$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAA31/DD644878609411E8B56C1810C4F9AE02/AUAiU_Mbys_7c9aF1wDJtrdBBDw.mft File: AUAiU_Mbys_7c9aF1wDJtrdBBDw.mft (raw, json) Hash identifier: O2NgPpiivcTczX34BGpqceX0oc0DuVkYoeos93MqN7s= Subject key identifier: AE:E1:E1:E8:84:09:F3:AB:83:45:F4:DD:CE:2F:FE:10:44:61:4B:21 Authority key identifier: 01:40:22:53:F3:1B:CA:CF:FB:73:D6:85:D7:00:C9:B6:B7:41:04:3C Certificate issuer: /CN=A91FAA31/serialNumber=01402253F31BCACFFB73D685D700C9B6B741043C Certificate serial: 13D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AUAiU_Mbys_7c9aF1wDJtrdBBDw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAA31/DD644878609411E8B56C1810C4F9AE02/AUAiU_Mbys_7c9aF1wDJtrdBBDw.mft Manifest number: 13D1 Signing time: Mon 22 Apr 2024 17:29:52 +0000 Manifest this update: Mon 22 Apr 2024 17:29:52 +0000 Manifest next update: Mon 29 Apr 2024 17:29:52 +0000 Files and hashes: 1: AUAiU_Mbys_7c9aF1wDJtrdBBDw.crl (hash: o/Fq9sT6KgY+WDGobBgAu3Ujcka1II3/5sCjlY8Ua6M=) 2: 49CB8044609511E8BF4FB410C4F9AE02.roa (hash: /tzB1l/pf/4O4pwElZ7x/pQMrvZg0eYZwPv9FLunIjM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAA31/DD644878609411E8B56C1810C4F9AE02/AUAiU_Mbys_7c9aF1wDJtrdBBDw.crl rsync://rpki.apnic.net/member_repository/A91FAA31/DD644878609411E8B56C1810C4F9AE02/AUAiU_Mbys_7c9aF1wDJtrdBBDw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AUAiU_Mbys_7c9aF1wDJtrdBBDw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Apr 2024 17:29:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5081 (0x13d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAA31/serialNumber=01402253F31BCACFFB73D685D700C9B6B741043C Validity Not Before: Apr 22 17:29:52 2024 GMT Not After : Apr 29 17:29:52 2024 GMT Subject: CN=66269e90-0418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:aa:c4:d6:76:cc:5e:22:d3:e7:4f:13:cc:c8: e4:6e:4f:51:a0:99:06:69:90:69:a7:24:09:0a:aa: 02:d2:7c:7e:fe:9a:1b:71:56:d0:93:4d:ef:27:b7: 1b:24:a9:31:1a:15:79:30:d4:9f:90:61:c8:e8:e2: f2:76:17:c1:d0:dd:c3:73:1e:bc:12:0f:0e:c2:36: 0f:06:df:3f:bc:07:0b:08:6c:51:07:f3:52:84:b6: a6:74:fc:88:74:20:7c:c7:4c:05:92:6d:95:af:60: 62:93:b0:48:7f:82:90:2a:0e:b8:34:0e:1a:66:08: fc:e3:9e:59:af:08:f5:98:ab:74:4a:4b:3b:ab:cd: 05:d0:f1:d9:9b:f9:95:57:19:52:7a:01:96:c7:da: f6:63:bc:e6:d5:69:fc:1e:ad:2b:6c:22:14:0a:16: 07:48:7f:cb:3b:fa:49:a3:b9:97:d2:3a:96:6b:67: 96:e6:ea:f4:19:26:95:03:46:a2:33:8b:04:8f:e7: df:41:30:f6:da:cf:48:ba:a0:98:9f:6f:52:17:c8: 46:62:d7:b8:96:a2:b4:c9:7c:e1:52:a4:f0:46:57: 8d:8e:2d:69:07:3f:3e:bf:74:e8:63:2d:25:c8:ae: 0a:5f:97:90:ee:eb:5b:15:bd:8e:93:36:44:fc:1a: 8f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E1:E1:E8:84:09:F3:AB:83:45:F4:DD:CE:2F:FE:10:44:61:4B:21 X509v3 Authority Key Identifier: keyid:01:40:22:53:F3:1B:CA:CF:FB:73:D6:85:D7:00:C9:B6:B7:41:04:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAA31/DD644878609411E8B56C1810C4F9AE02/AUAiU_Mbys_7c9aF1wDJtrdBBDw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AUAiU_Mbys_7c9aF1wDJtrdBBDw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAA31/DD644878609411E8B56C1810C4F9AE02/AUAiU_Mbys_7c9aF1wDJtrdBBDw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:8c:b6:db:72:2d:54:f0:1c:05:30:c7:ac:26:12:12:e2:ad: c3:16:69:b2:c1:f5:f0:bd:35:e0:2e:40:46:cc:17:08:24:53: e9:0e:ce:07:80:07:c9:16:f6:1c:9b:3e:bd:24:18:4e:11:c9: 06:28:73:cf:ea:74:09:68:85:3a:9f:01:d1:45:d1:db:e1:cd: 94:1f:d8:0a:d6:22:de:bc:66:b7:dd:19:2d:a3:6c:ea:a5:aa: f8:72:29:76:95:7e:7a:b1:cd:33:db:90:b6:a4:35:ae:ea:a9: 6a:8b:0b:e4:0a:55:82:dc:92:ea:d9:21:d8:28:6f:b2:46:d1: 7e:1c:9a:3c:39:6d:b4:92:a0:cc:cb:53:84:0e:eb:de:02:a6: 3f:17:97:41:b8:ba:81:84:84:94:22:26:03:d6:60:f8:9a:ea: e9:c6:22:05:39:a5:5b:f7:59:06:48:c6:91:b9:45:9e:46:ab: 8e:41:5a:c4:3f:ce:fc:a0:46:ef:a4:34:3f:f8:db:f5:1a:8d: 45:7b:f7:a2:5f:0f:fd:45:84:81:50:d7:c4:c8:60:1a:0b:8f: 93:35:e5:00:18:3a:64:e0:cb:6f:9e:7c:06:ba:0e:ca:f9:f8: eb:71:5a:eb:13:ac:2a:d0:35:ac:69:a2:7f:a8:7a:36:06:31: 33:37:a1:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFBMzExMTAvBgNVBAUTKDAxNDAyMjUzRjMxQkNBQ0ZGQjczRDY4NUQ3MDBDOUI2 Qjc0MTA0M0MwHhcNMjQwNDIyMTcyOTUyWhcNMjQwNDI5MTcyOTUyWjAYMRYwFAYD VQQDEw02NjI2OWU5MC0wNDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnarE1nbMXiLT508TzMjkbk9RoJkGaZBppyQJCqoC0nx+/pobcVbQk03vJ7cb JKkxGhV5MNSfkGHI6OLydhfB0N3Dcx68Eg8OwjYPBt8/vAcLCGxRB/NShLamdPyI dCB8x0wFkm2Vr2Bik7BIf4KQKg64NA4aZgj8455Zrwj1mKt0Sks7q80F0PHZm/mV VxlSegGWx9r2Y7zm1Wn8Hq0rbCIUChYHSH/LO/pJo7mX0jqWa2eW5ur0GSaVA0ai M4sEj+ffQTD22s9IuqCYn29SF8hGYte4lqK0yXzhUqTwRleNji1pBz8+v3ToYy0l yK4KX5eQ7utbFb2OkzZE/BqPWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7h4eiE CfOrg0X03c4v/hBEYUshMB8GA1UdIwQYMBaAFAFAIlPzG8rP+3PWhdcAyba3QQQ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUEzMS9ERDY0NDg3ODYw OTQxMUU4QjU2QzE4MTBDNEY5QUUwMi9BVUFpVV9NYnlzXzdjOWFGMXdESnRyZEJC RHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FVQWlVX01ieXNfN2M5YUYxd0RKdHJkQkJEdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUEzMS9ERDY0NDg3ODYwOTQxMUU4QjU2QzE4MTBDNEY5QUUwMi9BVUFpVV9NYnlz XzdjOWFGMXdESnRyZEJCRHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2jLbbci1U8BwFMMesJhIS4q3DFmmywfXwvTXgLkBGzBcIJFPpDs4H gAfJFvYcmz69JBhOEckGKHPP6nQJaIU6nwHRRdHb4c2UH9gK1iLevGa33Rkto2zq par4cil2lX56sc0z25C2pDWu6qlqiwvkClWC3JLq2SHYKG+yRtF+HJo8OW20kqDM y1OEDuveAqY/F5dBuLqBhISUIiYD1mD4murpxiIFOaVb91kGSMaRuUWeRquOQVrE P878oEbvpDQ/+Nv1Go1Fe/eiXw/9RYSBUNfEyGAaC4+TNeUAGDpk4MtvnnwGug7K +fjrcVrrE6wq0DWsaaJ/qHo2BjEzN6FU -----END CERTIFICATE-----Generated at Tue Apr 23 18:45:11 2024 by rpki-client on console-ams.rpki-client.org