$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/aGr0G8M9rvgo-rSuSjoNWHutDT8.mft File: aGr0G8M9rvgo-rSuSjoNWHutDT8.mft (raw, json) Hash identifier: ZQszIPkPysuh28jKPSY5IBpxXJ7bxCeRw51VBxn3dBs= Subject key identifier: 0C:7D:39:F1:27:D8:BC:92:38:39:8C:6B:F2:2B:41:EB:A7:81:1B:35 Authority key identifier: 68:6A:F4:1B:C3:3D:AE:F8:28:FA:B4:AE:4A:3A:0D:58:7B:AD:0D:3F Certificate issuer: /CN=A91E4D3D/serialNumber=686AF41BC33DAEF828FAB4AE4A3A0D587BAD0D3F Certificate serial: 04E1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aGr0G8M9rvgo-rSuSjoNWHutDT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/aGr0G8M9rvgo-rSuSjoNWHutDT8.mft Manifest number: 04D2 Signing time: Sun 19 May 2024 01:24:19 +0000 Manifest this update: Sun 19 May 2024 01:24:18 +0000 Manifest next update: Sun 26 May 2024 01:24:18 +0000 Files and hashes: 1: aGr0G8M9rvgo-rSuSjoNWHutDT8.crl (hash: CDo/DnYFCjwLwWMs/xjp3U0TW03TQRUqcIV+w9hYFlM=) 2: 63FEB4F8D97411EBB8CC3F40C4F9AE02.roa (hash: UFB8SexISoRuGEO0g4DLDULSBBr/BItnnDdRm0FdCQc=) 3: 40310456D8D211EB97FF5586C4F9AE02.roa (hash: UL1/BTKdHNpqlzZukRDIdNL4bhNFFc5wuy8V2rTyjr0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/aGr0G8M9rvgo-rSuSjoNWHutDT8.crl rsync://rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/aGr0G8M9rvgo-rSuSjoNWHutDT8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aGr0G8M9rvgo-rSuSjoNWHutDT8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1249 (0x4e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4D3D/serialNumber=686AF41BC33DAEF828FAB4AE4A3A0D587BAD0D3F Validity Not Before: May 19 01:24:18 2024 GMT Not After : May 26 01:24:18 2024 GMT Subject: CN=664954c3-3df5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bb:f6:a2:fd:a2:5a:e5:da:69:a3:7d:46:db: e7:71:a5:b5:df:c5:f5:78:62:70:ba:4b:3e:0e:77: cc:1f:13:a4:17:fa:b5:dc:fb:81:d9:32:7c:aa:83: 5e:a4:52:19:bb:39:2f:a4:a9:cc:ee:eb:0f:8e:da: fa:26:ba:24:6e:a0:f1:8f:25:21:87:8e:dd:6a:ed: 23:e7:b7:7d:73:07:ea:21:5d:9a:b9:1b:4f:9f:ca: 83:e2:f2:ad:fd:1d:ee:0b:c3:40:7e:fe:a3:24:7a: 7c:bb:72:d9:4a:cd:57:75:cc:6b:34:17:39:5e:c3: c9:31:2c:30:5e:0e:2c:2b:c7:6e:8c:2c:e1:05:28: 1a:a8:53:51:fc:0b:3b:d4:6e:1a:bb:f7:da:21:01: 45:6e:a3:33:5d:65:3c:17:9d:d6:ed:f1:bd:06:ef: be:e6:46:35:c6:f4:6b:4f:82:03:ea:c6:3a:a0:9d: e3:36:5b:32:1a:63:64:b9:1f:df:63:62:84:b3:4f: a5:a6:31:8b:04:cb:ff:da:75:82:99:d8:49:7c:73: e9:2e:f6:98:51:5c:46:67:4c:85:86:1a:8c:81:2a: 3e:42:7c:3f:c6:71:1f:c7:46:58:34:ce:9a:bc:4c: c6:83:4a:76:c2:81:58:5e:e6:e8:76:83:2a:ed:14: 6b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:7D:39:F1:27:D8:BC:92:38:39:8C:6B:F2:2B:41:EB:A7:81:1B:35 X509v3 Authority Key Identifier: keyid:68:6A:F4:1B:C3:3D:AE:F8:28:FA:B4:AE:4A:3A:0D:58:7B:AD:0D:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/aGr0G8M9rvgo-rSuSjoNWHutDT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aGr0G8M9rvgo-rSuSjoNWHutDT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/aGr0G8M9rvgo-rSuSjoNWHutDT8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:9b:5e:e5:1f:b7:ef:15:2e:a1:ff:7c:96:60:7a:6d:f7:91: d9:7f:cf:ae:83:aa:f8:75:93:a3:99:36:2e:be:f5:be:91:6b: f7:5b:b7:97:dd:7f:21:48:c7:6c:70:1d:65:3a:5e:ab:23:d7: 42:5a:d8:18:94:ff:e6:4e:79:37:ca:6f:81:af:3a:67:66:3d: 61:98:32:08:ef:3d:e3:94:fd:c2:dc:62:91:da:db:9e:3c:ea: 50:c7:f3:e2:a0:61:9a:48:21:f5:05:bd:fd:45:f0:77:b9:01: d0:ef:ba:bb:58:57:fb:92:99:3d:a2:b0:99:54:7c:c0:ac:ac: f6:fd:c5:34:9a:ca:2b:30:9f:20:84:b2:4d:6d:e7:94:5f:41: 44:7f:ac:ed:cd:4e:98:97:32:58:f5:a0:a2:a3:0f:e1:ce:9a: 34:ca:df:5d:46:b0:e1:27:d1:3b:b0:58:46:08:e4:5a:24:ff: 80:97:a3:12:73:3a:ee:66:fe:82:ba:75:01:8b:f7:b1:bb:eb: 3a:7e:bc:2b:95:61:f7:68:3d:10:c6:2e:5c:02:97:fa:8b:16: 66:64:0a:e8:0c:0b:c6:91:92:73:81:a9:fd:0f:78:26:fe:1b: 18:d5:c5:bc:e6:01:1d:db:db:d9:e9:05:8e:0a:43:75:90:c4: 75:2d:cf:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTREM0QxMTAvBgNVBAUTKDY4NkFGNDFCQzMzREFFRjgyOEZBQjRBRTRBM0EwRDU4 N0JBRDBEM0YwHhcNMjQwNTE5MDEyNDE4WhcNMjQwNTI2MDEyNDE4WjAYMRYwFAYD VQQDEw02NjQ5NTRjMy0zZGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7v2ov2iWuXaaaN9RtvncaW138X1eGJwuks+DnfMHxOkF/q13PuB2TJ8qoNe pFIZuzkvpKnM7usPjtr6JrokbqDxjyUhh47dau0j57d9cwfqIV2auRtPn8qD4vKt /R3uC8NAfv6jJHp8u3LZSs1XdcxrNBc5XsPJMSwwXg4sK8dujCzhBSgaqFNR/As7 1G4au/faIQFFbqMzXWU8F53W7fG9Bu++5kY1xvRrT4ID6sY6oJ3jNlsyGmNkuR/f Y2KEs0+lpjGLBMv/2nWCmdhJfHPpLvaYUVxGZ0yFhhqMgSo+Qnw/xnEfx0ZYNM6a vEzGg0p2woFYXubodoMq7RRrHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAx9OfEn 2LySODmMa/IrQeungRs1MB8GA1UdIwQYMBaAFGhq9BvDPa74KPq0rko6DVh7rQ0/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEQzRC9BNzBBOEZFRUQ4 QjkxMUVCQUJDMUY0ODVDNEY5QUUwMi9hR3IwRzhNOXJ2Z28tclN1U2pvTldIdXRE VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2FHcjBHOE05cnZnby1yU3VTam9OV0h1dERUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEQzRC9BNzBBOEZFRUQ4QjkxMUVCQUJDMUY0ODVDNEY5QUUwMi9hR3IwRzhNOXJ2 Z28tclN1U2pvTldIdXREVDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbm17lH7fvFS6h/3yWYHpt95HZf8+ug6r4dZOjmTYuvvW+kWv3W7eX 3X8hSMdscB1lOl6rI9dCWtgYlP/mTnk3ym+BrzpnZj1hmDII7z3jlP3C3GKR2tue POpQx/PioGGaSCH1Bb39RfB3uQHQ77q7WFf7kpk9orCZVHzArKz2/cU0msorMJ8g hLJNbeeUX0FEf6ztzU6YlzJY9aCiow/hzpo0yt9dRrDhJ9E7sFhGCORaJP+Al6MS czruZv6CunUBi/exu+s6frwrlWH3aD0Qxi5cApf6ixZmZAroDAvGkZJzgan9D3gm /hsY1cW85gEd29vZ6QWOCkN1kMR1Lc8c -----END CERTIFICATE-----Generated at Sun May 19 02:59:16 2024 by rpki-client on console-ams.rpki-client.org