$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft File: _0lSk8tfFeXRS6zC2xBSsuLIJcg.mft (raw, json) Hash identifier: dNlxITt4RxWl3jNXHmS17D2/fMi34RWqQ9FpUiZrkXU= Subject key identifier: 00:85:58:54:AD:5A:39:6D:D1:EF:5E:43:E7:A1:2F:DC:DC:4C:97:C1 Authority key identifier: FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 Certificate issuer: /CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Certificate serial: 33E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft Manifest number: 33CF Signing time: Fri 26 Apr 2024 15:03:15 +0000 Manifest this update: Fri 26 Apr 2024 15:03:15 +0000 Manifest next update: Fri 03 May 2024 15:03:15 +0000 Files and hashes: 1: _0lSk8tfFeXRS6zC2xBSsuLIJcg.crl (hash: 5kmmQL+rAkChzGW2JesfShQaDyhP84VqXsBEgMFyDMc=) 2: B2306182F3F911EAB9D11D26C4F9AE02.roa (hash: d8MN6d/wEfPVGkrREqWUL8KQe2jO4TyzwpNDYPU482o=) 3: 0DEF13D4FC1711EC919B6757C4F9AE02.roa (hash: vQzIZRiExesqoB3MmzOdTzbfWqh/j9Ux4vSsc9KHOuU=) 4: 75906378FC1F11ECAD09AF21C4F9AE02.roa (hash: bCe1ucptaaWPAXkhR5Cq8HI9H9bOhLd76hYHBtFEzAY=) 5: F2C1B32AD59511EC9A77CC14C4F9AE02.roa (hash: uhlffbcdYKcTTzZ4/rK2stZpIMJc+HDHstbtMJ9TZK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:03:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13284 (0x33e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Validity Not Before: Apr 26 15:03:15 2024 GMT Not After : May 3 15:03:15 2024 GMT Subject: CN=662bc233-a344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:9c:c5:4e:05:ac:aa:9b:09:7e:46:2f:df:1f: b4:26:79:4c:ce:2f:be:7d:bf:fc:c4:3b:b1:55:4f: 9b:a6:fa:2d:43:02:02:ab:ad:10:52:66:25:02:52: 1c:1f:2a:6e:c1:58:57:07:14:97:61:04:b8:90:fa: 79:3f:07:0d:04:30:0a:05:c8:2e:e3:2a:1d:d8:96: 4b:d9:78:be:54:90:10:fe:6c:a1:a3:bc:2f:5a:74: 6a:f8:af:51:7d:d7:25:17:2e:31:ff:3d:ea:d3:82: 93:54:e4:b5:40:b7:f2:d3:95:7a:36:44:d7:fe:9f: cb:b3:1a:e0:5a:47:5f:f5:7f:c8:b0:57:41:a8:ab: c9:35:34:f3:0d:d9:4f:f6:d4:0c:6f:66:27:6d:f2: 6c:51:d9:38:8f:57:f2:f4:b2:a2:d8:aa:78:5b:2b: 53:de:f0:9f:04:ed:94:1c:f1:d5:31:e3:6a:8b:01: 91:aa:c9:26:18:bd:78:cf:ab:71:91:da:92:00:14: 2d:9d:21:e5:ac:d4:51:36:e9:af:9a:e6:a3:43:5e: 8a:0f:34:8a:c4:c8:7b:3b:cc:f7:35:e1:2f:1a:36: 3f:85:4b:13:02:64:42:49:c8:c3:50:51:90:01:c2: bd:5f:e4:a7:0c:bc:6a:7e:40:8a:77:85:14:ef:4e: 9d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:85:58:54:AD:5A:39:6D:D1:EF:5E:43:E7:A1:2F:DC:DC:4C:97:C1 X509v3 Authority Key Identifier: keyid:FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:e4:4c:d0:d7:0e:fc:af:06:87:73:10:53:7a:e1:5a:ab:c2: e5:f0:40:11:75:ff:5d:be:ca:aa:f6:40:be:f4:19:50:2a:8f: 51:12:15:7e:01:56:f3:14:60:b6:56:eb:f1:19:64:e2:d1:03: ed:21:3c:0d:2a:12:6d:6f:9c:de:ab:ef:ba:2c:44:b7:59:fb: d6:38:28:9e:4a:1d:01:d9:4b:30:2f:ec:15:08:aa:80:50:53: 1c:19:f4:22:d4:62:57:9f:5e:c5:1f:5d:3a:70:eb:21:36:73: 6b:a0:e3:06:95:23:28:80:6c:73:b1:ed:61:f8:db:90:75:22: 3e:9d:d9:21:e6:30:1e:a3:7f:4c:62:ac:01:5e:22:ac:8a:cf: 60:70:1b:ee:9f:0f:56:5b:3b:d1:08:ac:ff:63:62:21:f0:fa: 70:a9:eb:d0:31:43:12:06:b7:2e:c9:73:64:aa:1a:c9:4d:11: 0d:54:3f:19:af:db:8e:50:db:3a:79:ff:08:6e:17:1d:1c:df: 0c:05:24:36:9e:70:dc:c4:e5:2a:71:46:83:55:9d:94:ad:6c: 49:b8:d0:c7:d8:7f:a6:c6:39:72:65:dc:ad:29:41:11:d6:1e: 8e:93:29:57:07:d6:79:fe:37:60:0c:62:e9:0e:4d:a2:f0:e6: c2:cf:b5:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBQTIxMTAvBgNVBAUTKEZGNDk1MjkzQ0I1RjE1RTVEMTRCQUNDMkRCMTA1MkIy RTJDODI1QzgwHhcNMjQwNDI2MTUwMzE1WhcNMjQwNTAzMTUwMzE1WjAYMRYwFAYD VQQDEw02NjJiYzIzMy1hMzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5JzFTgWsqpsJfkYv3x+0JnlMzi++fb/8xDuxVU+bpvotQwICq60QUmYlAlIc HypuwVhXBxSXYQS4kPp5PwcNBDAKBcgu4yod2JZL2Xi+VJAQ/myho7wvWnRq+K9R fdclFy4x/z3q04KTVOS1QLfy05V6NkTX/p/LsxrgWkdf9X/IsFdBqKvJNTTzDdlP 9tQMb2YnbfJsUdk4j1fy9LKi2Kp4WytT3vCfBO2UHPHVMeNqiwGRqskmGL14z6tx kdqSABQtnSHlrNRRNumvmuajQ16KDzSKxMh7O8z3NeEvGjY/hUsTAmRCScjDUFGQ AcK9X+SnDLxqfkCKd4UU706dhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFACFWFSt Wjlt0e9eQ+ehL9zcTJfBMB8GA1UdIwQYMBaAFP9JUpPLXxXl0UuswtsQUrLiyCXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFBMi9EMkFCMjkyQzFE OTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZlWFJTNnpDMnhCU3N1TElK Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wbFNrOHRmRmVYUlM2ekMyeEJTc3VMSUpjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUFBMi9EMkFCMjkyQzFEOTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZl WFJTNnpDMnhCU3N1TElKY2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC05EzQ1w78rwaHcxBTeuFaq8Ll8EARdf9dvsqq9kC+9BlQKo9REhV+ AVbzFGC2VuvxGWTi0QPtITwNKhJtb5zeq++6LES3WfvWOCieSh0B2UswL+wVCKqA UFMcGfQi1GJXn17FH106cOshNnNroOMGlSMogGxzse1h+NuQdSI+ndkh5jAeo39M YqwBXiKsis9gcBvunw9WWzvRCKz/Y2Ih8PpwqevQMUMSBrcuyXNkqhrJTRENVD8Z r9uOUNs6ef8IbhcdHN8MBSQ2nnDcxOUqcUaDVZ2UrWxJuNDH2H+mxjlyZdytKUER 1h6OkylXB9Z5/jdgDGLpDk2i8ObCz7W0 -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:32 2024 by rpki-client on console-ams.rpki-client.org