$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft File: Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft (raw, json) Hash identifier: Oe4wGU/ohbHqeXV5AZFMOUSCPC0xQV8zo6ZiHRhBcso= Subject key identifier: 47:4D:06:0C:6C:95:06:28:D6:66:53:18:5C:83:F9:74:20:4A:6F:83 Authority key identifier: 4D:FE:C3:43:7C:90:BF:41:4D:05:18:8B:48:2C:78:48:E6:F3:16:1B Certificate issuer: /CN=A916C4BC/serialNumber=4DFEC3437C90BF414D05188B482C7848E6F3161B Certificate serial: 03A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft Manifest number: 039D Signing time: Sat 01 Jun 2024 03:40:26 +0000 Manifest this update: Sat 01 Jun 2024 03:40:25 +0000 Manifest next update: Sat 08 Jun 2024 03:40:25 +0000 Files and hashes: 1: Tf7DQ3yQv0FNBRiLSCx4SObzFhs.crl (hash: fS9h/USM93NjN6L1g8JllzpyI00Txh1UEpa2D/KjAnI=) 2: F593443851B011ECB5188E24C4F9AE02.roa (hash: wMMQ5Gg9qCouXIcWbLn86vQgUXd3BSP9FGBHooJe2V4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.crl rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 03:40:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 928 (0x3a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C4BC/serialNumber=4DFEC3437C90BF414D05188B482C7848E6F3161B Validity Not Before: Jun 1 03:40:25 2024 GMT Not After : Jun 8 03:40:25 2024 GMT Subject: CN=665a9829-b0de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cc:0a:99:c0:af:b0:e5:c8:7d:9b:8e:3d:ab: 16:49:9e:02:af:1b:0e:84:57:5b:90:85:85:fa:ce: da:f7:93:25:21:d9:ec:8f:f3:a8:e8:7f:e9:30:22: 99:b2:54:4e:66:4d:2e:a5:0c:72:e3:ab:fa:e1:1c: ea:cc:cc:49:99:47:a3:15:92:15:ff:f6:5f:38:f2: 58:37:0a:14:68:b8:95:03:08:7a:db:0c:26:dc:82: 37:4f:39:a9:28:f3:77:b5:9e:5b:66:34:10:ad:6d: 12:0a:57:47:da:4e:ab:e2:67:38:8d:5f:dc:88:a1: 28:f7:d4:34:7d:c3:21:2b:a3:ff:54:d8:22:2f:d4: 39:2d:fe:55:ae:f2:bc:59:6b:73:d1:61:41:31:59: c5:ab:c0:c3:47:bb:9c:3c:7e:5a:7a:99:1b:0f:44: 8a:4b:e4:9e:c9:54:56:a6:24:58:24:da:4c:92:4d: 3c:1b:91:3f:e6:b9:64:22:9e:c2:8a:3d:19:8f:e5: 72:cd:68:71:4e:43:e3:1b:a4:84:fc:20:c3:a1:20: 50:f5:b1:5d:e2:3d:95:78:d6:8b:b1:5b:54:bc:46: 28:3c:16:3b:fa:04:97:10:02:c3:f8:48:fa:8b:9f: 01:a8:ea:33:f7:0f:f9:e9:9b:d3:be:55:8b:81:24: b7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:4D:06:0C:6C:95:06:28:D6:66:53:18:5C:83:F9:74:20:4A:6F:83 X509v3 Authority Key Identifier: keyid:4D:FE:C3:43:7C:90:BF:41:4D:05:18:8B:48:2C:78:48:E6:F3:16:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:33:c4:fb:04:13:bf:6f:10:db:cb:4e:55:4b:d0:2f:26:6f: 24:b6:5b:6e:6e:8c:f9:a9:a8:14:98:c2:25:5d:b6:27:c1:51: 49:4a:8a:b7:7d:49:0b:d0:12:da:8a:e4:2f:be:51:03:53:10: 7e:8c:3a:d3:da:10:a2:cb:f4:65:b2:ba:66:7b:c4:0f:0e:f8: f4:5e:46:05:db:10:ab:b8:71:a0:b6:03:75:f3:89:de:89:be: 39:b8:33:82:9e:e4:3e:1e:67:2c:3e:c1:70:f4:7b:d2:ac:bb: a6:58:76:8a:cf:d0:c1:02:50:0d:cc:d5:2c:23:c9:5a:fc:2a: fe:ce:7e:0d:2e:57:ae:a1:67:c6:e5:74:ea:3a:cf:80:72:14: bc:54:61:20:6c:01:ab:d7:24:6a:3c:df:46:16:52:0a:fe:8f: 9f:32:c7:1c:51:75:45:05:52:d2:62:b1:01:f4:cb:5e:e1:c6: 4b:3a:85:f5:17:ea:c3:55:f3:24:06:82:91:32:32:48:98:aa: 15:26:89:9b:0e:90:02:46:e8:da:f5:5d:7b:4c:ce:2b:40:dc: 3f:72:6c:d4:b0:fc:21:20:eb:ac:a8:e1:a9:a3:b2:98:3f:a9: 9a:ab:d7:4d:a0:fe:2b:01:50:68:e0:00:06:d3:c4:d6:87:8c: f1:45:fa:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM0QkMxMTAvBgNVBAUTKDRERkVDMzQzN0M5MEJGNDE0RDA1MTg4QjQ4MkM3ODQ4 RTZGMzE2MUIwHhcNMjQwNjAxMDM0MDI1WhcNMjQwNjA4MDM0MDI1WjAYMRYwFAYD VQQDEw02NjVhOTgyOS1iMGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArMwKmcCvsOXIfZuOPasWSZ4CrxsOhFdbkIWF+s7a95MlIdnsj/Oo6H/pMCKZ slROZk0upQxy46v64RzqzMxJmUejFZIV//ZfOPJYNwoUaLiVAwh62wwm3II3Tzmp KPN3tZ5bZjQQrW0SCldH2k6r4mc4jV/ciKEo99Q0fcMhK6P/VNgiL9Q5Lf5VrvK8 WWtz0WFBMVnFq8DDR7ucPH5aepkbD0SKS+SeyVRWpiRYJNpMkk08G5E/5rlkIp7C ij0Zj+VyzWhxTkPjG6SE/CDDoSBQ9bFd4j2VeNaLsVtUvEYoPBY7+gSXEALD+Ej6 i58BqOoz9w/56ZvTvlWLgSS3iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEdNBgxs lQYo1mZTGFyD+XQgSm+DMB8GA1UdIwQYMBaAFE3+w0N8kL9BTQUYi0gseEjm8xYb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzRCQy9BOTcwQjJFQzUx QUMxMUVDOUVEOTA0MUJDNEY5QUUwMi9UZjdEUTN5UXYwRk5CUmlMU0N4NFNPYnpG aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RmN0RRM3lRdjBGTkJSaUxTQ3g0U09iekZocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzRCQy9BOTcwQjJFQzUxQUMxMUVDOUVEOTA0MUJDNEY5QUUwMi9UZjdEUTN5UXYw Rk5CUmlMU0N4NFNPYnpGaHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFM8T7BBO/bxDby05VS9AvJm8ktltuboz5qagUmMIlXbYnwVFJSoq3 fUkL0BLaiuQvvlEDUxB+jDrT2hCiy/Rlsrpme8QPDvj0XkYF2xCruHGgtgN184ne ib45uDOCnuQ+HmcsPsFw9HvSrLumWHaKz9DBAlANzNUsI8la/Cr+zn4NLleuoWfG 5XTqOs+AchS8VGEgbAGr1yRqPN9GFlIK/o+fMsccUXVFBVLSYrEB9Mte4cZLOoX1 F+rDVfMkBoKRMjJImKoVJombDpACRuja9V17TM4rQNw/cmzUsPwhIOusqOGpo7KY P6maq9dNoP4rAVBo4AAG08TWh4zxRfrm -----END CERTIFICATE-----Generated at Sat Jun 1 07:08:18 2024 by rpki-client on console-ams.rpki-client.org