$ rpki-client -vvf rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft File: sGfGu3DfDcBM5398jXZwakn2y4U.mft (raw, json) Hash identifier: 4qAfVMxx/ApF26iqi01zZfu+6+M6kb0F8dU0hW4GSOM= Subject key identifier: 42:9F:4C:CC:D1:02:D1:A9:6C:BB:92:A8:4E:C3:9D:DE:5D:5E:D6:38 Authority key identifier: B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85 Certificate issuer: /CN=A91D366A/serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85 Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft Manifest number: 018E Signing time: Sun 19 May 2024 04:51:08 +0000 Manifest this update: Sun 19 May 2024 04:51:08 +0000 Manifest next update: Sun 26 May 2024 04:51:08 +0000 Files and hashes: 1: sGfGu3DfDcBM5398jXZwakn2y4U.crl (hash: CsNZiNzG4UQAwVvew625tg286sZwSUufsaVO0wsWaBI=) 2: 51638C369F0D11EE829DC428C4F9AE02.roa (hash: x0XdCXr+fHMkPRUmR0MUNWWzOe9z+9CTwMrqymaTnKg=) 3: 4E65B594D35711EEB8F04828C4F9AE02.roa (hash: MvrpHktX8EBV5CRxI8wvPJU9sIwZ4JC9BJ7Tmiw/3S0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D366A/serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85 Validity Not Before: May 19 04:51:08 2024 GMT Not After : May 26 04:51:08 2024 GMT Subject: CN=6649853c-0ab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d0:a6:6f:52:78:ac:0f:c7:c7:c1:89:00:ec: a7:33:5d:0b:6a:1f:12:a5:fc:22:32:30:b6:ca:ee: 53:10:82:fd:8d:23:c3:eb:07:52:9a:25:50:12:61: 6c:3d:82:f3:4e:23:39:29:a5:1d:06:81:e9:a5:2e: ab:02:fa:bc:b1:7e:a0:88:45:a3:9f:7c:68:d3:ec: f2:29:ca:0f:37:7a:58:81:af:37:63:5b:5f:64:af: 90:d7:97:d5:ba:8d:f0:30:60:7b:ca:59:1c:7b:2d: 3d:25:ab:16:b1:bd:09:13:3d:cd:da:c9:1e:6f:fa: 6e:70:f3:62:14:69:5c:8f:bd:e0:93:9c:78:a3:6e: 93:61:a1:0a:3b:7a:9b:09:f7:16:aa:00:60:36:1c: 96:54:dc:17:0f:de:04:06:63:72:33:fc:c7:0c:44: f5:ef:f7:3b:47:f8:2a:7d:22:6d:64:d8:df:65:37: 7d:6b:72:81:6d:bb:ca:02:14:ba:54:eb:b1:08:63: c2:32:3f:12:86:ce:b7:b8:f1:74:41:b0:55:1d:a0: 70:11:36:dd:50:33:11:52:29:69:af:1c:ff:09:41: 8f:4e:42:33:3f:55:3a:94:5b:3a:e8:b4:56:93:d4: da:4a:14:94:06:30:dc:a7:90:51:9e:47:d2:7d:a2: de:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:9F:4C:CC:D1:02:D1:A9:6C:BB:92:A8:4E:C3:9D:DE:5D:5E:D6:38 X509v3 Authority Key Identifier: keyid:B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:65:65:e4:3e:46:4f:81:ce:c3:92:17:a1:e2:6f:36:ec:a1: 9f:22:5a:0e:96:48:50:9f:a9:83:ec:bc:51:ae:cf:e3:c1:f5: 40:09:c8:a0:a9:c2:88:43:07:ad:1b:46:88:ee:48:63:be:62: 1b:da:51:5b:dc:18:c1:ee:b1:94:b8:11:cd:68:3b:06:ef:1f: 77:ab:bc:f2:72:b5:c6:c1:80:92:2c:bc:46:cf:4d:63:d7:49: 1c:41:04:7d:9a:c4:0c:59:27:c8:be:01:04:9b:60:3c:67:5d: 17:64:4b:72:54:8e:5a:5a:b0:30:d9:99:8e:b7:b6:39:94:c6: ea:b7:96:fa:f9:45:a9:d7:65:3f:5b:8b:bf:0c:52:1f:86:48: 9e:0b:a4:f8:3d:cb:c1:f2:e0:ab:b0:55:47:46:29:61:d7:22: 50:f2:fa:2c:44:ac:c9:24:39:bb:40:32:5e:0f:67:fd:cd:88: d6:6f:04:27:d2:62:d8:15:03:3e:cc:51:8c:55:8f:43:d4:04: 27:04:41:77:1d:72:cf:dd:42:d9:0e:46:0e:e7:bd:d5:c0:18: 56:7b:cc:ed:12:8c:e1:43:3b:2e:e0:2c:0b:e1:6d:0b:e7:a2: 20:ce:96:f6:ac:e7:22:3e:a0:66:f7:8c:24:cc:62:84:ce:f6: 02:d3:2e:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM2NkExMTAvBgNVBAUTKEIwNjdDNkJCNzBERjBEQzA0Q0U3N0Y3QzhENzY3MDZB NDlGNkNCODUwHhcNMjQwNTE5MDQ1MTA4WhcNMjQwNTI2MDQ1MTA4WjAYMRYwFAYD VQQDEw02NjQ5ODUzYy0wYWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqdCmb1J4rA/Hx8GJAOynM10Lah8SpfwiMjC2yu5TEIL9jSPD6wdSmiVQEmFs PYLzTiM5KaUdBoHppS6rAvq8sX6giEWjn3xo0+zyKcoPN3pYga83Y1tfZK+Q15fV uo3wMGB7ylkcey09JasWsb0JEz3N2skeb/pucPNiFGlcj73gk5x4o26TYaEKO3qb CfcWqgBgNhyWVNwXD94EBmNyM/zHDET17/c7R/gqfSJtZNjfZTd9a3KBbbvKAhS6 VOuxCGPCMj8Shs63uPF0QbBVHaBwETbdUDMRUilprxz/CUGPTkIzP1U6lFs66LRW k9TaShSUBjDcp5BRnkfSfaLeHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEKfTMzR AtGpbLuSqE7Dnd5dXtY4MB8GA1UdIwQYMBaAFLBnxrtw3w3ATOd/fI12cGpJ9suF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzY2QS9FQzA5QUE0QTMw N0QxMUVEQTZDM0EyMTJDNEY5QUUwMi9zR2ZHdTNEZkRjQk01Mzk4alhad2FrbjJ5 NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NHZkd1M0RmRGNCTTUzOThqWFp3YWtuMnk0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzY2QS9FQzA5QUE0QTMwN0QxMUVEQTZDM0EyMTJDNEY5QUUwMi9zR2ZHdTNEZkRj Qk01Mzk4alhad2FrbjJ5NFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYZWXkPkZPgc7Dkheh4m827KGfIloOlkhQn6mD7LxRrs/jwfVACcig qcKIQwetG0aI7khjvmIb2lFb3BjB7rGUuBHNaDsG7x93q7zycrXGwYCSLLxGz01j 10kcQQR9msQMWSfIvgEEm2A8Z10XZEtyVI5aWrAw2ZmOt7Y5lMbqt5b6+UWp12U/ W4u/DFIfhkieC6T4PcvB8uCrsFVHRilh1yJQ8vosRKzJJDm7QDJeD2f9zYjWbwQn 0mLYFQM+zFGMVY9D1AQnBEF3HXLP3ULZDkYO573VwBhWe8ztEozhQzsu4CwL4W0L 56Igzpb2rOciPqBm94wkzGKEzvYC0y7W -----END CERTIFICATE-----Generated at Sun May 19 06:14:36 2024 by rpki-client on console-ams.rpki-client.org