$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft File: cOo3wZMr00-ztIWaNIMaEOYR0PY.mft (raw, json) Hash identifier: 4AohDW7x5iWDY49+IOk0PInEaYi1MS/CQVbkxCvt3+I= Subject key identifier: D9:BA:ED:14:5C:C7:6E:40:40:CB:1F:D2:66:C1:38:A1:FC:12:7B:A7 Authority key identifier: 70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6 Certificate issuer: /CN=A91BA1BF/serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6 Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft Manifest number: 71 Signing time: Fri 31 May 2024 08:21:36 +0000 Manifest this update: Fri 31 May 2024 08:21:36 +0000 Manifest next update: Fri 07 Jun 2024 08:21:36 +0000 Files and hashes: 1: cOo3wZMr00-ztIWaNIMaEOYR0PY.crl (hash: bgt6k/9c/l/+kWsBFAOrf3pswz+oYde3/Skg31c0opE=) 2: BC630BAE84FC11EE9887345FC4F9AE02.roa (hash: HKes2c/mu/stmt2Gj7jYGxcfITdkDU7yK/r1/eYcQTI=) 3: 7C58D40872CD11EE81C60650C4F9AE02.roa (hash: 4DDqrhtY8b8rHCDj+Skj070p4+6ZZIBVfZJKH74aD2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA1BF/serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6 Validity Not Before: May 31 08:21:36 2024 GMT Not After : Jun 7 08:21:36 2024 GMT Subject: CN=66598890-ec16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:89:ea:ff:67:1f:49:ed:59:2b:aa:fa:e1:e5: 43:e1:e1:a6:de:0c:26:85:79:24:68:01:4d:ba:56: bc:98:fc:d1:1f:fe:d1:12:7c:c5:1c:0d:ad:e1:48: 4d:57:73:ac:5e:7f:c1:f9:eb:7c:9d:a6:10:43:7e: 24:9b:b2:0d:5b:37:89:f7:c1:e2:28:5d:fe:01:5e: f8:c7:8b:59:d3:31:f6:cf:88:a8:a6:e5:ac:55:70: 5c:2e:be:b5:2e:ba:88:15:78:57:dd:8b:7b:36:fb: 1a:e5:f6:f6:a6:e9:a7:a1:7d:5b:3b:78:14:a7:a2: f0:4f:a2:f4:2c:eb:66:fd:64:c0:a4:08:99:6b:3e: 6f:92:ca:f6:d2:e2:01:fd:36:40:c0:13:a5:69:1d: c1:fd:16:ac:28:a3:42:e2:41:07:d6:94:18:2a:de: a0:0a:85:35:e1:8a:b1:8c:22:3c:e8:05:a1:29:15: e9:ff:7b:2e:29:08:47:d7:e6:45:11:18:54:0f:21: 87:f3:0b:f4:ea:97:4d:7a:7d:f4:a5:02:b3:be:64: ce:37:99:41:86:55:32:0b:20:f3:94:ca:75:de:a4: bd:6b:93:8d:2f:74:03:65:b1:c1:b2:34:b5:ef:78: c9:dd:7f:26:1a:8e:18:da:40:61:13:b5:89:a5:4f: 3a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:BA:ED:14:5C:C7:6E:40:40:CB:1F:D2:66:C1:38:A1:FC:12:7B:A7 X509v3 Authority Key Identifier: keyid:70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:f5:ae:96:ef:45:1e:51:ff:74:ef:ab:5d:36:27:59:f5:2f: 5f:1e:39:67:06:bf:59:6a:f3:16:1c:74:c3:53:5c:65:be:44: 23:5b:bd:6f:c7:8e:52:c8:bc:c0:8a:09:79:75:87:a8:f3:b8: 66:89:6e:7b:54:8f:26:67:67:b7:df:56:cf:77:98:91:00:d3: e8:7c:3c:9c:1c:bb:60:41:cc:f8:99:34:61:3e:a2:06:bb:43: 84:78:17:ff:79:13:bc:bf:3c:3a:b6:45:4e:1b:35:3c:f7:b3: 2f:5f:d2:ed:4c:fa:31:d6:d7:1d:a5:50:b7:2a:1b:68:7b:63: 88:94:b8:a3:e3:75:bf:25:1b:b5:04:a4:0f:71:4e:6b:2c:3b: 4e:30:7b:0f:93:c1:c1:3b:ad:b5:12:ed:3b:cf:81:9f:b7:4e: 78:d3:d3:7b:22:8a:98:36:b6:e1:9b:c2:9c:71:2c:95:5a:61: cf:07:34:bf:37:87:08:35:3a:c9:b9:8d:fe:97:ac:05:de:e3: 04:6d:15:b8:93:53:b3:95:49:75:0c:0f:77:89:62:fd:ae:4a: 59:5f:44:f6:9e:55:3c:1e:a0:60:30:4c:9c:b5:72:90:8d:1c: ed:5a:1a:7b:70:0c:de:17:e7:09:a2:15:99:37:d5:43:8b:f5: 7e:da:6d:02 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QTFCRjExMC8GA1UEBRMoNzBFQTM3QzE5MzJCRDM0RkIzQjQ4NTlBMzQ4MzFBMTBF NjExRDBGNjAeFw0yNDA1MzEwODIxMzZaFw0yNDA2MDcwODIxMzZaMBgxFjAUBgNV BAMTDTY2NTk4ODkwLWVjMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCier/Zx9J7Vkrqvrh5UPh4abeDCaFeSRoAU26VryY/NEf/tESfMUcDa3hSE1X c6xef8H563ydphBDfiSbsg1bN4n3weIoXf4BXvjHi1nTMfbPiKim5axVcFwuvrUu uogVeFfdi3s2+xrl9vam6aehfVs7eBSnovBPovQs62b9ZMCkCJlrPm+SyvbS4gH9 NkDAE6VpHcH9Fqwoo0LiQQfWlBgq3qAKhTXhirGMIjzoBaEpFen/ey4pCEfX5kUR GFQPIYfzC/Tql016ffSlArO+ZM43mUGGVTILIPOUynXepL1rk40vdANlscGyNLXv eMndfyYajhjaQGETtYmlTzq3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2brtFFzH bkBAyx/SZsE4ofwSe6cwHwYDVR0jBBgwFoAUcOo3wZMr00+ztIWaNIMaEOYR0PYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJBMUJGLzg0RTEwQTQyNzJD QzExRUVCNzk0NUE0REM0RjlBRTAyL2NPbzN3Wk1yMDAtenRJV2FOSU1hRU9ZUjBQ WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY09vM3daTXIwMC16dElXYU5JTWFFT1lSMFBZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJB MUJGLzg0RTEwQTQyNzJDQzExRUVCNzk0NUE0REM0RjlBRTAyL2NPbzN3Wk1yMDAt enRJV2FOSU1hRU9ZUjBQWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFn1rpbvRR5R/3Tvq102J1n1L18eOWcGv1lq8xYcdMNTXGW+RCNbvW/H jlLIvMCKCXl1h6jzuGaJbntUjyZnZ7ffVs93mJEA0+h8PJwcu2BBzPiZNGE+oga7 Q4R4F/95E7y/PDq2RU4bNTz3sy9f0u1M+jHW1x2lULcqG2h7Y4iUuKPjdb8lG7UE pA9xTmssO04wew+TwcE7rbUS7TvPgZ+3TnjT03siipg2tuGbwpxxLJVaYc8HNL83 hwg1Osm5jf6XrAXe4wRtFbiTU7OVSXUMD3eJYv2uSllfRPaeVTweoGAwTJy1cpCN HO1aGntwDN4X5wmiFZk31UOL9X7abQI= -----END CERTIFICATE-----Generated at Fri May 31 10:02:41 2024 by rpki-client on console-ams.rpki-client.org