$ rpki-client -vvf rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft File: at4O10LYxa-hMzuQNYwGs_6HaIM.mft (raw, json) Hash identifier: Qt/uP3Yf0Ex58JNDgFpM168iW7KNaZS9BIGIIbwmE8g= Subject key identifier: 0E:72:80:F7:B2:3A:4A:7C:5A:B0:4F:8F:32:EA:E9:5E:01:CD:94:5F Authority key identifier: 6A:DE:0E:D7:42:D8:C5:AF:A1:33:3B:90:35:8C:06:B3:FE:87:68:83 Certificate issuer: /CN=A911C356/serialNumber=6ADE0ED742D8C5AFA1333B90358C06B3FE876883 Certificate serial: 0655 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft Manifest number: 064A Signing time: Sat 18 May 2024 23:40:04 +0000 Manifest this update: Sat 18 May 2024 23:40:03 +0000 Manifest next update: Sat 25 May 2024 23:40:03 +0000 Files and hashes: 1: at4O10LYxa-hMzuQNYwGs_6HaIM.crl (hash: UOa55mlzf1IaqQ3KO0xB6cOpbTYV3SshxnR2BvUZETk=) 2: 68894B22402811EB91B49250C4F9AE02.roa (hash: 6IG/vOtJOcSDzoutMB/zf9ko5LbvUlfffG7Cgbr6Gy4=) 3: 86BED34677F011EB9E69B472C4F9AE02.roa (hash: zdi/+1WQskL/04zl/FoLC5faHUhvFiIOPMzm/x+eO30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.crl rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1621 (0x655) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C356/serialNumber=6ADE0ED742D8C5AFA1333B90358C06B3FE876883 Validity Not Before: May 18 23:40:03 2024 GMT Not After : May 25 23:40:03 2024 GMT Subject: CN=66493c53-4714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:97:65:f4:43:41:c2:fb:84:e8:0c:ec:26:4a: c0:2c:b7:83:53:6d:c2:bf:ff:8d:d1:f7:64:26:f8: 8d:fc:6e:3a:32:8b:33:df:c0:19:63:fe:78:ec:8c: d1:27:a0:24:56:f6:7c:73:f8:76:38:ce:01:e6:77: 5e:32:67:1e:ac:43:04:68:24:7f:d3:b2:68:54:12: 3b:f5:e6:8c:67:c8:a3:b9:e1:6b:44:61:60:3d:93: 49:71:0a:d2:b8:63:2f:75:e7:c4:ef:16:cd:8c:f9: 79:c3:d7:ca:6d:93:6b:ee:9d:8a:42:29:64:1a:72: 9a:09:35:13:d4:6d:e4:04:5c:59:b5:1a:9c:aa:7c: f0:89:9f:22:aa:c1:24:9c:29:bd:3d:bf:5f:87:34: a5:87:96:7c:57:f1:68:75:44:68:1c:c3:b9:c0:fc: 46:8f:d2:2a:d4:5e:ae:3c:0d:83:89:b0:a9:22:6b: 8b:a8:12:95:51:2b:6c:d1:ec:51:48:cf:22:60:91: 5a:28:e6:3b:95:9a:4e:20:02:a4:31:8d:90:60:41: 76:a5:4f:7a:42:5f:ce:fe:ae:f7:f7:20:51:3e:ef: 13:e2:2c:56:2a:ca:dc:15:4a:23:5b:df:47:bb:c8: a7:5e:72:26:b2:18:09:c2:8e:c6:55:49:60:80:92: 80:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:72:80:F7:B2:3A:4A:7C:5A:B0:4F:8F:32:EA:E9:5E:01:CD:94:5F X509v3 Authority Key Identifier: keyid:6A:DE:0E:D7:42:D8:C5:AF:A1:33:3B:90:35:8C:06:B3:FE:87:68:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:cb:a5:af:30:51:59:2d:f0:93:18:50:c2:c2:7d:75:5c:e9: cd:d0:56:93:bd:42:c8:0e:a3:19:34:b5:67:50:11:b2:9f:80: f3:ba:37:42:1e:e7:de:36:98:98:c9:18:00:bf:2c:be:22:9d: 19:8b:ae:81:05:1d:e2:bd:76:1e:b8:bb:f9:57:c7:94:04:81: f9:86:68:15:27:0f:fb:fe:0d:1d:83:d4:5e:69:a8:69:bb:28: df:1d:6b:28:72:24:d6:11:e2:ce:9b:97:88:9c:43:11:0a:aa: a2:5d:15:1d:2d:f8:0a:1e:84:3e:bc:fc:1b:2c:5a:90:81:f4: 81:9c:7b:80:f1:54:73:5c:02:d2:56:65:a6:f0:ae:c1:af:e0: 45:8d:ae:fb:dd:f6:04:eb:49:4e:c5:3e:16:21:e4:84:15:e7: 52:96:f0:6a:d4:b4:8d:d8:52:87:60:28:7d:f2:f5:74:ba:f1: 63:24:92:c1:5f:28:26:8e:99:0e:d6:07:5a:ae:d1:9a:75:2b: ff:1d:bb:d6:2d:4c:49:a7:55:ea:d5:49:1f:c0:c5:af:ee:1a: 93:42:6b:31:bf:4a:4b:ac:20:8d:11:10:27:97:d9:96:4c:14: 1b:09:b2:55:ee:a3:de:e9:39:38:b2:40:d3:5b:9e:45:17:bb: 9c:f5:82:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMzNTYxMTAvBgNVBAUTKDZBREUwRUQ3NDJEOEM1QUZBMTMzM0I5MDM1OEMwNkIz RkU4NzY4ODMwHhcNMjQwNTE4MjM0MDAzWhcNMjQwNTI1MjM0MDAzWjAYMRYwFAYD VQQDEw02NjQ5M2M1My00NzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA45dl9ENBwvuE6AzsJkrALLeDU23Cv/+N0fdkJviN/G46Mosz38AZY/547IzR J6AkVvZ8c/h2OM4B5ndeMmcerEMEaCR/07JoVBI79eaMZ8ijueFrRGFgPZNJcQrS uGMvdefE7xbNjPl5w9fKbZNr7p2KQilkGnKaCTUT1G3kBFxZtRqcqnzwiZ8iqsEk nCm9Pb9fhzSlh5Z8V/FodURoHMO5wPxGj9Iq1F6uPA2DibCpImuLqBKVUSts0exR SM8iYJFaKOY7lZpOIAKkMY2QYEF2pU96Ql/O/q739yBRPu8T4ixWKsrcFUojW99H u8inXnImshgJwo7GVUlggJKAIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5ygPey Okp8WrBPjzLq6V4BzZRfMB8GA1UdIwQYMBaAFGreDtdC2MWvoTM7kDWMBrP+h2iD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzM1Ni82NzFCN0RBNjQw MUQxMUVCOEUwQ0NCNUVDNEY5QUUwMi9hdDRPMTBMWXhhLWhNenVRTll3R3NfNkhh SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F0NE8xMExZeGEtaE16dVFOWXdHc182SGFJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzM1Ni82NzFCN0RBNjQwMUQxMUVCOEUwQ0NCNUVDNEY5QUUwMi9hdDRPMTBMWXhh LWhNenVRTll3R3NfNkhhSU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjy6WvMFFZLfCTGFDCwn11XOnN0FaTvULIDqMZNLVnUBGyn4DzujdC HufeNpiYyRgAvyy+Ip0Zi66BBR3ivXYeuLv5V8eUBIH5hmgVJw/7/g0dg9Reaahp uyjfHWsociTWEeLOm5eInEMRCqqiXRUdLfgKHoQ+vPwbLFqQgfSBnHuA8VRzXALS VmWm8K7Br+BFja773fYE60lOxT4WIeSEFedSlvBq1LSN2FKHYCh98vV0uvFjJJLB XygmjpkO1gdartGadSv/HbvWLUxJp1Xq1UkfwMWv7hqTQmsxv0pLrCCNERAnl9mW TBQbCbJV7qPe6Tk4skDTW55FF7uc9YIf -----END CERTIFICATE-----Generated at Sun May 19 00:30:12 2024 by rpki-client on console-ams.rpki-client.org