$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0416/54750BDA637C11EC9C822317C4F9AE02/43R0Hh7G7NjwB3XisOiSmLY45mo.mft File: 43R0Hh7G7NjwB3XisOiSmLY45mo.mft (raw, json) Hash identifier: ana4wPp4knm58Qn1UOVfXWdmjwUR3zSJylCoCRepd8M= Subject key identifier: 1D:4E:28:E4:90:F3:CF:C8:0A:C9:34:9D:97:66:2D:AE:30:7B:26:F7 Authority key identifier: E3:74:74:1E:1E:C6:EC:D8:F0:07:75:E2:B0:E8:92:98:B6:38:E6:6A Certificate issuer: /CN=A91B0416/serialNumber=E374741E1EC6ECD8F00775E2B0E89298B638E66A Certificate serial: 036E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/43R0Hh7G7NjwB3XisOiSmLY45mo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0416/54750BDA637C11EC9C822317C4F9AE02/43R0Hh7G7NjwB3XisOiSmLY45mo.mft Manifest number: 036A Signing time: Sun 19 May 2024 02:51:08 +0000 Manifest this update: Sun 19 May 2024 02:51:07 +0000 Manifest next update: Sun 26 May 2024 02:51:07 +0000 Files and hashes: 1: 43R0Hh7G7NjwB3XisOiSmLY45mo.crl (hash: 8/usa5enC9O+dN2bkKK7QbayHblP1f4SJgBjnmTWCCQ=) 2: B56622C2638011ECAFDDDF20C4F9AE02.roa (hash: 5JVS9rLOFKIljft/lvnWQAQk331+RM1kSimyqz2YLac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0416/54750BDA637C11EC9C822317C4F9AE02/43R0Hh7G7NjwB3XisOiSmLY45mo.crl rsync://rpki.apnic.net/member_repository/A91B0416/54750BDA637C11EC9C822317C4F9AE02/43R0Hh7G7NjwB3XisOiSmLY45mo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/43R0Hh7G7NjwB3XisOiSmLY45mo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 878 (0x36e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0416/serialNumber=E374741E1EC6ECD8F00775E2B0E89298B638E66A Validity Not Before: May 19 02:51:07 2024 GMT Not After : May 26 02:51:07 2024 GMT Subject: CN=6649691b-27f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:73:32:a4:93:7b:75:7a:1c:4f:b5:25:e7:c7: d3:b8:2f:13:9f:84:ae:c8:b2:b8:32:45:33:f8:f4: 85:81:df:d0:59:cc:87:56:72:4d:f2:6f:8c:5b:b0: b2:04:ae:91:72:87:11:60:1c:45:55:15:cf:33:e0: 32:6c:2b:5b:75:81:5f:1f:c2:df:04:8e:28:c2:24: 4d:5e:ad:4e:97:3c:6f:34:36:37:6a:26:30:62:1e: d2:e3:ee:79:ba:46:e6:d5:73:dc:4e:2f:0a:0d:5b: 3b:be:c5:9b:7d:eb:3a:85:dc:cb:a3:8b:0c:0d:89: 53:93:90:b5:e2:1f:80:d6:97:e6:30:21:a4:b0:e2: 71:66:a3:31:b6:b8:03:2a:25:22:9a:9a:a4:74:37: de:71:d5:0f:8f:cf:d3:99:47:8e:58:4c:cf:f2:29: 78:73:16:48:66:18:dd:a3:b5:34:5e:f6:c4:1a:20: 7d:60:63:d6:3f:8d:3d:f0:cf:11:ef:74:83:58:40: 1f:ea:08:ba:67:8f:9b:a6:b9:bd:7f:ae:d6:79:62: 3d:4c:b4:d9:98:35:f0:4b:4f:9f:10:a6:93:44:8b: c5:c2:6a:2a:32:3e:55:7a:c2:ef:0e:01:32:41:ba: 75:86:40:b7:d5:13:cc:d2:3b:74:19:29:ce:b9:b1: fa:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:4E:28:E4:90:F3:CF:C8:0A:C9:34:9D:97:66:2D:AE:30:7B:26:F7 X509v3 Authority Key Identifier: keyid:E3:74:74:1E:1E:C6:EC:D8:F0:07:75:E2:B0:E8:92:98:B6:38:E6:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0416/54750BDA637C11EC9C822317C4F9AE02/43R0Hh7G7NjwB3XisOiSmLY45mo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/43R0Hh7G7NjwB3XisOiSmLY45mo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0416/54750BDA637C11EC9C822317C4F9AE02/43R0Hh7G7NjwB3XisOiSmLY45mo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:dc:1a:70:dd:56:c4:c0:bd:d2:d2:19:4a:da:72:19:c8:9e: e4:33:90:81:f0:05:ba:2f:43:20:47:15:b5:a8:d1:1f:01:df: 6f:6b:24:77:48:0a:f6:d1:02:bd:ed:00:77:a1:a3:42:21:68: 1c:cc:29:33:38:e1:81:f8:39:81:d2:8f:42:8f:7a:8c:8a:9c: e7:c2:70:cc:5c:2f:c1:91:bd:f7:d8:58:86:1c:21:4d:e6:90: bb:65:58:44:23:c4:0a:bb:17:5a:cd:41:b7:09:21:2b:35:36: b6:b1:8c:03:67:51:f5:5a:b2:6a:2c:3e:33:e2:0c:63:52:05: 79:86:a0:47:24:cc:66:74:9c:95:8e:62:2f:8b:9d:2d:2f:4a: b1:8f:3c:ec:1b:15:d7:1d:48:8f:ee:72:47:3f:96:65:8f:87: 89:87:21:68:63:5a:7b:3e:4d:7a:ca:36:05:76:09:fb:71:8f: 97:b1:5d:f2:42:55:ce:35:9a:88:80:a8:3e:cd:f2:4f:f5:dd: 91:df:00:e9:42:aa:6b:78:e3:7a:1a:e8:82:df:04:05:e7:24: e0:04:cf:d1:d0:3b:3c:e0:ce:6d:62:65:f5:bb:f2:28:7b:0c: 55:55:30:36:55:00:9c:95:89:7c:fd:43:67:30:ec:54:2c:c1: e3:73:bb:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA24wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA0MTYxMTAvBgNVBAUTKEUzNzQ3NDFFMUVDNkVDRDhGMDA3NzVFMkIwRTg5Mjk4 QjYzOEU2NkEwHhcNMjQwNTE5MDI1MTA3WhcNMjQwNTI2MDI1MTA3WjAYMRYwFAYD VQQDEw02NjQ5NjkxYi0yN2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXMypJN7dXocT7Ul58fTuC8Tn4SuyLK4MkUz+PSFgd/QWcyHVnJN8m+MW7Cy BK6RcocRYBxFVRXPM+AybCtbdYFfH8LfBI4owiRNXq1OlzxvNDY3aiYwYh7S4+55 ukbm1XPcTi8KDVs7vsWbfes6hdzLo4sMDYlTk5C14h+A1pfmMCGksOJxZqMxtrgD KiUimpqkdDfecdUPj8/TmUeOWEzP8il4cxZIZhjdo7U0XvbEGiB9YGPWP4098M8R 73SDWEAf6gi6Z4+bprm9f67WeWI9TLTZmDXwS0+fEKaTRIvFwmoqMj5VesLvDgEy Qbp1hkC31RPM0jt0GSnOubH6FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1OKOSQ 88/ICsk0nZdmLa4weyb3MB8GA1UdIwQYMBaAFON0dB4exuzY8Ad14rDokpi2OOZq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDQxNi81NDc1MEJEQTYz N0MxMUVDOUM4MjIzMTdDNEY5QUUwMi80M1IwSGg3RzdOandCM1hpc09pU21MWTQ1 bW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQzUjBIaDdHN05qd0IzWGlzT2lTbUxZNDVtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDQxNi81NDc1MEJEQTYzN0MxMUVDOUM4MjIzMTdDNEY5QUUwMi80M1IwSGg3RzdO andCM1hpc09pU21MWTQ1bW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJ3Bpw3VbEwL3S0hlK2nIZyJ7kM5CB8AW6L0MgRxW1qNEfAd9vayR3 SAr20QK97QB3oaNCIWgczCkzOOGB+DmB0o9Cj3qMipznwnDMXC/Bkb332FiGHCFN 5pC7ZVhEI8QKuxdazUG3CSErNTa2sYwDZ1H1WrJqLD4z4gxjUgV5hqBHJMxmdJyV jmIvi50tL0qxjzzsGxXXHUiP7nJHP5Zlj4eJhyFoY1p7Pk16yjYFdgn7cY+XsV3y QlXONZqIgKg+zfJP9d2R3wDpQqpreON6GuiC3wQF5yTgBM/R0Ds84M5tYmX1u/Io ewxVVTA2VQCclYl8/UNnMOxULMHjc7vR -----END CERTIFICATE-----Generated at Sun May 19 03:38:15 2024 by rpki-client on console-ams.rpki-client.org