$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.mft File: owQJVBg5BUscPhXRmD19vYp9ZII.mft (raw, json) Hash identifier: sDgWE2nGZXc2WtSHxHbEsbkAlxCxM/QuLW0bSZx15b0= Subject key identifier: BB:DB:62:8F:2B:27:18:5C:CC:DC:44:C8:42:EC:87:48:A6:63:F7:4C Authority key identifier: A3:04:09:54:18:39:05:4B:1C:3E:15:D1:98:3D:7D:BD:8A:7D:64:82 Certificate issuer: /CN=A91D9E03/serialNumber=A30409541839054B1C3E15D1983D7DBD8A7D6482 Certificate serial: 02DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owQJVBg5BUscPhXRmD19vYp9ZII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.mft Manifest number: 02D7 Signing time: Sun 19 May 2024 03:22:14 +0000 Manifest this update: Sun 19 May 2024 03:22:13 +0000 Manifest next update: Sun 26 May 2024 03:22:13 +0000 Files and hashes: 1: owQJVBg5BUscPhXRmD19vYp9ZII.crl (hash: 5zWPLelea6XIir/aYkuifJySPuavSMYP7V7guTBKCNM=) 2: 521DCED89C5911EC97E58855C4F9AE02.roa (hash: 1nSOZrZSh7Fty0EmtVxpPkiDwmhLcKhSw4HA6o1gFPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.crl rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owQJVBg5BUscPhXRmD19vYp9ZII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 730 (0x2da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9E03/serialNumber=A30409541839054B1C3E15D1983D7DBD8A7D6482 Validity Not Before: May 19 03:22:13 2024 GMT Not After : May 26 03:22:13 2024 GMT Subject: CN=66497065-55e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:af:04:03:f8:ca:19:1e:3e:7b:ef:f2:e4:d3: 5d:43:d2:60:0b:38:13:c8:0c:c0:e0:51:7d:62:1a: 63:28:66:bf:ae:f1:8b:90:bc:1c:14:a0:38:4d:fe: a3:4a:62:8a:5f:3a:86:47:f7:8f:b8:c0:07:e8:82: 58:39:8a:cd:b3:12:eb:b7:9b:71:15:74:06:51:5f: fd:d7:20:e4:d0:c5:72:e7:d7:3e:98:86:b8:de:28: 4e:63:6b:00:a7:b0:8c:e5:11:95:f5:70:f9:66:d1: 51:c0:b1:fd:e7:11:cb:72:0e:3a:08:f8:83:af:27: f0:05:c2:4c:a9:c1:29:65:2f:c9:9e:2f:27:a3:88: e6:67:1a:82:9d:00:0c:f2:80:8b:62:83:f1:9f:7f: c9:63:c1:dc:ee:1c:85:fb:bf:41:e1:d0:ae:47:cd: 83:67:4b:ac:bf:18:aa:0c:70:bb:5f:2a:9f:b8:00: b3:13:a8:bf:8d:39:6a:48:95:b2:22:54:db:dc:91: 36:57:65:6f:a3:69:71:fc:01:fb:14:7a:77:91:36: a9:6d:56:86:2b:10:f0:ee:af:10:5f:68:6e:78:d0: 6d:65:dc:0d:f4:5b:f9:0e:a7:7f:8d:cc:c5:2d:60: 6c:fe:a1:e6:0f:33:a9:e1:f7:4a:f2:2f:e6:c3:99: 08:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:DB:62:8F:2B:27:18:5C:CC:DC:44:C8:42:EC:87:48:A6:63:F7:4C X509v3 Authority Key Identifier: keyid:A3:04:09:54:18:39:05:4B:1C:3E:15:D1:98:3D:7D:BD:8A:7D:64:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owQJVBg5BUscPhXRmD19vYp9ZII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:cb:11:e0:10:5e:e7:ed:a3:3d:b2:dc:c4:ec:1c:36:a2:9f: fa:b5:11:9e:20:ce:39:99:a7:20:c7:35:8f:f4:ab:15:c8:46: ef:f2:8a:fe:43:42:8e:19:7e:81:39:cb:20:4f:6a:78:2f:c4: 67:4a:9a:a3:6b:7f:55:43:38:51:a7:db:7d:cd:68:0a:a0:cb: 29:73:2a:a5:19:b2:6f:e8:c4:8c:05:04:91:c6:62:bb:17:03: a9:a1:ac:ad:d1:32:61:a2:75:87:a3:27:30:98:97:f0:35:79: 3a:94:6a:79:f7:eb:49:ac:ab:ed:55:98:5b:31:3b:df:b3:22: ba:7f:a4:5c:0b:c1:e8:66:18:71:7b:cc:18:ee:00:31:87:7e: 09:47:b5:4e:c3:2b:a9:c8:f6:ad:a7:c6:bb:f0:1c:ef:fb:30: ea:df:d7:72:82:b4:8b:eb:05:85:f0:36:1b:ac:dc:d8:f0:26: 36:78:ad:f6:8d:57:ba:e7:4c:c3:e4:3e:66:2c:7f:49:95:a3: 25:b2:82:7e:1b:db:63:67:2b:ee:49:9a:df:c9:8c:f2:cd:12: 3b:bf:2a:67:76:36:11:92:78:eb:7b:53:55:3d:7c:fa:92:13: 5c:da:c2:a6:f3:34:53:90:1e:4f:61:7c:41:36:3d:af:5f:d2: 18:13:89:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlFMDMxMTAvBgNVBAUTKEEzMDQwOTU0MTgzOTA1NEIxQzNFMTVEMTk4M0Q3REJE OEE3RDY0ODIwHhcNMjQwNTE5MDMyMjEzWhcNMjQwNTI2MDMyMjEzWjAYMRYwFAYD VQQDEw02NjQ5NzA2NS01NWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy68EA/jKGR4+e+/y5NNdQ9JgCzgTyAzA4FF9YhpjKGa/rvGLkLwcFKA4Tf6j SmKKXzqGR/ePuMAH6IJYOYrNsxLrt5txFXQGUV/91yDk0MVy59c+mIa43ihOY2sA p7CM5RGV9XD5ZtFRwLH95xHLcg46CPiDryfwBcJMqcEpZS/Jni8no4jmZxqCnQAM 8oCLYoPxn3/JY8Hc7hyF+79B4dCuR82DZ0usvxiqDHC7XyqfuACzE6i/jTlqSJWy IlTb3JE2V2Vvo2lx/AH7FHp3kTapbVaGKxDw7q8QX2hueNBtZdwN9Fv5Dqd/jczF LWBs/qHmDzOp4fdK8i/mw5kI8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLvbYo8r JxhczNxEyELsh0imY/dMMB8GA1UdIwQYMBaAFKMECVQYOQVLHD4V0Zg9fb2KfWSC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUUwMy85OTZBN0U4ODlD NTYxMUVDQkRFRTA1NTNDNEY5QUUwMi9vd1FKVkJnNUJVc2NQaFhSbUQxOXZZcDla SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL293UUpWQmc1QlVzY1BoWFJtRDE5dllwOVpJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUUwMy85OTZBN0U4ODlDNTYxMUVDQkRFRTA1NTNDNEY5QUUwMi9vd1FKVkJnNUJV c2NQaFhSbUQxOXZZcDlaSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSyxHgEF7n7aM9stzE7Bw2op/6tRGeIM45macgxzWP9KsVyEbv8or+ Q0KOGX6BOcsgT2p4L8RnSpqja39VQzhRp9t9zWgKoMspcyqlGbJv6MSMBQSRxmK7 FwOpoayt0TJhonWHoycwmJfwNXk6lGp59+tJrKvtVZhbMTvfsyK6f6RcC8HoZhhx e8wY7gAxh34JR7VOwyupyPatp8a78Bzv+zDq39dygrSL6wWF8DYbrNzY8CY2eK32 jVe650zD5D5mLH9JlaMlsoJ+G9tjZyvuSZrfyYzyzRI7vypndjYRknjre1NVPXz6 khNc2sKm8zRTkB5PYXxBNj2vX9IYE4n7 -----END CERTIFICATE-----Generated at Sun May 19 04:20:44 2024 by rpki-client on console-ams.rpki-client.org