$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft File: 1vBnJNCWhwftHfr9uyJYArPaoZQ.mft (raw, json) Hash identifier: Xm347CtKerKnbpieGK2kkFzqim+8zxaq64an+A7dOgU= Subject key identifier: 82:A8:55:35:85:D0:F7:55:86:51:F6:57:91:3A:69:AE:A2:02:B0:33 Authority key identifier: D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94 Certificate issuer: /CN=A91D1F95/serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194 Certificate serial: 01A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft Manifest number: 019D Signing time: Sun 19 May 2024 04:40:44 +0000 Manifest this update: Sun 19 May 2024 04:40:43 +0000 Manifest next update: Sun 26 May 2024 04:40:43 +0000 Files and hashes: 1: 1vBnJNCWhwftHfr9uyJYArPaoZQ.crl (hash: mNdxjQJSLw5k5W24OnSD/1rWJLXkNpAXQZGlFRlCFPs=) 2: 834FFE88679911EEB8243436C4F9AE02.roa (hash: i/O4WLrB8wfd6UXwK3Xf8Dev7sWffLDG1Ucc4/2H558=) 3: C965E8C4679911EEB466ED36C4F9AE02.roa (hash: s47opPogcC5e1y+494dk+cvOuO26bbtxqUBe27NjZ2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 419 (0x1a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1F95/serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194 Validity Not Before: May 19 04:40:43 2024 GMT Not After : May 26 04:40:43 2024 GMT Subject: CN=664982cb-f375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2a:3d:b3:34:ea:44:14:85:07:10:c8:f8:65: 1c:07:c4:91:ee:5d:2b:74:3b:b7:f8:d1:f7:46:06: ce:ac:f0:94:41:05:f2:00:d9:3c:03:9d:60:54:ce: 65:e5:40:47:12:e7:c6:73:66:8d:9b:d4:0e:b7:96: f5:b9:a3:62:56:6e:00:94:0a:6e:4d:47:59:12:d9: 14:87:a2:8f:b7:ed:cf:54:a2:14:19:19:f8:b5:0e: 67:c5:db:b5:46:12:bb:cd:ab:22:b7:73:69:d5:50: 7d:bd:73:9b:40:5f:73:f4:9d:77:17:37:af:3b:b6: 96:87:b9:ac:58:cd:14:37:27:ba:5a:05:80:c8:7d: 19:3b:24:a0:ee:5f:b9:9b:c9:1f:93:19:0a:28:7e: 77:16:c7:d6:c9:3c:e7:d1:9a:44:7a:0b:03:50:8f: 31:5f:31:f3:b6:5b:8d:02:7d:9b:ce:2a:04:a8:60: 3d:77:22:e1:f4:34:1d:7b:bd:06:e9:a0:41:6a:11: 8f:f1:ff:9d:73:ec:95:23:88:b9:fc:86:b7:3c:61: 5a:dd:72:0b:59:d7:7a:19:1f:da:10:0e:27:1c:68: 9d:63:fe:37:f5:5f:27:ec:f1:04:09:f0:1a:6a:04: 4b:71:d6:b0:67:dc:69:3c:7b:c9:83:50:60:a9:12: 0e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:A8:55:35:85:D0:F7:55:86:51:F6:57:91:3A:69:AE:A2:02:B0:33 X509v3 Authority Key Identifier: keyid:D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:08:06:7a:cd:d0:79:a1:1f:28:ba:d6:cb:5a:ce:83:ad:74: 68:bd:37:e7:f4:e8:3d:15:47:81:77:2e:70:d1:cd:4f:a5:a7: 1f:a2:dd:3f:56:b6:43:1a:c7:8c:59:13:82:05:ad:c9:7f:7e: fa:3e:32:8b:7e:a5:c7:52:74:0a:cb:4f:96:9f:ae:e1:a9:63: 6a:ab:3e:a5:db:32:26:78:ae:1b:35:5a:ef:db:da:8e:9d:70: a2:88:25:c0:59:b7:41:b4:95:82:0e:10:bb:93:6b:21:07:7a: 87:7b:3b:73:e3:c6:92:df:a7:08:d9:42:62:4e:20:34:0c:3b: da:4f:35:ea:5c:de:9e:a6:ae:1f:da:3a:ca:bc:93:dc:77:fc: a5:a4:ff:73:b0:ce:9d:c1:e9:9a:7f:4c:9d:a2:98:97:3e:78: 0b:85:d5:79:ad:59:14:98:7e:54:38:55:56:ae:25:22:84:77: 30:3a:51:cd:8f:5f:9a:da:bd:b7:9f:4a:b1:e6:fa:23:aa:1d: 00:a8:28:bb:21:0a:aa:8b:4e:0b:59:a5:13:9b:2b:a7:36:b0: 71:99:29:da:1e:9f:ea:f9:12:76:5e:89:90:f7:8f:5a:06:40: 3a:cc:c7:46:15:29:6e:88:6c:ce:d5:4a:7f:dd:80:45:9c:80: 91:d4:a4:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFGOTUxMTAvBgNVBAUTKEQ2RjA2NzI0RDA5Njg3MDdFRDFERkFGREJCMjI1ODAy QjNEQUExOTQwHhcNMjQwNTE5MDQ0MDQzWhcNMjQwNTI2MDQ0MDQzWjAYMRYwFAYD VQQDEw02NjQ5ODJjYi1mMzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCo9szTqRBSFBxDI+GUcB8SR7l0rdDu3+NH3RgbOrPCUQQXyANk8A51gVM5l 5UBHEufGc2aNm9QOt5b1uaNiVm4AlApuTUdZEtkUh6KPt+3PVKIUGRn4tQ5nxdu1 RhK7zasit3Np1VB9vXObQF9z9J13FzevO7aWh7msWM0UNye6WgWAyH0ZOySg7l+5 m8kfkxkKKH53FsfWyTzn0ZpEegsDUI8xXzHztluNAn2bzioEqGA9dyLh9DQde70G 6aBBahGP8f+dc+yVI4i5/Ia3PGFa3XILWdd6GR/aEA4nHGidY/439V8n7PEECfAa agRLcdawZ9xpPHvJg1BgqRIOGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIKoVTWF 0PdVhlH2V5E6aa6iArAzMB8GA1UdIwQYMBaAFNbwZyTQlocH7R36/bsiWAKz2qGU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUY5NS9GRjkzRUM3MjE5 NUYxMUVEQjJCREY5NUVDNEY5QUUwMi8xdkJuSk5DV2h3ZnRIZnI5dXlKWUFyUGFv WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF2Qm5KTkNXaHdmdEhmcjl1eUpZQXJQYW9aUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUY5NS9GRjkzRUM3MjE5NUYxMUVEQjJCREY5NUVDNEY5QUUwMi8xdkJuSk5DV2h3 ZnRIZnI5dXlKWUFyUGFvWlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNCAZ6zdB5oR8outbLWs6DrXRovTfn9Og9FUeBdy5w0c1Ppacfot0/ VrZDGseMWROCBa3Jf376PjKLfqXHUnQKy0+Wn67hqWNqqz6l2zImeK4bNVrv29qO nXCiiCXAWbdBtJWCDhC7k2shB3qHeztz48aS36cI2UJiTiA0DDvaTzXqXN6epq4f 2jrKvJPcd/ylpP9zsM6dwemaf0ydopiXPngLhdV5rVkUmH5UOFVWriUihHcwOlHN j1+a2r23n0qx5vojqh0AqCi7IQqqi04LWaUTmyunNrBxmSnaHp/q+RJ2XomQ949a BkA6zMdGFSluiGzO1Up/3YBFnICR1KRT -----END CERTIFICATE-----Generated at Sun May 19 06:14:36 2024 by rpki-client on console-ams.rpki-client.org