$ rpki-client -vvf rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft File: rMARlDOHfwx0KFe46lIPjaTtCVo.mft (raw, json) Hash identifier: jcCJPft3Kr3h/wsCf638f47M1KvyY7jeb5izk9/tJtM= Subject key identifier: CA:0A:51:49:B2:09:78:E1:FB:3D:23:5B:A7:97:F9:E5:5E:69:7B:35 Authority key identifier: AC:C0:11:94:33:87:7F:0C:74:28:57:B8:EA:52:0F:8D:A4:ED:09:5A Certificate issuer: /CN=A915A5E7/serialNumber=ACC0119433877F0C742857B8EA520F8DA4ED095A Certificate serial: 0596 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft Manifest number: 0590 Signing time: Fri 31 May 2024 01:02:53 +0000 Manifest this update: Fri 31 May 2024 01:02:53 +0000 Manifest next update: Fri 07 Jun 2024 01:02:53 +0000 Files and hashes: 1: rMARlDOHfwx0KFe46lIPjaTtCVo.crl (hash: FipSh2Tz2SYU/AP57ew4RmmAoNjCingiN6qR8aPfYBM=) 2: 1E1A1DB28C6A11EB91832D52C4F9AE02.roa (hash: lKsHHS8TjrQNIN7lS2Dpo9BxEEOXfDZGMEdCobSpLMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.crl rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1430 (0x596) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A5E7/serialNumber=ACC0119433877F0C742857B8EA520F8DA4ED095A Validity Not Before: May 31 01:02:53 2024 GMT Not After : Jun 7 01:02:53 2024 GMT Subject: CN=665921bd-25c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cb:00:be:d7:35:a3:7f:ad:d5:9e:14:0c:b5: 17:74:13:58:c6:cb:01:7f:f8:07:77:fe:a8:3d:b0: a2:a4:45:a8:e4:64:58:5d:52:92:d9:7e:aa:d6:d7: e8:2e:b5:25:02:75:84:24:d6:3e:62:de:37:8e:26: 46:76:f9:2d:3e:29:18:d4:7e:f7:88:db:77:15:dc: c6:0e:71:62:5d:db:7e:02:61:ee:bb:11:17:87:51: 2a:1b:4b:89:df:11:d3:35:98:7b:07:6f:c9:e5:91: 61:4f:d8:e8:aa:1c:58:bb:cb:1e:bf:bc:5b:f1:2f: 4a:08:f6:cb:c8:39:d6:53:1d:9f:07:6a:95:18:36: 1e:b8:8b:92:d3:cf:03:72:d4:92:39:5d:91:03:63: 2f:f8:bf:c1:c2:ec:a5:62:38:21:59:c7:99:23:1a: d7:89:a3:b4:c0:a6:f2:51:16:60:c3:ff:f8:68:20: ba:6b:34:48:1b:55:6d:e7:c5:ad:14:c5:85:29:5b: 9d:58:5f:58:82:d9:a6:ed:6b:fe:b2:30:7c:14:c9: 50:2d:37:0c:9c:5a:cc:60:7b:16:c6:e8:50:93:7a: 98:4c:65:79:04:e2:cc:4f:d3:e3:c1:bf:84:ad:1b: 5f:b1:f6:2c:8f:e4:21:46:ad:69:ba:00:ef:ee:43: 87:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:0A:51:49:B2:09:78:E1:FB:3D:23:5B:A7:97:F9:E5:5E:69:7B:35 X509v3 Authority Key Identifier: keyid:AC:C0:11:94:33:87:7F:0C:74:28:57:B8:EA:52:0F:8D:A4:ED:09:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:3c:d1:07:43:f3:34:94:ec:35:e2:f6:aa:1f:ee:cf:7f:74: 9d:80:91:9f:d5:2e:f8:1f:32:b6:12:cd:41:c3:72:f8:26:e8: 41:e3:06:50:39:ce:b1:89:cd:c8:37:9a:b6:ae:e7:98:04:03: b5:43:5e:06:5d:cd:d1:4e:a3:57:05:01:ca:0b:58:07:5a:af: b6:19:35:38:a8:40:9a:c2:db:e2:c4:92:78:c9:b1:c9:53:cd: 7e:31:1b:bd:96:fc:01:bd:fe:94:e9:04:25:24:0f:0d:e5:b4: 3e:81:62:78:98:b1:6a:32:85:2e:88:65:29:c9:17:ce:ec:3d: 19:dd:41:88:1d:ff:5a:9f:72:27:3b:e6:12:f0:69:e0:5d:c3: 12:f5:f9:77:0a:ac:4a:dd:88:2c:fa:ac:9c:c3:e1:43:36:75: e5:0b:af:9c:87:27:bf:98:c0:ca:55:6b:54:3a:b5:7c:00:a7: 7e:22:2d:70:d9:1d:3d:df:19:34:64:3f:c1:37:b1:d8:7c:e7: a6:0a:3c:2f:b5:bc:4a:ce:f2:af:fe:41:ec:5e:19:9d:aa:89: 61:8f:4e:66:95:db:c3:15:e5:e7:07:5e:88:3f:38:f0:28:29: c4:5e:67:42:c7:08:d7:26:03:49:f0:ff:1d:6a:aa:5e:6d:ed: 8b:43:63:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE1RTcxMTAvBgNVBAUTKEFDQzAxMTk0MzM4NzdGMEM3NDI4NTdCOEVBNTIwRjhE QTRFRDA5NUEwHhcNMjQwNTMxMDEwMjUzWhcNMjQwNjA3MDEwMjUzWjAYMRYwFAYD VQQDEw02NjU5MjFiZC0yNWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8sAvtc1o3+t1Z4UDLUXdBNYxssBf/gHd/6oPbCipEWo5GRYXVKS2X6q1tfo LrUlAnWEJNY+Yt43jiZGdvktPikY1H73iNt3FdzGDnFiXdt+AmHuuxEXh1EqG0uJ 3xHTNZh7B2/J5ZFhT9joqhxYu8sev7xb8S9KCPbLyDnWUx2fB2qVGDYeuIuS088D ctSSOV2RA2Mv+L/BwuylYjghWceZIxrXiaO0wKbyURZgw//4aCC6azRIG1Vt58Wt FMWFKVudWF9Ygtmm7Wv+sjB8FMlQLTcMnFrMYHsWxuhQk3qYTGV5BOLMT9Pjwb+E rRtfsfYsj+QhRq1pugDv7kOH0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMoKUUmy CXjh+z0jW6eX+eVeaXs1MB8GA1UdIwQYMBaAFKzAEZQzh38MdChXuOpSD42k7Qla MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTVFNy9FOTU5REM3NjhD NjgxMUVCODcwNDJENTFDNEY5QUUwMi9yTUFSbERPSGZ3eDBLRmU0NmxJUGphVHRD Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JNQVJsRE9IZnd4MEtGZTQ2bElQamFUdENWby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTVFNy9FOTU5REM3NjhDNjgxMUVCODcwNDJENTFDNEY5QUUwMi9yTUFSbERPSGZ3 eDBLRmU0NmxJUGphVHRDVm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdPNEHQ/M0lOw14vaqH+7Pf3SdgJGf1S74HzK2Es1Bw3L4JuhB4wZQ Oc6xic3IN5q2rueYBAO1Q14GXc3RTqNXBQHKC1gHWq+2GTU4qECawtvixJJ4ybHJ U81+MRu9lvwBvf6U6QQlJA8N5bQ+gWJ4mLFqMoUuiGUpyRfO7D0Z3UGIHf9an3In O+YS8GngXcMS9fl3CqxK3Ygs+qycw+FDNnXlC6+chye/mMDKVWtUOrV8AKd+Ii1w 2R093xk0ZD/BN7HYfOemCjwvtbxKzvKv/kHsXhmdqolhj05mldvDFeXnB16IPzjw KCnEXmdCxwjXJgNJ8P8daqpebe2LQ2NU -----END CERTIFICATE-----Generated at Fri May 31 03:14:59 2024 by rpki-client on console-ams.rpki-client.org