$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft File: REDuIbNImmUKYWsSDY5b5Xku4Es.mft (raw, json) Hash identifier: BR4p/Wc2Pt1Zc8EE1KVD1lFOhhV5IPBrJDFi7KhZpwE= Subject key identifier: 81:4E:60:B7:E1:60:DE:CF:2F:D0:6C:64:B1:F0:E5:66:7F:EC:68:A3 Authority key identifier: 44:40:EE:21:B3:48:9A:65:0A:61:6B:12:0D:8E:5B:E5:79:2E:E0:4B Certificate issuer: /CN=A91CE3A3/serialNumber=4440EE21B3489A650A616B120D8E5BE5792EE04B Certificate serial: 0B8E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft Manifest number: 0B88 Signing time: Fri 31 May 2024 19:58:11 +0000 Manifest this update: Fri 31 May 2024 19:58:10 +0000 Manifest next update: Fri 07 Jun 2024 19:58:10 +0000 Files and hashes: 1: REDuIbNImmUKYWsSDY5b5Xku4Es.crl (hash: d/KMR6O+fYmWs64qMrBiPAgk9q8BnaBZX36fY8qDByo=) 2: 7155C8563E5E11EAB043A522C4F9AE02.roa (hash: k6sGGBqap/sIKFAHLNp8Q2sefwLXnpkMc2C/TD2oq0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.crl rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 18:32:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2958 (0xb8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE3A3/serialNumber=4440EE21B3489A650A616B120D8E5BE5792EE04B Validity Not Before: May 31 19:58:10 2024 GMT Not After : Jun 7 19:58:10 2024 GMT Subject: CN=665a2bd2-d5f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:17:f1:fd:dd:e3:1c:38:e4:d8:04:19:c0:13: b0:2f:87:3c:52:f0:7e:2b:89:14:1d:ab:9d:4c:33: d3:2a:52:94:55:a7:4e:f4:bc:fb:1e:bc:e5:3b:e9: 02:97:a4:cd:fd:37:dc:5d:e9:c4:47:d6:d8:f1:9a: f6:56:7e:fa:61:60:7c:a0:be:c0:d8:6f:da:69:a4: f7:32:17:ae:5f:9a:db:93:1e:a1:52:ec:92:e5:dd: 86:c2:6e:15:0b:12:43:4b:b8:f3:01:0a:84:76:9f: fb:15:ca:28:96:69:fc:91:3f:19:68:27:29:15:82: 9e:24:da:eb:a0:18:b4:58:0f:5a:cc:d5:29:c4:e3: 90:3f:dc:fb:eb:53:22:0c:13:89:b1:fe:54:f3:7e: 0f:ab:79:96:ca:76:22:7d:a2:0b:68:ab:37:8e:53: d7:1e:f8:55:93:82:9b:0e:97:e4:5f:b8:7f:8d:c4: 27:43:bd:60:b6:bb:04:2d:6d:87:85:03:6d:ff:f9: 54:2e:3b:51:bf:0b:39:6f:0e:4f:fc:00:73:68:3f: a1:e8:58:b7:1e:17:ae:d1:e0:94:a5:29:51:7c:ef: 45:8c:38:1e:03:a3:2b:82:0e:cb:aa:1c:83:f9:98: 07:7d:c8:9e:93:6a:1b:cd:f1:87:14:8f:e2:41:58: 5a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:4E:60:B7:E1:60:DE:CF:2F:D0:6C:64:B1:F0:E5:66:7F:EC:68:A3 X509v3 Authority Key Identifier: keyid:44:40:EE:21:B3:48:9A:65:0A:61:6B:12:0D:8E:5B:E5:79:2E:E0:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:23:02:7b:d9:a9:74:ca:49:a1:c1:2e:ab:8f:f4:c1:96:bc: 6b:37:15:cb:09:1e:73:92:67:8d:de:ea:3a:fa:d9:ef:d2:17: 28:74:78:2d:e9:fc:66:dd:e5:bc:f8:4b:f5:b3:5e:e9:69:0a: a6:dd:35:2b:b4:a2:c3:ce:5c:3a:a9:d3:88:c4:15:62:fd:ee: 5c:ca:46:7b:63:41:d7:e5:52:4a:44:e5:ae:3c:e0:79:38:c2: fd:1c:79:23:b8:a3:1d:16:ed:eb:8c:b3:d0:c4:53:87:78:9e: a4:50:d1:07:1c:2e:6e:27:e4:a3:c9:44:9e:4f:7f:fc:c0:51: 89:ee:a3:52:1d:7d:37:b4:39:80:f3:1f:7a:53:76:88:81:b0: e0:e3:2b:6c:0a:5e:d9:43:a1:53:7a:de:62:5e:a5:b3:86:c0: fe:97:46:26:5b:8c:82:1a:e4:26:c2:1b:bf:b9:02:7a:f0:3c: 78:52:e8:9a:f1:da:e2:b5:5e:fd:c3:e8:5d:95:63:60:f7:a5: f8:65:c5:fc:51:27:59:e8:87:6a:90:fe:55:f9:f0:b1:eb:ab: 69:83:f6:c0:31:16:80:26:2c:11:93:ae:80:68:f0:55:30:84: 02:2f:b3:4d:09:db:88:8f:12:d0:64:a0:88:2b:bf:c1:08:d1: 64:3f:b2:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzQTMxMTAvBgNVBAUTKDQ0NDBFRTIxQjM0ODlBNjUwQTYxNkIxMjBEOEU1QkU1 NzkyRUUwNEIwHhcNMjQwNTMxMTk1ODEwWhcNMjQwNjA3MTk1ODEwWjAYMRYwFAYD VQQDEw02NjVhMmJkMi1kNWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxfx/d3jHDjk2AQZwBOwL4c8UvB+K4kUHaudTDPTKlKUVadO9Lz7HrzlO+kC l6TN/TfcXenER9bY8Zr2Vn76YWB8oL7A2G/aaaT3MheuX5rbkx6hUuyS5d2Gwm4V CxJDS7jzAQqEdp/7Fcoolmn8kT8ZaCcpFYKeJNrroBi0WA9azNUpxOOQP9z761Mi DBOJsf5U834Pq3mWynYifaILaKs3jlPXHvhVk4KbDpfkX7h/jcQnQ71gtrsELW2H hQNt//lULjtRvws5bw5P/ABzaD+h6Fi3Hheu0eCUpSlRfO9FjDgeA6Mrgg7LqhyD +ZgHfciek2obzfGHFI/iQVhaVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIFOYLfh YN7PL9BsZLHw5WZ/7GijMB8GA1UdIwQYMBaAFERA7iGzSJplCmFrEg2OW+V5LuBL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNBMy8xODgyM0M4QzA1 MDExMUVBQkQ5QjIwMkNDNEY5QUUwMi9SRUR1SWJOSW1tVUtZV3NTRFk1YjVYa3U0 RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JFRHVJYk5JbW1VS1lXc1NEWTViNVhrdTRFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTNBMy8xODgyM0M4QzA1MDExMUVBQkQ5QjIwMkNDNEY5QUUwMi9SRUR1SWJOSW1t VUtZV3NTRFk1YjVYa3U0RXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNIwJ72al0ykmhwS6rj/TBlrxrNxXLCR5zkmeN3uo6+tnv0hcodHgt 6fxm3eW8+Ev1s17paQqm3TUrtKLDzlw6qdOIxBVi/e5cykZ7Y0HX5VJKROWuPOB5 OML9HHkjuKMdFu3rjLPQxFOHeJ6kUNEHHC5uJ+SjyUSeT3/8wFGJ7qNSHX03tDmA 8x96U3aIgbDg4ytsCl7ZQ6FTet5iXqWzhsD+l0YmW4yCGuQmwhu/uQJ68Dx4Uuia 8dritV79w+hdlWNg96X4ZcX8USdZ6IdqkP5V+fCx66tpg/bAMRaAJiwRk66AaPBV MIQCL7NNCduIjxLQZKCIK7/BCNFkP7L+ -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:28 2024 by rpki-client on console-ams.rpki-client.org