$ rpki-client -vvf rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft File: MmYwanA43JsBUyfHJVZAXzn85gs.mft (raw, json) Hash identifier: hWIcr62VoC2YsqaT3dQaZZal73Y0bMEr+/eLt8D6mnY= Subject key identifier: 47:55:23:A1:36:A4:A6:58:9F:52:B4:44:AF:4F:00:C4:53:EE:41:D5 Authority key identifier: 32:66:30:6A:70:38:DC:9B:01:53:27:C7:25:56:40:5F:39:FC:E6:0B Certificate issuer: /CN=A91F644E/serialNumber=3266306A7038DC9B015327C72556405F39FCE60B Certificate serial: 199E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft Manifest number: 1995 Signing time: Mon 06 May 2024 16:54:09 +0000 Manifest this update: Mon 06 May 2024 16:54:09 +0000 Manifest next update: Mon 13 May 2024 16:54:09 +0000 Files and hashes: 1: MmYwanA43JsBUyfHJVZAXzn85gs.crl (hash: DcPGUtCaQyGuOxo5iz2LRPoAhyAuJI7u0Z8uJev2k4I=) 2: 312DC5B8405E11E7A28FCE45C4F9AE02.roa (hash: eB5f0KsRSPaGm0VSEAJ3M5yoFhiAmx35EoQsgPCP3tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.crl rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 16:15:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6558 (0x199e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F644E/serialNumber=3266306A7038DC9B015327C72556405F39FCE60B Validity Not Before: May 6 16:54:09 2024 GMT Not After : May 13 16:54:09 2024 GMT Subject: CN=66390b31-23d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:44:f5:fb:85:b6:8e:6c:e4:cf:1e:fc:b3:7f: 6e:de:ae:8c:7e:fa:02:da:1d:8a:5c:30:0f:87:74: a6:ff:49:3d:2d:b1:22:ab:55:ce:19:78:31:91:cc: 17:9b:8b:8a:63:82:9c:8e:79:cb:43:b5:3e:d5:69: 9e:7a:9a:57:f8:7a:95:d2:a9:50:a4:55:02:46:0c: cc:10:e9:a9:9e:6f:1c:8e:d9:8f:e6:e0:7e:0f:9e: 82:8a:57:ce:5b:ed:ff:e4:14:29:c1:40:fc:73:ca: 88:8f:f1:93:79:dc:f4:6c:88:45:5b:b0:24:56:22: 9d:e3:3d:71:52:84:6a:22:04:86:e1:a3:24:9d:7c: 77:52:af:e3:44:1a:1b:b5:92:34:65:61:77:83:0e: 4f:04:d9:7c:a7:e5:b7:1c:40:f6:e8:6b:e7:53:68: 62:ea:21:a9:1d:9a:22:97:cd:8b:7b:40:6d:b4:f7: eb:15:1b:c3:b9:d3:db:7b:7b:f9:b7:45:b1:96:50: 49:f4:11:b3:b6:04:5b:07:f2:af:d2:14:a0:89:5b: 79:b1:9d:cd:f6:26:3d:e8:7c:d5:cd:63:92:06:e1: 57:16:66:30:71:93:15:ac:b7:ef:cd:7a:8e:f5:72: 99:29:e8:3a:e6:92:ed:d5:1f:19:f9:a0:42:85:9a: 68:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:55:23:A1:36:A4:A6:58:9F:52:B4:44:AF:4F:00:C4:53:EE:41:D5 X509v3 Authority Key Identifier: keyid:32:66:30:6A:70:38:DC:9B:01:53:27:C7:25:56:40:5F:39:FC:E6:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:38:b6:86:ab:d9:a1:db:49:4c:eb:87:c8:d5:a3:07:95:4c: aa:e3:28:8f:09:74:5b:c2:9c:56:23:0a:6d:a4:71:36:27:08: 15:7d:e3:2e:0d:91:89:87:3d:58:7e:21:26:61:c8:2d:2f:52: 0c:03:26:a9:89:12:ab:e4:3e:9b:eb:0f:53:43:54:08:88:f5: 7b:20:e5:3a:3f:93:29:63:9b:bc:74:86:b2:ae:1a:0b:5f:30: 87:c8:45:5c:3b:da:72:a0:eb:50:c8:3c:5a:2f:a3:e4:2a:f7: 16:88:3b:66:0e:4b:7e:03:9c:7c:ed:6a:a6:3a:b9:e0:99:6e: 70:6f:98:26:fe:bb:c4:e8:65:df:1a:11:eb:8a:f7:55:b8:d9: 0e:8e:b2:3e:b4:1d:00:4f:78:e1:67:9f:c8:af:c2:20:b1:3f: 5b:e3:95:af:3e:39:9d:cb:8d:bc:15:ab:51:fa:6f:f0:77:4a: e8:dd:28:d8:f8:87:f2:f0:1c:98:bf:e8:91:66:47:24:68:32: 8c:9f:34:70:4d:bc:5e:c2:2d:38:a4:76:62:71:fc:07:f0:e6: 8d:89:c6:e9:63:f3:ce:76:85:55:42:44:bf:3f:8c:c1:e5:c3: ae:e8:b4:90:81:e3:54:24:42:a7:18:ae:3a:75:16:e4:56:1f: 70:cc:27:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY0NEUxMTAvBgNVBAUTKDMyNjYzMDZBNzAzOERDOUIwMTUzMjdDNzI1NTY0MDVG MzlGQ0U2MEIwHhcNMjQwNTA2MTY1NDA5WhcNMjQwNTEzMTY1NDA5WjAYMRYwFAYD VQQDEw02NjM5MGIzMS0yM2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1UT1+4W2jmzkzx78s39u3q6MfvoC2h2KXDAPh3Sm/0k9LbEiq1XOGXgxkcwX m4uKY4KcjnnLQ7U+1WmeeppX+HqV0qlQpFUCRgzMEOmpnm8cjtmP5uB+D56CilfO W+3/5BQpwUD8c8qIj/GTedz0bIhFW7AkViKd4z1xUoRqIgSG4aMknXx3Uq/jRBob tZI0ZWF3gw5PBNl8p+W3HED26GvnU2hi6iGpHZoil82Le0BttPfrFRvDudPbe3v5 t0WxllBJ9BGztgRbB/Kv0hSgiVt5sZ3N9iY96HzVzWOSBuFXFmYwcZMVrLfvzXqO 9XKZKeg65pLt1R8Z+aBChZpoGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEdVI6E2 pKZYn1K0RK9PAMRT7kHVMB8GA1UdIwQYMBaAFDJmMGpwONybAVMnxyVWQF85/OYL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjQ0RS9FNDNCNkU0QTQw NUQxMUU3QjAxQkExNDVDNEY5QUUwMi9NbVl3YW5BNDNKc0JVeWZISlZaQVh6bjg1 Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tWXdhbkE0M0pzQlV5ZkhKVlpBWHpuODVncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjQ0RS9FNDNCNkU0QTQwNUQxMUU3QjAxQkExNDVDNEY5QUUwMi9NbVl3YW5BNDNK c0JVeWZISlZaQVh6bjg1Z3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKOLaGq9mh20lM64fI1aMHlUyq4yiPCXRbwpxWIwptpHE2JwgVfeMu DZGJhz1YfiEmYcgtL1IMAyapiRKr5D6b6w9TQ1QIiPV7IOU6P5MpY5u8dIayrhoL XzCHyEVcO9pyoOtQyDxaL6PkKvcWiDtmDkt+A5x87WqmOrngmW5wb5gm/rvE6GXf GhHrivdVuNkOjrI+tB0AT3jhZ5/Ir8IgsT9b45WvPjmdy428FatR+m/wd0ro3SjY +Ify8ByYv+iRZkckaDKMnzRwTbxewi04pHZicfwH8OaNicbpY/POdoVVQkS/P4zB 5cOu6LSQgeNUJEKnGK46dRbkVh9wzCdb -----END CERTIFICATE-----Generated at Mon May 6 17:36:24 2024 by rpki-client on console-fra.rpki-client.org