUIwRC84MzQwN0QyMDg4 QjUxMUVCOURBRUQ3MjJDNEY5QUUwMi9BdU9IRHNQR0hpZDNjVzF3R0xOTXN6VjZB c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F1T0hEc1BHSGlkM2NXMXdHTE5Nc3pWNkFzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NUIwRC84MzQwN0QyMDg4QjUxMUVCOURBRUQ3MjJDNEY5QUUwMi9BdU9IRHNQR0hp ZDNjVzF3R0xOTXN6VjZBc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7nK52wl2RoVd9aXw+MWHHBr1goT5ekzhwWW144Gf9DoserwoFihg6 2W6O3U2m+FP0hIMEDR3UXgGVuhGd78wsRs71RJlNG3ODCw89LWxdOO8/uONuFCyc AkglF8Fx8wb7f5VXNSLtYh0EM31Q2eVssXPJMHqCYhiJGnUKbh8/vCJkHF+DnlI1 r1Sea7TAuCvZeV6aAYhE3A10Gf0J2vN7JxBIlriBaP/1unGLh2EzqSR2+omDatpV 0ZiNNnou1pbPG14KaJmET5lowntZ/EijszFeBpNoahnhubjOs+77TRhD3b1rAJYW 8pXwOfeERSiFkBaUM90cipaHJuRH7AcC -----END CERTIFICATE-----Generated at Sun May 5 01:22:26 2024 by rpki-client on console-fra.rpki-client.org