$ rpki-client -vvf rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft File: 1cBKCsLVKt_nBVZHjcsOHYHtENo.mft (raw, json) Hash identifier: qNoBoCtahXNjkBL4C6l+2CX7Y47ZEl6X1B3xWPKpzd8= Subject key identifier: EF:CF:D0:BF:37:9C:16:BB:F0:83:D4:9F:AE:D7:1D:62:9F:A4:80:25 Authority key identifier: D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA Certificate issuer: /CN=A91284EC/serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA Certificate serial: 03BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft Manifest number: 03B8 Signing time: Fri 31 May 2024 03:06:24 +0000 Manifest this update: Fri 31 May 2024 03:06:23 +0000 Manifest next update: Fri 07 Jun 2024 03:06:23 +0000 Files and hashes: 1: 1cBKCsLVKt_nBVZHjcsOHYHtENo.crl (hash: y60AzOVBXb+7jwyxMuHD5pg/kjc1MIHhMUOEXkAvM9o=) 2: F11B4C14E40111ECBD78E571C4F9AE02.roa (hash: yrgJiB4VmkkkL0wy5q4A23svX1r+S/7CECcoJjyrMso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 03:06:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 958 (0x3be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91284EC/serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA Validity Not Before: May 31 03:06:23 2024 GMT Not After : Jun 7 03:06:23 2024 GMT Subject: CN=66593eaf-c718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f4:d0:8f:f9:e3:c4:95:c6:39:6e:fb:19:37: 55:00:21:d0:1f:6b:c5:0a:90:9d:8e:44:40:f2:44: a0:20:12:b2:62:29:38:b6:fa:b4:cb:a3:58:a4:b9: d2:cd:99:6b:e5:6f:65:5f:cc:25:d0:8b:1b:82:21: 24:94:9a:43:59:66:79:3f:51:71:a7:88:0e:9e:ba: 64:5f:d4:95:46:fa:59:b1:39:4d:2d:10:3f:2c:9d: 39:72:91:d2:21:d5:9b:32:19:6c:a7:b4:b2:0b:94: af:db:6c:f6:0b:74:24:dc:2f:a1:11:01:99:04:66: f0:9e:dd:bb:d5:b4:3d:20:7c:43:a9:d4:b1:e1:cc: 59:12:1b:59:5c:c4:b5:7a:ff:9b:57:b2:4a:83:45: 19:28:3f:8b:46:3b:d7:e0:4a:29:1d:39:8e:86:ce: c0:6a:a5:32:a5:ae:f8:c4:fd:30:75:1d:f3:55:8d: ab:f1:a8:45:72:0c:3a:b5:1f:5b:ad:4d:66:64:8d: 30:c7:15:0c:93:79:c9:47:e4:c9:b8:49:10:fb:08: ad:95:b3:7f:36:00:01:1c:8c:c0:55:93:1b:05:90: 9e:66:7f:f1:65:ff:64:f2:1c:c4:b7:77:f6:e6:ed: a8:fc:85:54:67:51:58:88:25:4a:d3:76:33:cc:90: 4d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:CF:D0:BF:37:9C:16:BB:F0:83:D4:9F:AE:D7:1D:62:9F:A4:80:25 X509v3 Authority Key Identifier: keyid:D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:03:c9:9a:14:9f:b0:94:c8:d5:f1:b9:02:1f:78:89:9c:b4: a1:07:fc:06:f8:89:14:5d:5f:88:38:fb:62:d9:c9:2a:2e:4e: ec:53:54:c3:d0:41:ab:85:49:c8:e2:8f:98:16:83:7e:23:0d: 2c:61:8d:1e:c2:68:c3:2b:b3:6b:ce:5f:f0:66:08:d8:a4:ca: c8:8d:cd:f6:dc:8e:57:0d:1a:2c:08:2c:c4:14:a6:d0:e5:de: ab:3d:9a:61:ef:1e:45:6e:48:c3:3a:7d:35:bc:a5:3c:01:d4: a3:53:21:e1:59:ea:bf:f8:b6:c8:7a:25:75:ea:5e:82:8c:c5: e9:91:6b:48:f0:71:44:84:38:97:f5:f0:cf:80:8f:c7:88:22: 99:34:b6:c3:dc:ed:c2:57:2f:5e:c8:d6:c5:68:a3:86:06:42: c6:71:c9:23:6e:ca:52:e0:e3:01:cc:40:5e:ec:12:82:9b:f7: a2:0d:47:5f:6c:2e:4d:b0:fc:94:f1:58:12:4f:bc:a9:3e:f0: dd:0e:40:6a:7d:85:1c:da:b4:f1:61:06:7d:3f:d0:7d:62:a8: 11:fe:6b:e8:f0:f6:7c:4e:d2:ae:5a:f0:f4:bb:1b:df:a4:2c: 2e:c4:cb:4d:b4:1d:c7:01:0f:ac:0e:11:35:7c:d8:33:4c:f9: 9d:ae:18:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg0RUMxMTAvBgNVBAUTKEQ1QzA0QTBBQzJENTJBREZFNzA1NTY0NzhEQ0IwRTFE ODFFRDEwREEwHhcNMjQwNTMxMDMwNjIzWhcNMjQwNjA3MDMwNjIzWjAYMRYwFAYD VQQDEw02NjU5M2VhZi1jNzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1fTQj/njxJXGOW77GTdVACHQH2vFCpCdjkRA8kSgIBKyYik4tvq0y6NYpLnS zZlr5W9lX8wl0IsbgiEklJpDWWZ5P1Fxp4gOnrpkX9SVRvpZsTlNLRA/LJ05cpHS IdWbMhlsp7SyC5Sv22z2C3Qk3C+hEQGZBGbwnt271bQ9IHxDqdSx4cxZEhtZXMS1 ev+bV7JKg0UZKD+LRjvX4EopHTmOhs7AaqUypa74xP0wdR3zVY2r8ahFcgw6tR9b rU1mZI0wxxUMk3nJR+TJuEkQ+witlbN/NgABHIzAVZMbBZCeZn/xZf9k8hzEt3f2 5u2o/IVUZ1FYiCVK03YzzJBNrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO/P0L83 nBa78IPUn67XHWKfpIAlMB8GA1UdIwQYMBaAFNXASgrC1Srf5wVWR43LDh2B7RDa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODRFQy9FQkY2MDFGQzQ4 Q0YxMUVDQTY2NkIwM0VDNEY5QUUwMi8xY0JLQ3NMVkt0X25CVlpIamNzT0hZSHRF Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFjQktDc0xWS3RfbkJWWkhqY3NPSFlIdEVOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODRFQy9FQkY2MDFGQzQ4Q0YxMUVDQTY2NkIwM0VDNEY5QUUwMi8xY0JLQ3NMVkt0 X25CVlpIamNzT0hZSHRFTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbA8maFJ+wlMjV8bkCH3iJnLShB/wG+IkUXV+IOPti2ckqLk7sU1TD 0EGrhUnI4o+YFoN+Iw0sYY0ewmjDK7Nrzl/wZgjYpMrIjc323I5XDRosCCzEFKbQ 5d6rPZph7x5FbkjDOn01vKU8AdSjUyHhWeq/+LbIeiV16l6CjMXpkWtI8HFEhDiX 9fDPgI/HiCKZNLbD3O3CVy9eyNbFaKOGBkLGcckjbspS4OMBzEBe7BKCm/eiDUdf bC5NsPyU8VgST7ypPvDdDkBqfYUc2rTxYQZ9P9B9YqgR/mvo8PZ8TtKuWvD0uxvf pCwuxMtNtB3HAQ+sDhE1fNgzTPmdrhgR -----END CERTIFICATE-----Generated at Fri May 31 06:49:07 2024 by rpki-client on console-ams.rpki-client.org