$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft File: rHyecYIsBWGFGGRT-WCywejKlOM.mft (raw, json) Hash identifier: RixGiAr8UxGZVrUNoP/a6p2AlFkJ3/WZi9K9XVMrxag= Subject key identifier: 0A:5A:70:17:6E:68:8C:5C:9C:8E:DB:A9:4C:F0:C6:D7:A7:7F:96:18 Authority key identifier: AC:7C:9E:71:82:2C:05:61:85:18:64:53:F9:60:B2:C1:E8:CA:94:E3 Certificate issuer: /CN=A91F4BB3/serialNumber=AC7C9E71822C056185186453F960B2C1E8CA94E3 Certificate serial: 0395 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft Manifest number: 038D Signing time: Fri 31 May 2024 03:18:34 +0000 Manifest this update: Fri 31 May 2024 03:18:33 +0000 Manifest next update: Fri 07 Jun 2024 03:18:33 +0000 Files and hashes: 1: rHyecYIsBWGFGGRT-WCywejKlOM.crl (hash: gwXHEn80/Y5unFHouOR/cipI7EVQ6aXrirg/AJypLY0=) 2: AFDD7E16DA6011EC9A304C24C4F9AE02.roa (hash: A4cao1ypJynEcdW6HC5d/P241PVIeOu+8/rdLAZLoLo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.crl rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 03:18:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 917 (0x395) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4BB3/serialNumber=AC7C9E71822C056185186453F960B2C1E8CA94E3 Validity Not Before: May 31 03:18:33 2024 GMT Not After : Jun 7 03:18:33 2024 GMT Subject: CN=66594189-649e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1d:23:12:06:8a:89:4f:d5:ea:5b:3d:f3:5c: 24:f0:c9:62:e5:8a:93:e7:be:58:fd:b6:e2:e3:94: 5d:26:01:97:d8:ed:3f:dd:d5:5d:f6:6a:e9:85:36: c3:03:ba:ee:13:bb:c9:b7:2f:72:e6:0d:38:1d:0f: 8d:7c:14:d4:b1:ae:55:dd:49:0e:56:89:d5:2e:af: 79:d9:46:1e:a2:d7:e5:38:d4:75:ca:90:da:90:5b: c2:d4:86:cf:d9:83:3f:d0:38:01:d0:ca:3b:7b:83: 76:0b:04:1b:39:62:ee:1f:11:c3:9c:3b:9b:b8:21: 19:11:f9:cf:8c:a1:16:fa:11:10:33:eb:50:15:23: 8f:f1:2a:86:9a:07:3d:25:5d:9a:89:7d:3b:aa:5e: 35:41:81:4b:5e:81:3b:a1:17:b9:f9:14:fa:5c:43: 2a:6a:6c:33:79:75:bf:4a:26:20:ac:85:ab:cf:b8: ad:14:7c:3b:1a:34:fa:ab:48:f2:b9:11:36:e4:60: 34:e5:b2:3f:36:a2:f7:84:49:15:b4:38:a7:04:c1: bc:4b:38:0a:c1:f4:a8:e5:fd:5f:c6:66:10:c5:7b: 60:84:f9:ff:8a:fc:03:0a:61:82:08:3f:4b:87:5a: 3e:50:f2:ed:87:b7:89:2d:39:f7:d2:36:d7:01:c1: 04:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:5A:70:17:6E:68:8C:5C:9C:8E:DB:A9:4C:F0:C6:D7:A7:7F:96:18 X509v3 Authority Key Identifier: keyid:AC:7C:9E:71:82:2C:05:61:85:18:64:53:F9:60:B2:C1:E8:CA:94:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:53:a2:13:1f:a2:22:fb:5c:c4:16:52:90:32:cf:49:0c:72: 3c:b9:24:c3:14:6f:6c:90:7b:05:f9:d0:db:32:c6:14:25:1f: af:fe:4b:44:74:4b:2b:16:eb:99:11:85:f4:ee:c2:4b:a3:0a: 16:96:bd:08:f8:ae:72:cc:16:10:bc:f7:b0:39:8a:df:c4:1d: 2d:ff:37:b4:b5:c1:33:0b:a4:3e:af:50:43:76:23:b1:49:6f: 9b:2e:cb:d2:0b:6f:96:4c:f0:fa:29:c5:1b:61:92:96:ec:08: 5a:3e:79:33:31:06:fd:2a:2e:ff:86:dd:85:22:ef:ed:cb:51: 52:13:56:a5:3b:c0:83:21:d0:e7:74:b4:82:df:56:7c:d6:67: 8b:9f:2e:16:c4:ca:73:fc:1f:ee:bf:5a:a2:c9:74:51:81:14: 11:94:39:71:a3:5a:50:7f:ee:c6:d8:30:9c:20:71:36:43:ae: 23:96:2d:76:08:d2:89:f4:e9:96:13:fc:be:f2:80:8e:1b:e9: 7e:be:40:c8:66:33:12:c5:ef:ce:d9:d1:e2:2c:70:3a:4b:42: 46:7f:c2:58:a1:dc:25:4b:9e:fe:7f:f9:b9:c3:cf:cb:a5:35: 83:c0:33:a6:b0:0d:f8:5c:f3:63:56:c4:ae:c8:9e:5f:c6:6b: b9:5a:0b:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCQjMxMTAvBgNVBAUTKEFDN0M5RTcxODIyQzA1NjE4NTE4NjQ1M0Y5NjBCMkMx RThDQTk0RTMwHhcNMjQwNTMxMDMxODMzWhcNMjQwNjA3MDMxODMzWjAYMRYwFAYD VQQDEw02NjU5NDE4OS02NDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqh0jEgaKiU/V6ls981wk8Mli5YqT575Y/bbi45RdJgGX2O0/3dVd9mrphTbD A7ruE7vJty9y5g04HQ+NfBTUsa5V3UkOVonVLq952UYeotflONR1ypDakFvC1IbP 2YM/0DgB0Mo7e4N2CwQbOWLuHxHDnDubuCEZEfnPjKEW+hEQM+tQFSOP8SqGmgc9 JV2aiX07ql41QYFLXoE7oRe5+RT6XEMqamwzeXW/SiYgrIWrz7itFHw7GjT6q0jy uRE25GA05bI/NqL3hEkVtDinBMG8SzgKwfSo5f1fxmYQxXtghPn/ivwDCmGCCD9L h1o+UPLth7eJLTn30jbXAcEEaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFApacBdu aIxcnI7bqUzwxtenf5YYMB8GA1UdIwQYMBaAFKx8nnGCLAVhhRhkU/lgssHoypTj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEJCMy9BRUE4NzNFQzVC QzcxMUVDQUQ1OEIwNUZDNEY5QUUwMi9ySHllY1lJc0JXR0ZHR1JULVdDeXdlakts T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JIeWVjWUlzQldHRkdHUlQtV0N5d2VqS2xPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEJCMy9BRUE4NzNFQzVCQzcxMUVDQUQ1OEIwNUZDNEY5QUUwMi9ySHllY1lJc0JX R0ZHR1JULVdDeXdlaktsT00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMU6ITH6Ii+1zEFlKQMs9JDHI8uSTDFG9skHsF+dDbMsYUJR+v/ktE dEsrFuuZEYX07sJLowoWlr0I+K5yzBYQvPewOYrfxB0t/ze0tcEzC6Q+r1BDdiOx SW+bLsvSC2+WTPD6KcUbYZKW7AhaPnkzMQb9Ki7/ht2FIu/ty1FSE1alO8CDIdDn dLSC31Z81meLny4WxMpz/B/uv1qiyXRRgRQRlDlxo1pQf+7G2DCcIHE2Q64jli12 CNKJ9OmWE/y+8oCOG+l+vkDIZjMSxe/O2dHiLHA6S0JGf8JYodwlS57+f/m5w8/L pTWDwDOmsA34XPNjVsSuyJ5fxmu5Wgs1 -----END CERTIFICATE-----Generated at Fri May 31 06:49:30 2024 by rpki-client on console-ams.rpki-client.org