$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft File: 2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft (raw, json) Hash identifier: +TXxYNaw89XbWG6TPXgdzhOVCq8CVrpG6HZFSkyw08M= Subject key identifier: FB:18:FD:6F:CD:00:0E:4E:A3:EF:29:87:05:9B:54:87:9D:8B:60:BC Authority key identifier: DB:2C:CC:A8:3D:85:32:88:C5:00:CD:FC:3A:E1:E2:FE:A0:49:F5:14 Certificate issuer: /CN=A91CD00C/serialNumber=DB2CCCA83D853288C500CDFC3AE1E2FEA049F514 Certificate serial: 0272 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft Manifest number: 026E Signing time: Sun 19 May 2024 03:46:23 +0000 Manifest this update: Sun 19 May 2024 03:46:23 +0000 Manifest next update: Sun 26 May 2024 03:46:23 +0000 Files and hashes: 1: 2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl (hash: ilUy1r8VjaXCxooNER3M46rAKIwWJDIvVlJKu0KuEzo=) 2: 46654408C6CB11ECB185E43EC4F9AE02.roa (hash: 7AJiWB5i1exJOytnE6TLvGsYPNV8jidCTvpcJ1RxeFM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 626 (0x272) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD00C/serialNumber=DB2CCCA83D853288C500CDFC3AE1E2FEA049F514 Validity Not Before: May 19 03:46:23 2024 GMT Not After : May 26 03:46:23 2024 GMT Subject: CN=6649760f-f90a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fe:2c:cc:cf:0f:b7:c8:88:ac:f0:9a:12:14: 07:4c:0b:54:83:70:b3:34:12:eb:bd:c1:ed:58:6b: 2a:c9:fe:56:d1:45:22:b2:71:b2:9d:87:95:b0:27: 86:f0:b2:e3:1a:82:ac:bb:ad:4b:1e:44:c0:95:50: 5d:a1:b7:ac:92:86:6f:61:f5:54:bd:e6:04:fd:3a: ac:93:93:ce:93:cf:48:0d:74:3a:29:7f:2e:e4:15: 36:d1:30:ee:f7:d2:cb:58:4c:73:a6:7a:7c:d5:b6: 1e:02:61:81:34:0f:b1:7f:8e:70:42:f0:ca:11:0b: 4b:bf:1a:89:91:07:6a:66:4d:35:a1:5c:c9:72:d8: 6d:9a:cc:c5:1d:3e:d2:a6:12:b1:e5:04:42:85:ce: b5:bc:64:44:87:87:f2:78:30:93:f3:a1:fe:88:fe: bf:9c:a5:23:3c:e6:c2:d7:0c:8e:21:13:a3:1b:7a: 21:38:b1:a8:ab:ca:f1:83:84:03:2d:cf:aa:f1:c2: 85:85:10:35:c8:1c:3d:59:49:2e:9e:26:a0:3a:15: 04:ec:12:72:de:bc:cc:5f:fc:c1:4e:6a:a3:12:71: 2d:49:c9:2c:31:c8:37:9c:b7:9f:46:9b:77:38:35: 10:9c:48:0a:54:ea:51:17:a0:92:b2:6d:ef:24:d8: 53:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:18:FD:6F:CD:00:0E:4E:A3:EF:29:87:05:9B:54:87:9D:8B:60:BC X509v3 Authority Key Identifier: keyid:DB:2C:CC:A8:3D:85:32:88:C5:00:CD:FC:3A:E1:E2:FE:A0:49:F5:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:a5:4c:f9:46:68:84:16:b3:55:dd:ab:61:f5:85:7b:45:e1: ca:d5:ba:50:86:22:87:c0:bb:02:ff:78:99:ef:34:d7:32:3d: 87:06:9b:c9:96:06:67:6c:9d:5c:27:3d:c3:e1:51:b1:2e:77: ac:71:7a:4c:fc:df:45:7c:eb:06:02:05:78:fc:b4:d2:08:0a: 93:d1:3f:b5:a2:a7:4f:d3:32:e8:b9:8d:82:18:bb:bc:f4:7a: d8:05:77:67:e9:61:94:91:8f:d9:55:60:85:6d:3e:32:fc:f1: 2c:d8:fc:2d:4b:3f:18:57:58:60:b8:d6:0c:3b:0e:8a:a5:b2: e4:d5:78:75:8c:a9:cb:d6:b7:54:da:12:7b:e1:74:08:51:10: 68:9d:ad:35:e1:49:97:b5:e4:4d:2d:40:37:99:c9:25:6c:c4: b7:48:c9:7a:e8:68:ae:55:ac:52:bd:46:0a:27:4d:a0:02:bf: 06:f4:b2:65:97:9c:1f:2a:af:72:d3:86:31:25:59:52:12:14: b5:ae:49:45:6c:6f:70:66:07:9b:0a:75:3e:6d:01:e9:91:dc: 0d:64:01:32:4f:75:ab:79:db:5c:dc:da:e1:fe:6d:b0:bc:f0: 30:5b:4c:3d:31:90:e5:69:68:d6:55:b4:13:7b:31:7d:24:47: c4:1f:89:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QwMEMxMTAvBgNVBAUTKERCMkNDQ0E4M0Q4NTMyODhDNTAwQ0RGQzNBRTFFMkZF QTA0OUY1MTQwHhcNMjQwNTE5MDM0NjIzWhcNMjQwNTI2MDM0NjIzWjAYMRYwFAYD VQQDEw02NjQ5NzYwZi1mOTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsv4szM8Pt8iIrPCaEhQHTAtUg3CzNBLrvcHtWGsqyf5W0UUisnGynYeVsCeG 8LLjGoKsu61LHkTAlVBdobeskoZvYfVUveYE/Tqsk5POk89IDXQ6KX8u5BU20TDu 99LLWExzpnp81bYeAmGBNA+xf45wQvDKEQtLvxqJkQdqZk01oVzJcthtmszFHT7S phKx5QRChc61vGREh4fyeDCT86H+iP6/nKUjPObC1wyOIROjG3ohOLGoq8rxg4QD Lc+q8cKFhRA1yBw9WUkuniagOhUE7BJy3rzMX/zBTmqjEnEtScksMcg3nLefRpt3 ODUQnEgKVOpRF6CSsm3vJNhTDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPsY/W/N AA5Oo+8phwWbVIedi2C8MB8GA1UdIwQYMBaAFNsszKg9hTKIxQDN/Drh4v6gSfUU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDAwQy9DQUE4ODYxRUM2 MDExMUVDOTVGRjFFMTFDNEY5QUUwMi8yeXpNcUQyRk1vakZBTTM4T3VIaV9xQko5 UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ5ek1xRDJGTW9qRkFNMzhPdUhpX3FCSjlSUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDAwQy9DQUE4ODYxRUM2MDExMUVDOTVGRjFFMTFDNEY5QUUwMi8yeXpNcUQyRk1v akZBTTM4T3VIaV9xQko5UlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMpUz5RmiEFrNV3ath9YV7ReHK1bpQhiKHwLsC/3iZ7zTXMj2HBpvJ lgZnbJ1cJz3D4VGxLnescXpM/N9FfOsGAgV4/LTSCAqT0T+1oqdP0zLouY2CGLu8 9HrYBXdn6WGUkY/ZVWCFbT4y/PEs2PwtSz8YV1hguNYMOw6KpbLk1Xh1jKnL1rdU 2hJ74XQIURBona014UmXteRNLUA3mcklbMS3SMl66GiuVaxSvUYKJ02gAr8G9LJl l5wfKq9y04YxJVlSEhS1rklFbG9wZgebCnU+bQHpkdwNZAEyT3Wredtc3Nrh/m2w vPAwW0w9MZDlaWjWVbQTezF9JEfEH4ml -----END CERTIFICATE-----Generated at Sun May 19 04:20:43 2024 by rpki-client on console-ams.rpki-client.org