$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft File: 4ed5yzH_53MaM7Xrfq_GsqvbROM.mft (raw, json) Hash identifier: aDJJcLt7DpfOiar0jzpz9N5xfoIcTsFFgS3DdS3Pi14= Subject key identifier: 49:AD:24:FE:77:63:62:59:39:D2:A7:DB:D7:7E:65:49:99:57:02:C6 Authority key identifier: E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3 Certificate issuer: /CN=A91D3737/serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft Manifest number: 9B Signing time: Sat 25 May 2024 07:10:33 +0000 Manifest this update: Sat 25 May 2024 07:10:32 +0000 Manifest next update: Sat 01 Jun 2024 07:10:32 +0000 Files and hashes: 1: 4ed5yzH_53MaM7Xrfq_GsqvbROM.crl (hash: DXjRFev4xaBbzrUNYHtZliVRBU58Xt0yP9hoTpoFj64=) 2: 9E6C93C6372311EEACE5BF61C4F9AE02.roa (hash: eupERph+xflkMgOeRf/X5lh42oDlNvhYtIatghcqcLA=) 3: 9F1B80CA372311EEACE5BF61C4F9AE02.roa (hash: v9lyQtjtYWy+9wvU05wZNHA4sTJm6Xiwl/FoG5KIk+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 06:26:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3737/serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3 Validity Not Before: May 25 07:10:32 2024 GMT Not After : Jun 1 07:10:32 2024 GMT Subject: CN=66518ee8-2425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3a:2c:6b:59:1f:a2:0a:ed:be:94:b6:aa:07: 32:a2:51:24:3f:2d:f5:6d:6e:2f:75:79:b5:0f:74: dd:9d:c0:35:d7:f8:e4:ad:c5:23:79:29:76:85:fc: 45:cf:cc:e6:9d:41:c3:f7:df:1c:1d:68:a6:21:68: 0b:7e:20:60:86:c4:17:e0:63:6d:63:b0:d0:14:a0: 9d:12:c3:65:b2:eb:bf:73:ba:74:be:90:89:28:66: a3:0c:23:33:5e:b6:eb:b2:a3:74:8c:16:58:9e:a8: 67:e0:fe:3d:2b:8a:1d:cd:1e:87:a8:94:55:63:11: bb:54:25:0b:3d:33:f1:8d:d7:d6:b0:31:87:44:46: e2:89:ea:81:51:d7:2c:83:5d:90:83:56:e1:fd:94: 06:ab:36:a1:65:95:d3:2a:68:52:51:72:88:b8:87: 7f:44:38:48:20:d1:61:2c:65:2b:62:c5:08:78:a3: 8f:cf:23:d9:1b:5b:fd:e6:b2:9b:35:6d:06:d3:0b: 2c:0d:7d:f8:33:02:f5:b2:ad:98:d6:69:e4:05:29: bd:2f:4b:9a:80:4b:ed:d3:d7:42:0a:03:48:10:4d: 9f:1e:f1:91:fa:66:27:01:e9:bf:c4:05:43:4f:c4: a2:46:5e:4b:2d:eb:8e:83:8c:ae:d3:c5:b1:35:78: f7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AD:24:FE:77:63:62:59:39:D2:A7:DB:D7:7E:65:49:99:57:02:C6 X509v3 Authority Key Identifier: keyid:E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:9c:58:9c:7b:8b:3f:8c:10:3c:5c:6c:8d:ca:20:33:63:f8: 7c:55:07:83:99:b6:2f:f5:f2:52:45:ec:6e:b8:39:3a:73:9a: 50:2a:fd:ff:b9:5e:40:2b:95:2c:59:69:8b:58:db:3e:dc:31: d0:da:6e:4c:dc:98:fa:70:7c:4e:d8:ba:7b:9d:d0:e3:44:ba: e8:2c:40:ef:10:f4:47:4e:4b:e7:64:ce:6a:cd:69:e4:17:0f: 39:7a:a2:58:30:42:67:7a:58:1f:1a:bf:7a:33:1f:41:3b:e8: 32:6a:b4:c2:2b:fb:4f:53:4c:6b:6a:3c:9b:3b:bd:03:1b:25: 71:b5:3d:5f:df:9a:1b:b0:4d:8f:d1:a1:a6:7b:52:1b:e3:b8: 25:9a:d3:63:c1:d2:33:7b:51:66:d3:cf:97:07:32:ec:83:90: 8d:af:a9:b9:68:35:47:f1:4e:86:75:8c:66:0b:82:91:f4:dd: 4e:4b:0d:a5:75:11:23:b8:76:dc:95:da:aa:5d:a9:64:a5:02: 29:3e:3d:48:2e:79:48:86:1f:6c:e9:77:2d:2c:98:ba:35:92: 12:b5:24:a5:31:a0:9b:52:62:26:bd:c3:4d:21:1e:6a:52:ab: 47:2e:a5:21:08:db:41:16:64:ca:cb:43:23:34:9e:2e:be:38: 75:8e:bc:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM3MzcxMTAvBgNVBAUTKEUxRTc3OUNCMzFGRkU3NzMxQTMzQjVFQjdFQUZDNkIy QUJEQjQ0RTMwHhcNMjQwNTI1MDcxMDMyWhcNMjQwNjAxMDcxMDMyWjAYMRYwFAYD VQQDEw02NjUxOGVlOC0yNDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Dosa1kfogrtvpS2qgcyolEkPy31bW4vdXm1D3TdncA11/jkrcUjeSl2hfxF z8zmnUHD998cHWimIWgLfiBghsQX4GNtY7DQFKCdEsNlsuu/c7p0vpCJKGajDCMz XrbrsqN0jBZYnqhn4P49K4odzR6HqJRVYxG7VCULPTPxjdfWsDGHREbiieqBUdcs g12Qg1bh/ZQGqzahZZXTKmhSUXKIuId/RDhIINFhLGUrYsUIeKOPzyPZG1v95rKb NW0G0wssDX34MwL1sq2Y1mnkBSm9L0uagEvt09dCCgNIEE2fHvGR+mYnAem/xAVD T8SiRl5LLeuOg4yu08WxNXj3bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEmtJP53 Y2JZOdKn29d+ZUmZVwLGMB8GA1UdIwQYMBaAFOHnecsx/+dzGjO1636vxrKr20Tj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzczNy84Mjk0MzYzRTMz NTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUzTWFNN1hyZnFfR3NxdmJS T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRlZDV5ekhfNTNNYU03WHJmcV9Hc3F2YlJPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzczNy84Mjk0MzYzRTMzNTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUz TWFNN1hyZnFfR3NxdmJST00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZnFice4s/jBA8XGyNyiAzY/h8VQeDmbYv9fJSRexuuDk6c5pQKv3/ uV5AK5UsWWmLWNs+3DHQ2m5M3Jj6cHxO2Lp7ndDjRLroLEDvEPRHTkvnZM5qzWnk Fw85eqJYMEJnelgfGr96Mx9BO+gyarTCK/tPU0xrajybO70DGyVxtT1f35obsE2P 0aGme1Ib47glmtNjwdIze1Fm08+XBzLsg5CNr6m5aDVH8U6GdYxmC4KR9N1OSw2l dREjuHbcldqqXalkpQIpPj1ILnlIhh9s6XctLJi6NZIStSSlMaCbUmImvcNNIR5q UqtHLqUhCNtBFmTKy0MjNJ4uvjh1jryJ -----END CERTIFICATE-----Generated at Sat May 25 10:21:17 2024 by rpki-client on console-ams.rpki-client.org