$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAEE4/9C26E6C82FDE11ECAD747F68C4F9AE02/c8DgGJD_MGdgEGKhLlS9VDeQkbY.mft File: c8DgGJD_MGdgEGKhLlS9VDeQkbY.mft (raw, json) Hash identifier: McS6lMbyC5NYB7cgPTqRYEPEexv4um2P8EZAg7/fGfg= Subject key identifier: 99:E2:DB:9B:E1:B2:03:A7:0A:22:65:B0:39:41:68:5D:B0:52:12:A1 Authority key identifier: 73:C0:E0:18:90:FF:30:67:60:10:62:A1:2E:54:BD:54:37:90:91:B6 Certificate issuer: /CN=A91FAEE4/serialNumber=73C0E01890FF3067601062A12E54BD54379091B6 Certificate serial: 03F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8DgGJD_MGdgEGKhLlS9VDeQkbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAEE4/9C26E6C82FDE11ECAD747F68C4F9AE02/c8DgGJD_MGdgEGKhLlS9VDeQkbY.mft Manifest number: 03EE Signing time: Sun 19 May 2024 02:14:37 +0000 Manifest this update: Sun 19 May 2024 02:14:36 +0000 Manifest next update: Sun 26 May 2024 02:14:36 +0000 Files and hashes: 1: c8DgGJD_MGdgEGKhLlS9VDeQkbY.crl (hash: lPxcxisFG+PSWUz+eGhD3PPzEoIrBOeCzF3c/CECOQU=) 2: 601148222FE311EC9A82B173C4F9AE02.roa (hash: arGiPJ4aSId/Rq1tDlbVldQVC4fEL7lNvLpGWYgnLrk=) 3: 163AF95074D011ECA22BB248C4F9AE02.roa (hash: nT7W5fCvcadMCKJHPJK2dBFbq1TW+D8Lst/I80jqSUE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAEE4/9C26E6C82FDE11ECAD747F68C4F9AE02/c8DgGJD_MGdgEGKhLlS9VDeQkbY.crl rsync://rpki.apnic.net/member_repository/A91FAEE4/9C26E6C82FDE11ECAD747F68C4F9AE02/c8DgGJD_MGdgEGKhLlS9VDeQkbY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8DgGJD_MGdgEGKhLlS9VDeQkbY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1013 (0x3f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAEE4/serialNumber=73C0E01890FF3067601062A12E54BD54379091B6 Validity Not Before: May 19 02:14:36 2024 GMT Not After : May 26 02:14:36 2024 GMT Subject: CN=6649608c-9c94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:52:51:87:e3:4c:45:e1:c1:98:d4:c2:83:b0: 51:3f:0d:e9:56:ac:96:3e:e4:6a:5c:cc:7d:7e:b4: 09:ad:8f:0a:81:6c:80:ce:76:9e:85:8b:2b:2e:e6: 17:21:58:6c:6e:2e:4d:ab:9d:e6:f3:d2:f4:fa:76: 2b:eb:94:d5:6d:bd:fc:30:a2:6a:2e:78:2c:ac:fe: e5:11:9c:91:22:06:a8:ee:52:e6:84:57:02:28:0e: c4:6b:e1:56:db:fb:79:56:aa:de:2e:d3:ec:b0:0b: dd:30:fe:e2:86:e3:ae:6d:ac:5b:9f:bc:ab:de:f0: 90:3c:e8:93:bc:44:d4:5f:51:2e:d4:b2:fa:08:3f: c2:db:dd:3f:5a:7c:48:9e:85:a9:6e:bb:74:f6:56: 8f:0e:6e:b8:f7:36:f1:04:3e:b0:f1:06:c6:f1:ea: 70:13:8e:ff:e3:7f:ac:1a:b8:04:f9:bb:2f:64:5c: 1c:fb:c9:2f:d9:36:22:68:24:72:d8:0a:7c:69:9b: 76:67:7b:74:4c:78:55:9c:c6:01:17:b7:80:0b:00: 0d:65:9c:74:b7:87:23:df:fa:12:88:a7:48:69:de: 7a:b8:0a:e8:ad:e0:c7:99:45:fd:83:b8:1f:63:4e: 1e:a9:81:54:34:51:45:0b:88:70:79:de:b6:52:6d: 0e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E2:DB:9B:E1:B2:03:A7:0A:22:65:B0:39:41:68:5D:B0:52:12:A1 X509v3 Authority Key Identifier: keyid:73:C0:E0:18:90:FF:30:67:60:10:62:A1:2E:54:BD:54:37:90:91:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAEE4/9C26E6C82FDE11ECAD747F68C4F9AE02/c8DgGJD_MGdgEGKhLlS9VDeQkbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8DgGJD_MGdgEGKhLlS9VDeQkbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAEE4/9C26E6C82FDE11ECAD747F68C4F9AE02/c8DgGJD_MGdgEGKhLlS9VDeQkbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:46:23:6f:ae:de:0b:1a:b3:95:97:68:ac:fc:9c:16:99:17: 61:3c:49:f0:52:88:e1:42:ef:02:47:1d:69:c6:05:7d:f0:5c: 9d:6a:03:e1:c1:34:a3:c1:78:c7:51:ec:e5:4d:f5:4d:93:e8: 48:dd:bd:3f:49:40:76:9e:57:b4:67:7b:f0:01:4a:f4:e0:21: 46:79:66:87:7a:c8:d8:11:a8:2b:b3:72:49:4c:55:e1:83:b5: e5:df:ee:2b:bf:3f:08:61:84:d6:2e:f0:47:75:82:65:b5:ec: 25:4f:40:e4:17:37:59:44:c3:69:b3:89:cc:3c:14:cb:ec:66: 89:3a:bd:f7:78:4c:4f:c5:0f:a6:78:1a:9d:ad:60:1d:a9:bf: 8f:4c:e3:8f:55:23:fc:a6:aa:88:1f:37:51:29:c8:ad:0c:dd: 61:d4:d3:9f:4a:0e:af:bd:74:02:e5:31:f9:0e:5c:cd:fa:a2: 1c:62:fd:b6:ac:78:85:25:0d:d4:32:99:be:fa:20:57:1e:f8: 19:70:af:92:22:dd:8d:06:78:24:ac:48:a3:df:4c:16:e9:a3: 72:60:75:10:64:a9:1b:70:dd:1a:6e:06:8d:dc:d3:bd:c9:86: 14:f0:2f:9d:b0:82:91:0b:39:5b:f1:14:10:20:94:3e:b5:af: 4e:f0:cb:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFFRTQxMTAvBgNVBAUTKDczQzBFMDE4OTBGRjMwNjc2MDEwNjJBMTJFNTRCRDU0 Mzc5MDkxQjYwHhcNMjQwNTE5MDIxNDM2WhcNMjQwNTI2MDIxNDM2WjAYMRYwFAYD VQQDEw02NjQ5NjA4Yy05Yzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFJRh+NMReHBmNTCg7BRPw3pVqyWPuRqXMx9frQJrY8KgWyAznaehYsrLuYX IVhsbi5Nq53m89L0+nYr65TVbb38MKJqLngsrP7lEZyRIgao7lLmhFcCKA7Ea+FW 2/t5VqreLtPssAvdMP7ihuOubaxbn7yr3vCQPOiTvETUX1Eu1LL6CD/C290/WnxI noWpbrt09laPDm649zbxBD6w8QbG8epwE47/43+sGrgE+bsvZFwc+8kv2TYiaCRy 2Ap8aZt2Z3t0THhVnMYBF7eACwANZZx0t4cj3/oSiKdIad56uAroreDHmUX9g7gf Y04eqYFUNFFFC4hwed62Um0OFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJni25vh sgOnCiJlsDlBaF2wUhKhMB8GA1UdIwQYMBaAFHPA4BiQ/zBnYBBioS5UvVQ3kJG2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUVFNC85QzI2RTZDODJG REUxMUVDQUQ3NDdGNjhDNEY5QUUwMi9jOERnR0pEX01HZGdFR0toTGxTOVZEZVFr YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M4RGdHSkRfTUdkZ0VHS2hMbFM5VkRlUWtiWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUVFNC85QzI2RTZDODJGREUxMUVDQUQ3NDdGNjhDNEY5QUUwMi9jOERnR0pEX01H ZGdFR0toTGxTOVZEZVFrYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPRiNvrt4LGrOVl2is/JwWmRdhPEnwUojhQu8CRx1pxgV98FydagPh wTSjwXjHUezlTfVNk+hI3b0/SUB2nle0Z3vwAUr04CFGeWaHesjYEagrs3JJTFXh g7Xl3+4rvz8IYYTWLvBHdYJltewlT0DkFzdZRMNps4nMPBTL7GaJOr33eExPxQ+m eBqdrWAdqb+PTOOPVSP8pqqIHzdRKcitDN1h1NOfSg6vvXQC5TH5DlzN+qIcYv22 rHiFJQ3UMpm++iBXHvgZcK+SIt2NBngkrEij30wW6aNyYHUQZKkbcN0abgaN3NO9 yYYU8C+dsIKRCzlb8RQQIJQ+ta9O8Mtx -----END CERTIFICATE-----Generated at Sun May 19 02:59:17 2024 by rpki-client on console-ams.rpki-client.org