$ rpki-client -vvf rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft File: j3AW2iLylktW9Cz0bZ8SOvNoMas.mft (raw, json) Hash identifier: uBOz8Y+oLtVZol7LI92p1dDJw26a0ImLUWPzpqKFECA= Subject key identifier: 83:B1:0B:24:01:34:AA:0D:02:0C:38:DD:65:30:98:00:9A:58:D1:63 Authority key identifier: 8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB Certificate issuer: /CN=A91884A1/serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft Manifest number: AE Signing time: Sun 19 May 2024 06:39:34 +0000 Manifest this update: Sun 19 May 2024 06:39:33 +0000 Manifest next update: Sun 26 May 2024 06:39:33 +0000 Files and hashes: 1: j3AW2iLylktW9Cz0bZ8SOvNoMas.crl (hash: dhlfrHgXoe/xUAIKkapnoFOchq7FByILCHHjfbxntcU=) 2: 87695D32591811EE973B1058C4F9AE02.roa (hash: YxWaHU+qrPcRs7TmM3bLBsiq6y6dfD3TlT4LschCGr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.crl rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91884A1/serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB Validity Not Before: May 19 06:39:33 2024 GMT Not After : May 26 06:39:33 2024 GMT Subject: CN=66499ea6-4a2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:49:13:aa:94:f8:fc:d2:f8:27:4a:c9:f6:4a: 7b:b9:bb:0d:ea:85:f4:08:f2:cd:2f:46:46:bb:5c: c4:02:69:2e:4f:7e:89:f1:95:ba:aa:7d:ad:72:75: 8d:54:ba:77:3d:3e:91:31:76:a6:64:95:25:d8:b6: 38:03:a4:70:58:4e:30:a0:db:8c:ef:dd:f2:87:44: b6:54:8d:f2:49:70:28:56:61:d1:fa:d7:ad:25:bb: f2:00:31:48:a1:32:3f:0f:4b:c3:2d:7d:25:0a:48: 5e:cd:c1:7a:85:1d:50:4b:5c:9c:2a:e1:e2:ea:87: d6:39:2e:7f:bc:2a:9d:aa:42:c8:9a:42:54:34:9c: aa:a5:1f:f1:b0:17:ed:ad:fd:88:0f:ee:52:4b:2e: 1a:f9:56:62:57:89:09:e3:ed:e1:ed:16:31:77:a2: 7d:34:cc:a6:18:f8:13:13:1c:00:a0:76:fd:ff:f5: 0b:02:59:cb:77:3e:41:52:93:67:5b:5c:bd:6e:b9: 1b:fd:33:32:64:3f:08:19:5a:6f:3d:6f:a0:6d:c5: 62:6e:b6:44:7e:4f:2b:97:9a:d7:c9:40:cf:91:2f: 69:ae:ed:ca:72:5c:c0:fa:96:63:1d:21:ef:42:72: f4:74:54:05:9a:82:19:58:ab:c3:5c:89:90:ad:b3: 42:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B1:0B:24:01:34:AA:0D:02:0C:38:DD:65:30:98:00:9A:58:D1:63 X509v3 Authority Key Identifier: keyid:8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:f9:29:99:17:74:b4:e6:b7:45:32:11:d6:27:c3:d2:ea:31: 60:ef:19:86:ce:31:5e:53:40:0f:cb:89:2f:df:20:6a:14:8c: 40:27:49:bb:81:3c:f5:60:4f:6b:97:0b:27:75:e6:c9:74:97: bd:4e:94:c8:ce:78:d3:25:c8:cf:36:04:b5:37:35:94:f4:36: a3:5f:9f:3e:16:97:fa:b6:67:6f:3b:0c:31:21:33:92:71:33: 13:a3:f2:3f:fc:1b:5d:6f:ce:39:5f:97:05:b4:c5:da:51:51: 89:89:a0:0a:d8:10:bc:cd:1b:49:0a:f6:ef:e6:eb:10:24:e8: da:99:50:f0:be:9f:3a:ca:d0:99:0a:5a:3b:0f:00:3a:9a:f4: 17:ba:28:0f:66:07:3f:fe:1d:f1:a1:56:b7:a2:05:be:b9:4a: 9a:7c:6a:45:0e:d2:77:df:62:c7:f6:b9:ef:c7:46:6f:77:80: ab:a0:0b:17:08:a5:de:ac:6e:66:fb:c3:c9:db:70:39:4f:20: a7:b7:7c:cd:9e:b0:97:c6:db:f2:87:82:50:92:96:df:70:23: f9:d8:82:1b:b4:39:d2:9a:4b:4c:c0:83:1c:68:28:54:53:32: 74:2b:9d:d8:ff:e7:52:d5:7b:f0:9e:31:c1:f1:e3:12:cf:47: 1c:51:b5:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg0QTExMTAvBgNVBAUTKDhGNzAxNkRBMjJGMjk2NEI1NkY0MkNGNDZEOUYxMjNB RjM2ODMxQUIwHhcNMjQwNTE5MDYzOTMzWhcNMjQwNTI2MDYzOTMzWjAYMRYwFAYD VQQDEw02NjQ5OWVhNi00YTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskkTqpT4/NL4J0rJ9kp7ubsN6oX0CPLNL0ZGu1zEAmkuT36J8ZW6qn2tcnWN VLp3PT6RMXamZJUl2LY4A6RwWE4woNuM793yh0S2VI3ySXAoVmHR+tetJbvyADFI oTI/D0vDLX0lCkhezcF6hR1QS1ycKuHi6ofWOS5/vCqdqkLImkJUNJyqpR/xsBft rf2ID+5SSy4a+VZiV4kJ4+3h7RYxd6J9NMymGPgTExwAoHb9//ULAlnLdz5BUpNn W1y9brkb/TMyZD8IGVpvPW+gbcVibrZEfk8rl5rXyUDPkS9pru3KclzA+pZjHSHv QnL0dFQFmoIZWKvDXImQrbNCmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIOxCyQB NKoNAgw43WUwmACaWNFjMB8GA1UdIwQYMBaAFI9wFtoi8pZLVvQs9G2fEjrzaDGr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODRBMS9EN0RCMUM2MDE0 OUUxMUVFQUJEQzc1MzJDNEY5QUUwMi9qM0FXMmlMeWxrdFc5Q3owYlo4U092Tm9N YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ozQVcyaUx5bGt0VzlDejBiWjhTT3ZOb01hcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODRBMS9EN0RCMUM2MDE0OUUxMUVFQUJEQzc1MzJDNEY5QUUwMi9qM0FXMmlMeWxr dFc5Q3owYlo4U092Tm9NYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK+SmZF3S05rdFMhHWJ8PS6jFg7xmGzjFeU0APy4kv3yBqFIxAJ0m7 gTz1YE9rlwsndebJdJe9TpTIznjTJcjPNgS1NzWU9DajX58+Fpf6tmdvOwwxITOS cTMTo/I//Btdb845X5cFtMXaUVGJiaAK2BC8zRtJCvbv5usQJOjamVDwvp86ytCZ Clo7DwA6mvQXuigPZgc//h3xoVa3ogW+uUqafGpFDtJ332LH9rnvx0Zvd4CroAsX CKXerG5m+8PJ23A5TyCnt3zNnrCXxtvyh4JQkpbfcCP52IIbtDnSmktMwIMcaChU UzJ0K53Y/+dS1XvwnjHB8eMSz0ccUbUG -----END CERTIFICATE-----Generated at Sun May 19 08:25:03 2024 by rpki-client on console-ams.rpki-client.org