$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft File: _-G3qHKaDsu-yLL9mpe3SCbM28U.mft (raw, json) Hash identifier: a6h1Jfo71FsdYBzed00+aftS3HffFmktt7Z/8A41dKU= Subject key identifier: B2:2F:31:CE:44:37:07:CB:66:81:B3:CC:B5:99:6D:F0:FF:92:3F:8A Authority key identifier: FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5 Certificate issuer: /CN=A91AE3F2/serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5 Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft Manifest number: 0131 Signing time: Sun 19 May 2024 05:00:41 +0000 Manifest this update: Sun 19 May 2024 05:00:40 +0000 Manifest next update: Sun 26 May 2024 05:00:40 +0000 Files and hashes: 1: _-G3qHKaDsu-yLL9mpe3SCbM28U.crl (hash: avQXEdHU3cGHxMsV+6/WGxTMM2PZWZ8SfEZ3oB0JCp4=) 2: EEA8968C461A11ED898DD14FC4F9AE02.roa (hash: D6tQlG23D/injlTMjJzlRWilmhPrsP6m+ODUZtrQ44I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE3F2/serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5 Validity Not Before: May 19 05:00:40 2024 GMT Not After : May 26 05:00:40 2024 GMT Subject: CN=66498779-18e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b7:17:28:5d:b5:1d:96:02:1b:4c:7f:c4:c3: c0:bb:7a:a6:84:ee:53:42:dd:27:54:23:5b:be:e7: 90:ad:de:6c:7a:7c:80:10:94:61:32:5d:1e:73:c5: f6:d0:98:c3:5f:40:f0:4e:27:fe:29:9b:e8:bd:ec: 7b:12:db:72:d1:ab:30:d6:bc:87:2e:0e:a2:1b:a0: b4:aa:c9:d0:da:49:64:81:0c:1b:20:ae:a6:c7:5d: 95:e5:60:90:f7:54:6a:9c:53:1b:e6:ec:b8:58:f8: 04:4d:88:4b:4b:6b:b1:c4:b3:24:1b:1c:65:fb:65: 61:f1:87:c1:8e:bf:96:6f:55:fd:11:bb:52:54:f3: b7:7f:97:54:b1:67:7e:fd:d0:52:a5:b7:36:fa:2a: b2:ff:c7:06:78:d4:e0:2a:44:78:69:35:7b:58:5e: 22:2c:69:75:d5:80:1a:29:1f:bc:87:1c:1e:cf:9e: 5e:5a:5d:6b:11:5b:e5:b2:03:85:a8:9a:4a:61:f0: 66:89:09:7e:35:1f:01:b6:ae:ed:f3:65:05:c0:62: a2:a1:fa:7f:9c:37:43:fa:81:cd:51:1c:88:fc:14: 68:41:58:e7:f9:f3:d5:e0:25:4f:92:31:3c:19:86: e5:7d:be:d6:d1:d9:bc:4d:2d:10:55:69:a8:11:cf: 1f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:2F:31:CE:44:37:07:CB:66:81:B3:CC:B5:99:6D:F0:FF:92:3F:8A X509v3 Authority Key Identifier: keyid:FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:7f:86:f8:e5:5e:50:0a:69:e3:31:a7:14:b6:fe:46:24:89: 44:6c:d3:82:de:b8:1c:11:1b:4a:cc:b9:4c:cf:50:b2:1d:09: 38:56:e1:ca:56:47:f8:a3:38:2a:26:e4:b7:17:bd:41:b9:6f: 00:b7:ca:f4:85:e7:37:77:dd:06:fe:74:78:d1:4d:7a:98:80: 67:49:3d:6c:d2:60:03:60:93:c9:ae:c3:a6:a5:b3:2f:fb:05: 10:c2:25:e7:d2:1e:6c:43:66:b9:7d:30:3a:e6:df:78:12:91: 2c:53:99:18:d1:e1:d6:a4:25:06:64:20:93:5b:57:cb:9b:f8: ac:3f:47:28:89:87:39:84:d3:8c:28:94:5f:4e:80:a5:c9:a0: d0:52:36:71:fc:02:09:1f:c7:e4:ff:23:0c:e9:57:82:6d:64: c3:2a:e9:5e:68:54:ea:85:88:22:c2:af:3e:75:1f:24:8c:08: a5:30:b8:ac:37:49:52:5b:12:1a:cf:91:12:8e:79:01:4a:85: 56:0b:16:ea:3a:35:1f:3e:b5:1c:20:b7:a7:b7:4d:86:d0:db: a1:2a:14:51:a8:f8:25:c9:4f:64:df:72:7e:06:74:ce:a4:17: cb:b4:91:26:d6:58:e2:f7:8a:e0:51:ba:56:18:75:c8:d4:e2: e7:f0:b3:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUzRjIxMTAvBgNVBAUTKEZGRTFCN0E4NzI5QTBFQ0JCRUM4QjJGRDlBOTdCNzQ4 MjZDQ0RCQzUwHhcNMjQwNTE5MDUwMDQwWhcNMjQwNTI2MDUwMDQwWjAYMRYwFAYD VQQDEw02NjQ5ODc3OS0xOGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAprcXKF21HZYCG0x/xMPAu3qmhO5TQt0nVCNbvueQrd5senyAEJRhMl0ec8X2 0JjDX0DwTif+KZvovex7Etty0asw1ryHLg6iG6C0qsnQ2klkgQwbIK6mx12V5WCQ 91RqnFMb5uy4WPgETYhLS2uxxLMkGxxl+2Vh8YfBjr+Wb1X9EbtSVPO3f5dUsWd+ /dBSpbc2+iqy/8cGeNTgKkR4aTV7WF4iLGl11YAaKR+8hxwez55eWl1rEVvlsgOF qJpKYfBmiQl+NR8Btq7t82UFwGKiofp/nDdD+oHNURyI/BRoQVjn+fPV4CVPkjE8 GYblfb7W0dm8TS0QVWmoEc8f2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLIvMc5E NwfLZoGzzLWZbfD/kj+KMB8GA1UdIwQYMBaAFP/ht6hymg7Lvsiy/ZqXt0gmzNvF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTNGMi84NkEwRkIyODQ2 MTYxMUVEOTJFQUFEMjBDNEY5QUUwMi9fLUczcUhLYURzdS15TEw5bXBlM1NDYk0y OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18tRzNxSEthRHN1LXlMTDltcGUzU0NiTTI4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTNGMi84NkEwRkIyODQ2MTYxMUVEOTJFQUFEMjBDNEY5QUUwMi9fLUczcUhLYURz dS15TEw5bXBlM1NDYk0yOFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDf4b45V5QCmnjMacUtv5GJIlEbNOC3rgcERtKzLlMz1CyHQk4VuHK Vkf4ozgqJuS3F71BuW8At8r0hec3d90G/nR40U16mIBnST1s0mADYJPJrsOmpbMv +wUQwiXn0h5sQ2a5fTA65t94EpEsU5kY0eHWpCUGZCCTW1fLm/isP0coiYc5hNOM KJRfToClyaDQUjZx/AIJH8fk/yMM6VeCbWTDKuleaFTqhYgiwq8+dR8kjAilMLis N0lSWxIaz5ESjnkBSoVWCxbqOjUfPrUcILent02G0NuhKhRRqPglyU9k33J+BnTO pBfLtJEm1lji94rgUbpWGHXI1OLn8LOt -----END CERTIFICATE-----Generated at Sun May 19 06:14:36 2024 by rpki-client on console-ams.rpki-client.org