$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft File: dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft (raw, json) Hash identifier: IfrcuNc9Cdix8JZxtIS4tSMLtEwRjWhhO6GEMeBc3xs= Subject key identifier: 30:56:04:5F:E9:04:95:35:11:45:6B:57:DF:DA:27:78:71:71:92:FA Authority key identifier: 76:D1:F6:6C:01:6D:C1:84:73:4E:6D:9B:E1:BE:E9:08:01:FF:A0:1F Certificate issuer: /CN=A91B7E17/serialNumber=76D1F66C016DC184734E6D9BE1BEE90801FFA01F Certificate serial: 0594 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtH2bAFtwYRzTm2b4b7pCAH_oB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft Manifest number: 0590 Signing time: Sun 19 May 2024 00:28:34 +0000 Manifest this update: Sun 19 May 2024 00:28:34 +0000 Manifest next update: Sun 26 May 2024 00:28:34 +0000 Files and hashes: 1: dtH2bAFtwYRzTm2b4b7pCAH_oB8.crl (hash: brZgwyXbr9TxeuYqhgbwb/pkUYgPRCvAQ6USu/SxBRQ=) 2: 87F6FDDC880911EB96D8882DC4F9AE02.roa (hash: suHvTQAomyIkUqlAyt38u4ad/m8Cw95cixcJetHke24=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.crl rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtH2bAFtwYRzTm2b4b7pCAH_oB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1428 (0x594) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7E17/serialNumber=76D1F66C016DC184734E6D9BE1BEE90801FFA01F Validity Not Before: May 19 00:28:34 2024 GMT Not After : May 26 00:28:34 2024 GMT Subject: CN=664947b2-b62a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b4:8b:ff:e6:2d:7a:96:94:a0:97:a6:59:b2: 0e:f0:57:a6:71:83:8b:dc:94:20:be:2c:da:f6:30: 5a:f9:6f:a7:f7:e6:97:b5:32:d7:6e:1c:50:b2:21: 43:aa:19:d1:e6:d3:bb:e0:56:6e:60:cb:ac:e9:e6: e2:22:21:b9:44:60:b3:28:07:f4:af:7f:5f:44:9c: 30:d2:78:94:2e:a9:f5:41:b7:85:55:3a:39:bf:e6: 87:7a:d2:77:a7:44:62:a0:44:09:4d:7c:fb:e9:86: 8d:06:11:5b:cb:e0:5d:4d:12:f1:77:5e:6c:03:37: 0a:5e:6a:a2:da:81:ea:98:1c:01:bc:65:de:78:7c: 18:51:77:c6:a0:eb:a6:48:23:86:d3:ee:16:ba:79: 02:3e:53:f2:12:b3:b2:8c:52:4c:29:20:cd:4f:26: de:34:71:a3:12:7d:a1:89:68:3f:be:b6:e0:8d:9d: 4c:94:99:dc:3e:4b:f0:9b:3e:28:08:08:f2:20:d1: 12:71:3a:89:0c:ca:15:35:62:f4:23:2c:b6:37:8f: d0:c1:3e:b8:de:80:aa:ae:38:89:ff:9b:46:2a:89: e2:6f:98:0a:b2:41:b5:ce:e8:bf:da:24:11:37:4c: c0:4e:60:d6:d4:9d:68:4e:46:25:03:9c:b2:e4:49: c9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:56:04:5F:E9:04:95:35:11:45:6B:57:DF:DA:27:78:71:71:92:FA X509v3 Authority Key Identifier: keyid:76:D1:F6:6C:01:6D:C1:84:73:4E:6D:9B:E1:BE:E9:08:01:FF:A0:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtH2bAFtwYRzTm2b4b7pCAH_oB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:81:e8:af:5e:6c:e3:9e:61:75:cc:e4:b2:49:f0:ad:56:14: 4f:99:7c:f9:b4:0f:31:98:97:e2:61:3d:40:3d:71:54:5c:3b: c8:30:60:e3:32:00:6d:d2:f2:31:67:9f:b9:40:90:25:fe:8f: 4d:b2:cc:11:bc:6d:fb:05:df:9f:1d:fa:c7:7e:8a:0d:5d:c2: fd:00:6e:3d:00:d9:a8:08:61:3f:bf:64:2d:97:43:37:88:e4: 5e:ba:51:07:84:f5:d3:f3:dd:98:b2:e2:82:98:db:48:3b:1c: 3c:f1:b5:43:c0:26:c3:31:65:14:7c:78:16:e7:a5:7f:20:be: f6:09:23:6c:46:bf:9f:8c:a6:12:fe:7c:17:4e:4b:3d:79:39: 97:33:cf:b2:79:d7:16:57:e7:72:89:82:48:35:bd:f9:70:fd: 87:e2:9e:47:fc:39:9d:8f:27:10:a6:29:86:e8:cb:a2:4a:cf: 45:e7:06:b9:df:3f:74:7c:12:bf:6a:d5:8b:4a:14:30:00:96: 43:b3:87:10:cf:91:42:26:bc:fa:31:ef:48:07:50:0b:e8:e1: f7:eb:a8:25:2f:15:d4:4a:b5:11:56:8c:b8:c6:ba:c9:0c:c9: fb:bd:7a:21:04:fe:88:28:4f:17:39:3f:57:6d:f4:83:bc:16: cc:88:58:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdFMTcxMTAvBgNVBAUTKDc2RDFGNjZDMDE2REMxODQ3MzRFNkQ5QkUxQkVFOTA4 MDFGRkEwMUYwHhcNMjQwNTE5MDAyODM0WhcNMjQwNTI2MDAyODM0WjAYMRYwFAYD VQQDEw02NjQ5NDdiMi1iNjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm7SL/+YtepaUoJemWbIO8FemcYOL3JQgviza9jBa+W+n9+aXtTLXbhxQsiFD qhnR5tO74FZuYMus6ebiIiG5RGCzKAf0r39fRJww0niULqn1QbeFVTo5v+aHetJ3 p0RioEQJTXz76YaNBhFby+BdTRLxd15sAzcKXmqi2oHqmBwBvGXeeHwYUXfGoOum SCOG0+4WunkCPlPyErOyjFJMKSDNTybeNHGjEn2hiWg/vrbgjZ1MlJncPkvwmz4o CAjyINEScTqJDMoVNWL0Iyy2N4/QwT643oCqrjiJ/5tGKonib5gKskG1zui/2iQR N0zATmDW1J1oTkYlA5yy5EnJWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDBWBF/p BJU1EUVrV9/aJ3hxcZL6MB8GA1UdIwQYMBaAFHbR9mwBbcGEc05tm+G+6QgB/6Af MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0UxNy83QUIwQjU2Njg4 MDcxMUVCQTBBOUI2MkFDNEY5QUUwMi9kdEgyYkFGdHdZUnpUbTJiNGI3cENBSF9v QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R0SDJiQUZ0d1lSelRtMmI0YjdwQ0FIX29COC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0UxNy83QUIwQjU2Njg4MDcxMUVCQTBBOUI2MkFDNEY5QUUwMi9kdEgyYkFGdHdZ UnpUbTJiNGI3cENBSF9vQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsgeivXmzjnmF1zOSySfCtVhRPmXz5tA8xmJfiYT1APXFUXDvIMGDj MgBt0vIxZ5+5QJAl/o9NsswRvG37Bd+fHfrHfooNXcL9AG49ANmoCGE/v2Qtl0M3 iOReulEHhPXT892YsuKCmNtIOxw88bVDwCbDMWUUfHgW56V/IL72CSNsRr+fjKYS /nwXTks9eTmXM8+yedcWV+dyiYJINb35cP2H4p5H/DmdjycQpimG6MuiSs9F5wa5 3z90fBK/atWLShQwAJZDs4cQz5FCJrz6Me9IB1AL6OH366glLxXUSrURVoy4xrrJ DMn7vXohBP6IKE8XOT9XbfSDvBbMiFgb -----END CERTIFICATE-----Generated at Sun May 19 01:47:15 2024 by rpki-client on console-ams.rpki-client.org