$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.mft File: cOaM6FoDjZ4wcEODfKbmsaZglu4.mft (raw, json) Hash identifier: lUL5Ryp145MZBNh6Ew7FfrbfeLrsiAMLkAib6i23QaI= Subject key identifier: AD:6F:39:1E:0A:A3:DB:5C:C6:63:3B:C9:2B:74:89:7F:F6:14:25:56 Authority key identifier: 70:E6:8C:E8:5A:03:8D:9E:30:70:43:83:7C:A6:E6:B1:A6:60:96:EE Certificate issuer: /CN=A91F6ADE/serialNumber=70E68CE85A038D9E307043837CA6E6B1A66096EE Certificate serial: 03C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOaM6FoDjZ4wcEODfKbmsaZglu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.mft Manifest number: 03C0 Signing time: Sun 19 May 2024 02:27:18 +0000 Manifest this update: Sun 19 May 2024 02:27:18 +0000 Manifest next update: Sun 26 May 2024 02:27:18 +0000 Files and hashes: 1: cOaM6FoDjZ4wcEODfKbmsaZglu4.crl (hash: mSwW9mRSIDFwg252pPcObWZoe0e7KDwJG1xOPt3A1Ig=) 2: FD0DCDCA41E111EC98FA0C0AC4F9AE02.roa (hash: CmeUT84NeElncSRsSraCvKbxAKAFDqpX53sicTxwL+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.crl rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOaM6FoDjZ4wcEODfKbmsaZglu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 965 (0x3c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6ADE/serialNumber=70E68CE85A038D9E307043837CA6E6B1A66096EE Validity Not Before: May 19 02:27:18 2024 GMT Not After : May 26 02:27:18 2024 GMT Subject: CN=66496386-d76b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:69:6d:36:d4:76:3b:88:72:6b:a0:19:65:3e: 2d:6d:05:4e:7f:4c:85:df:5f:5f:80:af:b6:66:d6: 4a:97:85:64:cc:38:95:aa:99:4e:3c:95:7b:72:7c: 2d:65:54:54:78:d9:1d:64:5b:37:02:43:0b:fb:dc: 10:b0:00:23:02:08:c9:47:1d:d7:52:93:3a:ad:27: c4:12:ac:25:d1:ca:84:fa:26:47:d6:ff:49:25:68: 0e:73:26:83:63:03:45:a4:8f:7a:2b:61:19:25:fa: 4e:c8:3f:62:83:08:7c:13:df:73:ea:3e:9c:54:f5: 02:f2:cd:2f:0e:1b:72:93:00:35:65:cc:62:37:9f: ac:d7:1b:9d:84:fd:da:89:93:fe:3e:46:af:6b:fa: 1b:fc:b5:c5:a3:fc:31:76:96:0b:df:3e:22:bf:e3: d7:9d:53:75:33:1e:41:48:ad:9a:d0:72:c5:30:90: d8:8d:34:e6:40:e5:61:35:80:82:9c:11:81:73:24: 79:2e:34:e4:d7:16:d4:ef:30:1b:63:43:29:db:ba: eb:31:90:80:6e:2e:c3:77:b2:16:34:2e:a5:73:19: 5b:14:4f:90:53:99:86:99:9f:84:db:61:26:71:7f: c6:64:7a:77:ca:12:5c:d7:4a:b6:61:dc:be:5c:56: c1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:6F:39:1E:0A:A3:DB:5C:C6:63:3B:C9:2B:74:89:7F:F6:14:25:56 X509v3 Authority Key Identifier: keyid:70:E6:8C:E8:5A:03:8D:9E:30:70:43:83:7C:A6:E6:B1:A6:60:96:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOaM6FoDjZ4wcEODfKbmsaZglu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:c2:65:52:b4:a2:30:05:e1:52:41:67:74:4d:29:2b:f1:23: 2c:9f:8a:27:e6:1c:4a:b6:29:1c:c6:2c:1f:73:7c:91:82:b2: 9f:fe:a3:fa:2f:08:1f:de:4b:e0:90:f0:92:c3:7e:35:9f:75: 43:b4:f8:51:3e:24:f0:ee:8f:0a:1c:c3:b3:8b:46:04:19:6c: 41:b3:f1:84:bf:91:62:25:38:f8:dd:5c:98:94:33:66:14:f3: 50:2e:47:d0:1a:a8:02:44:1c:a5:82:2e:7d:f4:2c:6e:44:98: 45:d7:7f:db:a1:bc:cf:b9:52:c0:7b:e4:9d:c5:dd:63:bb:a3: 78:ca:d9:fe:61:53:89:27:73:10:ab:8c:04:37:9a:0d:27:ca: 4f:5a:42:2f:10:a8:22:6b:4f:6b:95:0f:37:f0:0c:f1:b8:c5: 7f:7f:96:23:a4:b2:db:87:19:46:91:b4:12:10:83:17:4d:97: e4:ca:96:ce:d9:5b:77:dc:7b:f7:a7:02:d8:e1:d1:95:fd:36: ea:9e:c0:df:03:15:f2:18:d3:3d:28:c5:e7:53:33:a0:29:0b: 8b:be:ac:89:95:7a:ca:35:c3:67:1a:b6:cd:47:8d:aa:32:27: 2b:f7:43:ba:8b:6f:fd:f0:03:88:1b:67:d4:ee:35:92:8a:4f: b0:0d:3d:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZBREUxMTAvBgNVBAUTKDcwRTY4Q0U4NUEwMzhEOUUzMDcwNDM4MzdDQTZFNkIx QTY2MDk2RUUwHhcNMjQwNTE5MDIyNzE4WhcNMjQwNTI2MDIyNzE4WjAYMRYwFAYD VQQDEw02NjQ5NjM4Ni1kNzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmltNtR2O4hya6AZZT4tbQVOf0yF319fgK+2ZtZKl4VkzDiVqplOPJV7cnwt ZVRUeNkdZFs3AkML+9wQsAAjAgjJRx3XUpM6rSfEEqwl0cqE+iZH1v9JJWgOcyaD YwNFpI96K2EZJfpOyD9igwh8E99z6j6cVPUC8s0vDhtykwA1ZcxiN5+s1xudhP3a iZP+Pkava/ob/LXFo/wxdpYL3z4iv+PXnVN1Mx5BSK2a0HLFMJDYjTTmQOVhNYCC nBGBcyR5LjTk1xbU7zAbY0Mp27rrMZCAbi7Dd7IWNC6lcxlbFE+QU5mGmZ+E22Em cX/GZHp3yhJc10q2Ydy+XFbBdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK1vOR4K o9tcxmM7ySt0iX/2FCVWMB8GA1UdIwQYMBaAFHDmjOhaA42eMHBDg3ym5rGmYJbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkFERS8yODczOUQzQTQx REYxMUVDQTNEQzJGODVDNEY5QUUwMi9jT2FNNkZvRGpaNHdjRU9EZktibXNhWmds dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NPYU02Rm9Ealo0d2NFT0RmS2Jtc2FaZ2x1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkFERS8yODczOUQzQTQxREYxMUVDQTNEQzJGODVDNEY5QUUwMi9jT2FNNkZvRGpa NHdjRU9EZktibXNhWmdsdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJwmVStKIwBeFSQWd0TSkr8SMsn4on5hxKtikcxiwfc3yRgrKf/qP6 Lwgf3kvgkPCSw341n3VDtPhRPiTw7o8KHMOzi0YEGWxBs/GEv5FiJTj43VyYlDNm FPNQLkfQGqgCRBylgi599CxuRJhF13/bobzPuVLAe+Sdxd1ju6N4ytn+YVOJJ3MQ q4wEN5oNJ8pPWkIvEKgia09rlQ838AzxuMV/f5YjpLLbhxlGkbQSEIMXTZfkypbO 2Vt33Hv3pwLY4dGV/TbqnsDfAxXyGNM9KMXnUzOgKQuLvqyJlXrKNcNnGrbNR42q Micr90O6i2/98AOIG2fU7jWSik+wDT10 -----END CERTIFICATE-----Generated at Sun May 19 03:38:17 2024 by rpki-client on console-ams.rpki-client.org