$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.mft File: t3KDxTMROjkeMdlFJxhqz4OZol8.mft (raw, json) Hash identifier: KaWNJ1PyVoXMxs/iqvMSZbdID0Aj7otdj01c4uSvh5s= Subject key identifier: FB:8E:CA:6E:C0:60:BF:21:35:B8:7D:07:6D:68:38:09:A1:C6:CE:37 Authority key identifier: B7:72:83:C5:33:11:3A:39:1E:31:D9:45:27:18:6A:CF:83:99:A2:5F Certificate issuer: /CN=A91AEE4B/serialNumber=B77283C533113A391E31D94527186ACF8399A25F Certificate serial: 0A3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KDxTMROjkeMdlFJxhqz4OZol8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.mft Manifest number: 0A37 Signing time: Sat 18 May 2024 20:30:49 +0000 Manifest this update: Sat 18 May 2024 20:30:49 +0000 Manifest next update: Sat 25 May 2024 20:30:49 +0000 Files and hashes: 1: t3KDxTMROjkeMdlFJxhqz4OZol8.crl (hash: Jq2zeH3e5j94uU5VToEF+ppET+ciuP26keBxSTmQeTI=) 2: 02F1850E45A611EA81CD145AC4F9AE02.roa (hash: HEc94XWDCUE8Dd4fhqUhOT9/bxga1Jbgeml+ll/dsec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.crl rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KDxTMROjkeMdlFJxhqz4OZol8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2623 (0xa3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEE4B/serialNumber=B77283C533113A391E31D94527186ACF8399A25F Validity Not Before: May 18 20:30:49 2024 GMT Not After : May 25 20:30:49 2024 GMT Subject: CN=66490ff9-1bad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:1b:73:93:12:7e:23:b2:6e:5f:51:01:b2:ec: 9e:2b:2b:af:42:36:1b:86:43:bb:92:25:61:c3:a6: b5:2f:2b:15:3c:2f:9f:9a:c3:66:4d:50:f9:41:d0: 61:a1:80:b1:eb:a8:99:32:4f:d3:3c:ba:2b:4f:60: 56:d9:9c:d0:e6:c0:68:2a:66:0d:8f:ce:2d:15:d6: b1:92:d4:d4:ab:2f:a6:50:6a:c7:b5:18:40:b8:5c: e7:f1:d2:31:25:e8:5e:78:d9:cb:d5:55:75:e1:b3: 7b:02:6f:81:01:4d:c6:9b:b7:83:c2:f4:0d:d4:07: 2f:23:3d:ea:25:94:2c:fc:aa:63:a1:97:14:93:84: 21:a0:e6:59:b5:ed:2b:c9:74:72:23:4c:70:ce:d2: 22:5d:09:4e:54:31:8f:f4:1b:75:ec:69:af:60:c9: 74:a7:fe:01:1d:f2:eb:32:6c:b6:c0:1e:88:ed:8a: 32:9f:32:61:14:7c:a7:90:57:ae:14:c5:0c:6a:43: e0:be:35:c6:03:3d:ff:83:76:34:7b:3e:93:ff:b2: 52:e5:97:da:db:5a:83:eb:f1:cd:1f:2f:b0:47:2e: b9:57:e0:9f:a2:4b:79:b5:14:7f:4c:d3:18:1f:b1: d8:eb:56:ca:98:6a:3c:f3:4d:28:91:72:b4:98:fe: 15:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:8E:CA:6E:C0:60:BF:21:35:B8:7D:07:6D:68:38:09:A1:C6:CE:37 X509v3 Authority Key Identifier: keyid:B7:72:83:C5:33:11:3A:39:1E:31:D9:45:27:18:6A:CF:83:99:A2:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KDxTMROjkeMdlFJxhqz4OZol8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:e6:52:b3:2b:fe:78:b9:72:bd:00:ae:1e:f6:a7:b0:3c:f2: 15:b2:de:a7:17:de:12:3a:82:d7:f7:37:26:1c:77:4a:58:d2: df:c4:89:6b:77:5a:90:37:eb:d7:be:cf:a0:8d:d9:76:9b:ad: 5d:3b:8b:ab:d8:8a:eb:b9:a5:3b:da:db:2b:40:79:d3:84:ac: 6f:1a:bb:a5:d2:54:4f:6d:51:be:ae:6e:fe:34:a4:ea:b7:b6: a3:40:8f:72:67:92:44:e6:0b:05:e2:ed:bc:b6:42:c2:5d:be: 51:b9:1c:7c:26:81:b9:4d:72:8b:42:1a:63:b6:d9:af:eb:7e: 0f:a0:7e:0c:00:b1:77:fa:d4:12:35:ee:fb:64:52:ea:70:5d: 52:9a:cd:b0:d6:ed:1f:a1:76:b8:7f:53:cf:80:fb:8a:66:ec: 54:46:12:ee:0a:37:66:ab:a3:4a:6c:bb:58:62:c8:e3:1f:6e: 48:38:bf:94:b7:f8:f8:2f:01:29:50:34:2b:0b:c6:90:16:3f: e0:f7:3c:22:33:62:de:3e:63:a4:46:9d:b9:ef:a5:27:1b:07: fe:86:83:87:64:2b:60:3b:4d:af:3b:cc:77:fd:8b:a2:a5:87: f9:f4:8e:0d:99:68:c3:23:41:36:8e:00:32:73:0c:fc:eb:d6: 13:7b:8b:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVFNEIxMTAvBgNVBAUTKEI3NzI4M0M1MzMxMTNBMzkxRTMxRDk0NTI3MTg2QUNG ODM5OUEyNUYwHhcNMjQwNTE4MjAzMDQ5WhcNMjQwNTI1MjAzMDQ5WjAYMRYwFAYD VQQDEw02NjQ5MGZmOS0xYmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8BtzkxJ+I7JuX1EBsuyeKyuvQjYbhkO7kiVhw6a1LysVPC+fmsNmTVD5QdBh oYCx66iZMk/TPLorT2BW2ZzQ5sBoKmYNj84tFdaxktTUqy+mUGrHtRhAuFzn8dIx JeheeNnL1VV14bN7Am+BAU3Gm7eDwvQN1AcvIz3qJZQs/KpjoZcUk4QhoOZZte0r yXRyI0xwztIiXQlOVDGP9Bt17GmvYMl0p/4BHfLrMmy2wB6I7YoynzJhFHynkFeu FMUMakPgvjXGAz3/g3Y0ez6T/7JS5Zfa21qD6/HNHy+wRy65V+Cfokt5tRR/TNMY H7HY61bKmGo8800okXK0mP4VXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPuOym7A YL8hNbh9B21oOAmhxs43MB8GA1UdIwQYMBaAFLdyg8UzETo5HjHZRScYas+DmaJf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUU0Qi82M0RGRjgwMjQ1 QTQxMUVBOTQyRTA5NTdDNEY5QUUwMi90M0tEeFRNUk9qa2VNZGxGSnhocXo0T1pv bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QzS0R4VE1ST2prZU1kbEZKeGhxejRPWm9sOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUU0Qi82M0RGRjgwMjQ1QTQxMUVBOTQyRTA5NTdDNEY5QUUwMi90M0tEeFRNUk9q a2VNZGxGSnhocXo0T1pvbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+5lKzK/54uXK9AK4e9qewPPIVst6nF94SOoLX9zcmHHdKWNLfxIlr d1qQN+vXvs+gjdl2m61dO4ur2IrruaU72tsrQHnThKxvGrul0lRPbVG+rm7+NKTq t7ajQI9yZ5JE5gsF4u28tkLCXb5RuRx8JoG5TXKLQhpjttmv634PoH4MALF3+tQS Ne77ZFLqcF1Sms2w1u0foXa4f1PPgPuKZuxURhLuCjdmq6NKbLtYYsjjH25IOL+U t/j4LwEpUDQrC8aQFj/g9zwiM2LePmOkRp2576UnGwf+hoOHZCtgO02vO8x3/Yui pYf59I4NmWjDI0E2jgAycwz869YTe4vM -----END CERTIFICATE-----Generated at Sat May 18 21:31:30 2024 by rpki-client on console-ams.rpki-client.org