$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft File: 0VLfcuXWwcb-QrZCN3w7CIEobec.mft (raw, json) Hash identifier: ps6j1p/eh56aARl/8c8UQm6ONzNv11FX9Sg5MbI/3eU= Subject key identifier: 54:EB:28:4E:B3:BB:51:41:46:33:84:80:CD:2D:24:3C:9D:B0:48:78 Authority key identifier: D1:52:DF:72:E5:D6:C1:C6:FE:42:B6:42:37:7C:3B:08:81:28:6D:E7 Certificate issuer: /CN=A91C0FAC/serialNumber=D152DF72E5D6C1C6FE42B642377C3B0881286DE7 Certificate serial: 0458 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0VLfcuXWwcb-QrZCN3w7CIEobec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft Manifest number: 0455 Signing time: Sun 19 May 2024 01:51:27 +0000 Manifest this update: Sun 19 May 2024 01:51:27 +0000 Manifest next update: Sun 26 May 2024 01:51:27 +0000 Files and hashes: 1: 0VLfcuXWwcb-QrZCN3w7CIEobec.crl (hash: ABI31aYOqE3JR57w1x6AL/DxC1f+LQ/3UGYS+tl1Hiw=) 2: 4C2E7A3C049B11ECAC7E5D0DC4F9AE02.roa (hash: 5IlGYl5yvFIIqlvJ2Ud4/MU733xxNydGNh6e2oHjpRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.crl rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0VLfcuXWwcb-QrZCN3w7CIEobec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1112 (0x458) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0FAC/serialNumber=D152DF72E5D6C1C6FE42B642377C3B0881286DE7 Validity Not Before: May 19 01:51:27 2024 GMT Not After : May 26 01:51:27 2024 GMT Subject: CN=66495b1f-f25b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bb:f3:a5:59:2b:65:6d:d0:29:2d:87:9b:01: e3:5e:a8:8a:2c:26:58:29:26:31:76:87:e2:b5:bd: 42:1b:f4:02:69:3c:c1:ad:74:cc:e1:09:a8:84:e0: 62:21:33:ea:fe:40:22:f4:d9:75:15:d0:5c:40:cc: be:9b:31:2e:25:6d:94:53:5b:49:11:b8:be:04:98: 25:27:62:a9:fb:db:c1:b9:d9:58:b6:c4:99:db:e6: 6b:be:f6:97:e1:32:0f:b3:b0:7b:07:d3:cd:70:02: db:52:27:24:5c:a3:85:80:fd:d8:62:f1:e6:51:02: 30:9c:36:02:55:86:82:9f:c1:42:bc:ff:e2:8a:14: c5:53:a8:03:38:5a:12:f4:12:32:d6:8d:8d:11:9b: 1e:cc:1a:03:27:bd:61:d2:2e:94:d7:9c:eb:46:ab: 7a:0c:0a:c7:fd:22:0f:d4:68:06:59:fd:f2:00:90: da:c4:eb:8a:01:86:f0:45:2a:ab:da:cc:7d:32:15: 19:e8:3f:74:22:0e:68:4f:20:19:f5:38:69:2e:d6: 08:d8:02:1e:df:5d:02:73:b1:67:b5:3a:64:fa:ef: 2b:b6:88:d5:4b:4e:d8:d9:38:3d:45:e1:67:08:80: e3:4f:9a:a2:82:42:aa:7e:d6:58:96:88:2f:a9:d0: 57:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:EB:28:4E:B3:BB:51:41:46:33:84:80:CD:2D:24:3C:9D:B0:48:78 X509v3 Authority Key Identifier: keyid:D1:52:DF:72:E5:D6:C1:C6:FE:42:B6:42:37:7C:3B:08:81:28:6D:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0VLfcuXWwcb-QrZCN3w7CIEobec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:4b:cd:14:5d:70:98:67:ad:50:79:03:28:75:93:0a:8e:0c: 70:59:96:55:e2:79:67:b1:7c:4d:64:8b:c0:62:ab:76:cb:a7: 78:66:b1:e4:ad:17:34:2e:22:e1:e3:b6:4b:a5:48:1f:02:a8: 5a:6e:76:81:70:62:c9:a4:51:c3:2a:b5:d3:66:c7:72:97:87: b8:a0:a8:1a:1a:2c:17:8e:51:3b:71:30:2b:74:92:54:69:28: 17:26:fb:79:ec:8b:a1:e0:9d:e4:fe:74:b8:4a:ee:04:c3:03: 07:79:af:44:bd:9a:52:84:ee:42:9e:df:db:1b:97:a0:d3:2f: 04:17:28:c3:ea:c3:f1:5e:ae:74:b5:c5:b4:4b:6f:33:c0:42: 51:cc:ff:1b:10:f0:49:a5:98:9b:05:a3:33:3d:a9:fc:8c:49: dc:69:88:bc:c6:28:ea:97:c0:09:fc:e2:9c:4d:42:31:9d:07: 26:97:5d:a4:6c:cf:07:9e:97:50:03:af:eb:da:11:79:39:e4: ab:ed:39:aa:5f:9d:8c:ea:cc:87:20:88:c4:71:b8:a9:c1:23: cb:39:e5:da:08:d4:8f:24:a6:01:40:66:67:74:2f:f8:f1:c6: 6b:16:18:90:fe:c1:2a:76:dd:e7:f4:2d:92:bb:82:ba:d2:9d: 1a:8e:4c:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBGQUMxMTAvBgNVBAUTKEQxNTJERjcyRTVENkMxQzZGRTQyQjY0MjM3N0MzQjA4 ODEyODZERTcwHhcNMjQwNTE5MDE1MTI3WhcNMjQwNTI2MDE1MTI3WjAYMRYwFAYD VQQDEw02NjQ5NWIxZi1mMjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrvzpVkrZW3QKS2HmwHjXqiKLCZYKSYxdofitb1CG/QCaTzBrXTM4QmohOBi ITPq/kAi9Nl1FdBcQMy+mzEuJW2UU1tJEbi+BJglJ2Kp+9vBudlYtsSZ2+ZrvvaX 4TIPs7B7B9PNcALbUickXKOFgP3YYvHmUQIwnDYCVYaCn8FCvP/iihTFU6gDOFoS 9BIy1o2NEZsezBoDJ71h0i6U15zrRqt6DArH/SIP1GgGWf3yAJDaxOuKAYbwRSqr 2sx9MhUZ6D90Ig5oTyAZ9ThpLtYI2AIe310Cc7FntTpk+u8rtojVS07Y2Tg9ReFn CIDjT5qigkKqftZYlogvqdBX0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFTrKE6z u1FBRjOEgM0tJDydsEh4MB8GA1UdIwQYMBaAFNFS33Ll1sHG/kK2Qjd8OwiBKG3n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEZBQy8zQ0Y3OThFMDA0 OTcxMUVDQTUzRDRCM0NDNEY5QUUwMi8wVkxmY3VYV3djYi1RclpDTjN3N0NJRW9i ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBWTGZjdVhXd2NiLVFyWkNOM3c3Q0lFb2JlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEZBQy8zQ0Y3OThFMDA0OTcxMUVDQTUzRDRCM0NDNEY5QUUwMi8wVkxmY3VYV3dj Yi1RclpDTjN3N0NJRW9iZWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmS80UXXCYZ61QeQModZMKjgxwWZZV4nlnsXxNZIvAYqt2y6d4ZrHk rRc0LiLh47ZLpUgfAqhabnaBcGLJpFHDKrXTZsdyl4e4oKgaGiwXjlE7cTArdJJU aSgXJvt57Iuh4J3k/nS4Su4EwwMHea9EvZpShO5Cnt/bG5eg0y8EFyjD6sPxXq50 tcW0S28zwEJRzP8bEPBJpZibBaMzPan8jEncaYi8xijql8AJ/OKcTUIxnQcml12k bM8HnpdQA6/r2hF5OeSr7TmqX52M6syHIIjEcbipwSPLOeXaCNSPJKYBQGZndC/4 8cZrFhiQ/sEqdt3n9C2Su4K60p0ajkzZ -----END CERTIFICATE-----Generated at Sun May 19 02:59:14 2024 by rpki-client on console-ams.rpki-client.org