$ rpki-client -vvf rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft File: aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft (raw, json) Hash identifier: NdwJTzecq3L1jkWUJavPcgv7KDpvr2Lbrz+ZACo8aMg= Subject key identifier: 2A:61:B0:8D:0A:97:25:44:F7:F7:AB:75:8E:A2:71:C2:7C:41:36:1E Authority key identifier: 69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6 Certificate issuer: /CN=A917BED0/serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6 Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft Manifest number: 010A Signing time: Sun 19 May 2024 05:30:45 +0000 Manifest this update: Sun 19 May 2024 05:30:44 +0000 Manifest next update: Sun 26 May 2024 05:30:44 +0000 Files and hashes: 1: aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl (hash: HMUUl0ftZq0zCjTcFVzLcrtsMbPIhHf4ef2fBUjR+l8=) 2: 24AC43889DE011EDA182F455C4F9AE02.roa (hash: +5LiIA2vGdlRK4j5U+PAv4wBSf7OLNtQLm2AN9icBsc=) 3: 236FAC269DE011EDA182F455C4F9AE02.roa (hash: P3rMgRvyEpJB1YL/Ds/oQ9zQ0o9oBLBH7hZsRvceZbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BED0/serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6 Validity Not Before: May 19 05:30:44 2024 GMT Not After : May 26 05:30:44 2024 GMT Subject: CN=66498e85-2edf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:58:9b:c9:12:67:57:a8:77:2e:cd:37:74:ea: bc:13:92:ad:73:ea:fd:c4:38:b5:a3:3b:6f:8f:50: b1:dc:8f:0c:99:ad:79:c3:03:9d:c4:5b:2a:fe:13: 69:72:11:30:51:7d:d5:a1:c6:47:4b:a8:8a:cd:c6: b4:36:03:87:a3:89:e8:27:24:57:27:d1:39:89:00: 49:33:ec:da:65:4b:9f:31:7b:27:9d:84:0d:b3:54: b3:6c:66:bb:72:6f:35:26:08:e2:6e:af:c2:de:3b: af:43:7d:e1:37:2c:35:06:f4:6d:c7:55:3d:31:72: 6e:69:a0:2e:8a:f5:49:ca:0a:dd:61:c7:81:3a:c8: b0:43:b2:16:f3:e3:ad:5d:66:f3:32:23:86:43:65: 70:e1:dd:7c:bb:9e:78:b2:53:9d:5e:f3:a5:9f:a6: 72:7a:d3:f7:5f:6b:2a:07:9d:b0:a9:38:16:21:ae: 2a:b6:2a:26:c1:62:ae:15:66:ee:21:e7:7a:0a:32: 21:97:5e:0d:70:79:84:ee:27:48:3f:69:45:91:37: 3b:50:d7:2b:71:53:41:5f:29:0f:80:be:77:13:08: 58:9c:b1:3a:de:c4:ad:8a:0f:fe:45:58:06:94:f5: 71:3a:1a:b2:61:8a:98:fd:dc:22:17:5d:ad:fa:da: 1d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:61:B0:8D:0A:97:25:44:F7:F7:AB:75:8E:A2:71:C2:7C:41:36:1E X509v3 Authority Key Identifier: keyid:69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption f0:7d:ba:28:10:4b:06:a2:a6:73:d7:78:cc:aa:50:b5:3a:23: 57:35:37:1f:77:ab:df:06:19:65:53:85:c6:2e:2e:9d:69:c8: 44:83:43:57:f8:13:e2:4e:1f:14:6f:1c:c2:ab:ec:3b:0b:b0: 82:93:65:6e:47:92:ae:d0:45:8a:c7:cc:e6:2b:80:88:3e:48: 92:6b:3e:11:bf:d6:90:f9:e7:05:35:ea:77:03:c4:eb:9d:98: 17:05:a6:52:ce:6c:e5:46:13:aa:d2:25:92:94:e8:74:f4:1c: 81:f7:e9:7e:3f:29:09:34:bb:13:72:3c:8e:8d:42:c7:4f:fc: 80:32:8a:19:15:95:54:91:ca:9f:83:00:fd:81:83:d0:e2:8d: 22:9e:44:71:92:d5:65:1a:a2:cf:61:4a:ea:2e:31:13:7e:f4: 32:76:27:d5:8c:c6:41:65:ab:d1:be:08:f8:38:60:a1:bf:c9: 58:3a:7c:a5:de:48:9e:44:82:a2:93:e4:af:11:49:03:f8:5c: fb:ab:b1:21:20:ad:f4:8f:38:92:79:16:a4:4c:a5:f2:92:84: 4b:45:e5:24:67:99:9a:3c:cb:ff:56:a1:f1:ab:1c:aa:a6:3d: 02:24:03:d5:4f:3a:7d:84:8a:00:09:ec:56:13:f7:25:a2:79: 3c:ef:e8:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JFRDAxMTAvBgNVBAUTKDY5MkVCRDNEMDNGMjU4NzQ2RTY4NDNCNjEyOEREMjA5 QzUxMjIyRTYwHhcNMjQwNTE5MDUzMDQ0WhcNMjQwNTI2MDUzMDQ0WjAYMRYwFAYD VQQDEw02NjQ5OGU4NS0yZWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA21ibyRJnV6h3Ls03dOq8E5Ktc+r9xDi1oztvj1Cx3I8Mma15wwOdxFsq/hNp chEwUX3VocZHS6iKzca0NgOHo4noJyRXJ9E5iQBJM+zaZUufMXsnnYQNs1SzbGa7 cm81Jgjibq/C3juvQ33hNyw1BvRtx1U9MXJuaaAuivVJygrdYceBOsiwQ7IW8+Ot XWbzMiOGQ2Vw4d18u554slOdXvOln6ZyetP3X2sqB52wqTgWIa4qtiomwWKuFWbu Ied6CjIhl14NcHmE7idIP2lFkTc7UNcrcVNBXykPgL53EwhYnLE63sStig/+RVgG lPVxOhqyYYqY/dwiF12t+todjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCphsI0K lyVE9/erdY6iccJ8QTYeMB8GA1UdIwQYMBaAFGkuvT0D8lh0bmhDthKN0gnFEiLm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVEMC9EREI1ODlBMDgw MTkxMUVEQkJCRTMwNkVDNEY5QUUwMi9hUzY5UFFQeVdIUnVhRU8yRW8zU0NjVVNJ dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FTNjlQUVB5V0hSdWFFTzJFbzNTQ2NVU0l1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkVEMC9EREI1ODlBMDgwMTkxMUVEQkJCRTMwNkVDNEY5QUUwMi9hUzY5UFFQeVdI UnVhRU8yRW8zU0NjVVNJdVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDwfbooEEsGoqZz13jMqlC1OiNXNTcfd6vfBhllU4XGLi6dachEg0NX +BPiTh8UbxzCq+w7C7CCk2VuR5Ku0EWKx8zmK4CIPkiSaz4Rv9aQ+ecFNep3A8Tr nZgXBaZSzmzlRhOq0iWSlOh09ByB9+l+PykJNLsTcjyOjULHT/yAMooZFZVUkcqf gwD9gYPQ4o0inkRxktVlGqLPYUrqLjETfvQydifVjMZBZavRvgj4OGChv8lYOnyl 3kieRIKik+SvEUkD+Fz7q7EhIK30jziSeRakTKXykoRLReUkZ5maPMv/VqHxqxyq pj0CJAPVTzp9hIoACexWE/clonk87+iR -----END CERTIFICATE-----Generated at Sun May 19 06:14:34 2024 by rpki-client on console-ams.rpki-client.org