$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft File: acgZi9o_0JBT9CVT1z7qFRIdJBw.mft (raw, json) Hash identifier: xbti+AW+9QsWj/Pmp1nN7CrGh5DMK5B4pl45EMTCZk8= Subject key identifier: 18:58:BA:24:77:59:94:45:FC:AB:45:3C:4C:26:F4:0F:7A:61:B7:A3 Authority key identifier: 69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C Certificate issuer: /CN=A91E4F66/serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C Certificate serial: 0A92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft Manifest number: 0A88 Signing time: Sat 18 May 2024 20:14:41 +0000 Manifest this update: Sat 18 May 2024 20:14:41 +0000 Manifest next update: Sat 25 May 2024 20:14:41 +0000 Files and hashes: 1: acgZi9o_0JBT9CVT1z7qFRIdJBw.crl (hash: BM0xT03EZ9N+fhCZmovBERS41jnjKQmdGKbzw9R0gK8=) 2: A3BE70CCD5AE11EE909D5C40C4F9AE02.roa (hash: mlqYWvuNrrSnEm+0B66h/nKV5Ub3D0iTDWSnbfoE0rw=) 3: C53629FEEACE11EEA8513D34C4F9AE02.roa (hash: cNSIKDFXPz0jEje5WNOnX3Fx9CZkEBcmkqyne+pMwE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2706 (0xa92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4F66/serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C Validity Not Before: May 18 20:14:41 2024 GMT Not After : May 25 20:14:41 2024 GMT Subject: CN=66490c31-8b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ee:ca:6f:0a:3c:98:15:16:08:20:3c:89:2b: 15:12:8d:17:ee:80:45:bd:23:59:c3:9a:98:88:b1: fd:12:8c:f3:4b:d3:f4:db:2d:ad:7e:65:d4:4e:1f: ed:74:81:c4:47:59:e3:b6:4f:44:e6:59:0a:10:89: d6:5f:32:2e:88:bf:1e:57:cf:cd:58:7b:bf:1c:ad: 4d:6d:0f:d7:10:bb:18:f8:20:0d:f4:03:3e:73:b2: e1:93:a8:51:55:33:27:7e:0f:18:d0:00:dc:ab:36: 3d:9a:d6:71:87:75:59:4d:6f:3d:c8:e7:40:5c:10: 39:18:32:54:c7:92:8d:bf:15:41:89:6d:85:81:80: 85:52:aa:79:51:49:63:61:b2:cb:3e:0f:31:d7:c7: a3:3f:87:34:25:4f:38:d8:4a:54:49:1a:0e:25:be: 13:52:37:1a:54:5b:16:75:ff:67:fd:7d:78:dd:51: 5d:e8:6d:96:14:a6:27:7f:e0:40:2d:bb:b0:a3:0e: fa:58:e3:70:52:9f:eb:0b:41:37:a2:7a:ea:55:96: d7:ca:f0:8c:f6:35:5f:62:93:b0:67:7c:32:06:96: 67:1e:a3:98:5e:76:08:0b:8b:96:5e:73:28:a5:80: 0f:75:34:5a:16:87:7a:94:8e:d3:3d:9c:bf:83:6e: 69:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:58:BA:24:77:59:94:45:FC:AB:45:3C:4C:26:F4:0F:7A:61:B7:A3 X509v3 Authority Key Identifier: keyid:69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:b4:3f:12:70:ef:01:7a:64:de:31:27:36:de:3b:4f:0c:cb: d8:77:d6:3a:47:91:54:ff:35:9e:17:9f:f5:86:de:6e:5a:04: 4b:da:26:92:0e:26:fd:28:01:c0:da:0d:cc:f5:df:0c:25:a6: cb:92:d8:0c:1b:fd:e3:91:b2:c2:93:00:42:02:2a:3e:e4:4b: e7:14:4e:39:52:86:0b:92:26:30:f2:3d:36:57:4e:a6:3f:b0: 25:10:8d:9c:4a:3b:c3:4f:e8:20:de:ec:2a:4b:ff:51:9a:80: bd:18:72:ba:fa:77:18:36:cb:87:8f:7e:9f:d6:17:b3:2c:4d: 0d:41:c2:3a:74:51:f1:73:3b:03:30:07:e7:b1:b6:f9:e7:3a: 00:cb:23:de:99:31:0a:43:40:db:cc:d5:8f:38:79:dc:80:8f: 80:03:f3:97:62:4f:7d:4e:48:a8:d2:9d:75:88:f1:1e:19:4c: 52:7e:fc:d8:de:95:2f:67:a3:b5:e9:62:59:a9:db:ca:f5:0d: 10:87:ce:5b:3d:db:5f:20:e0:a1:9e:62:64:de:b1:f0:94:d6: 89:2c:97:8a:ba:6e:dd:be:58:9b:af:0d:e4:5f:58:fa:02:e2: b9:b2:19:f9:19:df:0c:0e:b9:6b:2f:62:45:77:dc:32:1f:34: 75:44:a9:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRGNjYxMTAvBgNVBAUTKDY5QzgxOThCREEzRkQwOTA1M0Y0MjU1M0Q3M0VFQTE1 MTIxRDI0MUMwHhcNMjQwNTE4MjAxNDQxWhcNMjQwNTI1MjAxNDQxWjAYMRYwFAYD VQQDEw02NjQ5MGMzMS04YjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl+7Kbwo8mBUWCCA8iSsVEo0X7oBFvSNZw5qYiLH9EozzS9P02y2tfmXUTh/t dIHER1njtk9E5lkKEInWXzIuiL8eV8/NWHu/HK1NbQ/XELsY+CAN9AM+c7Lhk6hR VTMnfg8Y0ADcqzY9mtZxh3VZTW89yOdAXBA5GDJUx5KNvxVBiW2FgYCFUqp5UUlj YbLLPg8x18ejP4c0JU842EpUSRoOJb4TUjcaVFsWdf9n/X143VFd6G2WFKYnf+BA Lbuwow76WONwUp/rC0E3onrqVZbXyvCM9jVfYpOwZ3wyBpZnHqOYXnYIC4uWXnMo pYAPdTRaFod6lI7TPZy/g25pKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBhYuiR3 WZRF/KtFPEwm9A96YbejMB8GA1UdIwQYMBaAFGnIGYvaP9CQU/QlU9c+6hUSHSQc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEY2Ni9FNUY2NThBQTM2 OEExMUVBQjU3NDkyNzJDNEY5QUUwMi9hY2daaTlvXzBKQlQ5Q1ZUMXo3cUZSSWRK QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FjZ1ppOW9fMEpCVDlDVlQxejdxRlJJZEpCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEY2Ni9FNUY2NThBQTM2OEExMUVBQjU3NDkyNzJDNEY5QUUwMi9hY2daaTlvXzBK QlQ5Q1ZUMXo3cUZSSWRKQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCatD8ScO8BemTeMSc23jtPDMvYd9Y6R5FU/zWeF5/1ht5uWgRL2iaS Dib9KAHA2g3M9d8MJabLktgMG/3jkbLCkwBCAio+5EvnFE45UoYLkiYw8j02V06m P7AlEI2cSjvDT+gg3uwqS/9RmoC9GHK6+ncYNsuHj36f1hezLE0NQcI6dFHxczsD MAfnsbb55zoAyyPemTEKQ0DbzNWPOHncgI+AA/OXYk99Tkio0p11iPEeGUxSfvzY 3pUvZ6O16WJZqdvK9Q0Qh85bPdtfIOChnmJk3rHwlNaJLJeKum7dvlibrw3kX1j6 AuK5shn5Gd8MDrlrL2JFd9wyHzR1RKn+ -----END CERTIFICATE-----Generated at Sat May 18 21:31:32 2024 by rpki-client on console-ams.rpki-client.org