$ rpki-client -vvf rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft File: AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft (raw, json) Hash identifier: U1KMmy3XKq4AzEq/HhKzcLWXMZD4RQxgdRjweqchEso= Subject key identifier: AF:71:EF:60:06:B1:68:B3:2E:63:41:17:0F:B6:D0:DC:DF:1C:80:09 Authority key identifier: 02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16 Certificate issuer: /CN=A91147EF/serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016 Certificate serial: 0899 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft Manifest number: 088C Signing time: Sat 18 May 2024 21:33:56 +0000 Manifest this update: Sat 18 May 2024 21:33:55 +0000 Manifest next update: Sat 25 May 2024 21:33:55 +0000 Files and hashes: 1: AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl (hash: j/dcDgKl2lEHRrMs8MsC0btIWxpVTBC88Lwhb2S0es8=) 2: 84D32F2AE32411EA800C6724C4F9AE02.roa (hash: QM6yiuNN4HsQC994z+CdWb6oLYSKQw2/aCC7nDolw/E=) 3: 38EC4D321F2711EB93A71042C4F9AE02.roa (hash: OKqVFD1uZroQnXYiHQdFbraVnh1GYUqvC3EFoMwpZqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2201 (0x899) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91147EF/serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016 Validity Not Before: May 18 21:33:55 2024 GMT Not After : May 25 21:33:55 2024 GMT Subject: CN=66491ec4-d0cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:14:c7:e7:8e:e2:b0:92:27:dc:41:1a:8f:48: 07:1b:0f:9c:68:2b:25:fd:42:56:a8:8f:79:1e:ba: 07:70:23:b6:87:b9:13:a6:82:40:85:8d:9d:df:b6: 91:8f:b1:3f:29:47:e4:fb:ea:a4:45:da:3c:d8:71: 57:04:a2:6a:3a:18:1d:27:ba:9c:74:6d:37:cd:6d: 07:c2:1c:03:3e:a3:a8:b8:52:ad:90:11:fb:6e:bf: cc:1d:db:2d:f8:5d:00:8a:c2:20:96:b9:fc:9c:26: cb:5e:95:ad:74:29:2d:71:b5:d2:f6:89:5e:a3:cb: 8f:eb:de:9f:70:f2:48:d2:aa:0b:2e:93:23:6d:44: c0:b6:5b:a6:9f:f3:44:e5:3c:d4:da:76:8e:0f:88: 2f:66:42:11:71:01:07:74:6c:e2:a5:42:2f:87:8b: 05:db:56:73:2f:1e:f0:2e:33:73:7f:17:f5:7d:2d: 63:7e:c5:89:de:b7:41:13:89:dc:9c:65:c0:3e:7b: 45:8d:b1:ac:88:e5:be:42:7e:ec:cd:8b:10:75:3b: 97:95:e3:79:0b:5d:d8:08:ad:73:27:f1:46:4d:c3: 43:e5:e1:2c:29:4b:df:7c:6a:1e:19:5f:b3:e1:97: 78:62:d3:75:9f:db:4c:e7:d1:5d:86:85:ca:53:5b: 66:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:71:EF:60:06:B1:68:B3:2E:63:41:17:0F:B6:D0:DC:DF:1C:80:09 X509v3 Authority Key Identifier: keyid:02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:30:00:8a:55:66:a9:d7:75:cd:5a:26:5a:2f:5e:96:20:0e: 4b:ed:63:68:11:55:c1:f3:bb:5d:b7:48:74:d9:66:eb:53:12: c0:68:4a:7e:52:28:85:8e:0b:28:39:32:4b:42:9f:5a:da:43: 27:01:f5:69:08:ab:09:4e:ee:dc:5a:f5:db:71:0f:ee:77:05: e2:48:d0:91:c6:02:99:aa:73:d1:6f:6a:b8:a8:ca:3f:4b:bc: f5:1d:05:7e:b5:e5:43:cf:43:9f:e9:b8:bc:bf:37:5a:67:6e: 45:94:54:cb:4a:61:72:c0:98:0b:c5:52:b9:d5:f0:c7:b7:5f: 25:c5:b2:b4:aa:11:18:3e:12:08:ce:54:37:9f:81:69:85:7c: 4b:2d:dc:18:2a:e8:6c:df:00:63:0f:36:b9:af:88:59:73:92: 35:0c:fe:34:77:db:74:87:66:8f:61:cb:5e:19:2f:46:0d:3a: 43:1b:7b:48:0a:76:68:52:f7:09:63:ca:3b:18:4f:d9:ae:bc: 17:7b:67:f7:09:82:1c:85:69:8c:ee:92:1b:6b:19:19:42:cf: c7:79:fa:36:b6:71:29:9c:56:a7:4e:f1:88:e3:dc:91:62:a7: af:97:5c:f8:4a:4c:f5:b6:a6:73:0a:e2:9e:8e:c0:eb:2e:a2: ce:df:d0:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ3RUYxMTAvBgNVBAUTKDAyMTU1MDJBQThGRkRDNzIxRDdGODRGNzRDRDA3MEI3 NTYzOTAwMTYwHhcNMjQwNTE4MjEzMzU1WhcNMjQwNTI1MjEzMzU1WjAYMRYwFAYD VQQDEw02NjQ5MWVjNC1kMGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1hTH547isJIn3EEaj0gHGw+caCsl/UJWqI95HroHcCO2h7kTpoJAhY2d37aR j7E/KUfk++qkRdo82HFXBKJqOhgdJ7qcdG03zW0HwhwDPqOouFKtkBH7br/MHdst +F0AisIglrn8nCbLXpWtdCktcbXS9oleo8uP696fcPJI0qoLLpMjbUTAtlumn/NE 5TzU2naOD4gvZkIRcQEHdGzipUIvh4sF21ZzLx7wLjNzfxf1fS1jfsWJ3rdBE4nc nGXAPntFjbGsiOW+Qn7szYsQdTuXleN5C13YCK1zJ/FGTcND5eEsKUvffGoeGV+z 4Zd4YtN1n9tM59FdhoXKU1tmSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9x72AG sWizLmNBFw+20NzfHIAJMB8GA1UdIwQYMBaAFAIVUCqo/9xyHX+E90zQcLdWOQAW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDdFRi84QTI5MTA0Njk5 MTYxMUVBOTk1NUQ1MEJDNEY5QUUwMi9BaFZRS3FqXzNISWRmNFQzVE5Cd3QxWTVB QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FoVlFLcWpfM0hJZGY0VDNUTkJ3dDFZNUFCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDdFRi84QTI5MTA0Njk5MTYxMUVBOTk1NUQ1MEJDNEY5QUUwMi9BaFZRS3FqXzNI SWRmNFQzVE5Cd3QxWTVBQlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnMACKVWap13XNWiZaL16WIA5L7WNoEVXB87tdt0h02WbrUxLAaEp+ UiiFjgsoOTJLQp9a2kMnAfVpCKsJTu7cWvXbcQ/udwXiSNCRxgKZqnPRb2q4qMo/ S7z1HQV+teVDz0Of6bi8vzdaZ25FlFTLSmFywJgLxVK51fDHt18lxbK0qhEYPhII zlQ3n4FphXxLLdwYKuhs3wBjDza5r4hZc5I1DP40d9t0h2aPYcteGS9GDTpDG3tI CnZoUvcJY8o7GE/ZrrwXe2f3CYIchWmM7pIbaxkZQs/Hefo2tnEpnFanTvGI49yR Yqevl1z4Skz1tqZzCuKejsDrLqLO39CN -----END CERTIFICATE-----Generated at Sat May 18 22:27:53 2024 by rpki-client on console-ams.rpki-client.org