$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft File: ArpjtYYuJwm5DRa33C61z8ii5oQ.mft (raw, json) Hash identifier: NYkLV4R5p+U946qxXDOrHrnO3AUXAne10PTQ0sUVOVI= Subject key identifier: 06:E0:89:E1:9D:FD:97:0E:A9:5B:75:B4:5A:5D:F1:B1:F7:76:8D:BB Authority key identifier: 02:BA:63:B5:86:2E:27:09:B9:0D:16:B7:DC:2E:B5:CF:C8:A2:E6:84 Certificate issuer: /CN=A91B43EE/serialNumber=02BA63B5862E2709B90D16B7DC2EB5CFC8A2E684 Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft Manifest number: E2 Signing time: Sun 19 May 2024 06:06:35 +0000 Manifest this update: Sun 19 May 2024 06:06:34 +0000 Manifest next update: Sun 26 May 2024 06:06:34 +0000 Files and hashes: 1: ArpjtYYuJwm5DRa33C61z8ii5oQ.crl (hash: CsJQnXyVF6KREVEVUrxAUjYGIhcVNaLP5X2oXVyOaK8=) 2: 5192AB7ED47811EEB5A6D21AC4F9AE02.roa (hash: /1Z2TwuqTkrgrfRC8VIKBetzzhs6fi/sVhfwWQwuK6g=) 3: A0A7B5161B6D11EE943DBE1AC4F9AE02.roa (hash: 6nBegUEh6ts9PfjWE2PkXRJ1EOdzjUB+XsuGThTEurg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.crl rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B43EE/serialNumber=02BA63B5862E2709B90D16B7DC2EB5CFC8A2E684 Validity Not Before: May 19 06:06:34 2024 GMT Not After : May 26 06:06:34 2024 GMT Subject: CN=664996eb-3d7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6f:e6:dd:d9:78:81:81:79:69:ea:4c:ff:e3: 9a:0c:3f:fb:6f:cb:00:fe:75:1d:db:4a:36:de:5d: 4e:56:b7:f9:88:33:ca:97:95:95:a1:75:d5:5a:3e: 0c:74:36:22:8d:02:a6:72:4e:77:51:a8:01:b0:8c: f1:21:87:65:8c:a3:42:99:10:36:32:58:a1:58:d7: ad:b1:e4:67:a9:ec:63:5f:49:af:54:07:d0:b1:45: 8a:07:a2:e2:45:3d:96:42:e2:a4:d3:1d:c8:e2:dc: ef:7a:70:da:26:91:bf:5a:35:c5:a5:7a:1b:43:98: 67:09:96:39:85:5a:a9:ca:bb:0d:5e:3f:55:53:b0: 5f:9c:f4:fb:65:c0:4d:d7:84:74:ef:08:ee:ec:6f: e2:38:81:b6:b3:6f:f0:e9:e8:d9:6e:b1:1c:ee:d0: 7a:83:2d:c7:d1:24:08:b6:b9:c4:77:d9:5d:87:01: 62:88:14:ca:55:5d:a0:bf:22:88:fc:72:2a:b3:df: e8:04:e6:40:a1:2d:84:ee:d9:c6:ab:71:11:30:ef: e2:0b:bc:a1:7e:4d:2f:26:7f:77:d1:b8:b6:c5:44: b2:21:34:26:9f:77:ba:0b:3a:a7:20:71:69:2c:f4: 65:3e:0a:88:87:4c:73:46:ca:8c:fb:ad:0e:da:8d: 1b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E0:89:E1:9D:FD:97:0E:A9:5B:75:B4:5A:5D:F1:B1:F7:76:8D:BB X509v3 Authority Key Identifier: keyid:02:BA:63:B5:86:2E:27:09:B9:0D:16:B7:DC:2E:B5:CF:C8:A2:E6:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:08:5c:f7:8e:84:7a:4b:c3:79:d5:99:fd:05:12:2e:16:d4: 6a:7e:59:c3:f6:74:a4:b4:0e:aa:e7:8a:e3:93:fa:22:ec:fc: cc:e9:01:9c:6b:3b:72:d8:e6:47:8c:d7:90:b8:17:45:41:9c: 94:49:25:c6:2f:4f:03:c7:39:17:bd:9f:7a:dd:68:b8:4f:0a: 4e:7c:a5:0e:01:97:4f:d6:73:e8:8f:51:4b:c2:b9:c3:fb:56: 31:fc:0c:38:8d:c9:b9:fc:3b:2f:f2:0f:72:a2:16:9d:f9:a1: 37:c2:cd:13:da:2d:d0:f4:e9:81:e7:de:88:90:a5:65:81:69: 18:a9:4d:32:e8:1c:d8:cc:c2:63:01:63:20:8c:24:de:a4:42: 18:03:b0:71:30:ab:6b:ea:d5:b9:83:01:77:17:a9:9a:e9:05: 72:fb:97:6e:32:88:7f:0d:6e:5d:75:d5:f4:70:11:6c:c5:29: f1:18:cc:e7:2d:3f:47:0b:99:03:d0:22:74:17:da:da:8d:09: 3b:d7:91:90:04:a4:4c:66:f5:bd:8c:01:38:d3:e6:82:b7:f1: a9:0a:4d:6f:a0:6a:ff:56:b8:7f:5f:ea:41:8a:a8:82:dc:1e: 49:33:7a:99:d4:f3:ec:bb:61:f0:12:c3:dd:6c:ab:df:6e:1d: 84:37:df:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQzRUUxMTAvBgNVBAUTKDAyQkE2M0I1ODYyRTI3MDlCOTBEMTZCN0RDMkVCNUNG QzhBMkU2ODQwHhcNMjQwNTE5MDYwNjM0WhcNMjQwNTI2MDYwNjM0WjAYMRYwFAYD VQQDEw02NjQ5OTZlYi0zZDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2/m3dl4gYF5aepM/+OaDD/7b8sA/nUd20o23l1OVrf5iDPKl5WVoXXVWj4M dDYijQKmck53UagBsIzxIYdljKNCmRA2MlihWNetseRnqexjX0mvVAfQsUWKB6Li RT2WQuKk0x3I4tzvenDaJpG/WjXFpXobQ5hnCZY5hVqpyrsNXj9VU7BfnPT7ZcBN 14R07wju7G/iOIG2s2/w6ejZbrEc7tB6gy3H0SQItrnEd9ldhwFiiBTKVV2gvyKI /HIqs9/oBOZAoS2E7tnGq3ERMO/iC7yhfk0vJn930bi2xUSyITQmn3e6CzqnIHFp LPRlPgqIh0xzRsqM+60O2o0bhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAbgieGd /ZcOqVt1tFpd8bH3do27MB8GA1UdIwQYMBaAFAK6Y7WGLicJuQ0Wt9wutc/IouaE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDNFRS80QThBREFDMENE NDYxMUVEQjQ1Q0NENjZDNEY5QUUwMi9BcnBqdFlZdUp3bTVEUmEzM0M2MXo4aWk1 b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FycGp0WVl1SndtNURSYTMzQzYxejhpaTVvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDNFRS80QThBREFDMENENDYxMUVEQjQ1Q0NENjZDNEY5QUUwMi9BcnBqdFlZdUp3 bTVEUmEzM0M2MXo4aWk1b1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCICFz3joR6S8N51Zn9BRIuFtRqflnD9nSktA6q54rjk/oi7PzM6QGc azty2OZHjNeQuBdFQZyUSSXGL08DxzkXvZ963Wi4TwpOfKUOAZdP1nPoj1FLwrnD +1Yx/Aw4jcm5/Dsv8g9yohad+aE3ws0T2i3Q9OmB596IkKVlgWkYqU0y6BzYzMJj AWMgjCTepEIYA7BxMKtr6tW5gwF3F6ma6QVy+5duMoh/DW5dddX0cBFsxSnxGMzn LT9HC5kD0CJ0F9rajQk715GQBKRMZvW9jAE40+aCt/GpCk1voGr/Vrh/X+pBiqiC 3B5JM3qZ1PPsu2HwEsPdbKvfbh2EN99K -----END CERTIFICATE-----Generated at Sun May 19 08:25:07 2024 by rpki-client on console-ams.rpki-client.org