$ rpki-client -vvf rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft File: Di3qFP18_9DQqeo-N0N7keRUsjY.mft (raw, json) Hash identifier: FZ/a1VLMAxOu+WPLzA1SZ5IO/YitVT0R3GJrfvWTOr8= Subject key identifier: E7:5F:18:E1:D8:1B:10:C6:18:23:DC:54:9A:4D:C0:1B:B3:E5:E7:06 Authority key identifier: 0E:2D:EA:14:FD:7C:FF:D0:D0:A9:EA:3E:37:43:7B:91:E4:54:B2:36 Certificate issuer: /CN=A91560A3/serialNumber=0E2DEA14FD7CFFD0D0A9EA3E37437B91E454B236 Certificate serial: 10BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft Manifest number: 10B8 Signing time: Sat 18 May 2024 17:54:21 +0000 Manifest this update: Sat 18 May 2024 17:54:20 +0000 Manifest next update: Sat 25 May 2024 17:54:20 +0000 Files and hashes: 1: Di3qFP18_9DQqeo-N0N7keRUsjY.crl (hash: LxYkTKpD+VyND9OVkbWn85QGYs5O0lh3IPQ4PaqQwyo=) 2: 2245CE0A606811EB80E3D531C4F9AE02.roa (hash: n0eE4w1ioXiku75wdXVIUXgqTRR1ty++Snk078GZCnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.crl rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4285 (0x10bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91560A3/serialNumber=0E2DEA14FD7CFFD0D0A9EA3E37437B91E454B236 Validity Not Before: May 18 17:54:20 2024 GMT Not After : May 25 17:54:20 2024 GMT Subject: CN=6648eb4d-7018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ec:c8:7d:f7:7b:3d:9e:7c:28:e0:03:f8:52: c6:0c:bf:58:7d:3f:5f:04:c4:03:1a:20:0f:36:c6: 3c:35:3b:74:95:b5:61:f9:0e:9b:44:4a:0e:cb:a5: 4b:b3:a1:b2:ce:bf:01:94:65:d0:12:ba:b7:c6:2e: b9:33:c1:b5:80:4f:d1:0c:9d:cd:2b:29:71:ed:bb: 01:2a:e1:37:c7:c8:6d:34:8e:c8:a2:61:f1:9e:85: 17:e4:c6:db:ac:8b:86:93:8d:18:fc:82:8a:23:08: 60:e9:63:f2:26:3d:70:e4:82:70:d2:d2:49:19:2b: a4:66:52:df:de:78:8e:8b:5b:fd:89:70:26:ef:bb: d5:ad:90:45:ce:4b:14:ef:de:e5:8e:fd:b2:c3:0b: d1:9c:76:72:7d:d6:aa:58:82:05:8a:d9:69:6d:76: a0:67:57:cc:0a:52:82:d2:1e:82:6c:34:af:85:0b: c4:be:d6:70:cd:db:8d:22:3b:96:14:9e:35:f5:ec: 7c:1d:c0:f9:8d:f7:37:05:d9:a9:72:21:21:2d:19: 55:1e:cd:f3:c6:42:eb:93:09:8f:41:6d:02:79:a5: 2f:2a:8a:f6:6a:d2:a0:6c:93:ee:54:02:2c:a0:19: 49:3c:b2:11:cc:35:5f:06:0d:dc:ef:0c:e0:d3:95: 7a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:5F:18:E1:D8:1B:10:C6:18:23:DC:54:9A:4D:C0:1B:B3:E5:E7:06 X509v3 Authority Key Identifier: keyid:0E:2D:EA:14:FD:7C:FF:D0:D0:A9:EA:3E:37:43:7B:91:E4:54:B2:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:99:2c:db:64:cc:31:a3:98:9b:cf:8d:dc:ce:3f:00:f7:92: 12:1d:f7:50:0e:6a:58:b9:b4:4b:f5:9e:ed:9b:1d:7d:eb:27: de:90:db:59:06:40:92:f0:a0:f7:97:55:db:64:09:4b:9c:70: c2:e2:e9:7c:d0:c1:5d:a8:f5:14:e6:56:3e:ec:7d:14:32:47: ca:84:56:54:4f:05:19:72:67:b8:e4:3c:2d:48:74:b0:49:3d: 42:59:70:61:4e:19:93:94:39:43:39:41:a2:e7:fd:79:1f:52: 25:09:1f:a3:7c:fe:8e:6e:21:af:2d:ab:75:24:43:ca:84:e5: ff:6d:fd:ab:5f:73:c7:e3:f5:5e:30:e7:8c:9a:c0:db:05:c1: 1a:0a:5a:d2:5f:7e:1c:8b:81:58:45:5d:67:76:52:b7:13:a5: cf:77:23:9e:5c:f4:dc:61:94:50:30:3b:11:62:b3:34:e6:ef: da:70:86:bc:a9:26:c0:1e:8c:0f:de:15:f4:db:49:4d:93:cb: 5c:ef:5a:9b:66:4a:ad:6c:60:bc:29:a7:c9:7a:b0:1b:40:de: d2:b7:81:48:71:4d:bf:63:ad:2c:60:42:54:32:3e:d5:a7:ca: d2:7e:c4:2f:76:21:ec:39:2c:c4:9a:7d:b0:a3:0f:b0:7f:c4: 43:a1:a1:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYwQTMxMTAvBgNVBAUTKDBFMkRFQTE0RkQ3Q0ZGRDBEMEE5RUEzRTM3NDM3Qjkx RTQ1NEIyMzYwHhcNMjQwNTE4MTc1NDIwWhcNMjQwNTI1MTc1NDIwWjAYMRYwFAYD VQQDEw02NjQ4ZWI0ZC03MDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo+zIffd7PZ58KOAD+FLGDL9YfT9fBMQDGiAPNsY8NTt0lbVh+Q6bREoOy6VL s6Gyzr8BlGXQErq3xi65M8G1gE/RDJ3NKylx7bsBKuE3x8htNI7IomHxnoUX5Mbb rIuGk40Y/IKKIwhg6WPyJj1w5IJw0tJJGSukZlLf3niOi1v9iXAm77vVrZBFzksU 797ljv2ywwvRnHZyfdaqWIIFitlpbXagZ1fMClKC0h6CbDSvhQvEvtZwzduNIjuW FJ419ex8HcD5jfc3BdmpciEhLRlVHs3zxkLrkwmPQW0CeaUvKor2atKgbJPuVAIs oBlJPLIRzDVfBg3c7wzg05V63wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOdfGOHY GxDGGCPcVJpNwBuz5ecGMB8GA1UdIwQYMBaAFA4t6hT9fP/Q0KnqPjdDe5HkVLI2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjBBMy9FNERGOTZBQUZE RjgxMUU4QUQyQzEyNjJDNEY5QUUwMi9EaTNxRlAxOF85RFFxZW8tTjBON2tlUlVz alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RpM3FGUDE4XzlEUXFlby1OME43a2VSVXNqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjBBMy9FNERGOTZBQUZERjgxMUU4QUQyQzEyNjJDNEY5QUUwMi9EaTNxRlAxOF85 RFFxZW8tTjBON2tlUlVzalkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCimSzbZMwxo5ibz43czj8A95ISHfdQDmpYubRL9Z7tmx196yfekNtZ BkCS8KD3l1XbZAlLnHDC4ul80MFdqPUU5lY+7H0UMkfKhFZUTwUZcme45DwtSHSw ST1CWXBhThmTlDlDOUGi5/15H1IlCR+jfP6ObiGvLat1JEPKhOX/bf2rX3PH4/Ve MOeMmsDbBcEaClrSX34ci4FYRV1ndlK3E6XPdyOeXPTcYZRQMDsRYrM05u/acIa8 qSbAHowP3hX020lNk8tc71qbZkqtbGC8KafJerAbQN7St4FIcU2/Y60sYEJUMj7V p8rSfsQvdiHsOSzEmn2wow+wf8RDoaEI -----END CERTIFICATE-----Generated at Sat May 18 19:15:24 2024 by rpki-client on console-ams.rpki-client.org