$ rpki-client -vvf rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft File: S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft (raw, json) Hash identifier: msIXPHHusdZ7jWP8+dMNHwQDW0dMojbpQtGUEMqj8mA= Subject key identifier: CE:41:74:F7:54:20:A8:59:8C:90:C4:B2:39:D5:91:B6:33:CF:63:26 Authority key identifier: 4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E Certificate issuer: /CN=A91D82F4/serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E Certificate serial: 0622 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft Manifest number: 061B Signing time: Sat 18 May 2024 23:47:35 +0000 Manifest this update: Sat 18 May 2024 23:47:35 +0000 Manifest next update: Sat 25 May 2024 23:47:35 +0000 Files and hashes: 1: S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl (hash: +2fkwksjlOWuFOd+3ejzNjAB428bN3Xl7U6yDPyDkG8=) 2: A2EF68E66EAD11EC8796A251C4F9AE02.roa (hash: k3xfz7HPSwAtmddXj9lXyEkDd+pgrXYCFQcpo4v4ABA=) 3: 56617572537F11EB9C970658C4F9AE02.roa (hash: 2DIFhNd/HGOMPfn8KyshfkQGAl/ng92desoVaGGJW4M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1570 (0x622) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D82F4/serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E Validity Not Before: May 18 23:47:35 2024 GMT Not After : May 25 23:47:35 2024 GMT Subject: CN=66493e17-d756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:b4:f7:ec:4c:15:cb:ab:ed:c5:5d:5b:c4:9a: fc:8a:05:ec:27:08:cd:83:6e:f5:62:42:1e:74:43: bc:aa:02:67:de:dd:bb:ee:71:c2:c4:b8:ac:1e:60: 9c:5d:34:fa:eb:07:29:4a:65:49:3e:53:4f:21:19: 71:3d:ba:d5:33:b6:a6:0a:f1:d6:af:fe:52:00:d7: b9:55:b1:80:99:c0:2d:fe:a0:34:e0:c5:6f:92:c1: 01:bb:28:28:1f:b6:3f:b4:2a:ec:4b:ea:9f:ae:f9: f8:34:02:49:d6:cb:91:6c:64:be:69:33:47:a5:80: 87:d9:cd:82:e9:cd:4e:e8:31:a1:b7:1c:54:50:48: 4c:89:e3:c4:1b:78:3a:74:cb:90:e1:e4:1f:1a:3d: 0b:47:38:ba:ff:28:16:71:ee:87:ca:7b:53:87:5d: d4:23:4a:a8:ec:23:33:74:78:94:66:fd:9a:5b:bb: 58:49:94:40:47:19:e8:23:72:98:04:59:cd:c9:d8: 4f:d2:5c:d2:ec:9d:06:c9:5e:5f:83:69:82:34:e0: cd:62:6e:f4:92:93:b2:aa:d4:84:01:71:40:e0:e7: 7c:b2:63:cf:24:bd:da:93:a7:3e:17:fd:55:61:a4: 65:94:db:22:6a:ff:9b:69:7c:5e:69:aa:f4:85:c6: 5b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:41:74:F7:54:20:A8:59:8C:90:C4:B2:39:D5:91:B6:33:CF:63:26 X509v3 Authority Key Identifier: keyid:4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:e9:26:e9:c0:80:08:03:07:3b:e8:cf:92:d7:4f:b6:dc:8b: 38:4b:76:53:7b:23:90:0b:36:a2:7a:5b:04:2e:73:7f:25:18: b7:bf:c6:f4:56:b1:09:80:ee:69:b0:71:15:27:41:d9:46:c5: 4a:af:34:13:43:f5:44:9c:e1:c5:fd:5e:f6:37:0a:8b:5e:ca: c8:d2:bd:24:65:22:25:a0:79:3d:44:5f:80:27:89:79:9b:51: a8:76:97:8c:43:6e:87:9e:f1:45:2e:69:1e:ce:29:3b:bd:85: 7c:f6:f4:c8:8b:5e:5c:cb:3a:a4:23:61:08:9d:f6:5a:7d:60: 4f:e7:72:6c:f8:95:39:77:a1:50:fe:94:00:2c:11:90:6d:97: a2:46:48:08:7c:f0:d9:5e:07:54:d8:08:39:57:49:4f:f8:d9: b5:85:a3:7e:c2:f5:05:69:69:a8:d2:df:49:3b:cd:78:82:b5: b8:d9:15:17:3e:0f:2c:e9:04:5f:09:ee:a9:0a:93:ea:55:90: c4:4c:db:ce:fb:ae:84:38:8c:72:ec:30:3d:f2:a4:95:11:0f: 98:41:9c:b5:22:fe:b3:71:d1:22:91:24:ff:70:0b:c4:c7:29: ea:76:0c:88:03:18:ac:36:64:85:c1:e6:e1:b9:6e:e4:7a:46: 27:8a:f9:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgyRjQxMTAvBgNVBAUTKDRCRUFFQzMzN0M2RTg5RjI3OTRBOTc0NEUxNkQ5MTlD OUM3OTNCMUUwHhcNMjQwNTE4MjM0NzM1WhcNMjQwNTI1MjM0NzM1WjAYMRYwFAYD VQQDEw02NjQ5M2UxNy1kNzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9bT37EwVy6vtxV1bxJr8igXsJwjNg271YkIedEO8qgJn3t277nHCxLisHmCc XTT66wcpSmVJPlNPIRlxPbrVM7amCvHWr/5SANe5VbGAmcAt/qA04MVvksEBuygo H7Y/tCrsS+qfrvn4NAJJ1suRbGS+aTNHpYCH2c2C6c1O6DGhtxxUUEhMiePEG3g6 dMuQ4eQfGj0LRzi6/ygWce6HyntTh13UI0qo7CMzdHiUZv2aW7tYSZRARxnoI3KY BFnNydhP0lzS7J0GyV5fg2mCNODNYm70kpOyqtSEAXFA4Od8smPPJL3ak6c+F/1V YaRllNsiav+baXxeaar0hcZbRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM5BdPdU IKhZjJDEsjnVkbYzz2MmMB8GA1UdIwQYMBaAFEvq7DN8bonyeUqXROFtkZyceTse MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODJGNC85MzZFNTlCRTUz N0QxMUVCQjJCRDdCNTNDNEY5QUUwMi9TLXJzTTN4dWlmSjVTcGRFNFcyUm5KeDVP eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MtcnNNM3h1aWZKNVNwZEU0VzJSbkp4NU94NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODJGNC85MzZFNTlCRTUzN0QxMUVCQjJCRDdCNTNDNEY5QUUwMi9TLXJzTTN4dWlm SjVTcGRFNFcyUm5KeDVPeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCD6SbpwIAIAwc76M+S10+23Is4S3ZTeyOQCzaielsELnN/JRi3v8b0 VrEJgO5psHEVJ0HZRsVKrzQTQ/VEnOHF/V72NwqLXsrI0r0kZSIloHk9RF+AJ4l5 m1GodpeMQ26HnvFFLmkezik7vYV89vTIi15cyzqkI2EInfZafWBP53Js+JU5d6FQ /pQALBGQbZeiRkgIfPDZXgdU2Ag5V0lP+Nm1haN+wvUFaWmo0t9JO814grW42RUX Pg8s6QRfCe6pCpPqVZDETNvO+66EOIxy7DA98qSVEQ+YQZy1Iv6zcdEikST/cAvE xynqdgyIAxisNmSFwebhuW7kekYnivm+ -----END CERTIFICATE-----Generated at Sun May 19 00:30:22 2024 by rpki-client on console-ams.rpki-client.org