$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft File: fToi3tGr8M05CSgLibI3bFRfbwc.mft (raw, json) Hash identifier: Wd5nPtX8/EcnT+UtAmAKHJyELeGhmLRrUVWpSuC5I6c= Subject key identifier: EE:32:D4:3D:F7:EC:94:1C:93:A1:62:89:67:45:0B:8E:76:41:6D:DC Authority key identifier: 7D:3A:22:DE:D1:AB:F0:CD:39:09:28:0B:89:B2:37:6C:54:5F:6F:07 Certificate issuer: /CN=A91AC232/serialNumber=7D3A22DED1ABF0CD3909280B89B2376C545F6F07 Certificate serial: 0610 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fToi3tGr8M05CSgLibI3bFRfbwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft Manifest number: 060A Signing time: Sat 18 May 2024 23:53:31 +0000 Manifest this update: Sat 18 May 2024 23:53:31 +0000 Manifest next update: Sat 25 May 2024 23:53:31 +0000 Files and hashes: 1: fToi3tGr8M05CSgLibI3bFRfbwc.crl (hash: M01kgmVWtcb17nuv7IMmzyu1bItigIB2yKWdU5VqRj4=) 2: D93244BAF2EF11ED91F08A4FC4F9AE02.roa (hash: D16o+NTqhZB9ZmrcWWhDq4HIPFstG+zKZ35O8FcVmm4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.crl rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fToi3tGr8M05CSgLibI3bFRfbwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1552 (0x610) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC232/serialNumber=7D3A22DED1ABF0CD3909280B89B2376C545F6F07 Validity Not Before: May 18 23:53:31 2024 GMT Not After : May 25 23:53:31 2024 GMT Subject: CN=66493f7b-59e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:79:3a:9c:2d:5d:37:0e:5a:3c:33:37:4b:6b: 3d:ef:9d:21:ee:32:12:28:7d:b9:3c:33:dc:79:fa: 3f:93:58:25:d6:1d:89:d6:04:38:2b:52:49:b4:f4: ce:a1:4c:fa:92:d4:a6:94:7c:c6:98:ad:0a:f5:d2: 67:08:8d:14:81:4b:b7:a7:58:a6:bd:c0:2e:b1:65: 89:00:2c:ee:6f:27:aa:7d:7d:5d:63:86:2c:3b:eb: 5f:b7:37:42:41:4c:9f:57:62:aa:79:0f:30:c1:ce: 5e:26:21:e8:b9:97:5a:d9:2c:55:c3:6c:86:3b:c6: cc:e2:8e:10:a2:09:1d:b1:53:14:49:8c:d2:39:b8: 70:06:56:1e:0a:5f:62:cf:0f:25:ac:10:7b:7b:e5: c1:51:87:2c:87:39:c2:89:2a:a8:4b:98:f3:ae:4b: bd:a6:ca:25:19:77:5e:d1:26:d3:19:a2:94:d5:df: 55:db:99:d3:0a:27:c6:f8:23:a8:bb:0b:06:db:5b: 3d:76:7d:97:f2:9d:c7:5f:64:96:5f:b5:68:61:8a: 93:73:55:75:a8:43:bc:f7:27:f5:68:3d:4d:7e:05: ed:c3:19:d0:b3:9f:bc:b9:a2:f3:45:d4:06:2f:0d: 58:12:5f:5b:2c:ac:30:4a:95:51:03:0e:d8:46:aa: 61:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:32:D4:3D:F7:EC:94:1C:93:A1:62:89:67:45:0B:8E:76:41:6D:DC X509v3 Authority Key Identifier: keyid:7D:3A:22:DE:D1:AB:F0:CD:39:09:28:0B:89:B2:37:6C:54:5F:6F:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fToi3tGr8M05CSgLibI3bFRfbwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:89:6a:2e:bd:c4:1e:da:08:2e:ed:96:7e:45:d1:4a:94:9e: 98:d4:15:45:42:25:56:3e:ae:63:91:88:35:a6:db:03:cc:bc: 37:1f:47:7b:92:a6:2f:a4:26:1b:98:2d:e9:2b:5e:a8:0b:f0: 1e:95:c1:27:98:56:8f:58:b8:0a:18:12:2c:6a:74:29:e0:b2: 17:18:f3:de:4e:9c:39:ca:0a:e4:55:a7:21:ac:76:69:7e:be: a4:09:fa:e2:f9:31:83:6d:3d:64:2a:77:6b:32:3a:86:8b:68: 46:a3:49:0e:b3:c7:6a:b4:b7:5d:99:4f:27:6e:d3:43:d7:1f: 75:16:20:b2:7e:3d:ad:79:34:d6:dc:ad:ec:74:d7:a3:52:5a: 9d:62:fe:8d:84:cf:0b:75:4e:c1:32:45:d2:42:dd:52:9c:b7: 22:2c:9a:d9:78:76:71:5e:25:7a:5d:ff:2d:94:fb:0c:41:0d: 71:11:db:9a:02:39:0b:4e:da:be:c1:16:05:96:28:76:46:88: 3a:c0:2b:63:00:57:a6:88:65:e6:19:29:a6:50:07:14:64:34: 49:5a:42:b2:36:65:d3:b2:d7:da:c4:26:de:cc:9d:ab:47:91: 91:28:c0:63:83:8e:cd:85:e2:9f:f6:7e:a6:03:ae:2a:73:ee: 67:6e:40:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUMyMzIxMTAvBgNVBAUTKDdEM0EyMkRFRDFBQkYwQ0QzOTA5MjgwQjg5QjIzNzZD NTQ1RjZGMDcwHhcNMjQwNTE4MjM1MzMxWhcNMjQwNTI1MjM1MzMxWjAYMRYwFAYD VQQDEw02NjQ5M2Y3Yi01OWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Hk6nC1dNw5aPDM3S2s9750h7jISKH25PDPcefo/k1gl1h2J1gQ4K1JJtPTO oUz6ktSmlHzGmK0K9dJnCI0UgUu3p1imvcAusWWJACzubyeqfX1dY4YsO+tftzdC QUyfV2KqeQ8wwc5eJiHouZda2SxVw2yGO8bM4o4QogkdsVMUSYzSObhwBlYeCl9i zw8lrBB7e+XBUYcshznCiSqoS5jzrku9psolGXde0SbTGaKU1d9V25nTCifG+COo uwsG21s9dn2X8p3HX2SWX7VoYYqTc1V1qEO89yf1aD1NfgXtwxnQs5+8uaLzRdQG Lw1YEl9bLKwwSpVRAw7YRqphBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO4y1D33 7JQck6FiiWdFC452QW3cMB8GA1UdIwQYMBaAFH06It7Rq/DNOQkoC4myN2xUX28H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzIzMi80MTczMDA4NjU5 OEQxMUVCQUVDQzgzMjFDNEY5QUUwMi9mVG9pM3RHcjhNMDVDU2dMaWJJM2JGUmZi d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZUb2kzdEdyOE0wNUNTZ0xpYkkzYkZSZmJ3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzIzMi80MTczMDA4NjU5OEQxMUVCQUVDQzgzMjFDNEY5QUUwMi9mVG9pM3RHcjhN MDVDU2dMaWJJM2JGUmZid2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANiWouvcQe2ggu7ZZ+RdFKlJ6Y1BVFQiVWPq5jkYg1ptsDzLw3H0d7 kqYvpCYbmC3pK16oC/AelcEnmFaPWLgKGBIsanQp4LIXGPPeTpw5ygrkVachrHZp fr6kCfri+TGDbT1kKndrMjqGi2hGo0kOs8dqtLddmU8nbtND1x91FiCyfj2teTTW 3K3sdNejUlqdYv6NhM8LdU7BMkXSQt1SnLciLJrZeHZxXiV6Xf8tlPsMQQ1xEdua AjkLTtq+wRYFlih2Rog6wCtjAFemiGXmGSmmUAcUZDRJWkKyNmXTstfaxCbezJ2r R5GRKMBjg47NheKf9n6mA64qc+5nbkDZ -----END CERTIFICATE-----Generated at Sun May 19 00:30:20 2024 by rpki-client on console-ams.rpki-client.org