$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.mft File: 0TPfZxvFk0ayGhHuzAit0MCiCQo.mft (raw, json) Hash identifier: rmI2kwPWaKJ6T0CVAwR7rfpzIF/pGlWRgytTD5dflCg= Subject key identifier: FA:C8:BE:37:30:F7:BD:93:CA:97:70:33:33:88:CE:40:CD:96:7A:DC Authority key identifier: D1:33:DF:67:1B:C5:93:46:B2:1A:11:EE:CC:08:AD:D0:C0:A2:09:0A Certificate issuer: /CN=A91A8276/serialNumber=D133DF671BC59346B21A11EECC08ADD0C0A2090A Certificate serial: 06EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0TPfZxvFk0ayGhHuzAit0MCiCQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.mft Manifest number: 06EB Signing time: Sat 18 May 2024 22:46:28 +0000 Manifest this update: Sat 18 May 2024 22:46:28 +0000 Manifest next update: Sat 25 May 2024 22:46:27 +0000 Files and hashes: 1: 0TPfZxvFk0ayGhHuzAit0MCiCQo.crl (hash: QmmCHp5pdfLqF4ZqZ9FBtd1Y7MSkRFwyAyFL1XtC6Io=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.crl rsync://rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0TPfZxvFk0ayGhHuzAit0MCiCQo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1771 (0x6eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8276/serialNumber=D133DF671BC59346B21A11EECC08ADD0C0A2090A Validity Not Before: May 18 22:46:28 2024 GMT Not After : May 25 22:46:27 2024 GMT Subject: CN=66492fc4-1937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:91:84:1d:44:fa:26:cc:92:5a:b9:e9:ae:a6: 1f:16:c5:9a:a3:c6:2f:e6:b4:93:9d:ee:19:34:0a: cc:4c:ae:9d:a4:2b:00:39:7b:ce:5f:16:5f:c9:58: ef:0f:e1:6c:ab:5a:39:cd:69:66:1e:9b:5b:57:c2: 2b:5e:92:d7:2f:91:26:a0:b4:a0:7e:b9:90:54:ff: 46:c0:35:55:9e:0a:e5:ec:e4:16:84:69:89:d6:d7: e3:4e:98:b9:0d:cf:38:37:d8:aa:4f:3c:ad:ce:10: bf:22:ba:3c:82:d7:66:7a:e7:4d:f7:4c:f8:50:6e: 0b:12:4f:d6:a6:1e:82:96:16:86:7f:92:94:34:2d: f5:ef:d9:bd:5c:f3:f6:60:23:93:f1:b3:24:ba:94: a5:15:6d:08:69:f9:f1:ee:15:b5:4d:a2:fa:b5:a8: ae:92:d9:9f:d5:bd:53:a4:1e:7d:3a:56:db:15:8e: a1:03:45:c9:81:45:e7:9d:1a:40:2f:f3:14:54:c8: 57:94:d8:06:2a:8e:1f:59:8a:b8:73:fd:00:16:7c: 9d:6a:01:dc:d2:ee:29:b5:68:1a:6e:3e:48:a3:64: f9:d1:48:df:88:93:1d:1c:c8:da:8a:12:08:75:9a: ec:e8:61:a4:e2:d3:57:dd:e9:7c:fb:da:5e:7f:25: 91:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C8:BE:37:30:F7:BD:93:CA:97:70:33:33:88:CE:40:CD:96:7A:DC X509v3 Authority Key Identifier: keyid:D1:33:DF:67:1B:C5:93:46:B2:1A:11:EE:CC:08:AD:D0:C0:A2:09:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0TPfZxvFk0ayGhHuzAit0MCiCQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:40:58:84:55:19:db:e9:5d:96:da:10:8d:9b:bb:66:70:90: 1e:2c:00:45:09:eb:6a:83:27:4d:1b:a5:52:42:65:4a:0a:53: 10:37:da:6a:b7:15:70:23:14:33:7f:73:db:bb:cd:f6:e1:3d: f3:87:bf:e9:24:38:1f:70:ab:fd:f4:3b:22:ad:c7:25:41:86: f6:05:33:c9:12:0a:8a:06:09:8c:dc:d1:35:f1:39:41:0b:42: bb:35:97:75:c3:5c:98:08:51:7f:90:8e:46:89:09:c0:cb:fe: 55:58:f2:a5:13:fc:ff:00:ec:5a:d4:78:85:17:43:56:96:30: 96:84:d6:86:8e:20:4d:b8:66:31:b1:44:31:01:f1:96:9f:8d: 75:92:f2:3e:85:10:e2:59:89:05:32:86:15:92:55:49:06:9c: 61:09:4a:5f:c1:dc:b9:64:91:f6:51:b3:30:60:f3:9f:1e:8d: 70:34:7f:05:0a:1a:25:f0:39:67:02:2c:4c:82:31:0f:7e:f0: 4f:e7:89:3b:c6:b9:e4:82:2e:ba:11:1a:1d:89:a5:05:5f:22: 93:55:d2:0a:36:69:d4:8d:f4:d7:38:dc:f9:1b:9a:24:43:56: 9d:17:23:f5:16:be:0c:74:98:34:9d:48:2c:e3:c1:f0:b9:e5: df:fa:fb:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgyNzYxMTAvBgNVBAUTKEQxMzNERjY3MUJDNTkzNDZCMjFBMTFFRUNDMDhBREQw QzBBMjA5MEEwHhcNMjQwNTE4MjI0NjI4WhcNMjQwNTI1MjI0NjI3WjAYMRYwFAYD VQQDEw02NjQ5MmZjNC0xOTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7pGEHUT6JsySWrnprqYfFsWao8Yv5rSTne4ZNArMTK6dpCsAOXvOXxZfyVjv D+Fsq1o5zWlmHptbV8IrXpLXL5EmoLSgfrmQVP9GwDVVngrl7OQWhGmJ1tfjTpi5 Dc84N9iqTzytzhC/Iro8gtdmeudN90z4UG4LEk/Wph6ClhaGf5KUNC3179m9XPP2 YCOT8bMkupSlFW0Iafnx7hW1TaL6taiuktmf1b1TpB59OlbbFY6hA0XJgUXnnRpA L/MUVMhXlNgGKo4fWYq4c/0AFnydagHc0u4ptWgabj5Io2T50UjfiJMdHMjaihII dZrs6GGk4tNX3el8+9pefyWR+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPrIvjcw 972TypdwMzOIzkDNlnrcMB8GA1UdIwQYMBaAFNEz32cbxZNGshoR7swIrdDAogkK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODI3Ni84MTM4NzkzRUZF RjgxMUVBOUQ2NTJBNzRDNEY5QUUwMi8wVFBmWnh2RmswYXlHaEh1ekFpdDBNQ2lD UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBUUGZaeHZGazBheUdoSHV6QWl0ME1DaUNRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODI3Ni84MTM4NzkzRUZFRjgxMUVBOUQ2NTJBNzRDNEY5QUUwMi8wVFBmWnh2Rmsw YXlHaEh1ekFpdDBNQ2lDUW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgQFiEVRnb6V2W2hCNm7tmcJAeLABFCetqgydNG6VSQmVKClMQN9pq txVwIxQzf3Pbu8324T3zh7/pJDgfcKv99DsircclQYb2BTPJEgqKBgmM3NE18TlB C0K7NZd1w1yYCFF/kI5GiQnAy/5VWPKlE/z/AOxa1HiFF0NWljCWhNaGjiBNuGYx sUQxAfGWn411kvI+hRDiWYkFMoYVklVJBpxhCUpfwdy5ZJH2UbMwYPOfHo1wNH8F Chol8DlnAixMgjEPfvBP54k7xrnkgi66ERodiaUFXyKTVdIKNmnUjfTXONz5G5ok Q1adFyP1Fr4MdJg0nUgs48HwueXf+vs8 -----END CERTIFICATE-----Generated at Sun May 19 00:30:20 2024 by rpki-client on console-ams.rpki-client.org