$ rpki-client -vvf rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft File: _0KzQ2BElUaW_-CLDuGXXGxbjW0.mft (raw, json) Hash identifier: e1rs3m/wutrWmbfxyTiM9aXoxFE7y2c/ZECkN+ACbS0= Subject key identifier: B3:97:72:3F:53:43:0F:CF:A4:CF:A9:7F:E8:42:BA:D8:33:C3:71:69 Authority key identifier: FF:42:B3:43:60:44:95:46:96:FF:E0:8B:0E:E1:97:5C:6C:5B:8D:6D Certificate issuer: /CN=A91864A7/serialNumber=FF42B3436044954696FFE08B0EE1975C6C5B8D6D Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft Manifest number: E1 Signing time: Sun 19 May 2024 06:02:43 +0000 Manifest this update: Sun 19 May 2024 06:02:43 +0000 Manifest next update: Sun 26 May 2024 06:02:43 +0000 Files and hashes: 1: _0KzQ2BElUaW_-CLDuGXXGxbjW0.crl (hash: Vlsa8yxAulXA9P1Dzz23daXEIgSOM+5WjLiuaR7IznI=) 2: BCAE303EF6C611EE8AA17A87C4F9AE02.roa (hash: Nw8x9mLPZwAM+TmY7YZWJ1UH47SP8KuPCQA9ieUATsw=) 3: B34D1A26F6C811EEBC4BE00BC4F9AE02.roa (hash: cEHfcporY2Xrm8zzfMtLLWTL/BLOa+RHRiXEST5Wwlw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.crl rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91864A7/serialNumber=FF42B3436044954696FFE08B0EE1975C6C5B8D6D Validity Not Before: May 19 06:02:43 2024 GMT Not After : May 26 06:02:43 2024 GMT Subject: CN=66499603-bf98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:47:ff:2e:e4:e2:e9:10:89:77:94:07:5d:1c: 76:12:26:c6:f3:fe:ef:38:ab:c7:c3:16:28:1a:23: 9b:4e:5b:03:c6:99:93:73:86:58:be:4e:60:75:62: 74:d2:5b:97:07:e9:a6:8c:0d:98:1e:41:aa:80:06: b8:75:9b:2d:9b:dd:37:75:c6:f7:00:98:59:94:0a: be:b5:d6:14:81:eb:e3:a8:be:b6:f3:be:98:48:c2: f1:c5:8f:be:15:b8:bb:2f:6f:28:ed:05:a3:b0:e9: d7:a4:65:71:82:81:2e:a5:aa:ec:3b:a8:bc:6e:75: 9e:58:74:df:ad:8f:8d:0b:cf:75:d7:b1:f9:14:9b: c2:74:c0:70:86:39:9f:61:b6:0d:49:5e:a3:42:76: c1:52:a5:6d:96:1b:dc:52:63:7d:38:1c:1a:b4:13: a2:0f:e6:47:db:b1:b1:0f:7f:cd:93:88:dc:f6:1f: d4:a4:36:35:26:fb:77:7f:a2:c3:5e:f4:cf:3e:17: 9e:e0:26:17:a9:70:5b:a6:f4:df:79:9d:33:e9:19: ad:2b:d0:0f:9e:55:e1:e8:70:42:75:ab:c2:01:93: 8e:79:f2:f2:3f:e0:ec:de:7a:5f:e8:13:7c:27:83: a4:6c:b8:e1:8a:95:c2:ff:03:9a:ab:4e:4e:00:55: ff:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:97:72:3F:53:43:0F:CF:A4:CF:A9:7F:E8:42:BA:D8:33:C3:71:69 X509v3 Authority Key Identifier: keyid:FF:42:B3:43:60:44:95:46:96:FF:E0:8B:0E:E1:97:5C:6C:5B:8D:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:0c:94:59:68:eb:e4:85:6f:df:ac:24:77:ab:b8:5b:53:16: 66:98:e7:65:f5:ca:d5:9b:af:50:6a:d6:ed:29:cc:b6:ef:b0: 30:e3:3d:ac:5a:a4:fb:3e:7f:52:6a:01:2b:bb:d8:14:65:da: 52:31:a5:f9:91:22:de:03:3c:e0:2d:b8:b9:b0:a0:26:1f:79: 9f:54:e8:fb:2f:0f:c1:ed:b4:43:73:b8:5a:af:64:ed:04:a9: 92:20:82:fe:5c:4c:c8:38:3e:e7:b3:6c:b0:06:4e:76:24:51: 51:78:5a:c1:a0:79:b3:5d:c2:bd:62:75:82:be:89:41:f3:41: 38:4a:2e:d3:ab:02:f6:ee:9b:3d:69:2d:23:92:2b:73:08:33: 72:68:a7:d2:01:13:ef:be:64:9c:7f:aa:29:b7:7d:45:28:1f: aa:5f:fb:20:54:38:f9:61:a5:c8:5c:8c:1f:6c:46:e9:32:65: 2b:81:03:77:e2:10:fc:0f:47:cb:ae:8d:37:9d:1d:b2:63:d5: 61:ce:a6:6f:66:18:ab:2d:7a:96:5d:6c:dd:58:77:93:b4:46: 32:00:54:e3:68:b0:52:c1:6a:fe:37:9f:f9:f3:62:0f:2e:d8: 68:8c:06:62:d9:21:6d:17:3c:96:c1:22:ef:3a:d3:e5:a4:61: 47:82:29:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY0QTcxMTAvBgNVBAUTKEZGNDJCMzQzNjA0NDk1NDY5NkZGRTA4QjBFRTE5NzVD NkM1QjhENkQwHhcNMjQwNTE5MDYwMjQzWhcNMjQwNTI2MDYwMjQzWjAYMRYwFAYD VQQDEw02NjQ5OTYwMy1iZjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0f/LuTi6RCJd5QHXRx2EibG8/7vOKvHwxYoGiObTlsDxpmTc4ZYvk5gdWJ0 0luXB+mmjA2YHkGqgAa4dZstm903dcb3AJhZlAq+tdYUgevjqL62876YSMLxxY++ Fbi7L28o7QWjsOnXpGVxgoEuparsO6i8bnWeWHTfrY+NC89117H5FJvCdMBwhjmf YbYNSV6jQnbBUqVtlhvcUmN9OBwatBOiD+ZH27GxD3/Nk4jc9h/UpDY1Jvt3f6LD XvTPPhee4CYXqXBbpvTfeZ0z6RmtK9APnlXh6HBCdavCAZOOefLyP+Ds3npf6BN8 J4OkbLjhipXC/wOaq05OAFX/FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLOXcj9T Qw/PpM+pf+hCutgzw3FpMB8GA1UdIwQYMBaAFP9Cs0NgRJVGlv/giw7hl1xsW41t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjRBNy9DODA1NUZENkM5 MjUxMUVEODA5MzYxNDlDNEY5QUUwMi9fMEt6UTJCRWxVYVdfLUNMRHVHWFhHeGJq VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wS3pRMkJFbFVhV18tQ0xEdUdYWEd4YmpXMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjRBNy9DODA1NUZENkM5MjUxMUVEODA5MzYxNDlDNEY5QUUwMi9fMEt6UTJCRWxV YVdfLUNMRHVHWFhHeGJqVzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDDJRZaOvkhW/frCR3q7hbUxZmmOdl9crVm69QatbtKcy277Aw4z2s WqT7Pn9SagEru9gUZdpSMaX5kSLeAzzgLbi5sKAmH3mfVOj7Lw/B7bRDc7har2Tt BKmSIIL+XEzIOD7ns2ywBk52JFFReFrBoHmzXcK9YnWCvolB80E4Si7TqwL27ps9 aS0jkitzCDNyaKfSARPvvmScf6opt31FKB+qX/sgVDj5YaXIXIwfbEbpMmUrgQN3 4hD8D0fLro03nR2yY9VhzqZvZhirLXqWXWzdWHeTtEYyAFTjaLBSwWr+N5/582IP LthojAZi2SFtFzyWwSLvOtPlpGFHgikB -----END CERTIFICATE-----Generated at Sun May 19 08:25:02 2024 by rpki-client on console-ams.rpki-client.org