$ rpki-client -vvf rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.mft File: s8j34GTam1qm6nlgF-xg0okDeCo.mft (raw, json) Hash identifier: KJ6DABZM4mFAZCqmK7yIzmgsXDWxiIH8kEgtNW0tKcs= Subject key identifier: EA:CA:60:53:E3:A8:3F:87:3A:29:66:57:96:26:0F:F3:C4:E0:AA:C4 Authority key identifier: B3:C8:F7:E0:64:DA:9B:5A:A6:EA:79:60:17:EC:60:D2:89:03:78:2A Certificate issuer: /CN=A91D671F/serialNumber=B3C8F7E064DA9B5AA6EA796017EC60D28903782A Certificate serial: 155C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8j34GTam1qm6nlgF-xg0okDeCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.mft Manifest number: 154A Signing time: Thu 30 May 2024 17:37:40 +0000 Manifest this update: Thu 30 May 2024 17:37:40 +0000 Manifest next update: Thu 06 Jun 2024 17:37:39 +0000 Files and hashes: 1: s8j34GTam1qm6nlgF-xg0okDeCo.crl (hash: 0OUEpv/dtLcd/J+M2rIwdBejV0T0UdnIsIkWijV1v8A=) 2: A135DDD4162211EC9B4B6F77C4F9AE02.roa (hash: ABQ35rht8dRSIjduImCnOzg+uGJxj7hI65HorgyDMg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.crl rsync://rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8j34GTam1qm6nlgF-xg0okDeCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 17:36:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5468 (0x155c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D671F/serialNumber=B3C8F7E064DA9B5AA6EA796017EC60D28903782A Validity Not Before: May 30 17:37:40 2024 GMT Not After : Jun 6 17:37:39 2024 GMT Subject: CN=6658b964-785d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:9a:59:78:4a:b8:10:34:06:8e:46:33:c2:ef: 3a:64:c3:48:79:60:64:4d:91:5f:e1:26:09:2b:5d: 55:fa:ac:c5:12:60:cb:55:ba:f0:7f:bd:8c:e5:73: b5:c8:73:6e:2f:01:86:8a:c1:1c:d4:c5:81:e8:df: da:09:be:6d:f1:67:2f:19:cd:c5:73:11:bd:a3:d9: 16:91:0f:75:e3:81:cb:b1:57:49:15:76:53:f4:b4: 58:09:14:b9:85:d0:97:fb:70:ed:dc:90:c3:4c:4d: bf:97:84:df:73:e7:66:d6:d0:ee:00:88:d2:86:0b: 9d:fb:79:70:c3:79:51:d2:53:a9:ae:a2:54:5e:ab: cf:ac:c4:61:9c:f5:10:66:21:9a:9b:74:2c:d4:73: a1:fa:88:e2:fe:4e:41:c0:70:a0:18:15:24:af:13: 27:8f:e0:fa:34:08:7e:83:95:f2:dd:52:40:23:c2: 5b:db:26:ae:1c:b8:5f:04:16:ff:11:f4:ac:f7:44: 32:35:80:8b:8b:e9:45:4b:9c:b4:28:07:3d:dc:dd: 66:aa:04:ee:a6:4b:e0:ed:e9:e9:38:cc:2d:61:b2: 32:01:e1:62:9e:a4:a8:c1:4f:61:1a:5d:03:6b:59: 21:a2:5a:70:21:17:d3:29:6d:79:1c:09:f4:76:a8: c4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:CA:60:53:E3:A8:3F:87:3A:29:66:57:96:26:0F:F3:C4:E0:AA:C4 X509v3 Authority Key Identifier: keyid:B3:C8:F7:E0:64:DA:9B:5A:A6:EA:79:60:17:EC:60:D2:89:03:78:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8j34GTam1qm6nlgF-xg0okDeCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:d6:ab:3f:bd:54:0e:e5:ec:c2:39:f6:2b:c9:ba:53:1b:44: c7:5c:fa:68:47:61:b6:a1:86:2d:91:0b:e9:bd:37:70:d6:1f: 35:f5:c7:d4:cb:af:39:c2:8a:a8:87:01:cd:40:80:26:27:55: 06:21:20:c8:3b:89:3d:2a:7f:10:b0:59:3c:07:87:32:28:41: 82:eb:20:c8:ad:ec:9a:46:f0:f8:fd:ee:71:12:dc:11:96:4f: 9b:ff:d9:f4:59:1e:88:9f:36:c8:d2:65:e4:cd:a5:64:72:22: 87:c1:69:3a:a5:c6:2c:e5:45:53:39:f6:6d:4f:20:d9:f9:c0: 1a:13:91:d5:a1:b2:0c:1b:b6:ee:2e:d2:ba:9e:e1:7c:8c:91: a1:e4:32:6c:c9:60:91:da:58:61:fe:61:d6:9c:39:d8:25:dc: 55:48:15:b1:3d:3d:24:3e:b9:2c:dc:0c:cd:df:10:33:93:c8: 59:eb:8d:3c:c7:98:38:60:be:25:8c:fd:59:68:9c:0b:01:4d: 31:f9:b2:68:3e:47:61:7f:3c:a4:f6:99:8b:b1:85:d7:af:40: fe:43:93:e9:54:7f:a4:0e:e9:f7:39:6b:48:2b:33:b1:07:18: 54:f5:29:2b:6d:55:1d:19:79:01:bd:31:84:bd:f3:91:c0:7f: 82:11:55:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY3MUYxMTAvBgNVBAUTKEIzQzhGN0UwNjREQTlCNUFBNkVBNzk2MDE3RUM2MEQy ODkwMzc4MkEwHhcNMjQwNTMwMTczNzQwWhcNMjQwNjA2MTczNzM5WjAYMRYwFAYD VQQDEw02NjU4Yjk2NC03ODVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7ZpZeEq4EDQGjkYzwu86ZMNIeWBkTZFf4SYJK11V+qzFEmDLVbrwf72M5XO1 yHNuLwGGisEc1MWB6N/aCb5t8WcvGc3FcxG9o9kWkQ9144HLsVdJFXZT9LRYCRS5 hdCX+3Dt3JDDTE2/l4Tfc+dm1tDuAIjShgud+3lww3lR0lOprqJUXqvPrMRhnPUQ ZiGam3Qs1HOh+oji/k5BwHCgGBUkrxMnj+D6NAh+g5Xy3VJAI8Jb2yauHLhfBBb/ EfSs90QyNYCLi+lFS5y0KAc93N1mqgTupkvg7enpOMwtYbIyAeFinqSowU9hGl0D a1kholpwIRfTKW15HAn0dqjEwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOrKYFPj qD+HOilmV5YmD/PE4KrEMB8GA1UdIwQYMBaAFLPI9+Bk2ptapup5YBfsYNKJA3gq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjcxRi8xRURDMTBCQzE3 MUUxMUU4ODU2QkM0NDNDNEY5QUUwMi9zOGozNEdUYW0xcW02bmxnRi14ZzBva0Rl Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M4ajM0R1RhbTFxbTZubGdGLXhnMG9rRGVDby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjcxRi8xRURDMTBCQzE3MUUxMUU4ODU2QkM0NDNDNEY5QUUwMi9zOGozNEdUYW0x cW02bmxnRi14ZzBva0RlQ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+1qs/vVQO5ezCOfYrybpTG0THXPpoR2G2oYYtkQvpvTdw1h819cfU y685woqohwHNQIAmJ1UGISDIO4k9Kn8QsFk8B4cyKEGC6yDIreyaRvD4/e5xEtwR lk+b/9n0WR6InzbI0mXkzaVkciKHwWk6pcYs5UVTOfZtTyDZ+cAaE5HVobIMG7bu LtK6nuF8jJGh5DJsyWCR2lhh/mHWnDnYJdxVSBWxPT0kPrks3AzN3xAzk8hZ6408 x5g4YL4ljP1ZaJwLAU0x+bJoPkdhfzyk9pmLsYXXr0D+Q5PpVH+kDun3OWtIKzOx BxhU9SkrbVUdGXkBvTGEvfORwH+CEVWG -----END CERTIFICATE-----Generated at Thu May 30 18:46:46 2024 by rpki-client on console-ams.rpki-client.org