$ rpki-client -vvf rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft File: 28ptKqUoxLJFVtsH_LVpw2rC_rE.mft (raw, json) Hash identifier: RguC1D0QDWFZ6zJo+gu3/0kQkLA9w/byUQkTjTVIht0= Subject key identifier: CF:58:E5:F0:C3:31:42:0B:A5:F9:01:56:1E:A1:5A:8B:2E:2C:86:CE Authority key identifier: DB:CA:6D:2A:A5:28:C4:B2:45:56:DB:07:FC:B5:69:C3:6A:C2:FE:B1 Certificate issuer: /CN=A918C477/serialNumber=DBCA6D2AA528C4B24556DB07FCB569C36AC2FEB1 Certificate serial: 01BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft Manifest number: 01B9 Signing time: Sun 19 May 2024 04:29:18 +0000 Manifest this update: Sun 19 May 2024 04:29:17 +0000 Manifest next update: Sun 26 May 2024 04:29:17 +0000 Files and hashes: 1: 28ptKqUoxLJFVtsH_LVpw2rC_rE.crl (hash: qJOrr89ExMd6r4DloW5m06kw3/k2PRZNK7+QXjfOqNg=) 2: FB2262620C3111EDBD0F7137C4F9AE02.roa (hash: G36ewRS5s7bPp9/dcHEXmZNwv3jn8H254rjCjVbJ0UI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.crl rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 443 (0x1bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C477/serialNumber=DBCA6D2AA528C4B24556DB07FCB569C36AC2FEB1 Validity Not Before: May 19 04:29:17 2024 GMT Not After : May 26 04:29:17 2024 GMT Subject: CN=6649801d-f62c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:db:50:88:a0:c5:5f:06:75:02:71:68:53:28: d1:5b:53:39:c0:a4:23:97:7e:5f:0c:0b:0f:0e:04: a2:cf:31:66:60:be:d6:3b:87:ab:da:82:16:f0:fe: 44:a7:e2:71:cb:ce:f1:9d:88:8f:9b:4d:19:b7:a8: 70:f2:eb:ff:84:39:fe:c1:48:32:bf:a7:38:e5:db: 59:3d:ce:9a:a2:04:a0:f6:69:79:4a:ad:e0:f0:8d: f8:d7:08:37:71:8f:08:e7:1e:24:d6:2d:ce:12:2c: 21:2f:65:1a:b9:4d:64:0a:44:05:7d:6c:38:70:6b: 65:22:eb:34:f6:21:37:b1:86:0a:52:94:c3:69:00: 37:e6:84:a6:ef:51:13:cb:4d:0e:85:e0:55:21:b2: e2:aa:4a:c0:5b:9b:21:f2:16:79:65:7e:7e:d0:01: 72:35:a6:b2:3f:d7:2b:ea:94:48:78:09:80:37:e3: 29:f2:b4:f9:75:19:09:a2:7d:48:43:89:43:62:99: 69:f3:40:82:30:a1:5a:f3:2e:c1:3b:d2:ee:a6:dc: 27:4f:80:30:91:83:e8:ae:1b:24:f8:53:29:fc:2e: 7b:31:fa:b1:77:16:c0:72:79:64:be:d4:72:da:52: b7:f2:7f:79:55:95:2c:b2:a3:47:f3:23:4c:8b:1a: af:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:58:E5:F0:C3:31:42:0B:A5:F9:01:56:1E:A1:5A:8B:2E:2C:86:CE X509v3 Authority Key Identifier: keyid:DB:CA:6D:2A:A5:28:C4:B2:45:56:DB:07:FC:B5:69:C3:6A:C2:FE:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:37:80:85:c2:5e:ae:c9:cc:fe:e0:a6:8d:9d:30:f4:9d:c4: fe:03:6c:11:1e:6a:a6:9d:5f:3f:d9:e3:26:18:ea:7d:4d:01: 9b:31:58:43:49:ee:ee:af:36:4b:b0:19:3d:aa:94:d0:b5:38: 36:d5:30:e4:c6:e6:9e:34:e2:0b:c9:39:08:9d:35:58:99:00: 9c:48:31:6b:b4:d4:c4:aa:a5:a8:19:98:8c:b9:14:e8:be:14: fc:b0:ae:87:e0:f4:3e:a0:1c:d2:2f:0e:16:ff:8a:05:1b:fe: bd:70:36:01:8e:e9:61:f5:33:c3:20:6d:c8:fc:8b:69:15:21: 60:e4:b8:0b:8c:4c:51:47:a0:0c:73:28:19:71:8d:11:ed:81: 0f:b9:e4:ed:73:30:d5:be:c4:b1:d6:bf:9f:b5:75:3b:b6:9d: 69:fa:23:d3:91:7b:2f:c6:12:14:dc:0a:6b:ed:a7:8f:d7:23: a3:59:2e:52:f8:b9:55:6f:67:31:e6:2d:22:c4:01:28:23:f6: 5e:3e:4e:95:1d:89:59:ea:b3:7f:b7:68:c9:da:91:3a:37:48: 7f:2f:dc:19:85:c3:61:f1:7c:46:0b:3f:c9:9c:e4:39:1a:25: c4:a2:30:b9:d0:04:b9:05:67:8f:ba:f0:40:18:80:fc:47:c3: 6a:5e:52:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM0NzcxMTAvBgNVBAUTKERCQ0E2RDJBQTUyOEM0QjI0NTU2REIwN0ZDQjU2OUMz NkFDMkZFQjEwHhcNMjQwNTE5MDQyOTE3WhcNMjQwNTI2MDQyOTE3WjAYMRYwFAYD VQQDEw02NjQ5ODAxZC1mNjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsdtQiKDFXwZ1AnFoUyjRW1M5wKQjl35fDAsPDgSizzFmYL7WO4er2oIW8P5E p+Jxy87xnYiPm00Zt6hw8uv/hDn+wUgyv6c45dtZPc6aogSg9ml5Sq3g8I341wg3 cY8I5x4k1i3OEiwhL2UauU1kCkQFfWw4cGtlIus09iE3sYYKUpTDaQA35oSm71ET y00OheBVIbLiqkrAW5sh8hZ5ZX5+0AFyNaayP9cr6pRIeAmAN+Mp8rT5dRkJon1I Q4lDYplp80CCMKFa8y7BO9LuptwnT4AwkYPorhsk+FMp/C57MfqxdxbAcnlkvtRy 2lK38n95VZUssqNH8yNMixqvPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM9Y5fDD MUILpfkBVh6hWosuLIbOMB8GA1UdIwQYMBaAFNvKbSqlKMSyRVbbB/y1acNqwv6x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzQ3Ny9ENTVGMjlGNDBD MkYxMUVEQkMyM0JCMzZDNEY5QUUwMi8yOHB0S3FVb3hMSkZWdHNIX0xWcHcyckNf ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI4cHRLcVVveExKRlZ0c0hfTFZwdzJyQ19yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzQ3Ny9ENTVGMjlGNDBDMkYxMUVEQkMyM0JCMzZDNEY5QUUwMi8yOHB0S3FVb3hM SkZWdHNIX0xWcHcyckNfckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcN4CFwl6uycz+4KaNnTD0ncT+A2wRHmqmnV8/2eMmGOp9TQGbMVhD Se7urzZLsBk9qpTQtTg21TDkxuaeNOILyTkInTVYmQCcSDFrtNTEqqWoGZiMuRTo vhT8sK6H4PQ+oBzSLw4W/4oFG/69cDYBjulh9TPDIG3I/ItpFSFg5LgLjExRR6AM cygZcY0R7YEPueTtczDVvsSx1r+ftXU7tp1p+iPTkXsvxhIU3Apr7aeP1yOjWS5S +LlVb2cx5i0ixAEoI/ZePk6VHYlZ6rN/t2jJ2pE6N0h/L9wZhcNh8XxGCz/JnOQ5 GiXEojC50AS5BWePuvBAGID8R8NqXlJl -----END CERTIFICATE-----Generated at Sun May 19 05:08:05 2024 by rpki-client on console-ams.rpki-client.org