$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft File: g675MVKyUIy8gKNifjon6HvP3so.mft (raw, json) Hash identifier: 1JLMCV+tUuD/e6Z952Omj3D3jQ9uQdBCsNjERz5lVWI= Subject key identifier: 66:8D:AC:20:4C:E6:1A:D4:48:B3:62:C6:1F:DC:74:00:16:1A:C6:0E Authority key identifier: 83:AE:F9:31:52:B2:50:8C:BC:80:A3:62:7E:3A:27:E8:7B:CF:DE:CA Certificate issuer: /CN=A91D298D/serialNumber=83AEF93152B2508CBC80A3627E3A27E87BCFDECA Certificate serial: 072F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft Manifest number: 0722 Signing time: Thu 30 May 2024 23:03:39 +0000 Manifest this update: Thu 30 May 2024 23:03:39 +0000 Manifest next update: Thu 06 Jun 2024 23:03:39 +0000 Files and hashes: 1: g675MVKyUIy8gKNifjon6HvP3so.crl (hash: +lh6vn5gMG2tOHkC/mYNd7qcw2SGQFhNaiemSUvyVrY=) 2: 1229795E652C11EB9B039023C4F9AE02.roa (hash: ALAOZUbLcUOYT5vDZ0TWLEC6V+Neh/Ht+ZoghTc1Yn4=) 3: 51B1F2A665D911EBA6089869C4F9AE02.roa (hash: B8fUt7Pdt2UMWuxfQ9UN+F7Nr16V041q8LjFCjPDInw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.crl rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 22:17:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1839 (0x72f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D298D/serialNumber=83AEF93152B2508CBC80A3627E3A27E87BCFDECA Validity Not Before: May 30 23:03:39 2024 GMT Not After : Jun 6 23:03:39 2024 GMT Subject: CN=665905cb-0b8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f5:44:81:a6:27:5c:01:6a:d6:b8:a9:9a:92: b0:c9:aa:36:dd:5a:dd:bc:31:a2:b3:df:c8:cb:22: 07:ad:df:9c:89:e0:f7:7d:88:c4:ce:91:03:aa:42: eb:1b:d3:2f:85:fc:bf:c6:c6:2d:30:7d:60:32:85: 3b:77:77:72:24:46:86:8a:1b:df:49:c9:db:05:1c: f8:43:da:c6:e2:04:45:4b:57:8f:96:e3:7c:99:4b: 61:d1:ff:a8:30:04:ee:53:3d:47:fa:dc:10:b4:b8: 59:be:c6:a3:1b:21:fe:20:3b:ee:44:c0:ee:c5:44: 66:1c:b8:d1:0d:64:03:ed:0e:1d:a4:bb:be:70:b4: d8:ad:46:49:32:d2:08:37:f3:4f:f8:00:33:1d:35: bf:02:d2:32:97:b0:eb:01:1e:11:02:44:5e:64:df: 3e:35:1e:b3:d7:be:f7:2e:73:7b:af:35:fa:35:08: 1a:ad:d9:c9:d8:43:f8:93:03:8b:a5:c2:56:6b:ac: 92:65:ce:5f:cf:e3:cd:95:ba:63:19:6d:c6:92:9d: dc:16:61:62:10:43:80:2d:2e:6d:d5:fd:c9:9e:ba: be:b1:20:ed:ed:0c:2a:5b:61:64:73:d7:ac:1e:e0: 63:12:37:9c:a3:c7:c4:38:0f:ef:37:ad:01:ce:5d: 3b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:8D:AC:20:4C:E6:1A:D4:48:B3:62:C6:1F:DC:74:00:16:1A:C6:0E X509v3 Authority Key Identifier: keyid:83:AE:F9:31:52:B2:50:8C:BC:80:A3:62:7E:3A:27:E8:7B:CF:DE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:c6:42:44:c3:c6:e7:e7:f9:66:e3:c1:3e:db:be:aa:f6:a1: 1d:5a:e2:0e:11:44:b9:bb:99:6e:54:2d:dd:13:e7:3b:fa:d4: 8d:26:4b:71:db:3e:77:28:5e:b7:6f:c4:7d:d5:2f:58:4b:0c: 33:da:17:3d:32:05:d6:f4:5c:8c:6e:c2:0f:5a:03:42:f9:5f: 26:dd:e7:62:fd:8a:a9:1f:f6:0d:5d:a9:02:a3:76:fe:9f:01: bc:ff:df:63:34:4b:ee:a8:3d:d9:6c:a4:cd:cf:4e:94:26:5a: 78:7c:6a:25:67:c2:5e:fc:63:e4:31:eb:9f:19:d3:4b:f6:9f: d2:a2:38:9c:bf:cc:b0:fa:6e:6a:09:6b:ec:76:e2:0b:50:ae: 10:77:c5:0f:58:34:7c:5a:9d:f7:ce:91:d7:24:46:75:e5:7c: f5:a3:d7:47:98:7e:d7:65:a4:12:c1:8b:24:ed:09:85:36:89: 61:ba:37:c8:42:1d:57:9b:80:bb:a9:a5:7b:97:1d:b4:8d:10: 0c:4f:40:7b:f2:70:7a:56:67:bb:c7:ff:fa:74:85:9e:1c:dc: f5:5e:66:06:62:4c:72:15:fc:86:0a:a1:98:54:70:b8:4f:96: 55:ab:8a:5f:50:88:a2:e6:bd:38:d3:c6:b7:6c:95:f8:7b:62: c1:37:20:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI5OEQxMTAvBgNVBAUTKDgzQUVGOTMxNTJCMjUwOENCQzgwQTM2MjdFM0EyN0U4 N0JDRkRFQ0EwHhcNMjQwNTMwMjMwMzM5WhcNMjQwNjA2MjMwMzM5WjAYMRYwFAYD VQQDEw02NjU5MDVjYi0wYjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfVEgaYnXAFq1ripmpKwyao23VrdvDGis9/IyyIHrd+cieD3fYjEzpEDqkLr G9Mvhfy/xsYtMH1gMoU7d3dyJEaGihvfScnbBRz4Q9rG4gRFS1ePluN8mUth0f+o MATuUz1H+twQtLhZvsajGyH+IDvuRMDuxURmHLjRDWQD7Q4dpLu+cLTYrUZJMtII N/NP+AAzHTW/AtIyl7DrAR4RAkReZN8+NR6z1773LnN7rzX6NQgardnJ2EP4kwOL pcJWa6ySZc5fz+PNlbpjGW3Gkp3cFmFiEEOALS5t1f3Jnrq+sSDt7QwqW2Fkc9es HuBjEjeco8fEOA/vN60Bzl075QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGaNrCBM 5hrUSLNixh/cdAAWGsYOMB8GA1UdIwQYMBaAFIOu+TFSslCMvICjYn46J+h7z97K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjk4RC8yQ0IxMUZDRUYx QTYxMUVBQjk1QzBFMkZDNEY5QUUwMi9nNjc1TVZLeVVJeThnS05pZmpvbjZIdlAz c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2c2NzVNVkt5VUl5OGdLTmlmam9uNkh2UDNzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Mjk4RC8yQ0IxMUZDRUYxQTYxMUVBQjk1QzBFMkZDNEY5QUUwMi9nNjc1TVZLeVVJ eThnS05pZmpvbjZIdlAzc28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqxkJEw8bn5/lm48E+276q9qEdWuIOEUS5u5luVC3dE+c7+tSNJktx 2z53KF63b8R91S9YSwwz2hc9MgXW9FyMbsIPWgNC+V8m3edi/YqpH/YNXakCo3b+ nwG8/99jNEvuqD3ZbKTNz06UJlp4fGolZ8Je/GPkMeufGdNL9p/Sojicv8yw+m5q CWvsduILUK4Qd8UPWDR8Wp33zpHXJEZ15Xz1o9dHmH7XZaQSwYsk7QmFNolhujfI Qh1Xm4C7qaV7lx20jRAMT0B78nB6Vme7x//6dIWeHNz1XmYGYkxyFfyGCqGYVHC4 T5ZVq4pfUIii5r0408a3bJX4e2LBNyDf -----END CERTIFICATE-----Generated at Fri May 31 00:28:37 2024 by rpki-client on console-ams.rpki-client.org