$ rpki-client -vvf rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft File: h_lY2vSYZZqe7g_xRCJrFxBIneA.mft (raw, json) Hash identifier: DBrwCL3m+vVXyGGOA9OOo5LgaHDFDWp7W4j1BtxP+5s= Subject key identifier: 3A:DA:95:9D:2A:04:FB:3D:1F:75:AE:54:8F:3D:8C:1A:A7:A3:C6:EB Authority key identifier: 87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0 Certificate issuer: /CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0 Certificate serial: 02D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft Manifest number: 02C7 Signing time: Sun 19 May 2024 03:29:55 +0000 Manifest this update: Sun 19 May 2024 03:29:54 +0000 Manifest next update: Sun 26 May 2024 03:29:54 +0000 Files and hashes: 1: h_lY2vSYZZqe7g_xRCJrFxBIneA.crl (hash: zrOAjQvnVrammtZ92snUtm3lp4Evq+cztnZcnA2qXXU=) 2: 5BAD43C6ECA811ECB429C769C4F9AE02.roa (hash: sBRxNMyO5cgErQP99ZtGbaHwbr7zeOeL5Al4JKyVOm4=) 3: FFF8A36A34E311EE877E760DC4F9AE02.roa (hash: 0iilf+ewcCHfBiolJYNIAXD//CPGH9dwNN6NaTR2wTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 720 (0x2d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0 Validity Not Before: May 19 03:29:54 2024 GMT Not After : May 26 03:29:54 2024 GMT Subject: CN=66497232-d4d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ea:f5:49:96:82:58:f9:0d:8b:b5:26:e4:84: ac:3a:56:76:23:60:76:8f:31:22:d4:bb:be:b3:ac: 84:d9:32:43:54:e6:69:87:36:38:76:c7:05:a0:0d: 0f:e9:f6:4d:8e:f1:e9:42:20:e6:15:9e:28:26:70: 3b:0e:88:e5:80:f0:3f:cb:3f:2b:2f:c0:e4:35:d8: f0:ca:a2:fe:50:2d:4d:0e:e0:c1:a2:0f:8d:5e:f9: 00:96:8a:08:f2:84:0f:e3:fe:75:36:1f:43:37:91: d1:35:ed:02:33:aa:87:4b:20:23:6f:40:44:d7:80: 38:57:73:dd:32:c3:da:0f:1b:69:0b:7f:6c:28:ff: e8:c6:60:e0:f6:09:10:77:a0:4e:97:c7:e1:6b:3d: b9:1e:93:05:79:d0:01:df:0d:39:08:e5:c3:b0:da: 4b:dc:70:3d:36:ac:ee:e2:63:19:8b:6e:2e:e9:1b: b0:56:f2:05:d1:9b:ab:ed:db:da:da:07:a2:d5:e9: 25:27:40:9a:9c:12:44:f4:ea:97:57:02:6b:dc:d6: b1:2d:62:a3:b3:ae:eb:81:11:81:8c:f2:12:2d:95: 35:6f:10:e5:5d:b4:48:92:f6:45:2b:71:dd:52:1a: a2:a9:e4:f2:84:67:fd:02:b7:ae:f7:a8:c3:3d:2a: b8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:DA:95:9D:2A:04:FB:3D:1F:75:AE:54:8F:3D:8C:1A:A7:A3:C6:EB X509v3 Authority Key Identifier: keyid:87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:fa:e1:f5:9e:f6:ee:13:f5:cd:ba:3f:bb:a3:af:63:1d:d0: e5:5d:00:09:a3:da:d8:2d:52:f1:88:a7:06:9a:4c:67:52:33: d0:0e:cd:fd:9b:8e:2f:63:b6:09:c3:54:0b:ed:50:9d:28:4f: ee:d8:ec:d9:8b:4b:f5:82:98:8a:9e:78:c9:61:e9:72:4a:e7: ec:9d:3e:21:5c:5e:ed:68:e7:aa:df:8d:cc:50:80:84:b8:83: 44:5d:44:ba:36:be:6e:cf:c6:5c:fc:58:b4:22:5f:64:b2:38: eb:10:1c:00:8b:e9:0a:47:0f:a3:0f:8e:3c:f5:44:9c:d7:5f: 03:72:aa:f9:dd:2d:b5:01:15:9b:88:b0:be:e9:24:4f:58:bd: 49:bd:f1:96:54:3e:d4:da:9a:57:0b:3e:ae:34:90:c5:3d:8d: 7b:64:98:8d:b4:10:ea:e7:2b:7b:a7:d4:bc:3f:bd:25:5e:99: 03:e3:82:63:f2:77:5e:6c:c7:0b:7b:08:e8:e0:9b:a9:7c:da: d4:24:cf:41:f6:00:3f:e8:5e:c2:a7:f0:be:8f:9d:db:d7:6b: 83:10:d2:be:c9:77:b3:16:6e:5d:10:10:e3:0a:38:4e:ab:cc: 4f:12:56:ae:59:c8:f6:2f:30:ef:98:54:04:04:38:57:fc:d5: a8:6e:95:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU0QUUxMTAvBgNVBAUTKDg3Rjk1OERBRjQ5ODY1OUE5RUVFMEZGMTQ0MjI2QjE3 MTA0ODlERTAwHhcNMjQwNTE5MDMyOTU0WhcNMjQwNTI2MDMyOTU0WjAYMRYwFAYD VQQDEw02NjQ5NzIzMi1kNGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+r1SZaCWPkNi7Um5ISsOlZ2I2B2jzEi1Lu+s6yE2TJDVOZphzY4dscFoA0P 6fZNjvHpQiDmFZ4oJnA7DojlgPA/yz8rL8DkNdjwyqL+UC1NDuDBog+NXvkAlooI 8oQP4/51Nh9DN5HRNe0CM6qHSyAjb0BE14A4V3PdMsPaDxtpC39sKP/oxmDg9gkQ d6BOl8fhaz25HpMFedAB3w05COXDsNpL3HA9Nqzu4mMZi24u6RuwVvIF0Zur7dva 2gei1eklJ0CanBJE9OqXVwJr3NaxLWKjs67rgRGBjPISLZU1bxDlXbRIkvZFK3Hd UhqiqeTyhGf9Areu96jDPSq40wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDralZ0q BPs9H3WuVI89jBqno8brMB8GA1UdIwQYMBaAFIf5WNr0mGWanu4P8UQiaxcQSJ3g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTRBRS82QzlGMkRGQUE1 MDExMUVDODk2NDI3NTdDNEY5QUUwMi9oX2xZMnZTWVpacWU3Z194UkNKckZ4Qklu ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hfbFkydlNZWlpxZTdnX3hSQ0pyRnhCSW5lQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTRBRS82QzlGMkRGQUE1MDExMUVDODk2NDI3NTdDNEY5QUUwMi9oX2xZMnZTWVpa cWU3Z194UkNKckZ4QkluZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCo+uH1nvbuE/XNuj+7o69jHdDlXQAJo9rYLVLxiKcGmkxnUjPQDs39 m44vY7YJw1QL7VCdKE/u2OzZi0v1gpiKnnjJYelySufsnT4hXF7taOeq343MUICE uINEXUS6Nr5uz8Zc/Fi0Il9ksjjrEBwAi+kKRw+jD4489USc118Dcqr53S21ARWb iLC+6SRPWL1JvfGWVD7U2ppXCz6uNJDFPY17ZJiNtBDq5yt7p9S8P70lXpkD44Jj 8ndebMcLewjo4JupfNrUJM9B9gA/6F7Cp/C+j53b12uDENK+yXezFm5dEBDjCjhO q8xPElauWcj2LzDvmFQEBDhX/NWobpWa -----END CERTIFICATE-----Generated at Sun May 19 04:22:04 2024 by rpki-client on console-fra.rpki-client.org