$ rpki-client -vvf rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft File: aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft (raw, json) Hash identifier: 4A8DLBBe27OMSw9aVwQfIugPl2gx53GHRsmca/Wli2U= Subject key identifier: 72:66:C0:98:FA:68:22:95:16:6D:06:BA:B3:E7:7E:DC:AD:39:AF:C0 Authority key identifier: 68:14:0C:15:82:5E:D5:0A:03:78:10:52:AD:DE:2E:CA:1A:6F:EA:3A Certificate issuer: /CN=A91289A2/serialNumber=68140C15825ED50A03781052ADDE2ECA1A6FEA3A Certificate serial: 0303 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft Manifest number: 02FF Signing time: Sun 19 May 2024 03:13:15 +0000 Manifest this update: Sun 19 May 2024 03:13:14 +0000 Manifest next update: Sun 26 May 2024 03:13:14 +0000 Files and hashes: 1: aBQMFYJe1QoDeBBSrd4uyhpv6jo.crl (hash: ZKF+cpveAwYj0S5q73WxpzBGHYyYzdWZ0M2S/PEYDRU=) 2: 97E8ACD68E6611EC9EBE626FC4F9AE02.roa (hash: hM3qUUiNYNoC3wKuWEvZ5GtYbe5JprCUalUj0rmsmIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.crl rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 771 (0x303) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91289A2/serialNumber=68140C15825ED50A03781052ADDE2ECA1A6FEA3A Validity Not Before: May 19 03:13:14 2024 GMT Not After : May 26 03:13:14 2024 GMT Subject: CN=66496e4b-1c53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7a:26:6e:b2:40:0b:56:8d:3a:a1:4f:dc:73: bf:f6:c8:4b:b6:87:06:fd:d6:f5:be:af:a7:94:9c: 26:3e:db:ad:ef:79:07:a9:ce:5d:45:b9:3f:72:b1: 39:75:e3:c1:eb:48:c2:12:bd:01:15:38:f5:96:25: c5:24:74:55:64:ed:39:94:d0:ce:c6:0f:ee:47:8c: 8f:7b:a2:92:11:37:ab:04:b9:76:98:85:3c:ac:04: 12:c1:f2:4d:6a:b2:76:e0:ee:0d:48:7a:26:0a:e8: a3:97:b2:4d:b7:72:df:6e:58:dd:ad:d6:4b:02:e4: f7:f7:31:2c:67:c3:8e:88:eb:24:e3:d0:14:7d:d6: 45:1e:23:ca:25:e0:a8:ab:de:ea:65:16:5e:bf:e7: 8d:cb:80:da:8d:51:17:2c:32:56:c4:82:05:5d:c0: 54:08:53:a6:f5:75:f8:ef:68:44:99:0d:76:aa:98: 0c:02:78:a2:4f:6f:16:eb:0e:bb:21:72:47:02:f1: e4:e6:f5:f3:90:0d:a8:82:b7:a4:87:19:e8:71:08: 9f:2a:8f:76:ed:f8:88:2b:93:a5:98:9b:7f:c3:d2: 6e:8c:19:0a:bc:09:21:6b:71:cb:3a:0e:ff:53:68: 36:39:43:31:18:01:76:0d:ac:2d:a4:87:6a:9e:e4: 3f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:66:C0:98:FA:68:22:95:16:6D:06:BA:B3:E7:7E:DC:AD:39:AF:C0 X509v3 Authority Key Identifier: keyid:68:14:0C:15:82:5E:D5:0A:03:78:10:52:AD:DE:2E:CA:1A:6F:EA:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:fa:46:c9:fd:e8:93:9e:ec:36:ba:19:95:d3:46:f9:ad:25: ca:d7:b1:5f:dd:e5:0e:cf:1a:b7:cd:11:66:21:bc:ed:73:d2: dd:9e:2c:09:f9:0e:97:f7:3e:2b:7c:e5:ae:16:ba:7c:30:a8: e7:09:8d:ed:70:10:dc:fc:8b:3a:a2:9f:2c:60:d2:28:c7:78: 18:5c:34:54:12:80:88:b9:33:e7:df:de:71:e0:3e:53:76:cc: 8a:ee:c9:92:08:aa:73:93:87:07:f1:27:94:87:a3:9d:38:80: f4:2e:ca:9c:17:00:69:5b:3d:4e:5a:d8:f1:66:b3:af:d9:03: 43:33:78:0e:1e:a2:42:a5:1d:59:19:c3:2d:37:7b:95:47:78: fe:8f:ec:35:2c:b4:59:74:83:4b:ee:9f:c7:8e:06:12:ad:86: 76:ea:c0:97:7f:80:ca:6d:76:6d:9c:b1:c6:bf:15:35:6f:7a: 8d:fb:97:1c:00:6e:b2:c5:94:ea:fe:72:34:cb:f0:58:16:45: f9:f1:fe:22:03:5b:11:f9:0f:c8:d8:55:26:fa:12:bd:33:ff: 21:56:da:de:4d:d9:95:a4:1c:05:49:df:dc:cc:d5:a6:63:c7: b0:86:a8:3f:57:7a:5a:8e:52:e5:63:d0:cd:e0:6c:b3:0f:7e: 5d:a0:5d:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg5QTIxMTAvBgNVBAUTKDY4MTQwQzE1ODI1RUQ1MEEwMzc4MTA1MkFEREUyRUNB MUE2RkVBM0EwHhcNMjQwNTE5MDMxMzE0WhcNMjQwNTI2MDMxMzE0WjAYMRYwFAYD VQQDEw02NjQ5NmU0Yi0xYzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqHombrJAC1aNOqFP3HO/9shLtocG/db1vq+nlJwmPtut73kHqc5dRbk/crE5 dePB60jCEr0BFTj1liXFJHRVZO05lNDOxg/uR4yPe6KSETerBLl2mIU8rAQSwfJN arJ24O4NSHomCuijl7JNt3LfbljdrdZLAuT39zEsZ8OOiOsk49AUfdZFHiPKJeCo q97qZRZev+eNy4DajVEXLDJWxIIFXcBUCFOm9XX472hEmQ12qpgMAniiT28W6w67 IXJHAvHk5vXzkA2ogrekhxnocQifKo927fiIK5OlmJt/w9JujBkKvAkha3HLOg7/ U2g2OUMxGAF2DawtpIdqnuQ/zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHJmwJj6 aCKVFm0GurPnftytOa/AMB8GA1UdIwQYMBaAFGgUDBWCXtUKA3gQUq3eLsoab+o6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODlBMi9GQjUyRjY0RThF NjMxMUVDOUUwMTVENkRDNEY5QUUwMi9hQlFNRllKZTFRb0RlQkJTcmQ0dXlocHY2 am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FCUU1GWUplMVFvRGVCQlNyZDR1eWhwdjZqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODlBMi9GQjUyRjY0RThFNjMxMUVDOUUwMTVENkRDNEY5QUUwMi9hQlFNRllKZTFR b0RlQkJTcmQ0dXlocHY2am8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAE+kbJ/eiTnuw2uhmV00b5rSXK17Ff3eUOzxq3zRFmIbztc9LdniwJ +Q6X9z4rfOWuFrp8MKjnCY3tcBDc/Is6op8sYNIox3gYXDRUEoCIuTPn395x4D5T dsyK7smSCKpzk4cH8SeUh6OdOID0LsqcFwBpWz1OWtjxZrOv2QNDM3gOHqJCpR1Z GcMtN3uVR3j+j+w1LLRZdINL7p/HjgYSrYZ26sCXf4DKbXZtnLHGvxU1b3qN+5cc AG6yxZTq/nI0y/BYFkX58f4iA1sR+Q/I2FUm+hK9M/8hVtreTdmVpBwFSd/czNWm Y8ewhqg/V3pajlLlY9DN4GyzD35doF0e -----END CERTIFICATE-----Generated at Sun May 19 03:48:51 2024 by rpki-client on console-fra.rpki-client.org