$ rpki-client -vvf rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.mft File: fJ9yIp7REllMdyLTwhtRBeKfxIo.mft (raw, json) Hash identifier: n/yd8fqWk6tb3DyRoyRv8+xwC6UPaULodVuDutjPxvg= Subject key identifier: 91:16:5F:19:D0:A9:5F:5E:27:6E:7D:2D:11:11:0E:90:70:03:3D:A3 Authority key identifier: 7C:9F:72:22:9E:D1:12:59:4C:77:22:D3:C2:1B:51:05:E2:9F:C4:8A Certificate issuer: /CN=A91F77AD/serialNumber=7C9F72229ED112594C7722D3C21B5105E29FC48A Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJ9yIp7REllMdyLTwhtRBeKfxIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.mft Manifest number: A6 Signing time: Fri 17 May 2024 06:52:26 +0000 Manifest this update: Fri 17 May 2024 06:52:26 +0000 Manifest next update: Fri 24 May 2024 06:52:26 +0000 Files and hashes: 1: fJ9yIp7REllMdyLTwhtRBeKfxIo.crl (hash: Gq4yzf9qwcGLfYoqqniPlGtVmSjgqKDkMktkf9FxcxU=) 2: 0D99319006F011EFA8C8D445C4F9AE02.roa (hash: C6re+QWyYWAh1U39CaaLD4VccggpP51RWJ3NUe7kXOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.crl rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJ9yIp7REllMdyLTwhtRBeKfxIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 06:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F77AD/serialNumber=7C9F72229ED112594C7722D3C21B5105E29FC48A Validity Not Before: May 17 06:52:26 2024 GMT Not After : May 24 06:52:26 2024 GMT Subject: CN=6646feaa-fd0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4a:84:23:6d:b6:44:d2:89:c4:aa:1b:43:eb: b9:d9:ae:a9:34:df:10:ea:27:af:ec:6f:42:44:b1: 63:a9:57:d6:53:d8:41:43:e9:ab:dd:fa:4c:15:81: 7d:12:ec:e5:09:c4:12:f1:e6:30:f5:6a:82:26:dd: d3:59:c3:f4:b2:34:76:cc:55:4a:c1:3d:35:e8:5e: 47:01:6e:5e:63:d6:bf:54:80:7e:0a:2c:e8:c1:5d: 96:2a:01:40:b4:e1:c1:32:71:dd:4e:cd:6b:5a:71: c2:1f:4d:88:30:e8:55:6e:04:5a:b0:43:4f:0f:35: f6:53:89:e2:3c:4b:39:c4:10:91:47:0e:35:14:18: ba:6e:7b:d5:1f:d6:fb:1c:36:ad:f5:fc:d8:30:ea: 11:d8:95:c4:5f:5b:f9:28:c2:f1:85:65:0d:21:1a: ec:ef:a0:b2:fa:51:54:fb:09:19:b8:de:a8:e2:3a: ee:49:f7:2a:09:7d:7a:d1:e2:de:07:00:31:e4:c3: 39:80:fd:e9:1c:14:9f:f3:00:2d:9c:77:d1:3d:97: cb:9a:d2:d5:f0:a6:51:13:e3:a0:d2:c6:bc:ac:d0: 8a:38:d9:dd:85:94:68:9e:3c:19:b0:2e:4c:49:d9: 3d:8b:44:ef:08:d5:68:6c:2e:f1:ee:35:f5:83:c9: a4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:16:5F:19:D0:A9:5F:5E:27:6E:7D:2D:11:11:0E:90:70:03:3D:A3 X509v3 Authority Key Identifier: keyid:7C:9F:72:22:9E:D1:12:59:4C:77:22:D3:C2:1B:51:05:E2:9F:C4:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJ9yIp7REllMdyLTwhtRBeKfxIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:f3:4e:f7:05:31:ca:38:72:f6:36:f5:d3:b1:9e:61:31:48: bf:85:80:d0:52:8e:84:06:2c:07:85:66:91:f9:f5:3c:86:00: 26:e6:2a:c8:0b:e8:6c:51:3e:76:ef:f8:64:cc:d1:90:28:25: 74:09:bd:ed:7d:68:e4:9b:ad:91:0a:16:f0:83:f0:32:05:85: f2:df:fa:17:ad:96:8b:de:57:ef:9c:5c:f3:22:1b:51:88:8f: 50:ba:39:49:41:82:a0:c7:15:3b:ea:d1:25:80:6d:7f:8c:a9: 47:99:b8:3b:54:9b:bc:8a:38:91:bf:c9:ef:3c:05:2c:7a:55: 2f:a6:c6:64:fc:a7:29:07:a9:43:20:9b:ea:e1:81:60:d9:2c: e0:77:90:a1:e5:53:87:10:48:fd:e7:43:30:ad:0b:11:80:f9: c6:85:5e:e4:5c:d6:da:90:b1:02:16:99:56:15:6b:4c:8f:ac: 97:0f:43:27:ca:03:88:5a:e2:88:eb:ce:6a:05:0c:63:03:8c: 25:36:50:b9:3f:58:39:c7:36:08:76:aa:fc:de:f6:e4:e2:95: 96:d9:22:b8:11:1b:24:a9:17:bd:58:fa:c0:f8:f4:36:a5:96: 44:5f:41:f0:d7:0c:56:ff:55:f9:2e:e8:70:65:66:b0:56:95: 56:28:a9:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc3QUQxMTAvBgNVBAUTKDdDOUY3MjIyOUVEMTEyNTk0Qzc3MjJEM0MyMUI1MTA1 RTI5RkM0OEEwHhcNMjQwNTE3MDY1MjI2WhcNMjQwNTI0MDY1MjI2WjAYMRYwFAYD VQQDEw02NjQ2ZmVhYS1mZDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtkqEI222RNKJxKobQ+u52a6pNN8Q6iev7G9CRLFjqVfWU9hBQ+mr3fpMFYF9 EuzlCcQS8eYw9WqCJt3TWcP0sjR2zFVKwT016F5HAW5eY9a/VIB+CizowV2WKgFA tOHBMnHdTs1rWnHCH02IMOhVbgRasENPDzX2U4niPEs5xBCRRw41FBi6bnvVH9b7 HDat9fzYMOoR2JXEX1v5KMLxhWUNIRrs76Cy+lFU+wkZuN6o4jruSfcqCX160eLe BwAx5MM5gP3pHBSf8wAtnHfRPZfLmtLV8KZRE+Og0sa8rNCKONndhZRonjwZsC5M Sdk9i0TvCNVobC7x7jX1g8mk8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJEWXxnQ qV9eJ259LRERDpBwAz2jMB8GA1UdIwQYMBaAFHyfciKe0RJZTHci08IbUQXin8SK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzdBRC9DRTZDMjM3QTIw QTgxMUVFOTg2MzdGMjNDNEY5QUUwMi9mSjl5SXA3UkVsbE1keUxUd2h0UkJlS2Z4 SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZKOXlJcDdSRWxsTWR5TFR3aHRSQmVLZnhJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzdBRC9DRTZDMjM3QTIwQTgxMUVFOTg2MzdGMjNDNEY5QUUwMi9mSjl5SXA3UkVs bE1keUxUd2h0UkJlS2Z4SW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC88073BTHKOHL2NvXTsZ5hMUi/hYDQUo6EBiwHhWaR+fU8hgAm5irI C+hsUT527/hkzNGQKCV0Cb3tfWjkm62RChbwg/AyBYXy3/oXrZaL3lfvnFzzIhtR iI9QujlJQYKgxxU76tElgG1/jKlHmbg7VJu8ijiRv8nvPAUselUvpsZk/KcpB6lD IJvq4YFg2Szgd5Ch5VOHEEj950MwrQsRgPnGhV7kXNbakLECFplWFWtMj6yXD0Mn ygOIWuKI685qBQxjA4wlNlC5P1g5xzYIdqr83vbk4pWW2SK4ERskqRe9WPrA+PQ2 pZZEX0Hw1wxW/1X5LuhwZWawVpVWKKlr -----END CERTIFICATE-----Generated at Fri May 17 08:52:57 2024 by rpki-client on console-ams.rpki-client.org