$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft File: SokSJxJpPqAI66ehAaxiJpX67CQ.mft (raw, json) Hash identifier: VCfyedc4OLaU7H7xva0cFpSoFEBHOWV/dFPMGJOY/m8= Subject key identifier: F5:03:8B:59:D8:90:7F:1F:10:6D:AA:19:75:55:9F:24:D1:48:6E:0B Authority key identifier: 4A:89:12:27:12:69:3E:A0:08:EB:A7:A1:01:AC:62:26:95:FA:EC:24 Certificate issuer: /CN=A91CEF20/serialNumber=4A89122712693EA008EBA7A101AC622695FAEC24 Certificate serial: 03AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft Manifest number: 03A8 Signing time: Fri 31 May 2024 03:09:37 +0000 Manifest this update: Fri 31 May 2024 03:09:36 +0000 Manifest next update: Fri 07 Jun 2024 03:09:36 +0000 Files and hashes: 1: SokSJxJpPqAI66ehAaxiJpX67CQ.crl (hash: zmJlNWt3EFDjQm7dfYESTmYG4vqYYwBAEure3fnETss=) 2: 69BD1776579A11EEB2386282C4F9AE02.roa (hash: fvrI/G4/lZDcaHvJtqlBwFbuS2mrAEvqsqBeZAnHlsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.crl rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 03:09:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 942 (0x3ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEF20/serialNumber=4A89122712693EA008EBA7A101AC622695FAEC24 Validity Not Before: May 31 03:09:36 2024 GMT Not After : Jun 7 03:09:36 2024 GMT Subject: CN=66593f70-900a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:46:9c:ca:ed:fb:b9:86:52:92:ea:81:d0:ba: ff:15:38:46:aa:e1:21:66:c3:9e:25:40:cf:56:02: 1b:d4:49:db:cb:6c:b1:59:57:ed:8e:b2:ba:ce:5d: 60:3f:70:5d:99:7b:99:e6:cd:aa:6b:4d:42:9e:f2: fa:88:ab:cc:ac:9a:ab:34:19:b6:5a:59:be:b6:65: c4:f0:2f:20:79:a8:ba:07:6e:f1:4c:5b:a0:89:3e: 04:ee:78:0e:6c:13:bd:0c:a6:7f:5f:ae:30:39:c4: 73:fd:19:83:28:0f:d8:b5:75:bd:58:0b:dd:ef:d8: d8:3d:b0:05:ce:3a:2c:92:38:99:43:66:98:e3:f5: 39:07:79:e7:ce:a7:58:17:b2:db:c7:30:dc:a3:dd: f6:cd:8c:40:be:02:bb:36:29:ac:9f:89:61:91:fb: db:16:18:c9:59:25:02:2b:cb:c8:c3:5f:7a:10:62: 1c:64:15:a5:f0:d0:0d:9c:d1:c4:0d:22:bb:bf:bb: 6f:45:df:d1:5e:01:7a:da:4f:d1:d3:4b:8b:37:00: 25:eb:01:42:23:60:86:f0:7d:55:5e:f1:b4:b1:cd: af:06:66:2b:c0:66:c2:4a:4a:17:87:6b:a4:7b:c1: 66:31:34:e5:83:a3:87:4d:31:dd:b9:f5:11:f3:a8: 4e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:03:8B:59:D8:90:7F:1F:10:6D:AA:19:75:55:9F:24:D1:48:6E:0B X509v3 Authority Key Identifier: keyid:4A:89:12:27:12:69:3E:A0:08:EB:A7:A1:01:AC:62:26:95:FA:EC:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:9b:d5:8b:e4:d8:08:7d:bd:09:6f:f9:6d:8d:7f:68:57:c5: 06:61:ca:09:01:cc:da:23:3f:9d:04:ef:65:d4:da:6d:7c:98: e4:19:63:a6:b6:0f:8f:ab:c9:ed:b5:99:49:18:6b:8e:b1:34: b2:7d:45:41:d2:cc:2d:bc:91:01:ea:c4:fe:ba:af:06:02:b7: b4:7b:d0:80:d2:38:dd:2f:1c:e0:a7:2f:a2:fa:6d:c7:2d:af: 0a:6f:a3:5f:97:f3:6e:56:e2:84:4b:94:8c:f7:07:ff:05:3b: 46:eb:0f:e9:36:e8:8b:42:5e:fd:8f:46:e0:b9:6d:54:dc:16: 21:4e:6d:13:03:d3:63:be:9c:4f:8c:1e:36:bb:b6:73:c4:e5: 70:9f:3d:f7:54:c5:02:2a:69:97:db:37:15:bc:9b:54:64:43: e8:d6:55:a1:f7:18:39:9d:aa:ea:21:9d:ea:e9:ac:64:3e:57: d5:f6:8e:4f:73:4d:b2:90:72:f1:33:0d:95:45:97:57:05:05: 58:f0:5c:bd:f0:74:23:f5:2d:41:91:d2:af:53:16:c5:db:11: 98:e5:1c:de:a2:27:11:3b:4e:55:a9:67:eb:2b:52:c8:20:72: 91:94:35:ea:0d:4b:fe:82:21:37:f3:da:5c:d7:e0:62:37:1c: 5b:d6:05:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VGMjAxMTAvBgNVBAUTKDRBODkxMjI3MTI2OTNFQTAwOEVCQTdBMTAxQUM2MjI2 OTVGQUVDMjQwHhcNMjQwNTMxMDMwOTM2WhcNMjQwNjA3MDMwOTM2WjAYMRYwFAYD VQQDEw02NjU5M2Y3MC05MDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/Uacyu37uYZSkuqB0Lr/FThGquEhZsOeJUDPVgIb1Enby2yxWVftjrK6zl1g P3BdmXuZ5s2qa01CnvL6iKvMrJqrNBm2Wlm+tmXE8C8geai6B27xTFugiT4E7ngO bBO9DKZ/X64wOcRz/RmDKA/YtXW9WAvd79jYPbAFzjoskjiZQ2aY4/U5B3nnzqdY F7LbxzDco932zYxAvgK7Nimsn4lhkfvbFhjJWSUCK8vIw196EGIcZBWl8NANnNHE DSK7v7tvRd/RXgF62k/R00uLNwAl6wFCI2CG8H1VXvG0sc2vBmYrwGbCSkoXh2uk e8FmMTTlg6OHTTHdufUR86hOFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPUDi1nY kH8fEG2qGXVVnyTRSG4LMB8GA1UdIwQYMBaAFEqJEicSaT6gCOunoQGsYiaV+uwk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUYyMC9GMjY3MTVCMjRG NUYxMUVDQjAzQjlFMUJDNEY5QUUwMi9Tb2tTSnhKcFBxQUk2NmVoQWF4aUpwWDY3 Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Nva1NKeEpwUHFBSTY2ZWhBYXhpSnBYNjdDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUYyMC9GMjY3MTVCMjRGNUYxMUVDQjAzQjlFMUJDNEY5QUUwMi9Tb2tTSnhKcFBx QUk2NmVoQWF4aUpwWDY3Q1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0m9WL5NgIfb0Jb/ltjX9oV8UGYcoJAczaIz+dBO9l1NptfJjkGWOm tg+Pq8nttZlJGGuOsTSyfUVB0swtvJEB6sT+uq8GAre0e9CA0jjdLxzgpy+i+m3H La8Kb6Nfl/NuVuKES5SM9wf/BTtG6w/pNuiLQl79j0bguW1U3BYhTm0TA9NjvpxP jB42u7ZzxOVwnz33VMUCKmmX2zcVvJtUZEPo1lWh9xg5narqIZ3q6axkPlfV9o5P c02ykHLxMw2VRZdXBQVY8Fy98HQj9S1BkdKvUxbF2xGY5RzeoicRO05VqWfrK1LI IHKRlDXqDUv+giE389pc1+BiNxxb1gXk -----END CERTIFICATE-----Generated at Fri May 31 06:49:26 2024 by rpki-client on console-ams.rpki-client.org