$ rpki-client -vvf rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.mft File: SXppmDQJrXDCF1ZAccz1vjTFG8c.mft (raw, json) Hash identifier: I/DKsVyOlWqY8v5RefIHGwUK71eQsJHhjIIfpU0hUVo= Subject key identifier: C3:D6:E5:CD:DA:21:F0:6E:5E:19:75:3D:E3:FA:AF:4C:D7:A7:2B:D4 Authority key identifier: 49:7A:69:98:34:09:AD:70:C2:17:56:40:71:CC:F5:BE:34:C5:1B:C7 Certificate issuer: /CN=A91C751F/serialNumber=497A69983409AD70C217564071CCF5BE34C51BC7 Certificate serial: 03B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXppmDQJrXDCF1ZAccz1vjTFG8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.mft Manifest number: 03A8 Signing time: Fri 31 May 2024 03:10:44 +0000 Manifest this update: Fri 31 May 2024 03:10:43 +0000 Manifest next update: Fri 07 Jun 2024 03:10:43 +0000 Files and hashes: 1: SXppmDQJrXDCF1ZAccz1vjTFG8c.crl (hash: wuL5+itNIxbKDkMzj/UXGN1Oz3WPc9wH8vIby4qI2zU=) 2: E9237B16683211EDA8B5DD35C4F9AE02.roa (hash: u6N988rOXwSrao9nTYCkqomFLJnF8Cy8KWfBMr9sYio=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.crl rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXppmDQJrXDCF1ZAccz1vjTFG8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 03:10:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 948 (0x3b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C751F/serialNumber=497A69983409AD70C217564071CCF5BE34C51BC7 Validity Not Before: May 31 03:10:43 2024 GMT Not After : Jun 7 03:10:43 2024 GMT Subject: CN=66593fb4-f769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:57:82:ce:29:fd:ec:a8:c1:0c:99:59:d7:19: ce:f3:22:d8:c1:e8:02:ef:fc:44:7a:06:49:96:f3: 43:b9:a4:1d:82:a4:cc:ab:87:c4:3c:a9:1b:8c:4c: 91:b2:2a:07:eb:76:b8:fb:cd:72:a8:f2:bb:8c:ba: bb:96:c9:c9:30:b9:5c:1f:29:56:91:6e:0a:e3:8f: a5:90:84:f4:8f:5e:54:7c:ec:cf:cc:68:86:75:7f: 2b:57:b5:6c:1e:5c:b6:16:97:6d:56:9c:ce:0b:f8: 31:c8:12:4b:08:26:fc:cc:0c:89:2b:9d:9c:9c:bd: 80:3b:72:3e:25:5f:c5:b7:6d:06:47:55:b3:e0:21: 27:6c:a0:54:a6:a5:ce:1b:19:93:6a:c5:99:fd:05: 30:6c:6a:63:fe:58:42:c3:08:e6:8d:e0:ea:c6:b0: 96:c8:77:13:ef:fb:8e:7e:91:3d:2a:e6:9e:12:43: 79:2e:af:5a:58:eb:bb:01:03:1d:98:7d:ee:43:cc: 0f:8f:83:de:02:02:61:65:3f:b6:33:f3:35:6d:67: 68:16:78:94:ce:dc:a8:88:05:54:57:36:d7:9d:5f: 34:6a:d4:c2:60:e9:bf:22:07:5c:c1:49:f4:bf:b4: f8:f2:96:01:92:fe:d6:47:41:0a:9a:34:fe:0b:74: 3f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D6:E5:CD:DA:21:F0:6E:5E:19:75:3D:E3:FA:AF:4C:D7:A7:2B:D4 X509v3 Authority Key Identifier: keyid:49:7A:69:98:34:09:AD:70:C2:17:56:40:71:CC:F5:BE:34:C5:1B:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXppmDQJrXDCF1ZAccz1vjTFG8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:e3:86:cd:80:c1:4b:20:6d:ef:a9:a4:5b:b2:98:c0:2d:86: c9:f4:91:ba:3a:85:1f:d4:34:8b:22:12:62:f3:cb:fa:11:87: a3:f2:f0:73:89:12:a9:05:6f:ab:5c:4f:f4:6b:d0:8f:b5:44: dd:58:bc:48:1a:a8:c4:64:68:c7:ef:63:72:ac:6e:1d:f6:2a: f8:2a:5c:dc:fd:5c:14:58:f0:41:4f:53:5b:44:21:2d:9d:3b: 75:c2:0c:cd:f3:12:bd:d8:f0:e1:b2:65:8f:bb:cd:00:d1:ca: 59:14:b9:84:59:02:27:3c:c6:a0:8a:73:73:00:c6:55:6d:0a: 33:8e:85:91:e3:cf:2c:7a:22:3e:d3:5b:b3:52:f4:b6:73:1d: 74:4b:ad:d5:db:aa:00:5b:e7:4d:d6:76:ca:5d:75:7a:6f:aa: 81:66:4c:bf:21:ce:78:13:ef:00:2d:6a:34:24:9b:76:ae:b1: a5:ce:ef:17:f1:06:2a:80:a1:da:97:0a:b7:97:a7:c8:96:ed: 9c:c1:7e:07:93:d9:aa:52:6a:b8:5f:89:c4:9c:54:7d:5a:be: 7f:8b:ae:9e:25:00:bf:f3:c3:70:22:d3:be:51:25:93:7e:0c: e3:4f:fa:2f:3d:f0:aa:1a:6d:72:85:83:28:3c:0e:f7:62:54: 1b:f5:9a:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc1MUYxMTAvBgNVBAUTKDQ5N0E2OTk4MzQwOUFENzBDMjE3NTY0MDcxQ0NGNUJF MzRDNTFCQzcwHhcNMjQwNTMxMDMxMDQzWhcNMjQwNjA3MDMxMDQzWjAYMRYwFAYD VQQDEw02NjU5M2ZiNC1mNzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVeCzin97KjBDJlZ1xnO8yLYwegC7/xEegZJlvNDuaQdgqTMq4fEPKkbjEyR sioH63a4+81yqPK7jLq7lsnJMLlcHylWkW4K44+lkIT0j15UfOzPzGiGdX8rV7Vs Hly2FpdtVpzOC/gxyBJLCCb8zAyJK52cnL2AO3I+JV/Ft20GR1Wz4CEnbKBUpqXO GxmTasWZ/QUwbGpj/lhCwwjmjeDqxrCWyHcT7/uOfpE9KuaeEkN5Lq9aWOu7AQMd mH3uQ8wPj4PeAgJhZT+2M/M1bWdoFniUztyoiAVUVzbXnV80atTCYOm/IgdcwUn0 v7T48pYBkv7WR0EKmjT+C3Q/TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPW5c3a IfBuXhl1PeP6r0zXpyvUMB8GA1UdIwQYMBaAFEl6aZg0Ca1wwhdWQHHM9b40xRvH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzUxRi8xODM5ODFEMjUx ODQxMUVDOTYxMjA2NDBDNEY5QUUwMi9TWHBwbURRSnJYRENGMVpBY2N6MXZqVEZH OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NYcHBtRFFKclhEQ0YxWkFjY3oxdmpURkc4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzUxRi8xODM5ODFEMjUxODQxMUVDOTYxMjA2NDBDNEY5QUUwMi9TWHBwbURRSnJY RENGMVpBY2N6MXZqVEZHOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCm44bNgMFLIG3vqaRbspjALYbJ9JG6OoUf1DSLIhJi88v6EYej8vBz iRKpBW+rXE/0a9CPtUTdWLxIGqjEZGjH72NyrG4d9ir4Klzc/VwUWPBBT1NbRCEt nTt1wgzN8xK92PDhsmWPu80A0cpZFLmEWQInPMaginNzAMZVbQozjoWR488seiI+ 01uzUvS2cx10S63V26oAW+dN1nbKXXV6b6qBZky/Ic54E+8ALWo0JJt2rrGlzu8X 8QYqgKHalwq3l6fIlu2cwX4Hk9mqUmq4X4nEnFR9Wr5/i66eJQC/88NwItO+USWT fgzjT/ovPfCqGm1yhYMoPA73YlQb9Zrr -----END CERTIFICATE-----Generated at Fri May 31 06:49:25 2024 by rpki-client on console-ams.rpki-client.org