$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft File: _g28w89QoeDrA9MSluOfuogMGQU.mft (raw, json) Hash identifier: A321y5G7msK5uYzuds0+quQ4SCd01jjkhuOUc5ZPg0o= Subject key identifier: 54:95:6A:C0:8C:C9:B5:46:58:CE:BE:F0:1D:9F:44:EA:A0:69:06:E7 Authority key identifier: FE:0D:BC:C3:CF:50:A1:E0:EB:03:D3:12:96:E3:9F:BA:88:0C:19:05 Certificate issuer: /CN=A91F7FEA/serialNumber=FE0DBCC3CF50A1E0EB03D31296E39FBA880C1905 Certificate serial: 09D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft Manifest number: 09C4 Signing time: Thu 30 May 2024 21:15:18 +0000 Manifest this update: Thu 30 May 2024 21:15:18 +0000 Manifest next update: Thu 06 Jun 2024 21:15:18 +0000 Files and hashes: 1: _g28w89QoeDrA9MSluOfuogMGQU.crl (hash: fsC2eHZh80kM+t34NYNagiFoRpcf1b+xuSfu+JC3Ls8=) 2: AF5AC6B69E3F11EEA6B6CB0DC4F9AE02.roa (hash: XDiNSyvSEtWXI6wHIar737kbkmX0g3of9RTGZZqXm0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.crl rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 21:15:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2513 (0x9d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7FEA/serialNumber=FE0DBCC3CF50A1E0EB03D31296E39FBA880C1905 Validity Not Before: May 30 21:15:18 2024 GMT Not After : Jun 6 21:15:18 2024 GMT Subject: CN=6658ec66-71ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:15:ee:24:4a:50:2a:64:cf:21:79:46:3d:13: 98:35:5f:04:1f:6e:16:c9:ac:74:64:1b:49:d7:37: bf:a2:05:66:1e:aa:f3:b0:5a:45:4f:52:5b:2c:34: 43:0f:f1:3a:ac:9d:8e:63:08:69:5e:d0:7b:b5:f3: 82:6f:8c:ce:d5:d4:9d:11:01:33:ac:08:92:39:bd: 27:f3:ab:96:b9:fb:71:57:fb:54:94:0b:e0:2a:68: d5:4e:e4:09:b7:f3:18:ba:62:47:cd:dc:f0:cf:eb: 22:96:25:f6:3d:f5:54:91:cf:8e:90:37:d9:65:b0: 2f:9a:6e:c0:13:a1:cc:1b:4e:fa:b8:26:7c:66:a6: ba:cd:65:e7:98:78:c7:f2:21:7b:fb:d6:00:f1:de: 80:7c:04:2d:72:02:e1:79:67:8d:ca:47:2a:1a:ca: 45:c9:b0:8c:9b:15:7d:88:11:d1:1d:d6:30:1a:82: 74:cc:6d:8e:38:69:ac:d8:60:27:86:6d:5f:3b:51: f6:1f:3f:d3:84:c7:d7:45:9b:69:33:ff:74:d8:3f: 3c:97:17:38:7f:a5:63:09:70:01:8f:51:7d:74:e7: d2:95:7a:e6:a9:27:6f:de:e4:16:bb:84:f4:76:f1: 1e:de:03:51:15:e6:08:8f:8e:a8:d5:65:a7:ca:77: e1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:95:6A:C0:8C:C9:B5:46:58:CE:BE:F0:1D:9F:44:EA:A0:69:06:E7 X509v3 Authority Key Identifier: keyid:FE:0D:BC:C3:CF:50:A1:E0:EB:03:D3:12:96:E3:9F:BA:88:0C:19:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:7c:92:47:a0:3e:5b:28:20:c5:ea:56:48:09:1e:c0:41:18: f6:61:e6:6d:eb:ec:22:a5:35:c0:e9:ef:52:02:dc:e0:60:dd: 76:27:f6:ea:44:3b:ed:03:5c:54:49:55:1c:d4:4d:85:95:ca: 0c:8a:e3:98:6b:6d:f5:d1:09:25:2f:69:7e:59:3a:34:12:5e: 1c:52:1b:e6:8a:ea:8a:6f:72:e5:63:90:f9:83:82:c3:cc:9d: 46:87:6c:03:d1:98:e1:ef:5c:90:93:1f:0a:20:12:55:18:aa: 88:70:94:a1:21:d6:e1:85:66:4f:02:52:e1:8a:2e:f4:10:13: 6d:be:54:fc:32:01:e2:35:ec:2d:44:c7:86:3a:1b:e7:89:fe: 28:92:23:1d:5a:bc:3a:ea:98:8b:04:c7:bd:af:60:4d:bb:8e: 36:1f:e7:b1:2c:0b:61:d8:e0:98:0b:4f:1d:68:82:d9:f7:a0: b1:c7:d4:60:89:08:85:5c:1a:f1:2c:4b:e8:2e:ed:31:d2:2f: f1:e6:cf:ec:ef:79:36:dd:e8:5e:3f:9c:a0:b7:a9:6f:be:2c: 9b:17:b8:5a:08:06:89:85:c8:43:ba:a1:8a:d2:0e:34:da:27: 83:82:66:54:cc:66:28:ea:4d:f5:72:3f:9f:bc:68:fe:25:0f: d2:32:2f:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdGRUExMTAvBgNVBAUTKEZFMERCQ0MzQ0Y1MEExRTBFQjAzRDMxMjk2RTM5RkJB ODgwQzE5MDUwHhcNMjQwNTMwMjExNTE4WhcNMjQwNjA2MjExNTE4WjAYMRYwFAYD VQQDEw02NjU4ZWM2Ni03MWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxXuJEpQKmTPIXlGPROYNV8EH24Wyax0ZBtJ1ze/ogVmHqrzsFpFT1JbLDRD D/E6rJ2OYwhpXtB7tfOCb4zO1dSdEQEzrAiSOb0n86uWuftxV/tUlAvgKmjVTuQJ t/MYumJHzdzwz+siliX2PfVUkc+OkDfZZbAvmm7AE6HMG076uCZ8Zqa6zWXnmHjH 8iF7+9YA8d6AfAQtcgLheWeNykcqGspFybCMmxV9iBHRHdYwGoJ0zG2OOGms2GAn hm1fO1H2Hz/ThMfXRZtpM/902D88lxc4f6VjCXABj1F9dOfSlXrmqSdv3uQWu4T0 dvEe3gNRFeYIj46o1WWnynfhlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFSVasCM ybVGWM6+8B2fROqgaQbnMB8GA1UdIwQYMBaAFP4NvMPPUKHg6wPTEpbjn7qIDBkF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0ZFQS8xRUUzQUVFQzYw NDgxMUVBOEM2OTBCMzhDNEY5QUUwMi9fZzI4dzg5UW9lRHJBOU1TbHVPZnVvZ01H UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19nMjh3ODlRb2VEckE5TVNsdU9mdW9nTUdRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0ZFQS8xRUUzQUVFQzYwNDgxMUVBOEM2OTBCMzhDNEY5QUUwMi9fZzI4dzg5UW9l RHJBOU1TbHVPZnVvZ01HUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCfJJHoD5bKCDF6lZICR7AQRj2YeZt6+wipTXA6e9SAtzgYN12J/bq RDvtA1xUSVUc1E2FlcoMiuOYa2310QklL2l+WTo0El4cUhvmiuqKb3LlY5D5g4LD zJ1Gh2wD0Zjh71yQkx8KIBJVGKqIcJShIdbhhWZPAlLhii70EBNtvlT8MgHiNewt RMeGOhvnif4okiMdWrw66piLBMe9r2BNu442H+exLAth2OCYC08daILZ96Cxx9Rg iQiFXBrxLEvoLu0x0i/x5s/s73k23eheP5ygt6lvviybF7haCAaJhchDuqGK0g40 2ieDgmZUzGYo6k31cj+fvGj+JQ/SMi/u -----END CERTIFICATE-----Generated at Thu May 30 23:29:16 2024 by rpki-client on console-ams.rpki-client.org