$ rpki-client -vvf rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft File: _ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft (raw, json) Hash identifier: vLMQxexBr0wa/MOQIkaPE7lWPuBN5l4Vl2M9+1d37ag= Subject key identifier: E7:46:9C:F7:22:69:8F:8B:D6:A9:AC:4B:F3:89:2B:A7:33:EC:EE:ED Authority key identifier: FE:2A:49:39:8E:65:00:6B:06:E9:DF:EC:27:0D:E2:E9:76:F8:AA:F6 Certificate issuer: /CN=A91820AF/serialNumber=FE2A49398E65006B06E9DFEC270DE2E976F8AAF6 Certificate serial: 05B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft Manifest number: 05AD Signing time: Fri 31 May 2024 00:51:29 +0000 Manifest this update: Fri 31 May 2024 00:51:28 +0000 Manifest next update: Fri 07 Jun 2024 00:51:28 +0000 Files and hashes: 1: _ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl (hash: Uxq2Kwpy8Xp+zEiM41B0l5q7JzDJGeMydatS70cKygI=) 2: D4DE5FF8A01F11EC87D72549C4F9AE02.roa (hash: GENTMW43Fjx41507OKkAKcfeeKuNUDv1LMDDEj69ZLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1459 (0x5b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91820AF/serialNumber=FE2A49398E65006B06E9DFEC270DE2E976F8AAF6 Validity Not Before: May 31 00:51:28 2024 GMT Not After : Jun 7 00:51:28 2024 GMT Subject: CN=66591f10-f67a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ed:a7:3d:08:fb:ba:c9:d7:a4:32:95:56:32: 70:88:0f:bb:72:20:82:ea:02:91:b0:17:2c:b5:7e: 98:da:19:b6:9d:7f:88:01:18:e9:6a:ef:1a:d8:37: d9:83:26:34:b3:79:91:35:d9:9c:c4:c5:e9:22:d5: f4:e1:50:b5:47:a9:0f:cf:91:9c:08:cf:a2:05:7f: 97:0c:ff:74:77:4d:aa:fd:20:40:69:9e:93:07:5e: 5f:4b:03:2b:5c:69:d6:4e:6d:55:6c:f4:28:eb:98: b6:1c:d1:83:b7:b6:36:5d:42:30:68:d5:f3:df:a9: 4f:21:29:1b:0f:6e:53:c0:f5:eb:76:e6:53:57:b6: d0:db:c0:6b:8d:a7:bb:31:3a:e4:80:37:ff:a7:18: 70:c7:e4:dc:ed:ea:e0:1f:6b:23:20:b9:44:c0:33: 4d:c6:a4:37:6e:8c:ec:13:d7:ec:ba:d9:ac:d4:0b: 75:b3:56:87:93:f4:b7:e0:c0:d6:6a:6c:71:0c:7d: 5e:8c:ad:73:b8:96:e6:0a:e1:09:16:7c:c7:81:22: 2f:4a:73:0a:f6:31:24:90:61:7a:45:ca:41:44:65: 32:1f:0d:1b:ec:89:c6:d9:8c:c8:3f:23:a8:95:41: 5d:4f:81:d3:61:1a:3e:b5:f2:72:6c:31:96:ff:2a: 66:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:46:9C:F7:22:69:8F:8B:D6:A9:AC:4B:F3:89:2B:A7:33:EC:EE:ED X509v3 Authority Key Identifier: keyid:FE:2A:49:39:8E:65:00:6B:06:E9:DF:EC:27:0D:E2:E9:76:F8:AA:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:8f:11:45:7f:14:56:15:29:ee:3c:29:43:4d:3c:d9:29:0e: 45:8c:0a:2a:aa:72:bf:f0:c6:d6:4f:11:b2:56:d7:f5:c8:1c: bb:2c:95:b7:30:08:d1:88:2c:fd:39:39:8e:bb:66:34:a5:61: d3:3c:20:8a:3e:eb:39:4c:b0:01:d7:7e:a1:fb:8e:b1:61:9d: 12:d3:16:f8:d2:1c:16:d1:37:b3:fb:3f:df:68:eb:a2:94:42: de:8f:9b:89:a9:c7:af:7f:1a:82:53:45:3c:3c:af:ae:11:99: 60:e4:16:f4:da:f4:fd:02:94:7a:19:93:04:a3:8f:b4:6c:b4: f5:21:90:8e:f5:15:25:4c:1f:5a:0f:32:1c:62:30:81:fc:84: 0d:2c:4f:d4:23:61:43:2d:a0:8c:e3:a1:fd:d8:8d:f6:27:a2: b2:a4:70:71:b9:40:dc:f4:aa:47:f4:bb:cb:4f:a1:5b:9c:7a: d7:df:98:2f:8f:0b:96:51:f9:51:51:00:1a:b3:85:21:b6:92: 7a:81:f6:14:1b:2a:7c:21:6d:f1:64:7c:5c:bf:ac:cb:58:81: 26:cd:84:54:60:b5:34:ad:b4:a6:ef:82:92:ec:79:ae:f8:95: 09:aa:61:3f:8c:f5:44:f9:84:bc:24:93:3d:5d:9f:32:16:ed: 40:36:06:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIwQUYxMTAvBgNVBAUTKEZFMkE0OTM5OEU2NTAwNkIwNkU5REZFQzI3MERFMkU5 NzZGOEFBRjYwHhcNMjQwNTMxMDA1MTI4WhcNMjQwNjA3MDA1MTI4WjAYMRYwFAYD VQQDEw02NjU5MWYxMC1mNjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2+2nPQj7usnXpDKVVjJwiA+7ciCC6gKRsBcstX6Y2hm2nX+IARjpau8a2DfZ gyY0s3mRNdmcxMXpItX04VC1R6kPz5GcCM+iBX+XDP90d02q/SBAaZ6TB15fSwMr XGnWTm1VbPQo65i2HNGDt7Y2XUIwaNXz36lPISkbD25TwPXrduZTV7bQ28Brjae7 MTrkgDf/pxhwx+Tc7ergH2sjILlEwDNNxqQ3bozsE9fsutms1At1s1aHk/S34MDW amxxDH1ejK1zuJbmCuEJFnzHgSIvSnMK9jEkkGF6RcpBRGUyHw0b7InG2YzIPyOo lUFdT4HTYRo+tfJybDGW/ypmwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOdGnPci aY+L1qmsS/OJK6cz7O7tMB8GA1UdIwQYMBaAFP4qSTmOZQBrBunf7CcN4ul2+Kr2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjBBRi8wRUYzREZBNDgw N0ExMUVCQkQwRThENThDNEY5QUUwMi9faXBKT1k1bEFHc0c2ZF9zSnczaTZYYjRx dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19pcEpPWTVsQUdzRzZkX3NKdzNpNlhiNHF2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjBBRi8wRUYzREZBNDgwN0ExMUVCQkQwRThENThDNEY5QUUwMi9faXBKT1k1bEFH c0c2ZF9zSnczaTZYYjRxdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARjxFFfxRWFSnuPClDTTzZKQ5FjAoqqnK/8MbWTxGyVtf1yBy7LJW3 MAjRiCz9OTmOu2Y0pWHTPCCKPus5TLAB136h+46xYZ0S0xb40hwW0Tez+z/faOui lELej5uJqcevfxqCU0U8PK+uEZlg5Bb02vT9ApR6GZMEo4+0bLT1IZCO9RUlTB9a DzIcYjCB/IQNLE/UI2FDLaCM46H92I32J6KypHBxuUDc9KpH9LvLT6FbnHrX35gv jwuWUflRUQAas4UhtpJ6gfYUGyp8IW3xZHxcv6zLWIEmzYRUYLU0rbSm74KS7Hmu +JUJqmE/jPVE+YS8JJM9XZ8yFu1ANgb7 -----END CERTIFICATE-----Generated at Fri May 31 01:33:49 2024 by rpki-client on console-ams.rpki-client.org