$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft File: 49O0eIJzzkWSmwmYOr9ktdRNHwg.mft (raw, json) Hash identifier: gnMNFXcJVZAELI1qOG7p+2b2uuOLCODjCzROtAmcZ5U= Subject key identifier: C6:06:A6:8D:B6:0B:7E:3B:6E:DC:F2:B7:88:F4:C0:09:14:5A:DA:2C Authority key identifier: E3:D3:B4:78:82:73:CE:45:92:9B:09:98:3A:BF:64:B5:D4:4D:1F:08 Certificate issuer: /CN=A91FF634/serialNumber=E3D3B4788273CE45929B09983ABF64B5D44D1F08 Certificate serial: 106F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft Manifest number: 1059 Signing time: Thu 30 May 2024 18:19:44 +0000 Manifest this update: Thu 30 May 2024 18:19:43 +0000 Manifest next update: Thu 06 Jun 2024 18:19:43 +0000 Files and hashes: 1: 49O0eIJzzkWSmwmYOr9ktdRNHwg.crl (hash: VJsSC2YW3C8/hDclckzkKkoxnq5/DRp5bxHC6Zpe0cM=) 2: 97F937E440BC11EAA2B89432C4F9AE02.roa (hash: h4w3R++k5N2fKCBL4XYVOAI91zAPSdTO27DUBoN7QB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.crl rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 18:19:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4207 (0x106f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF634/serialNumber=E3D3B4788273CE45929B09983ABF64B5D44D1F08 Validity Not Before: May 30 18:19:43 2024 GMT Not After : Jun 6 18:19:43 2024 GMT Subject: CN=6658c33f-3b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:54:35:49:b0:dd:e6:c6:0c:a8:30:4c:36:71: 16:05:9c:c4:1e:a2:1f:81:15:d5:ff:c6:49:47:db: de:a5:32:04:7e:61:66:08:17:95:cf:85:b1:92:ff: dd:05:d6:5e:bf:0a:68:b2:1a:5a:69:74:60:62:29: 5a:d4:dc:61:b1:de:9b:d1:d6:52:ce:01:a1:9f:0b: 08:98:08:e4:6c:19:d7:a9:52:33:3c:23:ec:66:6c: 6b:36:52:7b:da:86:05:6b:3a:a3:1a:24:b6:fe:13: 2b:03:70:2f:af:b2:a8:f1:45:9e:aa:d6:e8:15:7d: ca:f4:cc:1b:fc:92:b8:d2:8e:7e:76:49:7a:89:80: 41:a8:90:96:61:a2:3d:35:61:bc:19:a7:80:0a:93: da:81:14:db:8a:87:ff:73:59:53:29:5b:ce:52:a7: b9:7b:88:81:eb:a6:4b:f7:83:6c:72:46:aa:85:d2: d7:dc:67:98:64:b3:85:a9:b1:f1:a9:f2:8b:9d:6e: 6b:d7:b9:15:43:df:f5:34:a2:9c:ad:b6:86:80:d5: 65:af:70:f5:61:4f:d5:73:42:28:19:92:c0:1d:da: c6:22:16:f4:68:a5:40:20:8e:36:b8:da:f8:c8:74: 51:80:29:0e:6d:53:1f:63:44:55:28:15:5f:62:f9: af:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:06:A6:8D:B6:0B:7E:3B:6E:DC:F2:B7:88:F4:C0:09:14:5A:DA:2C X509v3 Authority Key Identifier: keyid:E3:D3:B4:78:82:73:CE:45:92:9B:09:98:3A:BF:64:B5:D4:4D:1F:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:ca:40:32:20:28:e9:8b:78:6d:eb:7b:ab:55:47:72:ef:7b: 07:f6:ee:af:03:13:eb:a4:3c:3a:a8:4a:c3:92:de:4f:8b:5e: 9e:b1:f4:f8:d7:2b:70:b0:b6:7e:5b:38:b7:b2:3c:20:8e:9f: a8:5b:e3:05:e2:8f:eb:d3:d9:8f:5c:2d:5e:a0:88:dc:35:30: fb:f1:b5:a8:34:dc:ac:a8:d7:69:6d:4f:e2:ec:d4:79:91:eb: e2:d9:27:6e:27:5d:8e:ac:42:7a:e0:53:fb:07:3c:f4:39:d6: 40:39:3f:56:6a:25:7c:72:ed:2c:6e:89:50:b8:5d:88:ba:03: d7:62:dc:1b:2b:16:14:76:6d:33:c7:d9:17:df:f5:9c:ca:c4: cb:3f:a2:1b:fe:27:4a:45:88:31:90:69:2e:2f:e1:87:44:51: 30:df:87:9d:cb:02:06:ef:13:7b:04:6b:df:af:b8:c8:b6:c6: 20:c2:33:5d:11:1d:0c:1f:cf:38:83:f2:fd:a1:0e:78:54:e1: 64:5a:66:de:9e:ab:38:d0:73:0b:a6:67:a0:8e:cc:5f:19:29: ca:01:3f:2a:af:04:17:6c:f6:a2:e6:32:03:e0:e2:79:48:c2: 70:de:30:5b:b2:b6:cd:3e:58:a3:f2:1f:9c:0e:4d:1d:15:7d: d9:6b:04:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY2MzQxMTAvBgNVBAUTKEUzRDNCNDc4ODI3M0NFNDU5MjlCMDk5ODNBQkY2NEI1 RDQ0RDFGMDgwHhcNMjQwNTMwMTgxOTQzWhcNMjQwNjA2MTgxOTQzWjAYMRYwFAYD VQQDEw02NjU4YzMzZi0zYjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1Q1SbDd5sYMqDBMNnEWBZzEHqIfgRXV/8ZJR9vepTIEfmFmCBeVz4Wxkv/d BdZevwposhpaaXRgYila1Nxhsd6b0dZSzgGhnwsImAjkbBnXqVIzPCPsZmxrNlJ7 2oYFazqjGiS2/hMrA3Avr7Ko8UWeqtboFX3K9Mwb/JK40o5+dkl6iYBBqJCWYaI9 NWG8GaeACpPagRTbiof/c1lTKVvOUqe5e4iB66ZL94NsckaqhdLX3GeYZLOFqbHx qfKLnW5r17kVQ9/1NKKcrbaGgNVlr3D1YU/Vc0IoGZLAHdrGIhb0aKVAII42uNr4 yHRRgCkObVMfY0RVKBVfYvmv4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMYGpo22 C347btzyt4j0wAkUWtosMB8GA1UdIwQYMBaAFOPTtHiCc85FkpsJmDq/ZLXUTR8I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjYzNC8xMzI3QTczRTE3 MjkxMUU5OEREMThFMjNDNEY5QUUwMi80OU8wZUlKenprV1Ntd21ZT3I5a3RkUk5I d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ5TzBlSUp6emtXU213bVlPcjlrdGRSTkh3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjYzNC8xMzI3QTczRTE3MjkxMUU5OEREMThFMjNDNEY5QUUwMi80OU8wZUlKenpr V1Ntd21ZT3I5a3RkUk5Id2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMykAyICjpi3ht63urVUdy73sH9u6vAxPrpDw6qErDkt5Pi16esfT4 1ytwsLZ+Wzi3sjwgjp+oW+MF4o/r09mPXC1eoIjcNTD78bWoNNysqNdpbU/i7NR5 kevi2SduJ12OrEJ64FP7Bzz0OdZAOT9WaiV8cu0sbolQuF2IugPXYtwbKxYUdm0z x9kX3/WcysTLP6Ib/idKRYgxkGkuL+GHRFEw34edywIG7xN7BGvfr7jItsYgwjNd ER0MH884g/L9oQ54VOFkWmbenqs40HMLpmegjsxfGSnKAT8qrwQXbPai5jID4OJ5 SMJw3jBbsrbNPlij8h+cDk0dFX3ZawQj -----END CERTIFICATE-----Generated at Thu May 30 21:49:47 2024 by rpki-client on console-ams.rpki-client.org