$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft File: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft (raw, json) Hash identifier: mpcl8L7qv5QISMt5Yt475hdkufS+dIRo8L+p16B2rqo= Subject key identifier: F2:73:59:CB:86:FE:A2:E9:BC:BF:D2:63:00:AE:FD:B4:0E:FA:50:D7 Authority key identifier: F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42 Certificate issuer: /CN=A91FA5A2/serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342 Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft Manifest number: 5D Signing time: Fri 17 May 2024 08:01:14 +0000 Manifest this update: Fri 17 May 2024 08:01:13 +0000 Manifest next update: Fri 24 May 2024 08:01:13 +0000 Files and hashes: 1: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl (hash: qOWRevbJfmoh4nIGaeFvJb47WrDDUSQXNzr0AuqWfC8=) 2: 9FE80B2898F711EE87DF6E1FC4F9AE02.roa (hash: v4cQH88v9SBKVJ4k+DZ6E06a5eSVekHDtLQSR49YDI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA5A2/serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342 Validity Not Before: May 17 08:01:13 2024 GMT Not After : May 24 08:01:13 2024 GMT Subject: CN=66470ec9-cd45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:84:88:2f:e8:3f:c5:bc:34:90:f7:6d:ea:89: 59:9e:cb:b4:50:a3:df:85:c1:82:22:78:21:55:44: 2e:d4:74:60:54:b3:89:5a:4e:85:de:64:f6:51:a1: d0:85:12:ae:af:d1:e9:86:a1:45:b5:82:1c:d0:8b: b8:05:bc:75:a1:37:2b:43:12:b6:18:cf:60:4b:69: 29:d5:2f:71:7c:fe:f1:2d:25:01:ca:6d:d8:44:57: f9:a9:c0:42:f0:19:35:5f:cb:e6:ff:a7:a6:8e:97: d6:40:dc:33:31:9a:a6:04:da:5c:1a:f7:fe:dd:1d: 6f:fa:d0:fa:66:2d:86:f2:d1:68:c9:b7:25:a8:14: c2:74:67:bd:d8:b8:0a:9d:c9:51:fd:6f:92:5a:29: 2d:37:95:73:54:b1:fa:96:3d:fa:2e:f5:62:4f:41: e9:8c:ed:65:90:c8:cc:05:6e:cb:ce:69:b1:1d:f1: f9:17:95:a0:5b:30:a7:1d:89:71:8a:67:17:48:b5: 32:a2:ed:65:bc:a6:3e:da:e0:9f:82:b7:78:d4:93: ed:a5:f6:45:5c:0b:77:3b:6c:3e:8c:aa:02:ab:56: fe:27:84:44:86:09:32:70:d5:76:ff:76:af:89:24: ed:52:31:ba:e4:c4:86:7f:0b:9f:e8:f6:f9:af:1a: 0c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:73:59:CB:86:FE:A2:E9:BC:BF:D2:63:00:AE:FD:B4:0E:FA:50:D7 X509v3 Authority Key Identifier: keyid:F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:6a:8a:ae:ee:41:d9:9d:05:7d:4a:ac:e2:39:81:f1:fa:c2: 79:da:92:04:03:23:e1:64:7b:1f:26:d2:7b:0c:ae:00:5a:13: 41:a8:63:77:95:e2:cf:08:fe:14:5e:42:75:b3:5c:54:3a:fb: 39:5e:52:05:01:0a:01:d0:e7:8f:52:c3:3d:e1:60:4d:74:19: 54:e8:b3:e7:a3:ea:4f:b5:10:41:22:01:1a:95:e4:70:da:70: 9a:0d:1c:65:53:67:6d:7f:11:5b:97:a8:cf:68:01:07:e7:10: f3:7d:0f:cb:fc:dd:04:97:9e:fe:ed:a4:61:60:0b:ce:77:b1: e7:a1:a8:87:f8:2b:ba:23:4a:c4:4d:5d:9e:19:d3:28:b4:4c: 51:e7:7c:e0:77:5f:12:69:59:fe:75:75:5c:ea:77:f6:fd:9c: 8e:6e:67:fd:4f:5d:7f:8f:e0:b9:f4:e0:88:2e:18:f4:02:e4: cb:98:4c:02:59:bf:75:14:c4:17:19:b9:ee:9a:82:b6:37:0d: 60:89:ab:0e:7f:41:0b:0f:5a:f0:4b:bd:5a:6d:e2:b9:7d:b7: 52:f4:d3:6e:5f:d4:cb:aa:82:d2:7e:7c:ed:ee:e6:af:91:02: d4:74:fb:93:d0:2e:f3:fb:50:de:5f:fc:b8:81:93:af:94:f5: 5d:c4:5d:52 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QTVBMjExMC8GA1UEBRMoRjVCMTE3MDU0QUY1MDlDMkMzMzM2OURBOTYxRjQ0NkRE Q0FCODM0MjAeFw0yNDA1MTcwODAxMTNaFw0yNDA1MjQwODAxMTNaMBgxFjAUBgNV BAMTDTY2NDcwZWM5LWNkNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCihIgv6D/FvDSQ923qiVmey7RQo9+FwYIieCFVRC7UdGBUs4laToXeZPZRodCF Eq6v0emGoUW1ghzQi7gFvHWhNytDErYYz2BLaSnVL3F8/vEtJQHKbdhEV/mpwELw GTVfy+b/p6aOl9ZA3DMxmqYE2lwa9/7dHW/60PpmLYby0WjJtyWoFMJ0Z73YuAqd yVH9b5JaKS03lXNUsfqWPfou9WJPQemM7WWQyMwFbsvOabEd8fkXlaBbMKcdiXGK ZxdItTKi7WW8pj7a4J+Ct3jUk+2l9kVcC3c7bD6MqgKrVv4nhESGCTJw1Xb/dq+J JO1SMbrkxIZ/C5/o9vmvGgypAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8nNZy4b+ oum8v9JjAK79tA76UNcwHwYDVR0jBBgwFoAU9bEXBUr1CcLDM2nalh9Ebdyrg0Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZBNUEyLzQ2NzBFQUFDOThG NjExRUVCQkYxRjQxN0M0RjlBRTAyLzliRVhCVXIxQ2NMRE0ybmFsaDlFYmR5cmcw SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOWJFWEJVcjFDY0xETTJuYWxoOUViZHlyZzBJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZB NUEyLzQ2NzBFQUFDOThGNjExRUVCQkYxRjQxN0M0RjlBRTAyLzliRVhCVXIxQ2NM RE0ybmFsaDlFYmR5cmcwSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADRqiq7uQdmdBX1KrOI5gfH6wnnakgQDI+Fkex8m0nsMrgBaE0GoY3eV 4s8I/hReQnWzXFQ6+zleUgUBCgHQ549Swz3hYE10GVTos+ej6k+1EEEiARqV5HDa cJoNHGVTZ21/EVuXqM9oAQfnEPN9D8v83QSXnv7tpGFgC853seehqIf4K7ojSsRN XZ4Z0yi0TFHnfOB3XxJpWf51dVzqd/b9nI5uZ/1PXX+P4Ln04IguGPQC5MuYTAJZ v3UUxBcZue6agrY3DWCJqw5/QQsPWvBLvVpt4rl9t1L0025f1MuqgtJ+fO3u5q+R AtR0+5PQLvP7UN5f/LiBk6+U9V3EXVI= -----END CERTIFICATE-----Generated at Fri May 17 08:52:57 2024 by rpki-client on console-ams.rpki-client.org