$ rpki-client -vvf rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft File: i1fdFr2X-1v8IdnMqeK4bVUC4og.mft (raw, json) Hash identifier: F84H3/gHdjpcURcFHczbVAiWQiVejO00E8fym9FmxHM= Subject key identifier: 48:18:E9:89:16:F7:63:4B:EE:9D:99:B2:D8:90:41:19:BD:87:15:43 Authority key identifier: 8B:57:DD:16:BD:97:FB:5B:FC:21:D9:CC:A9:E2:B8:6D:55:02:E2:88 Certificate issuer: /CN=A91B929F/serialNumber=8B57DD16BD97FB5BFC21D9CCA9E2B86D5502E288 Certificate serial: 04D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1fdFr2X-1v8IdnMqeK4bVUC4og.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft Manifest number: 04D0 Signing time: Sat 01 Jun 2024 02:20:55 +0000 Manifest this update: Sat 01 Jun 2024 02:20:55 +0000 Manifest next update: Sat 08 Jun 2024 02:20:55 +0000 Files and hashes: 1: i1fdFr2X-1v8IdnMqeK4bVUC4og.crl (hash: HmGYiQXeYBYWARUPwm96Na1dT7HQYH/+pcvbKqXFPOA=) 2: 2EA68D96D65211EB8DAD1886C4F9AE02.roa (hash: PBG/qjHb9XAKfA8pJ+WEUn8BGtScP+Ise62lZzVNRro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.crl rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1fdFr2X-1v8IdnMqeK4bVUC4og.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 02:20:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1235 (0x4d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B929F/serialNumber=8B57DD16BD97FB5BFC21D9CCA9E2B86D5502E288 Validity Not Before: Jun 1 02:20:55 2024 GMT Not After : Jun 8 02:20:55 2024 GMT Subject: CN=665a8587-f78e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:58:5c:16:fa:d9:ec:57:ae:d7:1c:d4:65:ad: 3f:25:fe:26:6f:bc:72:56:3e:02:de:2a:5c:72:a0: 02:99:aa:84:94:d0:43:d3:af:69:b6:10:9d:33:ba: 41:b3:4d:9e:c4:dd:43:84:72:aa:63:26:56:14:df: ea:84:fc:0f:75:71:80:9e:56:6f:0d:ba:9b:b7:a4: 6e:04:f6:31:21:a1:30:89:31:3e:68:a0:00:e3:d0: 32:ac:27:e5:c2:4b:06:04:b5:56:3b:14:d6:a2:35: 87:49:69:e2:b2:cb:9d:08:fa:00:6a:cb:bb:3a:dd: 12:bf:3d:68:cc:00:f8:13:6a:88:e7:f1:2c:5c:71: f8:65:d8:25:24:7c:95:f6:7b:ab:18:96:36:c8:ff: 99:80:ee:18:ea:e2:d1:94:4b:15:6f:8b:72:4a:bf: 70:cc:be:da:4d:56:1e:97:0d:c8:da:3b:95:fd:3c: 45:99:1b:76:1b:00:70:34:13:dc:a8:e3:36:94:78: d7:7c:95:db:22:6e:d6:34:34:42:c5:de:bc:c8:1c: 30:1a:a9:c1:58:96:1d:0f:5d:d2:fb:11:7a:19:97: b0:eb:07:02:dc:7d:8a:fe:f4:ea:8d:bb:c5:a1:31: 2a:2c:e5:ac:4e:99:3b:6d:ca:23:30:fd:a9:f8:77: 51:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:18:E9:89:16:F7:63:4B:EE:9D:99:B2:D8:90:41:19:BD:87:15:43 X509v3 Authority Key Identifier: keyid:8B:57:DD:16:BD:97:FB:5B:FC:21:D9:CC:A9:E2:B8:6D:55:02:E2:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1fdFr2X-1v8IdnMqeK4bVUC4og.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:af:fd:66:3f:84:36:89:95:ee:09:d2:12:a0:51:a2:da:65: f7:40:5b:ab:39:21:83:01:ab:9c:13:4f:c6:6e:e6:15:2f:83: 74:8d:77:bb:d0:a8:12:d7:8b:c9:29:7c:37:a8:fe:d2:6c:ad: 3b:ca:9c:8d:03:bb:31:99:68:6c:54:6e:6f:50:46:1f:37:66: 82:ac:ce:7b:d6:ff:eb:99:ec:b2:5b:6f:6f:2c:4f:79:7a:53: 17:ba:39:18:35:05:00:15:2c:8d:87:65:59:e3:08:60:f1:25: 65:d9:a6:e1:f8:2e:21:e9:74:92:02:69:86:c8:c5:fb:70:13: a1:b0:b2:86:cd:a9:43:47:2a:be:20:10:be:13:11:d3:3e:5e: 47:94:60:77:1e:4d:d5:41:a9:db:db:2b:72:27:ee:11:d6:b3: 3d:f6:2f:c3:7e:3d:f2:27:1d:75:2f:3c:0d:4e:f2:ee:f3:69: f3:7b:84:93:d0:5d:1d:34:27:b9:b4:86:4d:e7:22:c8:ef:02: 0b:bd:e4:9a:e4:b3:29:4c:d0:63:f9:8e:69:7e:ee:d8:c0:bb: b7:98:fb:00:3d:05:ea:ad:7f:0f:e3:5a:b6:1e:17:96:8f:fb: 14:b1:5b:ff:3c:e2:77:a5:52:00:c8:13:25:c1:cc:e2:23:9b: d8:8d:f4:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyOUYxMTAvBgNVBAUTKDhCNTdERDE2QkQ5N0ZCNUJGQzIxRDlDQ0E5RTJCODZE NTUwMkUyODgwHhcNMjQwNjAxMDIyMDU1WhcNMjQwNjA4MDIyMDU1WjAYMRYwFAYD VQQDEw02NjVhODU4Ny1mNzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmFhcFvrZ7Feu1xzUZa0/Jf4mb7xyVj4C3ipccqACmaqElNBD069pthCdM7pB s02exN1DhHKqYyZWFN/qhPwPdXGAnlZvDbqbt6RuBPYxIaEwiTE+aKAA49AyrCfl wksGBLVWOxTWojWHSWnissudCPoAasu7Ot0Svz1ozAD4E2qI5/EsXHH4ZdglJHyV 9nurGJY2yP+ZgO4Y6uLRlEsVb4tySr9wzL7aTVYelw3I2juV/TxFmRt2GwBwNBPc qOM2lHjXfJXbIm7WNDRCxd68yBwwGqnBWJYdD13S+xF6GZew6wcC3H2K/vTqjbvF oTEqLOWsTpk7bcojMP2p+HdRqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEgY6YkW 92NL7p2ZstiQQRm9hxVDMB8GA1UdIwQYMBaAFItX3Ra9l/tb/CHZzKniuG1VAuKI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI5Ri8zQkU1NDlDRUQ2 NEUxMUVCOTRENEYyN0RDNEY5QUUwMi9pMWZkRnIyWC0xdjhJZG5NcWVLNGJWVUM0 b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kxZmRGcjJYLTF2OElkbk1xZUs0YlZVQzRvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTI5Ri8zQkU1NDlDRUQ2NEUxMUVCOTRENEYyN0RDNEY5QUUwMi9pMWZkRnIyWC0x djhJZG5NcWVLNGJWVUM0b2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1r/1mP4Q2iZXuCdISoFGi2mX3QFurOSGDAaucE0/GbuYVL4N0jXe7 0KgS14vJKXw3qP7SbK07ypyNA7sxmWhsVG5vUEYfN2aCrM571v/rmeyyW29vLE95 elMXujkYNQUAFSyNh2VZ4whg8SVl2abh+C4h6XSSAmmGyMX7cBOhsLKGzalDRyq+ IBC+ExHTPl5HlGB3Hk3VQanb2ytyJ+4R1rM99i/Dfj3yJx11LzwNTvLu82nze4ST 0F0dNCe5tIZN5yLI7wILveSa5LMpTNBj+Y5pfu7YwLu3mPsAPQXqrX8P41q2HheW j/sUsVv/POJ3pVIAyBMlwcziI5vYjfQd -----END CERTIFICATE-----Generated at Sat Jun 1 04:07:30 2024 by rpki-client on console-ams.rpki-client.org