$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft File: ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft (raw, json) Hash identifier: D5Xq/0OYtLH/u2GSc4TlHcImMGneTjWTdK+vYpSY3vs= Subject key identifier: 90:8A:0C:FA:5B:36:36:C8:B3:94:72:B5:2C:D1:81:FB:D8:71:51:98 Authority key identifier: 71:C1:27:D1:C0:6A:FC:7C:45:4D:D1:09:3E:B2:CB:7E:12:D7:87:C0 Certificate issuer: /CN=A91DE570/serialNumber=71C127D1C06AFC7C454DD1093EB2CB7E12D787C0 Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft Manifest number: 0121 Signing time: Fri 31 May 2024 05:55:01 +0000 Manifest this update: Fri 31 May 2024 05:55:01 +0000 Manifest next update: Fri 07 Jun 2024 05:55:01 +0000 Files and hashes: 1: ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl (hash: C3ufj6DAY7KA/9fQQcz5cIMZYQ09CH4wqw6A13/H3AY=) 2: B46C8BFA89AD11ED93CAB75FC4F9AE02.roa (hash: bQGRo+BKv1VXRi3jWhiN4sfYJGpMkN3hIT4uTMt1AFA=) 3: B360BB9689AD11ED93CAB75FC4F9AE02.roa (hash: phCaH2hmKn9csgEA/K+CD2iFkrWqLhy3OCLIe+VLrHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 05:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE570/serialNumber=71C127D1C06AFC7C454DD1093EB2CB7E12D787C0 Validity Not Before: May 31 05:55:01 2024 GMT Not After : Jun 7 05:55:01 2024 GMT Subject: CN=66596635-86ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b7:d9:8b:bc:2d:b0:89:3d:15:82:89:a9:6e: 75:d4:90:9b:f7:a8:f4:10:e0:4a:7d:a9:63:44:71: 74:2f:e6:0a:ae:68:b8:f9:23:f3:e6:a8:96:61:e2: a7:5b:7a:74:23:87:c8:f9:5a:b0:39:fa:99:2c:79: 99:96:ec:85:82:39:6d:4c:ea:1c:8e:88:4f:61:dc: dc:3e:6f:c6:2b:6e:59:b9:25:60:25:67:60:3c:d5: 2e:62:66:61:7f:6d:b9:44:03:2b:40:2b:c5:c5:f8: 70:96:d7:17:0d:27:4c:8f:f3:39:f5:8a:fe:b6:44: bb:70:a6:8e:44:cd:61:74:3f:9f:ce:2d:54:ca:f5: b2:bd:44:28:9b:74:d5:26:e9:68:e2:c8:c5:12:ba: 18:8b:07:3f:d5:3d:2a:3e:34:f8:4b:08:a9:fa:be: 9e:4f:f7:56:33:ab:2e:45:7b:ab:72:f5:fe:7f:4a: b0:18:3e:15:45:1c:d9:6f:66:39:77:d4:8e:a1:29: 9f:02:b7:57:41:3b:c5:75:9a:c1:c2:94:96:ee:c9: d5:42:54:b2:c2:f2:f3:bb:bd:82:6f:36:53:01:af: 73:4b:a7:c0:42:d8:e2:22:dc:75:6f:c7:3c:39:0a: 05:26:cf:d8:8b:5b:9d:b4:5f:8a:a3:e8:47:69:dd: e0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:8A:0C:FA:5B:36:36:C8:B3:94:72:B5:2C:D1:81:FB:D8:71:51:98 X509v3 Authority Key Identifier: keyid:71:C1:27:D1:C0:6A:FC:7C:45:4D:D1:09:3E:B2:CB:7E:12:D7:87:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:25:6a:d9:8f:bb:62:e8:22:9d:e4:78:9b:16:d4:f5:63:f1: c5:79:d7:96:c1:d7:84:d7:55:38:87:ae:ba:f8:34:1a:2b:77: 80:1e:20:b0:08:e7:5a:2c:5c:19:40:a7:99:0c:2c:da:1e:87: 5f:16:e9:f8:30:5a:23:41:bd:12:d6:d3:42:2e:8b:79:d4:ef: c2:91:52:52:39:86:46:f6:61:f7:11:ed:84:94:ef:ae:b6:ca: ee:d7:ec:1f:ee:cd:8f:03:82:86:79:f3:80:b6:46:27:35:b5: 9c:4f:6c:88:56:e6:7f:0d:c2:c8:15:31:f9:ab:e9:fb:5f:07: 8b:72:ca:c5:ee:bb:9c:65:ad:cb:d2:1f:f7:d1:f6:46:d8:5e: 57:a2:bc:0f:0a:e2:f7:26:88:14:07:c5:8b:69:ab:63:db:3c: 0d:7e:d5:90:f6:c3:f8:25:7a:02:91:30:d4:8e:00:39:bc:ee: 5d:8c:a7:0e:58:25:bd:f9:7f:7c:f4:f5:ef:bd:23:26:9c:8e: 16:73:2b:11:96:71:18:da:2d:f6:e5:12:16:05:8b:5a:4a:ca: ff:67:a6:81:1b:99:9b:cc:b3:ca:56:58:37:84:83:50:1a:6e: db:b9:eb:c9:f7:3a:11:9f:b7:b8:3f:de:8d:ab:67:48:8c:c2: 3a:64:67:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1NzAxMTAvBgNVBAUTKDcxQzEyN0QxQzA2QUZDN0M0NTRERDEwOTNFQjJDQjdF MTJENzg3QzAwHhcNMjQwNTMxMDU1NTAxWhcNMjQwNjA3MDU1NTAxWjAYMRYwFAYD VQQDEw02NjU5NjYzNS04NmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmbfZi7wtsIk9FYKJqW511JCb96j0EOBKfaljRHF0L+YKrmi4+SPz5qiWYeKn W3p0I4fI+VqwOfqZLHmZluyFgjltTOocjohPYdzcPm/GK25ZuSVgJWdgPNUuYmZh f225RAMrQCvFxfhwltcXDSdMj/M59Yr+tkS7cKaORM1hdD+fzi1UyvWyvUQom3TV Julo4sjFEroYiwc/1T0qPjT4Swip+r6eT/dWM6suRXurcvX+f0qwGD4VRRzZb2Y5 d9SOoSmfArdXQTvFdZrBwpSW7snVQlSywvLzu72CbzZTAa9zS6fAQtjiItx1b8c8 OQoFJs/Yi1udtF+Ko+hHad3g2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJCKDPpb NjbIs5RytSzRgfvYcVGYMB8GA1UdIwQYMBaAFHHBJ9HAavx8RU3RCT6yy34S14fA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTU3MC9DMkNCMTE5QzY1 ODMxMUVEOTYwMDJDMkNDNEY5QUUwMi9jY0VuMGNCcV9IeEZUZEVKUHJMTGZoTFho OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjRW4wY0JxX0h4RlRkRUpQckxMZmhMWGg4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTU3MC9DMkNCMTE5QzY1ODMxMUVEOTYwMDJDMkNDNEY5QUUwMi9jY0VuMGNCcV9I eEZUZEVKUHJMTGZoTFhoOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGJWrZj7ti6CKd5HibFtT1Y/HFedeWwdeE11U4h666+DQaK3eAHiCw COdaLFwZQKeZDCzaHodfFun4MFojQb0S1tNCLot51O/CkVJSOYZG9mH3Ee2ElO+u tsru1+wf7s2PA4KGefOAtkYnNbWcT2yIVuZ/DcLIFTH5q+n7XweLcsrF7rucZa3L 0h/30fZG2F5XorwPCuL3JogUB8WLaatj2zwNftWQ9sP4JXoCkTDUjgA5vO5djKcO WCW9+X989PXvvSMmnI4WcysRlnEY2i325RIWBYtaSsr/Z6aBG5mbzLPKVlg3hINQ Gm7buevJ9zoRn7e4P96Nq2dIjMI6ZGeI -----END CERTIFICATE-----Generated at Fri May 31 06:49:28 2024 by rpki-client on console-ams.rpki-client.org