$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft File: aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft (raw, json) Hash identifier: BYUidWz5QUC0rqd84NR2MLfLeyQ4Sljs7GLw3G4WtQ0= Subject key identifier: 8A:2D:B6:AE:1D:F9:C5:69:38:D7:14:15:EE:DA:2F:38:3A:73:60:E2 Authority key identifier: 69:69:C2:0B:86:99:A4:8D:07:2D:4A:30:67:CF:F0:0D:5F:44:7C:98 Certificate issuer: /CN=A91C8BEE/serialNumber=6969C20B8699A48D072D4A3067CFF00D5F447C98 Certificate serial: 0655 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnCC4aZpI0HLUowZ8_wDV9EfJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft Manifest number: 0651 Signing time: Sat 01 Jun 2024 00:29:00 +0000 Manifest this update: Sat 01 Jun 2024 00:29:00 +0000 Manifest next update: Sat 08 Jun 2024 00:29:00 +0000 Files and hashes: 1: aWnCC4aZpI0HLUowZ8_wDV9EfJg.crl (hash: qPyTVx7EHvBO/aVgdsQzi639HqLrSRrE4IeebUkNvKQ=) 2: DE524D283F0511EBBB4C174FC4F9AE02.roa (hash: p7kzWVn5QnTbiNl5YAhRwhI2rAlI1JbZ8THOCFNXxlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.crl rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnCC4aZpI0HLUowZ8_wDV9EfJg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 00:28:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1621 (0x655) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8BEE/serialNumber=6969C20B8699A48D072D4A3067CFF00D5F447C98 Validity Not Before: Jun 1 00:29:00 2024 GMT Not After : Jun 8 00:29:00 2024 GMT Subject: CN=665a6b4c-bf82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4f:55:c0:26:fe:79:53:09:31:87:c0:e6:7f: a3:57:21:b0:46:2d:cf:58:32:c5:1f:13:cc:fa:5f: 19:c2:16:fb:17:bc:60:76:05:f3:42:90:fe:53:15: ec:36:f6:a5:ae:c1:00:01:cf:88:4a:5d:18:1f:00: 5b:da:8d:8f:1e:8a:03:65:f0:91:4c:8a:e1:68:44: 21:71:9e:8f:b7:80:95:47:71:a4:cf:52:b1:a7:f3: 13:2c:27:a4:90:4a:b2:d6:67:a7:4d:54:f1:c4:f3: f1:67:dd:b8:fe:24:17:b2:57:53:98:18:2e:69:36: 0e:56:f4:4c:f5:35:f0:a7:58:66:1c:d0:f6:e8:83: 96:5d:a1:bd:b1:11:97:98:f2:67:17:e6:57:ff:d4: 41:d5:5f:14:c7:29:8e:77:de:7d:b7:14:72:d4:53: ba:b5:ba:10:1f:58:11:6a:de:76:d1:dc:0b:7d:b6: 6e:a7:81:a6:15:b8:a9:ca:5d:30:a8:7a:21:36:61: 24:de:ac:9c:e3:f6:58:9f:16:c4:8b:58:2d:df:d5: 3a:03:62:a6:aa:20:3a:fb:66:ac:5f:a3:40:b5:a2: f0:9f:ad:02:86:5a:fe:81:29:f1:a0:7b:1f:ee:3b: 77:49:26:9f:2f:44:41:19:58:d6:1f:8d:1c:01:54: 59:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:2D:B6:AE:1D:F9:C5:69:38:D7:14:15:EE:DA:2F:38:3A:73:60:E2 X509v3 Authority Key Identifier: keyid:69:69:C2:0B:86:99:A4:8D:07:2D:4A:30:67:CF:F0:0D:5F:44:7C:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnCC4aZpI0HLUowZ8_wDV9EfJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:8f:ad:ff:94:ce:80:9a:40:f2:a2:e4:f8:cf:5c:ef:82:05: 2a:dc:ee:aa:67:e5:45:fc:b3:f0:aa:54:3a:e4:4d:67:a8:f7: 9b:01:c2:f1:06:c8:a5:f4:39:c4:8f:9a:21:28:8f:b6:18:0b: d4:02:c5:50:b5:e1:37:c6:bb:09:17:e8:da:8f:5f:f2:b2:81: 4b:23:e8:8e:5f:83:0d:fa:1a:63:62:ea:b6:b6:98:1f:c1:c1: e4:d7:08:e5:a3:e9:0a:85:5b:a5:00:f6:1d:ea:20:c1:2f:6a: 6f:64:ec:2c:3a:52:c5:84:4b:61:75:40:d0:b7:0d:8a:9a:25: c1:fb:5a:b0:f4:3b:7f:aa:38:9e:c9:59:e3:90:7d:d0:3e:a5: e3:53:ff:e7:af:db:cd:66:71:e8:a3:b4:a3:bb:18:d3:ed:cd: 11:6b:d4:2b:d3:e3:c5:b0:6d:5f:9c:13:6d:46:7b:e7:4e:e8: c4:2c:10:70:ac:70:9a:d5:0a:11:5d:64:39:df:54:5f:8b:b8: 16:f4:a2:e0:07:6e:2c:ad:cc:a8:ea:7b:9a:12:df:9a:8e:4f: 59:c4:0b:bd:79:fd:ad:10:16:67:03:07:e1:bb:64:74:39:bc: 18:94:40:f6:b0:90:d4:ea:0c:d9:fa:70:3d:96:ee:b3:c3:b3: 12:53:6d:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhCRUUxMTAvBgNVBAUTKDY5NjlDMjBCODY5OUE0OEQwNzJENEEzMDY3Q0ZGMDBE NUY0NDdDOTgwHhcNMjQwNjAxMDAyOTAwWhcNMjQwNjA4MDAyOTAwWjAYMRYwFAYD VQQDEw02NjVhNmI0Yy1iZjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsU9VwCb+eVMJMYfA5n+jVyGwRi3PWDLFHxPM+l8Zwhb7F7xgdgXzQpD+UxXs NvalrsEAAc+ISl0YHwBb2o2PHooDZfCRTIrhaEQhcZ6Pt4CVR3Gkz1Kxp/MTLCek kEqy1menTVTxxPPxZ924/iQXsldTmBguaTYOVvRM9TXwp1hmHND26IOWXaG9sRGX mPJnF+ZX/9RB1V8UxymOd959txRy1FO6tboQH1gRat520dwLfbZup4GmFbipyl0w qHohNmEk3qyc4/ZYnxbEi1gt39U6A2KmqiA6+2asX6NAtaLwn60Chlr+gSnxoHsf 7jt3SSafL0RBGVjWH40cAVRZ2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIottq4d +cVpONcUFe7aLzg6c2DiMB8GA1UdIwQYMBaAFGlpwguGmaSNBy1KMGfP8A1fRHyY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEJFRS82RTA2MjdGODNG MDMxMUVCQkU3NUI0NEJDNEY5QUUwMi9hV25DQzRhWnBJMEhMVW93Wjhfd0RWOUVm SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FXbkNDNGFacEkwSExVb3daOF93RFY5RWZKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEJFRS82RTA2MjdGODNGMDMxMUVCQkU3NUI0NEJDNEY5QUUwMi9hV25DQzRhWnBJ MEhMVW93Wjhfd0RWOUVmSmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtj63/lM6AmkDyouT4z1zvggUq3O6qZ+VF/LPwqlQ65E1nqPebAcLx Bsil9DnEj5ohKI+2GAvUAsVQteE3xrsJF+jaj1/ysoFLI+iOX4MN+hpjYuq2tpgf wcHk1wjlo+kKhVulAPYd6iDBL2pvZOwsOlLFhEthdUDQtw2KmiXB+1qw9Dt/qjie yVnjkH3QPqXjU//nr9vNZnHoo7SjuxjT7c0Ra9Qr0+PFsG1fnBNtRnvnTujELBBw rHCa1QoRXWQ531Rfi7gW9KLgB24srcyo6nuaEt+ajk9ZxAu9ef2tEBZnAwfhu2R0 ObwYlED2sJDU6gzZ+nA9lu6zw7MSU20i -----END CERTIFICATE-----Generated at Sat Jun 1 02:01:21 2024 by rpki-client on console-ams.rpki-client.org