$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft File: 9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft (raw, json) Hash identifier: ESXo5KahpUM/HH2+EP7koAFwi6YyIIm9vBi2s/0/B4g= Subject key identifier: FF:BA:B7:F6:24:0B:B5:09:25:72:01:8F:86:09:9F:29:5A:C4:D8:F8 Authority key identifier: F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32 Certificate issuer: /CN=A91F6D91/serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32 Certificate serial: 057E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft Manifest number: 0569 Signing time: Wed 01 May 2024 01:06:53 +0000 Manifest this update: Wed 01 May 2024 01:06:52 +0000 Manifest next update: Wed 08 May 2024 01:06:52 +0000 Files and hashes: 1: 9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl (hash: OlBZQ1X1gVqG8WlhlVfplioZ1TgIrkw8MOsaDI+VR7o=) 2: 105CB01A830711ECB472CA0AC4F9AE02.roa (hash: zyghhD83E3ancqyM0ivmhcS7xqw8/v//USJy6ajnwTk=) 3: 0E2711E6830711ECB472CA0AC4F9AE02.roa (hash: sAPblarR1RVbcdAB8jcZ3zm1ZUu8MrXig2RJFCDYAAk=) 4: 0F6980C0830711ECB472CA0AC4F9AE02.roa (hash: BctLpnq9bXMH0MAtTDoa/bRoNASj+b76mdAuRKsBwpY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 00:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1406 (0x57e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6D91/serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32 Validity Not Before: May 1 01:06:52 2024 GMT Not After : May 8 01:06:52 2024 GMT Subject: CN=663195ac-b74a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:38:1a:c2:d4:1d:0e:ba:ec:bd:af:52:6c:ae: f4:c0:b8:60:a4:a9:59:cf:79:47:cd:42:f0:3b:53: 06:b4:52:f9:98:15:aa:22:9d:40:c1:70:d7:fc:73: 2b:6d:d3:4d:6e:72:60:12:29:16:ed:99:c4:c9:7f: 7a:2b:46:3c:d7:d7:a8:4d:44:09:a3:d7:fa:0c:f8: bd:cc:f6:93:b8:e1:de:ec:5e:be:57:00:43:4d:8e: 94:66:e8:84:3f:16:b4:e8:d3:15:1e:eb:a7:4c:50: 0c:0f:bf:d3:1c:f5:21:aa:78:7d:fc:7c:cd:c0:80: 3a:3a:92:e2:be:ec:36:78:12:46:1a:1e:a6:aa:eb: 3b:fe:56:4f:81:92:e9:6e:cd:0d:17:24:2f:4b:1c: 07:78:8b:9b:cb:8c:16:bf:3d:4e:5d:ee:cf:22:27: 14:7f:62:a4:cc:03:79:98:bc:a8:9d:e3:e2:36:af: 79:bd:78:e3:45:c1:58:7f:88:59:82:25:c2:1c:69: 1c:b7:ef:7c:66:6b:55:0b:7f:c4:1d:0f:0c:f8:a2: 33:20:e3:31:bb:0a:85:0a:71:44:2c:ab:6d:56:e3: 7c:cd:53:81:e6:ac:1f:c1:59:35:e0:45:51:f2:5c: 27:d0:bb:08:af:6e:e8:d8:bb:1e:e6:29:c4:62:8f: bc:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:BA:B7:F6:24:0B:B5:09:25:72:01:8F:86:09:9F:29:5A:C4:D8:F8 X509v3 Authority Key Identifier: keyid:F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:1b:c9:62:1d:91:8b:03:0f:da:ce:79:31:cf:84:61:61:bd: 34:27:e6:9a:52:29:40:de:4a:48:0c:d0:95:08:8a:44:fe:19: b3:3d:d3:d2:da:fa:0d:be:4c:f7:36:54:12:8a:61:59:43:bb: 58:27:59:ce:dc:08:97:bb:f7:33:de:b6:0a:8b:a1:c5:2e:da: 9e:f3:07:48:3e:dc:41:7d:e1:a5:57:7c:ed:41:f9:13:3e:69: 76:a3:6a:02:54:91:f7:06:ed:72:64:99:46:b6:e0:02:02:9b: 65:42:b5:1e:c1:ae:00:11:d3:18:18:32:2b:12:f6:4d:cf:b1: 68:66:ee:c4:ce:ec:15:7b:bb:40:0c:a2:ed:1d:89:8c:3f:7e: ff:ec:21:16:27:c2:8e:b6:8b:d3:53:e2:1d:43:23:c7:21:b7: a8:3f:ad:83:21:c1:90:5b:e4:13:93:3b:a8:df:94:7f:a7:bc: 07:e0:6a:14:6b:fc:5a:7e:42:cf:af:c9:3c:81:90:ac:f1:1b: 65:ac:b9:ca:5a:8e:15:3b:ba:a3:07:b7:bd:27:ea:7b:72:d9: 00:76:09:0f:61:70:61:2c:ec:59:53:cd:b8:b0:bd:75:f9:39: 5d:d6:13:3c:e6:94:ac:52:61:0e:d6:14:83:24:e3:3e:28:31: a9:0f:c4:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZEOTExMTAvBgNVBAUTKEY2NzE4QTVFNUU0MkQwOEUyNTNBMkZCMzAwRkYwOUMz RjUzNTFEMzIwHhcNMjQwNTAxMDEwNjUyWhcNMjQwNTA4MDEwNjUyWjAYMRYwFAYD VQQDEw02NjMxOTVhYy1iNzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqjgawtQdDrrsva9SbK70wLhgpKlZz3lHzULwO1MGtFL5mBWqIp1AwXDX/HMr bdNNbnJgEikW7ZnEyX96K0Y819eoTUQJo9f6DPi9zPaTuOHe7F6+VwBDTY6UZuiE Pxa06NMVHuunTFAMD7/THPUhqnh9/HzNwIA6OpLivuw2eBJGGh6mqus7/lZPgZLp bs0NFyQvSxwHeIuby4wWvz1OXe7PIicUf2KkzAN5mLyonePiNq95vXjjRcFYf4hZ giXCHGkct+98ZmtVC3/EHQ8M+KIzIOMxuwqFCnFELKttVuN8zVOB5qwfwVk14EVR 8lwn0LsIr27o2Lse5inEYo+80wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+6t/Yk C7UJJXIBj4YJnylaxNj4MB8GA1UdIwQYMBaAFPZxil5eQtCOJTovswD/CcP1NR0y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkQ5MS9FNTE3RjJCNjlB RTUxMUVCODM3RjEzNUVDNEY5QUUwMi85bkdLWGw1QzBJNGxPaS16QVA4SndfVTFI VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzluR0tYbDVDMEk0bE9pLXpBUDhKd19VMUhUSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkQ5MS9FNTE3RjJCNjlBRTUxMUVCODM3RjEzNUVDNEY5QUUwMi85bkdLWGw1QzBJ NGxPaS16QVA4SndfVTFIVEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiG8liHZGLAw/aznkxz4RhYb00J+aaUilA3kpIDNCVCIpE/hmzPdPS 2voNvkz3NlQSimFZQ7tYJ1nO3AiXu/cz3rYKi6HFLtqe8wdIPtxBfeGlV3ztQfkT Pml2o2oCVJH3Bu1yZJlGtuACAptlQrUewa4AEdMYGDIrEvZNz7FoZu7EzuwVe7tA DKLtHYmMP37/7CEWJ8KOtovTU+IdQyPHIbeoP62DIcGQW+QTkzuo35R/p7wH4GoU a/xafkLPr8k8gZCs8RtlrLnKWo4VO7qjB7e9J+p7ctkAdgkPYXBhLOxZU824sL11 +Tld1hM85pSsUmEO1hSDJOM+KDGpD8Sq -----END CERTIFICATE-----Generated at Wed May 1 01:38:32 2024 by rpki-client on console-ams.rpki-client.org