$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft File: -pTeOQiOw4pStpInmkLEr_tbc7E.mft (raw, json) Hash identifier: W38cK1ktVORpDdDwG+PFHO8VFRHP/cfG8JOoBIwtVY8= Subject key identifier: 8A:DA:5A:8D:BF:31:7F:E7:30:71:46:8E:F1:F9:C3:A5:F0:30:3D:C0 Authority key identifier: FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1 Certificate issuer: /CN=A91FEE70/serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1 Certificate serial: 0B7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft Manifest number: 0B6B Signing time: Sun 26 May 2024 19:38:57 +0000 Manifest this update: Sun 26 May 2024 19:38:56 +0000 Manifest next update: Sun 02 Jun 2024 19:38:56 +0000 Files and hashes: 1: -pTeOQiOw4pStpInmkLEr_tbc7E.crl (hash: 3zAOuZn9W4yldUfAdggRjKrI6J+mUd7Q43dTvX3hQ8k=) 2: B74426C88AA711EB876EF84BC4F9AE02.roa (hash: PM+7yjNUW+0HCriKrnBjjl10/XxF9A80OLBaAQvg4eE=) 3: B69D3A2A8AA711EB876EF84BC4F9AE02.roa (hash: GI0D4c+i8GztSKiMIzM0FDwwnqFG6gghVhxe7Xvgsdw=) 4: 33B6385E09E911EAA0C05451C4F9AE02.roa (hash: 1s/7qjoQVEcC3QQ1Qup7SEEfGC2IOmSmzbw/kmobCm4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 19:38:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2939 (0xb7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEE70/serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1 Validity Not Before: May 26 19:38:56 2024 GMT Not After : Jun 2 19:38:56 2024 GMT Subject: CN=66538fd0-cc83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:bc:5e:36:8b:bc:be:d4:f7:bd:b3:36:1b:62: ae:8f:81:0b:d8:a3:fa:94:f5:2c:1d:1e:1b:3c:97: ee:a3:d1:93:e8:97:8b:6e:29:8c:73:a1:4a:7b:c4: 8c:18:a6:27:d5:da:0f:59:15:2b:60:f1:3b:eb:97: a1:7a:b7:b9:51:ca:be:ed:80:f3:fe:77:49:f3:6f: 45:d8:e6:a2:bc:13:3c:55:47:9b:87:c5:c6:46:6e: 73:2b:a4:66:cb:da:4f:a2:49:e6:76:a3:fb:a2:89: 7b:6a:73:33:83:1b:39:82:aa:5b:10:36:0e:9d:ca: a8:f3:3f:96:43:1d:ff:6f:19:49:dd:8a:65:1e:60: 95:cd:7a:9a:d4:ad:45:00:cf:e6:3e:bf:4b:14:2f: e2:77:85:39:93:12:c6:b9:63:6c:d8:5f:3d:de:3d: 00:a0:64:6c:a8:6e:ed:08:3f:b3:0c:59:69:65:53: e0:a5:c0:89:2e:a4:cf:40:41:50:9a:e2:07:05:26: 5c:a8:6c:40:f5:95:5a:b4:a0:d0:4c:3a:0a:97:53: 3b:2c:7a:ff:36:9c:04:7c:c5:01:af:d2:c1:89:51: 62:25:64:8c:f3:a8:9e:3e:0c:e2:a6:40:33:04:20: e7:4d:bd:4b:e6:00:89:41:e1:bd:c8:50:d7:97:4f: 45:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:DA:5A:8D:BF:31:7F:E7:30:71:46:8E:F1:F9:C3:A5:F0:30:3D:C0 X509v3 Authority Key Identifier: keyid:FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:42:4c:2d:16:86:12:ac:6f:91:b8:0b:fe:5a:e2:3b:42:e8: d9:58:7d:42:df:eb:29:49:12:e8:d0:16:a7:0d:44:68:e0:61: dc:4e:46:f3:71:68:91:15:ce:a7:62:42:3f:81:85:37:0d:9e: d2:65:44:68:ac:ae:68:62:e3:d1:5a:3e:40:47:92:44:e8:4b: 26:3f:36:32:c5:5e:1e:b4:6d:01:66:0a:10:9b:a8:c0:ba:5d: 88:88:9d:e6:ce:e7:90:c5:68:80:9f:89:a3:f8:76:fe:22:3d: 42:fa:97:26:75:ce:09:35:4f:bb:81:ba:90:49:87:70:ad:db: ea:d8:09:35:83:a8:54:b1:5f:7c:5b:78:93:67:be:00:a6:8c: 45:05:76:7f:68:c1:1d:99:de:f4:14:ea:18:b6:cc:db:77:dc: f4:05:46:dc:75:f4:02:ce:dc:1b:64:d5:c3:81:39:04:27:8b: 2d:3c:ff:70:4e:f4:52:0a:de:1c:79:6e:f9:33:fc:1f:75:15: 6a:5b:ee:21:88:0d:d0:e5:b7:4e:7c:61:b8:f9:67:c9:be:c1: c2:25:5a:43:97:17:a5:cc:d1:a5:4d:31:e9:8a:56:a9:51:80: 47:82:a8:83:27:47:51:ca:fc:9b:86:30:6b:4d:4a:be:39:0b: 7f:ce:71:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVFNzAxMTAvBgNVBAUTKEZBOTRERTM5MDg4RUMzOEE1MkI2OTIyNzlBNDJDNEFG RkI1QjczQjEwHhcNMjQwNTI2MTkzODU2WhcNMjQwNjAyMTkzODU2WjAYMRYwFAYD VQQDEw02NjUzOGZkMC1jYzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3bxeNou8vtT3vbM2G2Kuj4EL2KP6lPUsHR4bPJfuo9GT6JeLbimMc6FKe8SM GKYn1doPWRUrYPE765ehere5Ucq+7YDz/ndJ829F2OaivBM8VUebh8XGRm5zK6Rm y9pPoknmdqP7ool7anMzgxs5gqpbEDYOncqo8z+WQx3/bxlJ3YplHmCVzXqa1K1F AM/mPr9LFC/id4U5kxLGuWNs2F893j0AoGRsqG7tCD+zDFlpZVPgpcCJLqTPQEFQ muIHBSZcqGxA9ZVatKDQTDoKl1M7LHr/NpwEfMUBr9LBiVFiJWSM86iePgzipkAz BCDnTb1L5gCJQeG9yFDXl09FLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIraWo2/ MX/nMHFGjvH5w6XwMD3AMB8GA1UdIwQYMBaAFPqU3jkIjsOKUraSJ5pCxK/7W3Ox MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUU3MC8wOTEwRDFBMDA5 RTgxMUVBQTYzMDE2NEZDNEY5QUUwMi8tcFRlT1FpT3c0cFN0cElubWtMRXJfdGJj N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1wVGVPUWlPdzRwU3RwSW5ta0xFcl90YmM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUU3MC8wOTEwRDFBMDA5RTgxMUVBQTYzMDE2NEZDNEY5QUUwMi8tcFRlT1FpT3c0 cFN0cElubWtMRXJfdGJjN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIQkwtFoYSrG+RuAv+WuI7QujZWH1C3+spSRLo0BanDURo4GHcTkbz cWiRFc6nYkI/gYU3DZ7SZURorK5oYuPRWj5AR5JE6EsmPzYyxV4etG0BZgoQm6jA ul2IiJ3mzueQxWiAn4mj+Hb+Ij1C+pcmdc4JNU+7gbqQSYdwrdvq2Ak1g6hUsV98 W3iTZ74ApoxFBXZ/aMEdmd70FOoYtszbd9z0BUbcdfQCztwbZNXDgTkEJ4stPP9w TvRSCt4ceW75M/wfdRVqW+4hiA3Q5bdOfGG4+WfJvsHCJVpDlxelzNGlTTHpilap UYBHgqiDJ0dRyvybhjBrTUq+OQt/znHe -----END CERTIFICATE-----Generated at Sun May 26 23:05:47 2024 by rpki-client on console-ams.rpki-client.org