$ rpki-client -vvf rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft File: A0iYvB-xsaJGF6zZvIMq6D6vni0.mft (raw, json) Hash identifier: khkrjJ8W/XbGZmh/t4WPXIcyyrAII1KWjtqEQsXG4CQ= Subject key identifier: CB:24:FA:6D:A0:35:76:C5:48:12:03:51:A9:4E:56:4D:29:12:F9:94 Authority key identifier: 03:48:98:BC:1F:B1:B1:A2:46:17:AC:D9:BC:83:2A:E8:3E:AF:9E:2D Certificate issuer: /CN=A918D727/serialNumber=034898BC1FB1B1A24617ACD9BC832AE83EAF9E2D Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0iYvB-xsaJGF6zZvIMq6D6vni0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft Manifest number: 91 Signing time: Sun 19 May 2024 06:58:59 +0000 Manifest this update: Sun 19 May 2024 06:58:59 +0000 Manifest next update: Sun 26 May 2024 06:58:59 +0000 Files and hashes: 1: A0iYvB-xsaJGF6zZvIMq6D6vni0.crl (hash: hR8Rg1+17wnrD59JhjuRMTRA1agDX1eNWmi++oBV4J0=) 2: A7E3DAB237FB11EEBB03FD6CC4F9AE02.roa (hash: 6OvpTxtdwgyTrnBSwzbDtUwtZcFZA9AgYSv/N50dOeo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.crl rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0iYvB-xsaJGF6zZvIMq6D6vni0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D727/serialNumber=034898BC1FB1B1A24617ACD9BC832AE83EAF9E2D Validity Not Before: May 19 06:58:59 2024 GMT Not After : May 26 06:58:59 2024 GMT Subject: CN=6649a333-5f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d7:8c:e3:0b:bb:43:b6:3f:89:16:00:03:d6: ca:4c:0f:2f:74:f7:8e:ce:d5:0a:cf:2b:7b:d4:4b: e8:8b:a9:98:e4:b2:59:37:f2:02:97:e9:44:a4:8f: 50:d4:b0:d0:c2:94:b4:66:43:6e:7e:3e:88:f1:5e: 21:f9:a5:48:bd:16:8e:e0:98:8d:25:9b:ee:60:49: 5e:5f:72:73:bd:f1:cd:e4:e1:b6:98:74:98:52:a8: 4a:cd:64:b7:58:0c:1b:32:42:c5:f3:67:90:44:d8: f1:ed:e8:65:08:1b:6f:2a:e9:0f:37:68:e6:75:26: 10:d0:28:dc:08:2c:b2:bc:0c:ae:cc:b5:f9:85:5c: 21:96:ae:15:f5:db:8f:b2:25:fe:37:dd:e2:fd:72: 26:66:00:a2:43:5c:7c:d1:0e:e5:c8:70:bd:3d:3a: 41:cb:5f:94:d3:4c:23:ae:60:37:77:f7:de:c5:13: 81:9e:2a:9d:3c:1a:4f:7e:41:e8:89:06:9e:fa:c6: ff:93:3d:49:e0:df:c8:7e:55:99:63:41:af:a3:98: 9b:69:a2:6d:7f:d1:63:52:2e:18:e3:ab:38:6c:f9: d0:87:46:02:8e:96:95:22:9f:d0:1c:65:23:c0:66: 71:f9:9c:41:0c:67:47:ca:37:08:91:e1:3f:d0:d0: 64:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:24:FA:6D:A0:35:76:C5:48:12:03:51:A9:4E:56:4D:29:12:F9:94 X509v3 Authority Key Identifier: keyid:03:48:98:BC:1F:B1:B1:A2:46:17:AC:D9:BC:83:2A:E8:3E:AF:9E:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0iYvB-xsaJGF6zZvIMq6D6vni0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:21:7f:09:5e:74:7e:98:ea:39:63:27:33:42:18:7e:16:34: 08:8c:b0:7f:56:aa:f7:a8:10:9b:67:77:7e:7f:ae:de:6a:59: aa:6c:1d:72:fe:0a:97:7c:2d:b2:94:cb:50:db:9a:2f:8b:06: eb:f9:43:e6:77:c0:98:3a:81:10:06:61:60:1b:f8:90:ce:70: 0b:65:50:6f:26:46:4d:47:93:7d:a7:4e:a5:62:93:5d:02:a4: 06:bb:48:a9:72:df:b2:37:e2:c4:41:bd:b7:76:25:09:7b:44: 1e:14:f3:29:b7:d4:8a:3c:4c:39:b4:09:5e:6e:08:b7:e5:b3: 07:4c:7c:16:fc:b1:a5:b9:11:fc:e6:e1:28:1a:f3:0e:7a:28: e6:0d:0d:a2:33:b8:f5:1f:be:17:77:47:a8:b8:b5:8b:d1:68: 32:6c:18:1e:f7:d5:c7:bc:56:d7:1f:42:0d:ee:2f:6c:fd:3c: 6f:07:80:60:37:c8:1b:de:ca:da:da:24:97:06:b3:6d:c6:7d: 78:34:66:67:fe:ef:44:b5:3e:8a:ca:32:88:21:14:f2:54:46: ba:6f:b7:41:95:8f:9a:4a:ec:7b:cf:9b:22:da:86:87:be:dc: 90:a1:6f:4b:a4:ef:a4:23:d6:69:0f:69:18:ef:49:5b:f3:96: 06:72:ce:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ3MjcxMTAvBgNVBAUTKDAzNDg5OEJDMUZCMUIxQTI0NjE3QUNEOUJDODMyQUU4 M0VBRjlFMkQwHhcNMjQwNTE5MDY1ODU5WhcNMjQwNTI2MDY1ODU5WjAYMRYwFAYD VQQDEw02NjQ5YTMzMy01ZjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9eM4wu7Q7Y/iRYAA9bKTA8vdPeOztUKzyt71Evoi6mY5LJZN/ICl+lEpI9Q 1LDQwpS0ZkNufj6I8V4h+aVIvRaO4JiNJZvuYEleX3JzvfHN5OG2mHSYUqhKzWS3 WAwbMkLF82eQRNjx7ehlCBtvKukPN2jmdSYQ0CjcCCyyvAyuzLX5hVwhlq4V9duP siX+N93i/XImZgCiQ1x80Q7lyHC9PTpBy1+U00wjrmA3d/fexROBniqdPBpPfkHo iQae+sb/kz1J4N/IflWZY0Gvo5ibaaJtf9FjUi4Y46s4bPnQh0YCjpaVIp/QHGUj wGZx+ZxBDGdHyjcIkeE/0NBkTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMsk+m2g NXbFSBIDUalOVk0pEvmUMB8GA1UdIwQYMBaAFANImLwfsbGiRhes2byDKug+r54t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDcyNy80Nzk4RkIwNjM3 RkIxMUVFQjQyOTZEM0RDNEY5QUUwMi9BMGlZdkIteHNhSkdGNnpadklNcTZENnZu aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EwaVl2Qi14c2FKR0Y2elp2SU1xNkQ2dm5pMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDcyNy80Nzk4RkIwNjM3RkIxMUVFQjQyOTZEM0RDNEY5QUUwMi9BMGlZdkIteHNh SkdGNnpadklNcTZENnZuaTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0IX8JXnR+mOo5YyczQhh+FjQIjLB/Vqr3qBCbZ3d+f67ealmqbB1y /gqXfC2ylMtQ25oviwbr+UPmd8CYOoEQBmFgG/iQznALZVBvJkZNR5N9p06lYpNd AqQGu0ipct+yN+LEQb23diUJe0QeFPMpt9SKPEw5tAlebgi35bMHTHwW/LGluRH8 5uEoGvMOeijmDQ2iM7j1H74Xd0eouLWL0WgybBge99XHvFbXH0IN7i9s/TxvB4Bg N8gb3sra2iSXBrNtxn14NGZn/u9EtT6KyjKIIRTyVEa6b7dBlY+aSux7z5si2oaH vtyQoW9LpO+kI9ZpD2kY70lb85YGcs6e -----END CERTIFICATE-----Generated at Sun May 19 08:25:03 2024 by rpki-client on console-ams.rpki-client.org