$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft File: Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft (raw, json) Hash identifier: VuanVHN7XmEj47D4xzFbiIdGmaJHCInIaUKOuPpUJYM= Subject key identifier: E1:5E:7C:A1:25:0E:EB:1C:38:12:00:F5:29:B6:D1:70:B2:C8:66:87 Authority key identifier: 32:6E:55:E7:4B:06:CD:83:F9:94:CC:1D:A6:65:65:42:1C:C9:E2:19 Certificate issuer: /CN=A91F7AC9/serialNumber=326E55E74B06CD83F994CC1DA66565421CC9E219 Certificate serial: 044A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft Manifest number: 0445 Signing time: Fri 17 May 2024 02:04:42 +0000 Manifest this update: Fri 17 May 2024 02:04:41 +0000 Manifest next update: Fri 24 May 2024 02:04:41 +0000 Files and hashes: 1: Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl (hash: gZpsKGqJFoca3lRw6gjLnIcBnxa9WpTkGpItNcq6W08=) 2: 66CA9E0C0C5C11ECBD37E846C4F9AE02.roa (hash: 9KrFu8rfuzGcElTJ+SW1V8KTmVUFQFDwJgp8Mmol+WA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 00:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1098 (0x44a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7AC9/serialNumber=326E55E74B06CD83F994CC1DA66565421CC9E219 Validity Not Before: May 17 02:04:41 2024 GMT Not After : May 24 02:04:41 2024 GMT Subject: CN=6646bb3a-412a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0b:4a:f3:72:d6:db:53:73:d3:eb:98:74:65: f8:c8:78:39:f4:4a:56:b0:30:87:e9:95:10:d0:31: 37:ab:dc:7f:e9:4b:f3:80:80:c8:49:73:51:41:19: 4c:eb:82:de:f9:7b:c9:a7:ef:c8:50:c8:3b:6d:c7: 00:46:e5:6a:94:4d:24:5d:be:3e:5e:cd:34:90:02: 55:90:87:fc:3d:f9:8b:ca:4f:be:b6:09:eb:69:37: c5:2b:c5:42:b5:89:b9:5a:e5:f6:67:8e:53:68:0a: 87:d4:d6:92:b2:34:bc:4c:3f:81:0d:24:8a:a4:88: b8:62:bc:78:a5:a2:78:ee:0d:73:67:8b:a7:47:6c: 43:27:61:8d:15:e8:3d:e6:3e:0d:5a:fd:b2:26:ca: 4a:20:6e:32:03:44:3d:22:cd:6c:89:9d:c7:54:e0: df:7d:af:77:a5:d8:6d:8a:28:1f:6c:3a:37:90:0d: c9:b4:a2:13:af:02:62:6d:48:9f:c5:7a:5d:af:26: f8:32:27:7f:9d:07:2a:9d:08:62:17:81:d1:52:a8: ec:8a:f1:2d:c4:7a:a8:4a:74:df:12:92:11:5a:a2: 4e:66:e8:26:ac:25:8b:41:e4:7d:a6:6f:46:40:a5: a8:fc:66:61:d6:5c:1c:b0:e8:df:e8:a1:27:e8:e4: df:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:5E:7C:A1:25:0E:EB:1C:38:12:00:F5:29:B6:D1:70:B2:C8:66:87 X509v3 Authority Key Identifier: keyid:32:6E:55:E7:4B:06:CD:83:F9:94:CC:1D:A6:65:65:42:1C:C9:E2:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:67:47:16:de:21:ce:ac:e0:d7:52:e1:b3:bb:24:e7:20:6c: cb:b2:39:7a:3f:8e:99:5f:61:06:d6:36:4d:c2:6a:da:84:24: 33:ff:59:6b:fc:1a:40:dc:61:cc:d7:ce:00:9f:da:66:61:71: 0f:37:2e:24:4e:85:77:c7:a9:a8:29:c0:a4:ee:0e:88:cf:23: 61:a9:b3:4d:d7:1b:e0:c8:c5:67:2c:34:b6:d9:db:b0:cc:08: 28:65:dd:96:be:8d:62:22:d7:0f:f9:47:82:e3:f0:4f:9d:04: 8e:95:d7:37:dd:d9:8f:8c:fc:33:12:a4:f1:4b:13:04:69:06: 51:63:3d:ad:ba:9e:bc:a9:57:84:b9:81:30:13:1a:3e:af:60: 8f:5c:76:85:05:a5:d3:83:78:77:d6:3c:9e:1e:44:06:8e:b0: a9:d3:f1:fa:94:87:73:34:01:e7:2d:ef:c1:7c:4e:bc:b7:c9: 1b:a3:90:e4:e9:a4:ab:b3:9f:ea:ca:6c:03:61:17:9f:8f:85: c5:51:9d:96:9f:e9:5e:ab:0f:ee:b1:00:b1:3c:d5:2b:ae:98: 81:ea:30:fa:49:8e:76:54:02:62:af:3c:d0:3d:85:5f:b0:c6: fc:cf:28:17:fd:1f:45:17:8b:75:72:f1:8f:5a:ee:a9:72:9e: 5d:6b:f8:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdBQzkxMTAvBgNVBAUTKDMyNkU1NUU3NEIwNkNEODNGOTk0Q0MxREE2NjU2NTQy MUNDOUUyMTkwHhcNMjQwNTE3MDIwNDQxWhcNMjQwNTI0MDIwNDQxWjAYMRYwFAYD VQQDEw02NjQ2YmIzYS00MTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAswtK83LW21Nz0+uYdGX4yHg59EpWsDCH6ZUQ0DE3q9x/6UvzgIDISXNRQRlM 64Le+XvJp+/IUMg7bccARuVqlE0kXb4+Xs00kAJVkIf8PfmLyk++tgnraTfFK8VC tYm5WuX2Z45TaAqH1NaSsjS8TD+BDSSKpIi4Yrx4paJ47g1zZ4unR2xDJ2GNFeg9 5j4NWv2yJspKIG4yA0Q9Is1siZ3HVODffa93pdhtiigfbDo3kA3JtKITrwJibUif xXpdryb4Mid/nQcqnQhiF4HRUqjsivEtxHqoSnTfEpIRWqJOZugmrCWLQeR9pm9G QKWo/GZh1lwcsOjf6KEn6OTfWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOFefKEl DuscOBIA9Sm20XCyyGaHMB8GA1UdIwQYMBaAFDJuVedLBs2D+ZTMHaZlZUIcyeIZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0FDOS8wRDlGNDBFNjBD NUExMUVDOUY0MTUzNDVDNEY5QUUwMi9NbTVWNTBzR3pZUDVsTXdkcG1WbFFoeko0 aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tNVY1MHNHellQNWxNd2RwbVZsUWh6SjRoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0FDOS8wRDlGNDBFNjBDNUExMUVDOUY0MTUzNDVDNEY5QUUwMi9NbTVWNTBzR3pZ UDVsTXdkcG1WbFFoeko0aGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVZ0cW3iHOrODXUuGzuyTnIGzLsjl6P46ZX2EG1jZNwmrahCQz/1lr /BpA3GHM184An9pmYXEPNy4kToV3x6moKcCk7g6IzyNhqbNN1xvgyMVnLDS22duw zAgoZd2Wvo1iItcP+UeC4/BPnQSOldc33dmPjPwzEqTxSxMEaQZRYz2tup68qVeE uYEwExo+r2CPXHaFBaXTg3h31jyeHkQGjrCp0/H6lIdzNAHnLe/BfE68t8kbo5Dk 6aSrs5/qymwDYRefj4XFUZ2Wn+leqw/usQCxPNUrrpiB6jD6SY52VAJirzzQPYVf sMb8zygX/R9FF4t1cvGPWu6pcp5da/g8 -----END CERTIFICATE-----Generated at Fri May 17 02:38:41 2024 by rpki-client on console-fra.rpki-client.org