$ rpki-client -vvf rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.mft File: rricAm_pVSoVCwPDCqDNxHnR4qE.mft (raw, json) Hash identifier: ZXaUt5WP3ZFyjppjjxnBzPUrmtlNu2ViI+HIXQ1UcS0= Subject key identifier: 03:33:A4:8C:BE:08:C3:D6:C4:80:3D:2E:CF:E9:25:E5:81:D4:06:8F Authority key identifier: AE:B8:9C:02:6F:E9:55:2A:15:0B:03:C3:0A:A0:CD:C4:79:D1:E2:A1 Certificate issuer: /CN=A913168E/serialNumber=AEB89C026FE9552A150B03C30AA0CDC479D1E2A1 Certificate serial: 0107 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rricAm_pVSoVCwPDCqDNxHnR4qE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.mft Manifest number: 0102 Signing time: Sun 19 May 2024 05:35:19 +0000 Manifest this update: Sun 19 May 2024 05:35:18 +0000 Manifest next update: Sun 26 May 2024 05:35:18 +0000 Files and hashes: 1: rricAm_pVSoVCwPDCqDNxHnR4qE.crl (hash: ZjwI5YUcCUStNxHQK57UbJPHSGz8MhZPxSm2DdACwOM=) 2: 417BD1448C2511EDB64DB410C4F9AE02.roa (hash: W5OlriKqsGvAYkiKiP0+ut/DuoT3rJFnzrVmS85TFFw=) 3: 40EB2FD68C2511EDB64DB410C4F9AE02.roa (hash: 8564C+EFY8R4KjhdM4HUf5Q8OK5v33Z+3MObpfw6evI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.crl rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rricAm_pVSoVCwPDCqDNxHnR4qE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 263 (0x107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913168E/serialNumber=AEB89C026FE9552A150B03C30AA0CDC479D1E2A1 Validity Not Before: May 19 05:35:18 2024 GMT Not After : May 26 05:35:18 2024 GMT Subject: CN=66498f97-b979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b7:6f:d0:db:69:ba:a2:89:3b:c3:25:af:66: 83:ea:71:cd:fe:ee:6c:44:0e:f9:89:e1:ec:93:08: f6:14:3d:a8:74:73:24:19:71:75:a7:f5:38:b9:3b: db:72:78:0a:2d:1c:f8:2a:9d:05:3e:01:1f:1c:c8: 9e:53:de:43:49:08:b8:04:92:8c:df:df:bb:ca:c5: 14:ae:ea:94:56:b9:4f:35:eb:b9:64:04:12:f5:5e: 1b:7c:5a:c9:02:d0:e1:87:95:46:75:88:66:da:6d: 04:fb:5e:89:0b:50:91:f4:ab:89:5f:5b:10:cf:5c: ea:3f:06:f3:90:b1:77:76:d5:ac:be:fb:e8:57:29: dc:bc:f5:e4:42:8f:6d:fc:3b:13:99:27:b6:02:1a: 3a:3a:89:f1:72:57:b1:d3:5a:6c:fe:db:93:da:6e: 04:8e:4c:54:f2:61:27:89:4d:e6:1f:5a:1c:ed:d0: 0f:80:84:34:a3:12:ac:0f:54:ff:fe:e6:b8:37:2c: 6b:c1:b0:87:d3:d6:c0:64:4e:b6:d0:1c:88:55:10: 7c:de:42:1a:dc:c0:1c:c3:28:10:6d:84:7a:56:59: 5b:e4:ee:fa:dd:69:0f:19:42:c8:30:e4:d7:e1:4f: 4e:bd:b2:0b:f7:04:5e:8d:c7:17:95:56:7c:53:f2: 12:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:33:A4:8C:BE:08:C3:D6:C4:80:3D:2E:CF:E9:25:E5:81:D4:06:8F X509v3 Authority Key Identifier: keyid:AE:B8:9C:02:6F:E9:55:2A:15:0B:03:C3:0A:A0:CD:C4:79:D1:E2:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rricAm_pVSoVCwPDCqDNxHnR4qE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:4e:1d:6d:52:3b:2f:68:20:6d:d3:19:81:0f:b2:64:1f:2e: 28:c5:ec:c0:3d:d9:dd:80:05:6b:50:04:0a:8e:df:1e:cb:0f: 8f:1e:01:7f:0d:86:c3:d9:f9:65:b4:95:76:e0:26:bc:e2:8f: 7f:59:32:0a:cb:df:c7:3c:cc:9b:85:ab:67:fb:30:c4:4a:69: 04:fa:81:c0:49:74:6c:c3:86:bd:73:cd:c9:c5:90:67:9d:04: e3:26:ff:e9:49:83:5a:44:56:8c:d4:5a:50:60:22:98:40:7d: 26:aa:a9:11:53:f6:19:1a:83:ad:0b:42:0b:95:71:2f:2b:f6: 45:d3:61:4c:7e:4c:38:6d:50:46:c8:30:5f:08:0a:c3:03:d1: 8f:b3:d6:76:fd:cc:f0:88:e0:a0:5b:a7:3c:76:e4:de:87:68: 98:d5:5d:d5:5e:56:3b:98:3a:00:5e:22:33:a7:60:6f:f3:7c: cd:36:fa:f7:32:5a:bd:aa:01:ff:37:33:03:07:b4:8f:dd:bc: 10:37:95:12:74:67:49:e4:ff:2c:e5:42:71:e0:b4:9c:4b:38: b1:6a:6e:eb:36:cf:fc:02:8c:9d:00:4b:99:7f:c0:08:14:8c: 86:09:9d:c9:45:6d:f0:ff:6d:a1:b7:f5:9f:8a:ee:3e:d1:36: f4:45:0c:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2OEUxMTAvBgNVBAUTKEFFQjg5QzAyNkZFOTU1MkExNTBCMDNDMzBBQTBDREM0 NzlEMUUyQTEwHhcNMjQwNTE5MDUzNTE4WhcNMjQwNTI2MDUzNTE4WjAYMRYwFAYD VQQDEw02NjQ5OGY5Ny1iOTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLdv0NtpuqKJO8Mlr2aD6nHN/u5sRA75ieHskwj2FD2odHMkGXF1p/U4uTvb cngKLRz4Kp0FPgEfHMieU95DSQi4BJKM39+7ysUUruqUVrlPNeu5ZAQS9V4bfFrJ AtDhh5VGdYhm2m0E+16JC1CR9KuJX1sQz1zqPwbzkLF3dtWsvvvoVyncvPXkQo9t /DsTmSe2Aho6Oonxclex01ps/tuT2m4EjkxU8mEniU3mH1oc7dAPgIQ0oxKsD1T/ /ua4NyxrwbCH09bAZE620ByIVRB83kIa3MAcwygQbYR6Vllb5O763WkPGULIMOTX 4U9OvbIL9wRejccXlVZ8U/ISLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAMzpIy+ CMPWxIA9Ls/pJeWB1AaPMB8GA1UdIwQYMBaAFK64nAJv6VUqFQsDwwqgzcR50eKh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTY4RS8xNDNEMDI1NDhD MjMxMUVEOTBBRTk3MTBDNEY5QUUwMi9ycmljQW1fcFZTb1ZDd1BEQ3FETnhIblI0 cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JyaWNBbV9wVlNvVkN3UERDcUROeEhuUjRxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTY4RS8xNDNEMDI1NDhDMjMxMUVEOTBBRTk3MTBDNEY5QUUwMi9ycmljQW1fcFZT b1ZDd1BEQ3FETnhIblI0cUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACTh1tUjsvaCBt0xmBD7JkHy4oxezAPdndgAVrUAQKjt8eyw+PHgF/ DYbD2flltJV24Ca84o9/WTIKy9/HPMybhatn+zDESmkE+oHASXRsw4a9c83JxZBn nQTjJv/pSYNaRFaM1FpQYCKYQH0mqqkRU/YZGoOtC0ILlXEvK/ZF02FMfkw4bVBG yDBfCArDA9GPs9Z2/czwiOCgW6c8duTeh2iY1V3VXlY7mDoAXiIzp2Bv83zNNvr3 Mlq9qgH/NzMDB7SP3bwQN5USdGdJ5P8s5UJx4LScSzixam7rNs/8AoydAEuZf8AI FIyGCZ3JRW3w/22ht/Wfiu4+0Tb0RQwP -----END CERTIFICATE-----Generated at Sun May 19 06:14:33 2024 by rpki-client on console-ams.rpki-client.org