$ rpki-client -vvf rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft File: 0efCSnRBTL3c_NiORsXVzTs-rtc.mft (raw, json) Hash identifier: WDNsdsXT6VEt0EetuZ4YTmtoL7w75rS4rCChGpnP9/U= Subject key identifier: 01:EE:32:A7:2E:34:1B:94:E3:94:BF:16:4F:41:E2:26:4E:83:2F:CF Authority key identifier: D1:E7:C2:4A:74:41:4C:BD:DC:FC:D8:8E:46:C5:D5:CD:3B:3E:AE:D7 Certificate issuer: /CN=A91606AF/serialNumber=D1E7C24A74414CBDDCFCD88E46C5D5CD3B3EAED7 Certificate serial: 0639 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft Manifest number: 0621 Signing time: Sat 01 Jun 2024 00:47:40 +0000 Manifest this update: Sat 01 Jun 2024 00:47:40 +0000 Manifest next update: Sat 08 Jun 2024 00:47:40 +0000 Files and hashes: 1: 0efCSnRBTL3c_NiORsXVzTs-rtc.crl (hash: Z561pAtNL67QxE3gVTagpigpBkuZO5oKV4TIB5g1gZg=) 2: 8C2D64121CB011EDA4740D7EC4F9AE02.roa (hash: 5mYVRvOqzGHOPhY+Myn+QOogy83XRkkg69Sb3OKrohc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.crl rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 00:47:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1593 (0x639) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91606AF/serialNumber=D1E7C24A74414CBDDCFCD88E46C5D5CD3B3EAED7 Validity Not Before: Jun 1 00:47:40 2024 GMT Not After : Jun 8 00:47:40 2024 GMT Subject: CN=665a6fac-0cc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:68:4d:0a:7c:8c:e3:54:14:64:2b:02:39:e0: 8a:ea:67:5a:2c:e7:13:4e:ca:c3:30:d7:78:e8:e2: d7:b6:0c:01:5d:cd:32:f2:fd:64:a8:5a:ad:0b:6d: 75:6e:5a:3a:4d:b2:59:e2:6f:0a:24:d6:08:d2:a5: 1f:1d:0b:0a:20:dd:fe:b9:e0:e2:d2:07:1d:7d:4a: b3:0f:02:85:70:39:2d:f8:58:92:17:57:df:17:5b: 28:59:ee:a2:a3:8f:5a:6e:43:62:2e:37:14:70:ea: e6:18:39:53:31:f8:a1:65:54:91:a5:9e:a8:5b:ef: 7c:97:98:df:4d:9d:49:d7:f6:95:ba:2f:68:ca:b9: 2b:89:e1:ca:c0:50:4a:1d:58:9a:25:9b:45:fe:5c: d7:49:2e:9d:2f:75:34:3a:7d:f1:65:71:c2:70:3d: ad:91:b0:7e:7b:17:0a:51:b6:5c:a6:3e:aa:c4:f5: 49:56:8d:18:30:36:39:f3:ef:55:cb:cc:64:c9:96: 63:c4:1d:f8:68:c3:a6:09:c0:d9:68:ed:99:4a:ff: e3:c6:59:11:18:3b:15:f6:ae:85:18:5b:3e:58:88: 01:6e:44:94:30:e0:42:a8:6e:0e:65:bb:28:d2:47: f8:b2:2e:5e:79:e1:27:f1:2e:f7:6b:d4:bc:43:69: b3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:EE:32:A7:2E:34:1B:94:E3:94:BF:16:4F:41:E2:26:4E:83:2F:CF X509v3 Authority Key Identifier: keyid:D1:E7:C2:4A:74:41:4C:BD:DC:FC:D8:8E:46:C5:D5:CD:3B:3E:AE:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:f6:e4:de:32:19:e2:11:9a:78:35:db:56:2a:20:67:f2:c9: de:2f:4d:e1:55:99:71:3e:8c:dd:e4:55:53:f3:ad:b6:f8:86: 98:a5:7a:03:fe:a2:04:27:a4:49:6f:91:2a:95:4e:21:c7:8c: 86:1e:9e:b6:de:0d:f9:3f:7c:7a:f6:44:95:eb:5a:97:4f:7f: 8a:f9:88:f1:0d:b7:c2:60:bb:bb:c9:6a:47:0d:70:17:35:93: ce:b4:2b:a9:6a:29:39:0c:ef:a4:5e:55:ae:d3:7c:a6:2f:f8: b4:d4:95:aa:c7:35:b4:4a:c1:27:cd:9d:0e:36:b8:3e:06:8b: 8c:d7:cd:15:84:b8:1f:1d:62:19:44:ae:3d:75:ba:35:c5:b0: e2:1c:5c:d2:19:ff:89:63:e6:b7:1e:8d:3f:da:ef:1e:f3:8d: 5d:fa:2b:21:6b:30:3c:e4:ef:af:f3:a5:fa:f1:91:76:84:f3: 57:ff:9b:23:67:06:a7:c4:b2:7a:96:f1:0a:b5:fd:88:4a:13: 3d:d1:9f:3f:d4:5a:8b:20:c2:37:de:b4:0f:23:42:fc:b6:54: 06:e8:1b:bf:2a:b1:04:3d:c2:fe:cb:a1:fa:d6:50:5e:50:8d: 61:46:31:66:a5:30:b2:68:76:e6:b6:8f:71:35:5b:06:5f:25: 48:95:96:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA2QUYxMTAvBgNVBAUTKEQxRTdDMjRBNzQ0MTRDQkREQ0ZDRDg4RTQ2QzVENUNE M0IzRUFFRDcwHhcNMjQwNjAxMDA0NzQwWhcNMjQwNjA4MDA0NzQwWjAYMRYwFAYD VQQDEw02NjVhNmZhYy0wY2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2hNCnyM41QUZCsCOeCK6mdaLOcTTsrDMNd46OLXtgwBXc0y8v1kqFqtC211 blo6TbJZ4m8KJNYI0qUfHQsKIN3+ueDi0gcdfUqzDwKFcDkt+FiSF1ffF1soWe6i o49abkNiLjcUcOrmGDlTMfihZVSRpZ6oW+98l5jfTZ1J1/aVui9oyrkrieHKwFBK HViaJZtF/lzXSS6dL3U0On3xZXHCcD2tkbB+excKUbZcpj6qxPVJVo0YMDY58+9V y8xkyZZjxB34aMOmCcDZaO2ZSv/jxlkRGDsV9q6FGFs+WIgBbkSUMOBCqG4OZbso 0kf4si5eeeEn8S73a9S8Q2mzOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAHuMqcu NBuU45S/Fk9B4iZOgy/PMB8GA1UdIwQYMBaAFNHnwkp0QUy93PzYjkbF1c07Pq7X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDZBRi9BMDk1OEYzMDVF Q0QxMUVCOTA4NzYzNzJDNEY5QUUwMi8wZWZDU25SQlRMM2NfTmlPUnNYVnpUcy1y dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBlZkNTblJCVEwzY19OaU9Sc1hWelRzLXJ0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDZBRi9BMDk1OEYzMDVFQ0QxMUVCOTA4NzYzNzJDNEY5QUUwMi8wZWZDU25SQlRM M2NfTmlPUnNYVnpUcy1ydGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB69uTeMhniEZp4NdtWKiBn8sneL03hVZlxPozd5FVT8622+IaYpXoD /qIEJ6RJb5EqlU4hx4yGHp623g35P3x69kSV61qXT3+K+YjxDbfCYLu7yWpHDXAX NZPOtCupaik5DO+kXlWu03ymL/i01JWqxzW0SsEnzZ0ONrg+BouM180VhLgfHWIZ RK49dbo1xbDiHFzSGf+JY+a3Ho0/2u8e841d+ishazA85O+v86X68ZF2hPNX/5sj ZwanxLJ6lvEKtf2IShM90Z8/1FqLIMI33rQPI0L8tlQG6Bu/KrEEPcL+y6H61lBe UI1hRjFmpTCyaHbmto9xNVsGXyVIlZaS -----END CERTIFICATE-----Generated at Sat Jun 1 02:01:14 2024 by rpki-client on console-ams.rpki-client.org