$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft File: P32buu18W_27o6NJq-lrIa0n2mc.mft (raw, json) Hash identifier: l6/A+gbsIVnh2r3By2S6nCuHyt5x1NfU0Uy57PwAY48= Subject key identifier: D6:DB:29:85:C7:50:84:CD:E8:9A:93:B2:46:CD:B7:4C:38:A9:AE:3B Authority key identifier: 3F:7D:9B:BA:ED:7C:5B:FD:BB:A3:A3:49:AB:E9:6B:21:AD:27:DA:67 Certificate issuer: /CN=A91C4D8E/serialNumber=3F7D9BBAED7C5BFDBBA3A349ABE96B21AD27DA67 Certificate serial: 0B85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft Manifest number: 0B7E Signing time: Sat 18 May 2024 19:26:18 +0000 Manifest this update: Sat 18 May 2024 19:26:18 +0000 Manifest next update: Sat 25 May 2024 19:26:18 +0000 Files and hashes: 1: P32buu18W_27o6NJq-lrIa0n2mc.crl (hash: /YnjpG7+RmvWXf6EuflaRX1iXg6LuVpv3YxgVifE5Dg=) 2: C9FF2A7E06A511EAA1FFDB3DC4F9AE02.roa (hash: JA2HpzDCryHkDWNPe1iufz5VrqW0EsAeEdiwzkNRDX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.crl rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2949 (0xb85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4D8E/serialNumber=3F7D9BBAED7C5BFDBBA3A349ABE96B21AD27DA67 Validity Not Before: May 18 19:26:18 2024 GMT Not After : May 25 19:26:18 2024 GMT Subject: CN=664900da-722e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:57:13:3e:2e:5d:d3:59:b2:e4:c3:ae:4e:da: ab:fb:4c:12:8b:37:5e:d0:8d:76:98:f8:23:0a:fb: 07:50:dd:99:7b:04:ec:bd:04:9b:8c:49:9c:17:3b: 62:8a:8f:34:ca:d8:90:da:62:de:86:1c:d9:68:5c: f5:0a:32:53:26:17:c0:02:38:b7:82:18:c3:e0:94: 49:e4:45:ec:12:cf:df:0e:c9:b1:64:b7:3b:33:9b: 82:2f:1e:f4:bf:0b:9d:5b:f1:e6:d9:5c:ed:b7:1e: 82:96:9d:94:86:41:9e:69:c3:aa:62:c1:1b:c2:6d: 89:c6:52:a7:d5:ca:0a:bb:a5:06:6b:c0:1e:66:ad: c8:23:94:1b:7b:7b:c2:a9:23:53:84:6e:a5:b8:2f: 5d:01:bb:f6:a8:14:4e:af:e2:eb:cf:bc:6f:22:88: ab:85:04:5b:f9:f0:d0:38:68:dd:8f:c0:7f:af:9f: ab:70:f3:88:76:4b:79:cb:bb:c7:4f:55:e2:bd:b1: 40:42:97:a9:45:ad:9d:64:53:56:47:36:7b:d5:3e: 8e:22:22:c4:80:30:37:e6:50:cd:a7:3f:dc:d3:b7: 52:43:b1:dc:97:33:4f:4e:db:80:65:61:e6:14:f2: d4:90:0d:d8:b0:d7:02:c1:fb:e0:b6:b4:35:52:78: a5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:DB:29:85:C7:50:84:CD:E8:9A:93:B2:46:CD:B7:4C:38:A9:AE:3B X509v3 Authority Key Identifier: keyid:3F:7D:9B:BA:ED:7C:5B:FD:BB:A3:A3:49:AB:E9:6B:21:AD:27:DA:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:5a:d1:29:6a:72:21:bd:26:8f:a9:ec:b8:f0:c7:01:73:ae: 9b:c2:cc:ed:28:7f:47:1e:89:3c:30:8b:3c:62:19:26:22:19: ae:40:a7:50:9d:dc:65:df:09:ff:61:80:9c:3c:be:d1:18:8a: f6:05:cd:3c:69:8f:0b:ce:9f:b7:13:0a:ef:84:66:94:b4:4d: a7:a5:aa:6d:7a:88:cf:99:90:81:2d:8a:ea:46:9a:b9:66:1e: 1b:81:77:00:64:f0:51:89:ae:a4:ed:f9:86:ac:e3:13:ea:eb: 39:86:1f:2a:cb:5f:ac:75:53:fe:f2:c1:71:32:24:4d:df:6b: 56:f0:5d:25:80:35:82:99:19:10:21:a3:d9:fa:3d:ae:99:68: 12:11:80:8e:54:69:db:73:62:ca:94:0b:96:89:d5:fb:ac:4d: ca:00:0f:69:c1:d0:c9:95:a6:b0:4b:b1:c4:77:45:5b:b7:19: 44:a9:b9:1a:04:4e:f6:dc:e3:23:90:a7:36:9a:2a:7c:62:e0: 78:07:e6:37:e9:72:48:19:7a:44:7f:6e:89:c1:b4:39:63:ed: de:84:39:c1:96:1b:76:1a:6f:19:29:92:ca:3a:b4:89:97:81: 96:85:aa:30:38:ee:4c:4d:d5:a1:40:bc:0d:81:0c:38:4b:63: e4:8b:73:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzREOEUxMTAvBgNVBAUTKDNGN0Q5QkJBRUQ3QzVCRkRCQkEzQTM0OUFCRTk2QjIx QUQyN0RBNjcwHhcNMjQwNTE4MTkyNjE4WhcNMjQwNTI1MTkyNjE4WjAYMRYwFAYD VQQDEw02NjQ5MDBkYS03MjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVcTPi5d01my5MOuTtqr+0wSizde0I12mPgjCvsHUN2ZewTsvQSbjEmcFzti io80ytiQ2mLehhzZaFz1CjJTJhfAAji3ghjD4JRJ5EXsEs/fDsmxZLc7M5uCLx70 vwudW/Hm2Vzttx6Clp2UhkGeacOqYsEbwm2JxlKn1coKu6UGa8AeZq3II5Qbe3vC qSNThG6luC9dAbv2qBROr+Lrz7xvIoirhQRb+fDQOGjdj8B/r5+rcPOIdkt5y7vH T1XivbFAQpepRa2dZFNWRzZ71T6OIiLEgDA35lDNpz/c07dSQ7HclzNPTtuAZWHm FPLUkA3YsNcCwfvgtrQ1UniltwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNbbKYXH UITN6JqTskbNt0w4qa47MB8GA1UdIwQYMBaAFD99m7rtfFv9u6OjSavpayGtJ9pn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEQ4RS81ODlCOTMzQzA2 QTQxMUVBQjNDNjZCMzhDNEY5QUUwMi9QMzJidXUxOFdfMjdvNk5KcS1scklhMG4y bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AzMmJ1dTE4V18yN282TkpxLWxySWEwbjJtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEQ4RS81ODlCOTMzQzA2QTQxMUVBQjNDNjZCMzhDNEY5QUUwMi9QMzJidXUxOFdf MjdvNk5KcS1scklhMG4ybWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoWtEpanIhvSaPqey48McBc66bwsztKH9HHok8MIs8YhkmIhmuQKdQ ndxl3wn/YYCcPL7RGIr2Bc08aY8Lzp+3EwrvhGaUtE2npapteojPmZCBLYrqRpq5 Zh4bgXcAZPBRia6k7fmGrOMT6us5hh8qy1+sdVP+8sFxMiRN32tW8F0lgDWCmRkQ IaPZ+j2umWgSEYCOVGnbc2LKlAuWidX7rE3KAA9pwdDJlaawS7HEd0VbtxlEqbka BE723OMjkKc2mip8YuB4B+Y36XJIGXpEf26JwbQ5Y+3ehDnBlht2Gm8ZKZLKOrSJ l4GWhaowOO5MTdWhQLwNgQw4S2Pki3PL -----END CERTIFICATE-----Generated at Sat May 18 20:16:06 2024 by rpki-client on console-ams.rpki-client.org