$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft File: 4idah1qSyusBBPicRvSlhbet9bY.mft (raw, json) Hash identifier: uQYotx1nsQa/0LNDBSiBTNSKD0fqn1ahEeZ8wikLV5M= Subject key identifier: 67:30:84:35:C2:5D:20:F9:04:17:6B:40:4A:04:BB:82:59:67:2C:79 Authority key identifier: E2:27:5A:87:5A:92:CA:EB:01:04:F8:9C:46:F4:A5:85:B7:AD:F5:B6 Certificate issuer: /CN=A91CC561/serialNumber=E2275A875A92CAEB0104F89C46F4A585B7ADF5B6 Certificate serial: 0C2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft Manifest number: 0C21 Signing time: Sat 18 May 2024 19:00:28 +0000 Manifest this update: Sat 18 May 2024 19:00:28 +0000 Manifest next update: Sat 25 May 2024 19:00:28 +0000 Files and hashes: 1: 4idah1qSyusBBPicRvSlhbet9bY.crl (hash: LHK86bEn1BHLFog6/JcVcfnoaJJ//M6U7CbYneWIZPg=) 2: 5A395E26E2DB11EB8608EA87C4F9AE02.roa (hash: HyiCAmkoy6Q9nHEPOoty8ar1ahmNO63ScaKha2Rnj6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.crl rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3116 (0xc2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC561/serialNumber=E2275A875A92CAEB0104F89C46F4A585B7ADF5B6 Validity Not Before: May 18 19:00:28 2024 GMT Not After : May 25 19:00:28 2024 GMT Subject: CN=6648facc-bc58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:89:4c:08:93:8e:80:1f:02:83:30:39:4f:45: 7d:9c:78:68:ad:7f:57:ca:a7:ad:24:90:34:c1:e9: 61:59:80:8f:36:83:d2:e0:ff:17:9c:54:79:a9:bc: 1d:a6:67:c8:27:7d:6b:72:b8:e3:e0:1d:75:81:7a: c9:a9:c6:04:5b:23:a3:d0:4a:13:b4:15:fc:0b:0f: b8:69:30:6d:23:9b:09:86:8f:01:47:14:00:9e:39: 21:bd:56:47:ce:ff:25:fa:33:86:02:9f:32:7e:b7: d0:9d:20:da:21:18:9e:b8:3b:26:81:4e:6b:e8:7f: 17:b0:de:7f:66:4c:a1:88:dc:60:fb:90:ad:4d:49: 2b:29:cf:49:9c:0f:5f:08:42:9a:a3:49:cb:7b:26: 71:24:66:5b:32:a4:0d:b6:c4:13:de:08:38:bc:67: c2:2f:91:7c:c3:e3:e5:ce:90:3c:a6:e6:6d:5b:91: 2e:16:ce:65:ee:a1:f9:b7:3f:21:ed:67:a4:70:d5: a4:ea:f0:91:c6:b4:fc:85:5b:e0:15:dc:5b:b8:62: 23:ef:43:b3:41:73:97:c1:63:9d:6d:62:06:8b:21: 9f:4b:d4:b9:00:34:5c:79:6e:27:ef:89:d2:9b:a5: d1:98:a8:e9:47:c9:0c:91:1f:82:40:ca:d7:42:69: 53:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:30:84:35:C2:5D:20:F9:04:17:6B:40:4A:04:BB:82:59:67:2C:79 X509v3 Authority Key Identifier: keyid:E2:27:5A:87:5A:92:CA:EB:01:04:F8:9C:46:F4:A5:85:B7:AD:F5:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:24:53:c6:8e:6e:7c:01:ce:ea:96:6c:5a:35:75:68:76:ab: 9b:36:27:e4:2b:ec:51:d3:2b:8b:a7:3f:7a:c2:c5:a7:ab:fc: 10:40:58:2d:17:e1:3d:8c:d8:60:88:31:04:a9:72:a8:d1:3b: ae:59:c9:f1:70:6a:e5:bc:6f:34:49:0a:6c:5a:92:81:79:03: 21:6f:f4:36:0b:5a:e4:e4:93:82:36:1d:66:06:16:1e:f5:97: 1d:a0:95:65:6e:67:ff:ef:34:40:fe:4d:0e:34:92:53:2a:63: b4:c2:f9:f9:c4:b0:27:5d:12:fe:d0:7a:ef:71:a8:6e:e8:16: 98:b3:2e:0e:01:c9:bf:b3:01:fd:4a:cd:39:50:2c:9a:af:fc: 03:26:d8:4b:b8:5f:5c:fa:11:6b:ca:68:2d:a7:20:45:4d:18: d4:c8:8e:db:38:95:86:2b:c2:93:93:e1:d9:ac:5c:70:64:b9: 16:b1:c2:ba:34:ba:82:46:d4:18:c4:37:2d:99:0e:30:8e:8f: 16:01:90:39:9b:0a:4f:a7:93:d9:50:b5:e5:84:f5:61:0f:e6: 67:1d:45:b8:70:b6:c0:52:46:ab:7b:9a:b1:60:3f:46:91:34: b2:7f:5b:0c:1b:fe:09:ab:7f:a6:9d:d2:4f:af:33:52:33:bd: b3:ba:26:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M1NjExMTAvBgNVBAUTKEUyMjc1QTg3NUE5MkNBRUIwMTA0Rjg5QzQ2RjRBNTg1 QjdBREY1QjYwHhcNMjQwNTE4MTkwMDI4WhcNMjQwNTI1MTkwMDI4WjAYMRYwFAYD VQQDEw02NjQ4ZmFjYy1iYzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2YlMCJOOgB8CgzA5T0V9nHhorX9XyqetJJA0welhWYCPNoPS4P8XnFR5qbwd pmfIJ31rcrjj4B11gXrJqcYEWyOj0EoTtBX8Cw+4aTBtI5sJho8BRxQAnjkhvVZH zv8l+jOGAp8yfrfQnSDaIRieuDsmgU5r6H8XsN5/ZkyhiNxg+5CtTUkrKc9JnA9f CEKao0nLeyZxJGZbMqQNtsQT3gg4vGfCL5F8w+PlzpA8puZtW5EuFs5l7qH5tz8h 7WekcNWk6vCRxrT8hVvgFdxbuGIj70OzQXOXwWOdbWIGiyGfS9S5ADRceW4n74nS m6XRmKjpR8kMkR+CQMrXQmlTBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGcwhDXC XSD5BBdrQEoEu4JZZyx5MB8GA1UdIwQYMBaAFOInWodaksrrAQT4nEb0pYW3rfW2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzU2MS84NkMzMDQ4MkU3 MzQxMUU5OUQ4RUFGNDdDNEY5QUUwMi80aWRhaDFxU3l1c0JCUGljUnZTbGhiZXQ5 YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRpZGFoMXFTeXVzQkJQaWNSdlNsaGJldDliWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzU2MS84NkMzMDQ4MkU3MzQxMUU5OUQ4RUFGNDdDNEY5QUUwMi80aWRhaDFxU3l1 c0JCUGljUnZTbGhiZXQ5YlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVJFPGjm58Ac7qlmxaNXVodqubNifkK+xR0yuLpz96wsWnq/wQQFgt F+E9jNhgiDEEqXKo0TuuWcnxcGrlvG80SQpsWpKBeQMhb/Q2C1rk5JOCNh1mBhYe 9ZcdoJVlbmf/7zRA/k0ONJJTKmO0wvn5xLAnXRL+0Hrvcahu6BaYsy4OAcm/swH9 Ss05UCyar/wDJthLuF9c+hFrymgtpyBFTRjUyI7bOJWGK8KTk+HZrFxwZLkWscK6 NLqCRtQYxDctmQ4wjo8WAZA5mwpPp5PZULXlhPVhD+ZnHUW4cLbAUkare5qxYD9G kTSyf1sMG/4Jq3+mndJPrzNSM72zuibw -----END CERTIFICATE-----Generated at Sat May 18 20:16:06 2024 by rpki-client on console-ams.rpki-client.org