$ rpki-client -vvf rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft File: ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft (raw, json) Hash identifier: QXxOcjt2OzYW8dHk+ra7pgKviQlYv6YuWBzgmTYCH1w= Subject key identifier: DA:8E:65:7C:26:B4:66:32:39:F7:01:83:80:BC:31:60:0A:7C:23:F4 Authority key identifier: 6A:12:19:72:6D:23:9C:82:F5:A4:46:01:12:7D:1A:F8:72:5C:E0:ED Certificate issuer: /CN=A91944AB/serialNumber=6A1219726D239C82F5A44601127D1AF8725CE0ED Certificate serial: 0507 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft Manifest number: 0502 Signing time: Sun 19 May 2024 01:11:52 +0000 Manifest this update: Sun 19 May 2024 01:11:52 +0000 Manifest next update: Sun 26 May 2024 01:11:52 +0000 Files and hashes: 1: ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl (hash: JYahAWGUfOfbxAR0mvx1TTCQmKPikxzhU1zACnDZd5E=) 2: BB01CFB0723811EEA39E0042C4F9AE02.roa (hash: ECB274MOoOkaSPhsZQsqFUYWVyXvfCfLcdsH/dpaSfY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1287 (0x507) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91944AB/serialNumber=6A1219726D239C82F5A44601127D1AF8725CE0ED Validity Not Before: May 19 01:11:52 2024 GMT Not After : May 26 01:11:52 2024 GMT Subject: CN=664951d8-fcb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:88:d3:dd:4e:03:53:00:76:29:30:6d:28:43: 80:b3:58:dd:a6:0e:ed:0c:bc:df:53:eb:87:f0:ab: 91:46:0c:e6:de:92:13:1d:3b:af:80:14:24:e7:d7: f5:53:7c:50:b9:7b:88:6e:86:24:bc:9d:40:28:e0: 5d:0c:18:f2:f6:d1:86:b5:d1:62:ed:10:8f:6a:fc: ae:93:52:da:cb:74:0e:a5:eb:c4:c6:c4:e6:87:7d: 86:98:5f:4d:be:48:de:3d:60:10:85:38:46:8e:1c: 49:67:77:bd:38:84:1e:2b:10:8f:6a:e7:5c:4c:a1: 22:f9:2a:55:80:00:2d:3b:65:78:4e:97:c3:50:7a: 10:b5:a1:e6:da:87:4f:16:c1:f8:7a:1f:d9:7d:e2: e0:af:a2:28:54:3f:cc:07:bf:fa:7e:da:97:25:35: 30:ec:30:b4:df:e4:44:65:b6:9e:15:3e:93:b6:67: a8:2e:17:74:95:e3:af:df:c9:f9:ae:37:01:43:7f: 18:3a:73:45:a4:a5:cd:ef:3c:67:60:f3:4f:f0:00: 0f:02:11:9e:8e:8c:94:94:29:73:7e:3d:bb:0e:5d: 87:d1:ba:ba:fe:4c:4e:99:86:d5:45:0d:2b:24:d5: 14:ed:aa:4e:cd:e1:4d:56:b6:c7:77:c8:55:56:0e: 55:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:8E:65:7C:26:B4:66:32:39:F7:01:83:80:BC:31:60:0A:7C:23:F4 X509v3 Authority Key Identifier: keyid:6A:12:19:72:6D:23:9C:82:F5:A4:46:01:12:7D:1A:F8:72:5C:E0:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:de:bd:dc:b1:da:34:46:f7:3b:b5:09:40:83:8b:08:f0:c6: 7e:c2:ee:9d:b4:10:51:ba:aa:41:67:ef:ee:84:a7:7f:e4:b2: dc:11:86:95:23:a0:f5:ae:65:b4:e6:18:c9:54:8b:0d:24:86: d4:8e:3d:02:a6:13:aa:bb:dc:2f:e9:a5:33:fc:b8:8f:27:52: 44:14:33:40:7a:4b:75:0d:9b:ec:52:d2:f7:16:d0:9a:56:06: 47:e4:3f:bd:08:e4:8d:48:f7:fb:3f:f6:c2:41:16:95:fc:3c: a6:60:58:a4:15:37:53:25:50:19:96:d3:e0:6e:1a:8b:aa:e4: 2f:c9:fb:3f:58:1a:f1:01:f8:2f:86:3f:a1:03:7b:90:84:fe: 15:fa:5e:7d:1c:0e:9a:b6:81:97:5f:f7:63:83:62:8b:07:fc: d0:0a:40:89:dd:4b:83:bf:e7:a5:32:31:63:ef:c3:d5:26:87: b0:78:da:f2:1e:a8:44:48:7b:34:dd:9d:7c:be:5b:3f:5e:2d: 16:da:55:9b:90:29:bc:dc:52:3c:cf:ea:c9:69:9d:23:16:77: 9e:54:29:6e:e9:0a:21:81:8d:fe:ca:ea:79:34:6e:0a:82:86: 3b:4b:6c:73:15:6b:19:bf:c8:44:4f:3a:27:22:35:76:08:50: be:ab:d7:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ0QUIxMTAvBgNVBAUTKDZBMTIxOTcyNkQyMzlDODJGNUE0NDYwMTEyN0QxQUY4 NzI1Q0UwRUQwHhcNMjQwNTE5MDExMTUyWhcNMjQwNTI2MDExMTUyWjAYMRYwFAYD VQQDEw02NjQ5NTFkOC1mY2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA34jT3U4DUwB2KTBtKEOAs1jdpg7tDLzfU+uH8KuRRgzm3pITHTuvgBQk59f1 U3xQuXuIboYkvJ1AKOBdDBjy9tGGtdFi7RCPavyuk1Lay3QOpevExsTmh32GmF9N vkjePWAQhThGjhxJZ3e9OIQeKxCPaudcTKEi+SpVgAAtO2V4TpfDUHoQtaHm2odP FsH4eh/ZfeLgr6IoVD/MB7/6ftqXJTUw7DC03+REZbaeFT6TtmeoLhd0leOv38n5 rjcBQ38YOnNFpKXN7zxnYPNP8AAPAhGejoyUlClzfj27Dl2H0bq6/kxOmYbVRQ0r JNUU7apOzeFNVrbHd8hVVg5VJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNqOZXwm tGYyOfcBg4C8MWAKfCP0MB8GA1UdIwQYMBaAFGoSGXJtI5yC9aRGARJ9GvhyXODt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDRBQi82RkUzMDZBNkMy QzgxMUVCOThEOURBNzlDNEY5QUUwMi9haElaY20wam5JTDFwRVlCRW4wYS1ISmM0 TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FoSVpjbTBqbklMMXBFWUJFbjBhLUhKYzRPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDRBQi82RkUzMDZBNkMyQzgxMUVCOThEOURBNzlDNEY5QUUwMi9haElaY20wam5J TDFwRVlCRW4wYS1ISmM0TzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBS3r3csdo0Rvc7tQlAg4sI8MZ+wu6dtBBRuqpBZ+/uhKd/5LLcEYaV I6D1rmW05hjJVIsNJIbUjj0CphOqu9wv6aUz/LiPJ1JEFDNAekt1DZvsUtL3FtCa VgZH5D+9COSNSPf7P/bCQRaV/DymYFikFTdTJVAZltPgbhqLquQvyfs/WBrxAfgv hj+hA3uQhP4V+l59HA6atoGXX/djg2KLB/zQCkCJ3UuDv+elMjFj78PVJoeweNry HqhESHs03Z18vls/Xi0W2lWbkCm83FI8z+rJaZ0jFneeVClu6QohgY3+yup5NG4K goY7S2xzFWsZv8hETzonIjV2CFC+q9c4 -----END CERTIFICATE-----Generated at Sun May 19 01:47:15 2024 by rpki-client on console-ams.rpki-client.org