$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft File: dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft (raw, json) Hash identifier: ZtVtIgkU/B48OhLoOyhksNhefUnWRMjG7D9tLgaX338= Subject key identifier: 93:C9:86:B6:7B:35:22:9B:79:E7:5B:37:A5:7A:CD:81:A9:3F:28:0E Authority key identifier: 74:48:0F:37:C4:B6:57:62:A8:FD:81:BC:7E:DB:EB:DE:6C:81:64:5F Certificate issuer: /CN=A91E01AF/serialNumber=74480F37C4B65762A8FD81BC7EDBEBDE6C81645F Certificate serial: 0518 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft Manifest number: 0513 Signing time: Fri 31 May 2024 01:40:26 +0000 Manifest this update: Fri 31 May 2024 01:40:25 +0000 Manifest next update: Fri 07 Jun 2024 01:40:25 +0000 Files and hashes: 1: dEgPN8S2V2Ko_YG8ftvr3myBZF8.crl (hash: qluxqN2nTROT4X+eLjCyV+9U9MYxwQiqEP0fpEEoe9M=) 2: 129AA26CBD2111EBA76A3E11C4F9AE02.roa (hash: 9Z4MceXuzVt3uxt0tHcR79KDm88i/6DRGbVPmg8LiL8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.crl rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:40:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1304 (0x518) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E01AF/serialNumber=74480F37C4B65762A8FD81BC7EDBEBDE6C81645F Validity Not Before: May 31 01:40:25 2024 GMT Not After : Jun 7 01:40:25 2024 GMT Subject: CN=66592a8a-70e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d8:fc:ef:81:b7:27:20:38:bf:7f:81:ce:10: 9e:1d:c8:4e:5d:5e:38:8d:4d:39:33:82:ef:39:6b: f8:e0:cb:44:9c:e0:8b:94:90:6d:77:53:e7:da:be: 00:7e:ea:42:af:52:26:10:ed:44:9e:79:64:44:b0: 28:43:96:81:01:83:4a:f1:74:b4:00:f7:27:1f:50: 7e:39:11:62:03:10:b3:21:c2:48:95:7d:14:63:14: 98:c6:23:63:b5:c9:5c:ad:7f:f9:8f:0c:23:61:b7: 41:60:36:36:eb:11:e0:29:79:00:df:af:50:2e:93: 8d:60:79:72:50:5c:af:70:72:e1:41:6e:be:12:2c: ba:a2:a0:ce:6b:bc:78:62:3a:20:98:a7:3c:20:c0: 9c:c9:9d:f0:75:0e:81:f8:a9:be:c0:94:d8:03:92: f3:46:6e:4c:59:2b:30:18:32:d4:1b:53:c7:ed:e9: 59:3b:15:f1:29:41:86:c6:cc:7f:0d:b5:ab:19:56: 4c:29:ec:19:0a:64:f9:f1:bb:53:fe:d9:35:bc:28: 68:82:4c:24:2a:b6:41:0f:d1:aa:a9:69:55:98:9b: 53:5c:66:40:46:22:20:92:bb:14:40:d1:fd:fa:54: 61:43:6b:93:31:03:5c:79:ab:6e:bd:a6:f8:9e:b7: 89:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C9:86:B6:7B:35:22:9B:79:E7:5B:37:A5:7A:CD:81:A9:3F:28:0E X509v3 Authority Key Identifier: keyid:74:48:0F:37:C4:B6:57:62:A8:FD:81:BC:7E:DB:EB:DE:6C:81:64:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:a2:d4:8e:47:fa:48:2d:e9:08:16:fe:c0:48:a7:74:27:8b: 50:53:0a:f9:b8:c6:df:9b:73:34:d4:f3:ce:b3:0e:d2:d0:b7: 9a:e9:3a:9a:f5:7e:53:b9:7b:73:b1:58:65:b0:8f:c0:57:c2: db:e6:be:cd:60:3f:04:cc:b8:c2:63:38:25:4b:59:9e:a3:a1: c7:c5:dc:a9:26:6b:d8:a6:91:b7:65:78:b9:29:db:df:20:e5: 4a:b8:9a:52:44:4c:7a:db:18:f7:64:07:19:ae:89:a9:24:78: 87:b5:59:e1:b7:a5:fc:15:ca:53:c9:90:3e:d2:61:44:8b:53: fd:75:cd:19:f0:83:c9:d9:c3:3b:07:44:16:57:80:7d:57:2c: f6:57:ad:b5:0d:63:aa:7f:4d:e8:ee:20:09:57:6c:85:1f:4d: 21:be:c4:bf:86:2a:cb:6a:04:40:77:e6:02:8c:62:7a:76:0c: c3:4a:ee:08:fe:00:20:c1:24:96:74:ba:ad:6c:87:88:c9:4c: ce:6d:4c:51:92:ab:6c:c5:f7:e4:85:5e:ff:c2:e1:03:35:87: 4b:25:cb:ba:38:a2:df:64:09:54:98:c0:94:26:f7:03:4d:44: 5d:dd:a8:a6:62:16:a7:f6:62:7d:9e:d5:8d:11:74:08:d3:2a: dc:8a:3e:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxQUYxMTAvBgNVBAUTKDc0NDgwRjM3QzRCNjU3NjJBOEZEODFCQzdFREJFQkRF NkM4MTY0NUYwHhcNMjQwNTMxMDE0MDI1WhcNMjQwNjA3MDE0MDI1WjAYMRYwFAYD VQQDEw02NjU5MmE4YS03MGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzdj874G3JyA4v3+BzhCeHchOXV44jU05M4LvOWv44MtEnOCLlJBtd1Pn2r4A fupCr1ImEO1EnnlkRLAoQ5aBAYNK8XS0APcnH1B+ORFiAxCzIcJIlX0UYxSYxiNj tclcrX/5jwwjYbdBYDY26xHgKXkA369QLpONYHlyUFyvcHLhQW6+Eiy6oqDOa7x4 YjogmKc8IMCcyZ3wdQ6B+Km+wJTYA5LzRm5MWSswGDLUG1PH7elZOxXxKUGGxsx/ DbWrGVZMKewZCmT58btT/tk1vChogkwkKrZBD9GqqWlVmJtTXGZARiIgkrsUQNH9 +lRhQ2uTMQNceatuvab4nreJVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJPJhrZ7 NSKbeedbN6V6zYGpPygOMB8GA1UdIwQYMBaAFHRIDzfEtldiqP2BvH7b695sgWRf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFBRi84Q0I4NTQ1NkJE MUYxMUVCQkFGRDNEMTBDNEY5QUUwMi9kRWdQTjhTMlYyS29fWUc4ZnR2cjNteUJa RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RFZ1BOOFMyVjJLb19ZRzhmdHZyM215QlpGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDFBRi84Q0I4NTQ1NkJEMUYxMUVCQkFGRDNEMTBDNEY5QUUwMi9kRWdQTjhTMlYy S29fWUc4ZnR2cjNteUJaRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHotSOR/pILekIFv7ASKd0J4tQUwr5uMbfm3M01PPOsw7S0Lea6Tqa 9X5TuXtzsVhlsI/AV8Lb5r7NYD8EzLjCYzglS1meo6HHxdypJmvYppG3ZXi5Kdvf IOVKuJpSREx62xj3ZAcZrompJHiHtVnht6X8FcpTyZA+0mFEi1P9dc0Z8IPJ2cM7 B0QWV4B9Vyz2V621DWOqf03o7iAJV2yFH00hvsS/hirLagRAd+YCjGJ6dgzDSu4I /gAgwSSWdLqtbIeIyUzObUxRkqtsxffkhV7/wuEDNYdLJcu6OKLfZAlUmMCUJvcD TURd3aimYhan9mJ9ntWNEXQI0yrcij49 -----END CERTIFICATE-----Generated at Fri May 31 03:15:05 2024 by rpki-client on console-ams.rpki-client.org