$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft File: pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft (raw, json) Hash identifier: CKF110rC3pk5El65Rhrpq5Toskmi00WerYkIFat5MGg= Subject key identifier: F8:01:59:4C:A6:7D:AF:36:AF:FA:E9:4E:51:E9:BF:E4:54:E8:20:38 Authority key identifier: A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF Certificate issuer: /CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF Certificate serial: 0C81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft Manifest number: 0C57 Signing time: Thu 30 May 2024 19:24:34 +0000 Manifest this update: Thu 30 May 2024 19:24:33 +0000 Manifest next update: Thu 06 Jun 2024 19:24:33 +0000 Files and hashes: 1: pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl (hash: xZjYfckGBvVMmBzcqZqedlVHofecfR5Sh4GSrJmR6qs=) 2: 938E408897E011EB8870DB29C4F9AE02.roa (hash: A4wiyM/5CX+HjeauDWX5MJSi1mH5qSYyNxKMD2GNQBc=) 3: 36046172FD7211EEA5E7465CC4F9AE02.roa (hash: qV9LIbjy2xv3z8fy3D2rRFIHziDC/B8IOhZ3j9oyiYA=) 4: 073C2C80C4C411EEA7C8041DC4F9AE02.roa (hash: YTfqj0KVbSB00HahXV06LNdDd9ce6J4nqMrP5jqKRm4=) 5: 27F7A40AE4FD11E990830B62C4F9AE02.roa (hash: hFx3+x64ihawPhs2M5pI5ALUI/A0yfu143JmKs9BUpY=) 6: F68834A47B9811EC94EE077EC4F9AE02.roa (hash: rzu6L1NwbZGhkLaL23D8LkOxWzX3X64ZAWtZmpPCDmU=) 7: 338E008C33DD11EAB6057973C4F9AE02.roa (hash: i83F9ua+kDDDttiWNTvtDPW6c6mOI3f8ioloHP+ewC8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 19:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3201 (0xc81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF Validity Not Before: May 30 19:24:33 2024 GMT Not After : Jun 6 19:24:33 2024 GMT Subject: CN=6658d272-fde5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b0:0c:78:69:b1:69:8f:f8:c3:a8:18:c2:8a: 20:e5:53:dc:49:f0:50:d5:4e:ed:a4:87:a1:52:93: d4:dd:a8:40:e3:46:97:1f:d0:34:0c:d7:40:bc:35: 05:8d:c7:c1:73:64:2c:61:35:9d:0f:90:90:d2:cd: 8f:98:99:74:b3:39:10:45:fd:fd:a2:54:cc:c8:b8: 28:bf:9f:a2:a6:f6:f6:81:4b:83:00:9c:3a:66:bc: c3:65:73:b2:80:5b:4a:e9:1b:77:97:11:d6:c3:7d: 00:5c:12:5a:2c:2b:24:5e:03:71:1f:2a:b8:84:35: e0:82:f5:a4:59:99:4d:27:e0:f2:52:14:d1:8d:47: 18:58:85:7f:40:db:d2:7b:c7:f8:c2:ec:f3:84:6b: b5:9f:7e:db:61:85:8d:5c:96:7f:c3:39:66:d3:0a: ed:49:34:48:57:c1:ee:2d:56:4b:12:63:9e:19:5b: 0f:79:05:74:25:0b:26:23:d8:9e:08:95:d0:49:53: 58:5c:52:ba:8e:65:43:a7:09:8e:88:8f:62:99:66: cd:14:de:09:61:84:37:a4:5a:6e:be:d5:cb:3a:46: cb:5e:ab:20:27:ec:58:d2:1c:bd:27:bb:21:79:b9: 60:bb:10:82:f5:7c:3c:3c:ea:0d:96:7e:58:c8:33: b0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:01:59:4C:A6:7D:AF:36:AF:FA:E9:4E:51:E9:BF:E4:54:E8:20:38 X509v3 Authority Key Identifier: keyid:A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:8e:0a:0b:2d:69:27:a1:a2:6d:c7:99:0e:63:4e:e6:50:07: fe:db:c5:66:03:23:49:34:be:ae:a9:e2:8b:5a:c7:23:f3:5c: 74:26:f7:88:c0:6b:9c:32:6c:eb:56:d3:23:20:1c:fe:96:0c: 0d:bc:97:33:1c:7c:90:78:d4:7d:91:69:ce:8b:4c:80:7e:45: c1:52:ac:18:b8:4c:d0:d5:b7:3f:65:44:32:97:24:b1:36:5e: 2d:c7:f2:8f:56:44:0a:cd:55:8e:93:72:66:ef:41:f8:ae:bf: 8c:f4:9f:56:0c:8e:44:19:2a:d9:b7:e3:59:85:b4:2e:ea:e7: 82:d4:d7:f4:14:21:40:7e:9d:7e:52:c9:41:fa:50:4b:60:12: 85:5c:c1:dd:ee:48:86:bc:7f:4f:e6:6e:17:bb:b0:6c:ca:6a: eb:04:d5:28:42:24:ef:7d:ca:68:88:b1:fe:58:07:95:44:f4: 0d:7a:81:94:64:34:ed:bc:c2:e5:13:e1:b2:18:d4:41:f0:ec: ef:b8:2a:9c:6f:96:a4:f0:f7:fd:87:15:54:5c:ac:9a:5d:c5: 11:9a:20:28:85:0a:7f:ab:ce:58:ab:51:52:2e:ed:aa:80:c2: 87:01:f0:6d:a9:5d:1f:78:8c:7a:fe:31:6f:de:6a:41:6e:ac: c5:33:d7:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRDNDQxMTAvBgNVBAUTKEE2NDIxRkUxM0Q4QzkzQTdCRERGRjhCNTM3MTlCNTgw ODc0OEQwREYwHhcNMjQwNTMwMTkyNDMzWhcNMjQwNjA2MTkyNDMzWjAYMRYwFAYD VQQDEw02NjU4ZDI3Mi1mZGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubAMeGmxaY/4w6gYwoog5VPcSfBQ1U7tpIehUpPU3ahA40aXH9A0DNdAvDUF jcfBc2QsYTWdD5CQ0s2PmJl0szkQRf39olTMyLgov5+ipvb2gUuDAJw6ZrzDZXOy gFtK6Rt3lxHWw30AXBJaLCskXgNxHyq4hDXggvWkWZlNJ+DyUhTRjUcYWIV/QNvS e8f4wuzzhGu1n37bYYWNXJZ/wzlm0wrtSTRIV8HuLVZLEmOeGVsPeQV0JQsmI9ie CJXQSVNYXFK6jmVDpwmOiI9imWbNFN4JYYQ3pFpuvtXLOkbLXqsgJ+xY0hy9J7sh eblguxCC9Xw8POoNln5YyDOw0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPgBWUym fa82r/rpTlHpv+RU6CA4MB8GA1UdIwQYMBaAFKZCH+E9jJOnvd/4tTcZtYCHSNDf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREM0NC8yOUI2QkVEQUU0 RkMxMUU5QjEzQjQ4NjBDNEY5QUUwMi9wa0lmNFQyTWs2ZTkzX2kxTnhtMWdJZEkw TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BrSWY0VDJNazZlOTNfaTFOeG0xZ0lkSTBOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REM0NC8yOUI2QkVEQUU0RkMxMUU5QjEzQjQ4NjBDNEY5QUUwMi9wa0lmNFQyTWs2 ZTkzX2kxTnhtMWdJZEkwTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUjgoLLWknoaJtx5kOY07mUAf+28VmAyNJNL6uqeKLWscj81x0JveI wGucMmzrVtMjIBz+lgwNvJczHHyQeNR9kWnOi0yAfkXBUqwYuEzQ1bc/ZUQylySx Nl4tx/KPVkQKzVWOk3Jm70H4rr+M9J9WDI5EGSrZt+NZhbQu6ueC1Nf0FCFAfp1+ UslB+lBLYBKFXMHd7kiGvH9P5m4Xu7BsymrrBNUoQiTvfcpoiLH+WAeVRPQNeoGU ZDTtvMLlE+GyGNRB8OzvuCqcb5ak8Pf9hxVUXKyaXcURmiAohQp/q85Yq1FSLu2q gMKHAfBtqV0feIx6/jFv3mpBbqzFM9cA -----END CERTIFICATE-----Generated at Thu May 30 21:49:29 2024 by rpki-client on console-ams.rpki-client.org