$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft File: SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft (raw, json) Hash identifier: IbkpXS++MkVzrc4wTgoIBqDzG8KYokTMG63PHMCuoj0= Subject key identifier: FF:EB:11:F0:5F:C9:73:2F:0A:E4:C7:C0:E6:E5:93:90:0A:3A:E8:A8 Authority key identifier: 49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74 Certificate issuer: /CN=A91DA10A/serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74 Certificate serial: 074D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft Manifest number: 0728 Signing time: Sat 18 May 2024 22:34:54 +0000 Manifest this update: Sat 18 May 2024 22:34:54 +0000 Manifest next update: Sat 25 May 2024 22:34:54 +0000 Files and hashes: 1: SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl (hash: Bd6GrKzG+IpNg4AeOlOtz5VYtfnvIkpA0yFKkVInBcc=) 2: DDBCA666F18911EAA922EB1FC4F9AE02.roa (hash: 0eY9UJAkZZakZw8of6sUFhqYKDDaBt9qQKETBrfHEcM=) 3: 2F220BBA95AA11ED84962E13C4F9AE02.roa (hash: S+EUoixcFUVdydhYEhX1psMP89cFdxeSHCpw9U6Kva0=) 4: 13279E2C124011ED9E430A4CC4F9AE02.roa (hash: 85M/qz7mJYekYbZAgnSUCVink/uytYT+xqfjbzjrav8=) 5: 67FF0960076911EF8569F157C4F9AE02.roa (hash: hI29xSQXh1cP0cvokOmU5zY43qAdfumBYUMAD16rgjE=) 6: 68C5CFBE076911EF8569F157C4F9AE02.roa (hash: 3urSEYH0gjusIwXeqrofJiltAWjh56tWGXZgfGhU66o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1869 (0x74d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA10A/serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74 Validity Not Before: May 18 22:34:54 2024 GMT Not After : May 25 22:34:54 2024 GMT Subject: CN=66492d0e-3a7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:69:c2:f4:df:2c:1f:7e:28:e8:95:45:2d:60: d9:33:7b:43:73:b7:b0:a4:89:6d:2d:d7:2e:a7:f4: 08:71:b8:08:75:78:7f:1a:b9:ed:a4:9b:29:cf:9f: f9:cc:58:95:36:13:59:39:90:a7:96:bd:c2:f1:0f: bb:53:61:b1:db:2e:50:f4:d3:29:20:92:ae:a3:38: 6c:4f:51:bb:97:89:fd:e5:72:c3:11:fd:81:22:49: 8d:65:b6:c9:e4:ae:33:25:cf:28:4b:8e:c5:5f:e4: 98:8b:ec:2c:b9:7b:b9:77:6f:51:17:43:04:f4:48: f6:6e:dd:5e:e5:51:01:f2:59:c5:ce:2d:a1:dc:a1: 3f:0b:05:17:d2:c8:29:1b:77:cd:f1:cd:18:81:80: 60:3a:a7:1a:55:a5:af:96:53:78:fe:cc:00:38:83: e5:6d:64:31:79:25:af:85:89:f3:18:38:7d:b7:d9: cb:bc:23:88:5e:42:e6:9a:b1:8f:fa:1e:18:d9:ee: ec:0b:e1:61:93:33:93:6d:4c:62:c1:65:cc:8d:57: dd:e6:69:2d:7a:df:22:9c:44:18:65:04:8c:7d:11: 04:f7:f9:17:a3:c4:13:3f:19:87:1e:d7:46:df:a1: f3:2f:25:56:1f:f0:cc:05:b2:8c:49:0a:43:79:df: f3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:EB:11:F0:5F:C9:73:2F:0A:E4:C7:C0:E6:E5:93:90:0A:3A:E8:A8 X509v3 Authority Key Identifier: keyid:49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:a1:c6:76:a4:e8:23:2d:58:21:c5:7c:73:da:bc:62:a9:85: 15:85:b1:e5:4d:95:d1:fd:52:5f:41:eb:95:2f:46:1c:2b:64: 05:b8:ce:8d:58:07:8a:8b:f6:0b:c0:5a:f6:d8:34:fa:f6:cf: e5:b0:42:c3:02:44:1f:94:4d:5b:9c:ff:7d:db:69:36:4a:c5: e1:6f:1f:0b:5a:d9:39:fa:4d:bf:98:1f:23:cf:48:dd:71:80: 3b:b5:df:8d:a9:c8:bc:48:e1:82:1e:11:9e:e7:0a:ba:02:a2: 22:02:53:34:5c:33:c4:6e:f2:30:91:dd:2f:f9:85:71:3e:d5: c1:b8:90:9d:b5:56:51:d0:6d:df:7d:b7:ba:f6:f2:bd:fa:7b: 9b:44:27:cd:62:6f:a6:4d:a1:f9:8f:0a:53:3a:a2:dc:9a:49: cd:82:f3:2b:9d:88:f9:0a:98:a7:2d:97:ca:f3:58:77:ca:d0: 1d:5a:7f:e7:f3:cc:d3:df:c5:79:ed:bd:43:0f:48:bc:70:fd: 58:33:dc:53:6c:ec:ed:bc:fa:ba:72:22:92:b3:a4:8c:36:ee: 8b:05:f8:eb:c2:50:35:51:d3:23:0d:77:b9:ad:06:c5:53:c9: 0f:66:b8:a5:50:6d:48:03:1b:04:08:a6:1e:67:c5:5e:bd:a0: 5b:f3:81:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExMEExMTAvBgNVBAUTKDQ5QjVBNDY0NjNFM0EyQjcwQTMzNDQ2MDE0RUJGNDBF NUM5RUZFNzQwHhcNMjQwNTE4MjIzNDU0WhcNMjQwNTI1MjIzNDU0WjAYMRYwFAYD VQQDEw02NjQ5MmQwZS0zYTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGnC9N8sH34o6JVFLWDZM3tDc7ewpIltLdcup/QIcbgIdXh/GrntpJspz5/5 zFiVNhNZOZCnlr3C8Q+7U2Gx2y5Q9NMpIJKuozhsT1G7l4n95XLDEf2BIkmNZbbJ 5K4zJc8oS47FX+SYi+wsuXu5d29RF0ME9Ej2bt1e5VEB8lnFzi2h3KE/CwUX0sgp G3fN8c0YgYBgOqcaVaWvllN4/swAOIPlbWQxeSWvhYnzGDh9t9nLvCOIXkLmmrGP +h4Y2e7sC+FhkzOTbUxiwWXMjVfd5mktet8inEQYZQSMfREE9/kXo8QTPxmHHtdG 36HzLyVWH/DMBbKMSQpDed/zlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP/rEfBf yXMvCuTHwOblk5AKOuioMB8GA1UdIwQYMBaAFEm1pGRj46K3CjNEYBTr9A5cnv50 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEwQS9FMzQwMjA0Q0Yx ODcxMUVBQjk3MzRCMUNDNEY5QUUwMi9TYldrWkdQam9yY0tNMFJnRk92MERseWVf blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NiV2taR1Bqb3JjS00wUmdGT3YwRGx5ZV9uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTEwQS9FMzQwMjA0Q0YxODcxMUVBQjk3MzRCMUNDNEY5QUUwMi9TYldrWkdQam9y Y0tNMFJnRk92MERseWVfblEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzocZ2pOgjLVghxXxz2rxiqYUVhbHlTZXR/VJfQeuVL0YcK2QFuM6N WAeKi/YLwFr22DT69s/lsELDAkQflE1bnP9922k2SsXhbx8LWtk5+k2/mB8jz0jd cYA7td+Nqci8SOGCHhGe5wq6AqIiAlM0XDPEbvIwkd0v+YVxPtXBuJCdtVZR0G3f fbe69vK9+nubRCfNYm+mTaH5jwpTOqLcmknNgvMrnYj5CpinLZfK81h3ytAdWn/n 88zT38V57b1DD0i8cP1YM9xTbOztvPq6ciKSs6SMNu6LBfjrwlA1UdMjDXe5rQbF U8kPZrilUG1IAxsECKYeZ8VevaBb84Gb -----END CERTIFICATE-----Generated at Sun May 19 00:30:22 2024 by rpki-client on console-ams.rpki-client.org