$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft File: dHyGw8wUp3lzgFMVQIzcoQohR7I.mft (raw, json) Hash identifier: U0KA37TEUUg4g9iFp/443JQkvRpqhmR5EwV3bUXOzxo= Subject key identifier: B9:E8:B3:0D:C1:7E:27:C2:B1:49:07:29:00:8F:46:26:19:CC:CE:F4 Authority key identifier: 74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2 Certificate issuer: /CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2 Certificate serial: 06B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft Manifest number: 0699 Signing time: Thu 30 May 2024 23:47:50 +0000 Manifest this update: Thu 30 May 2024 23:47:49 +0000 Manifest next update: Thu 06 Jun 2024 23:47:49 +0000 Files and hashes: 1: dHyGw8wUp3lzgFMVQIzcoQohR7I.crl (hash: 0WOoJ1sVkkaM9wTcWxbZ83N9259QCMNyn1qhHDENoLg=) 2: 827329BE232B11EBB2348B23C4F9AE02.roa (hash: f39v6ygeXRAjdPY64BJbuZ+UIBj1N1Eycl4ErcVzWRs=) 3: 8126464A232B11EBB2348B23C4F9AE02.roa (hash: sfj2xvECrC9UYbOF65OAbFWVk5Du9BFNVeA8onJFiT4=) 4: 81D72348232B11EBB2348B23C4F9AE02.roa (hash: X9OisaOkwt/5KjenBaaHdfiXZFZsev8q5m2QettMK0Y=) 5: 8320FBE8232B11EBB2348B23C4F9AE02.roa (hash: 6kQVlrZy5cZqJirjzotMeN/Ddvn+uSO9iFSVMEsm0NU=) 6: FAA525207A4411EB804B7430C4F9AE02.roa (hash: 0lE8Ow3LFnTXkIztshTNWS33aCOmk4VgzoWs3uDur+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 22:55:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1712 (0x6b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2 Validity Not Before: May 30 23:47:49 2024 GMT Not After : Jun 6 23:47:49 2024 GMT Subject: CN=66591026-6d35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:57:76:87:7c:15:d8:fc:6e:b3:62:56:6c:cc: 52:36:31:a1:75:f1:6e:15:ce:6a:c7:29:c2:d3:de: a2:c4:3a:f0:cc:00:17:5d:e3:3d:44:a3:48:1c:a1: 81:3d:5e:04:10:6e:66:ad:08:e3:47:60:72:27:f1: 28:d8:ca:64:ba:bb:01:b8:e8:6d:3b:7b:68:c5:96: 34:42:41:1f:35:e8:cf:dc:dc:4c:92:7a:28:f0:2a: fc:48:0f:44:e1:46:41:82:f1:2a:cd:0e:40:4c:b9: 14:aa:38:bb:97:85:52:aa:09:28:44:0f:ac:03:49: 60:19:62:99:9e:b6:bc:2b:ae:62:ce:9a:26:60:bb: 50:92:b4:84:52:98:ca:fa:b6:f8:91:49:41:1f:40: b4:82:8a:2f:77:ba:7c:4b:ab:c1:0b:61:7c:59:16: 52:06:44:5e:be:02:cf:83:c9:af:c1:61:7c:d7:02: bd:90:ca:78:e4:4a:42:18:0b:50:ba:f8:d7:b2:53: 42:69:bb:6c:e3:88:ca:86:98:f1:8b:1d:f9:36:80: 48:db:03:fd:ec:d2:d6:31:30:c8:a4:85:20:8f:a8: 0f:0a:04:f8:2e:1a:c7:c6:cb:a1:3d:c4:17:10:b1: e9:1b:ad:b7:70:c9:51:d4:34:cb:86:5f:11:7d:c7: e5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E8:B3:0D:C1:7E:27:C2:B1:49:07:29:00:8F:46:26:19:CC:CE:F4 X509v3 Authority Key Identifier: keyid:74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:f0:e6:db:fb:6d:73:9e:9e:00:a9:31:3d:55:3c:2b:f8:8d: 38:c5:42:ab:d0:87:7d:64:5a:5c:8d:0f:16:16:2a:74:f6:d4: c0:09:ef:0e:d1:3d:5b:dd:19:ec:bb:14:6e:ba:47:09:eb:9b: ad:67:12:80:27:9a:2e:e0:a1:7e:44:33:75:01:23:7e:68:b8: 05:e0:a2:3b:b5:6e:44:1a:85:dd:b7:c5:75:da:4f:4b:b5:14: 7c:09:21:cb:22:81:44:b3:9a:2e:f4:ca:41:d5:39:7d:4d:a4: c6:f8:7b:15:f3:bc:6e:ac:6f:93:b9:8b:33:42:1b:bd:83:0a: 6f:08:2f:5c:25:4e:b7:78:20:4e:dd:74:1b:f7:ec:8f:34:b8: 66:dd:90:d0:6e:89:3b:d8:78:99:26:7a:25:5b:f3:b8:a5:3e: 6f:b0:f3:83:02:6a:7f:b2:d6:db:7d:8d:4f:31:74:4d:a8:76: 48:e2:4d:b2:c1:53:6d:16:a9:08:26:1f:4a:6a:d5:69:19:c5: 52:21:99:5f:9f:96:a2:b9:36:95:42:66:6a:68:d3:40:be:a2: 90:a9:3b:10:55:c7:e6:2d:54:d1:b7:af:2a:d7:18:27:0f:fe: 86:2d:04:f5:58:d4:7b:67:26:83:ec:ce:19:4a:64:b5:96:2c: 57:fb:a3:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI5NEQxMTAvBgNVBAUTKDc0N0M4NkMzQ0MxNEE3Nzk3MzgwNTMxNTQwOENEQ0Ex MEEyMTQ3QjIwHhcNMjQwNTMwMjM0NzQ5WhcNMjQwNjA2MjM0NzQ5WjAYMRYwFAYD VQQDEw02NjU5MTAyNi02ZDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA01d2h3wV2Pxus2JWbMxSNjGhdfFuFc5qxynC096ixDrwzAAXXeM9RKNIHKGB PV4EEG5mrQjjR2ByJ/Eo2MpkursBuOhtO3toxZY0QkEfNejP3NxMknoo8Cr8SA9E 4UZBgvEqzQ5ATLkUqji7l4VSqgkoRA+sA0lgGWKZnra8K65izpomYLtQkrSEUpjK +rb4kUlBH0C0goovd7p8S6vBC2F8WRZSBkRevgLPg8mvwWF81wK9kMp45EpCGAtQ uvjXslNCabts44jKhpjxix35NoBI2wP97NLWMTDIpIUgj6gPCgT4LhrHxsuhPcQX ELHpG623cMlR1DTLhl8RfcflUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLnosw3B fifCsUkHKQCPRiYZzM70MB8GA1UdIwQYMBaAFHR8hsPMFKd5c4BTFUCM3KEKIUey MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjk0RC8yQzcxNjJDQzIz MjgxMUVCOUZGNkU5MUFDNEY5QUUwMi9kSHlHdzh3VXAzbHpnRk1WUUl6Y29Rb2hS N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RIeUd3OHdVcDNsemdGTVZRSXpjb1FvaFI3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qjk0RC8yQzcxNjJDQzIzMjgxMUVCOUZGNkU5MUFDNEY5QUUwMi9kSHlHdzh3VXAz bHpnRk1WUUl6Y29Rb2hSN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA98Obb+21znp4AqTE9VTwr+I04xUKr0Id9ZFpcjQ8WFip09tTACe8O 0T1b3RnsuxRuukcJ65utZxKAJ5ou4KF+RDN1ASN+aLgF4KI7tW5EGoXdt8V12k9L tRR8CSHLIoFEs5ou9MpB1Tl9TaTG+HsV87xurG+TuYszQhu9gwpvCC9cJU63eCBO 3XQb9+yPNLhm3ZDQbok72HiZJnolW/O4pT5vsPODAmp/stbbfY1PMXRNqHZI4k2y wVNtFqkIJh9KatVpGcVSIZlfn5aiuTaVQmZqaNNAvqKQqTsQVcfmLVTRt68q1xgn D/6GLQT1WNR7ZyaD7M4ZSmS1lixX+6OH -----END CERTIFICATE-----Generated at Fri May 31 00:28:36 2024 by rpki-client on console-ams.rpki-client.org