$ rpki-client -vvf rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft File: ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft (raw, json) Hash identifier: rHgNeBm+DTRe4iwI6GRyIaKE+zLgihk3Gqt8c+vyRvU= Subject key identifier: 94:A0:A8:F3:A5:98:AD:75:09:A4:83:D2:56:6A:A4:80:43:D2:AD:BE Authority key identifier: 71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 Certificate issuer: /CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Certificate serial: 0485 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft Manifest number: 0471 Signing time: Fri 17 May 2024 01:57:42 +0000 Manifest this update: Fri 17 May 2024 01:57:41 +0000 Manifest next update: Fri 24 May 2024 01:57:41 +0000 Files and hashes: 1: ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl (hash: REaxJWpsg08ZFODmvur9N919Gu6CFusjOMvk+EtyM+Y=) 2: 5F652B164A0311EC84EFD42FC4F9AE02.roa (hash: 35+QxJm9RFYDqjRpIoivBHkqNPl0lh0c+3NXYE1k3q8=) 3: CE751320B9D511ED89A5B11FC4F9AE02.roa (hash: QHrkzPB3XYYShkebDaV5iZFEb6asX/vHujmxDlC+XLs=) 4: 16DA3F3E784E11EC96A28137C4F9AE02.roa (hash: WE5OMt+rDqoJCPg5JbhQjVU9pu+T1cVc8AMt1U8Dqa8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 01:57:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1157 (0x485) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Validity Not Before: May 17 01:57:41 2024 GMT Not After : May 24 01:57:41 2024 GMT Subject: CN=6646b995-2624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ea:6d:82:81:11:3a:7c:1b:82:8e:73:8b:a0: 93:f6:cc:c1:f0:95:c2:3b:a9:03:37:5f:16:fc:c5: 0c:bb:fc:2d:fa:8d:cf:ef:dd:0a:ed:ca:2f:5a:43: 69:0a:e8:d0:f5:e0:a4:1d:e6:24:8d:98:bb:d7:c6: 5c:0f:f1:f5:1f:f1:61:5a:1d:88:40:0f:b4:fe:1e: b9:8c:cc:6a:53:8f:5c:a4:57:29:dd:51:80:f6:99: 9e:bc:38:89:a3:6b:a0:7b:bd:ec:23:15:7b:67:07: ca:94:78:2d:89:74:17:8d:89:4a:c9:a0:c8:ea:64: 68:96:94:17:c3:0e:14:5a:70:fe:78:eb:db:2d:29: f0:3b:ef:45:d9:b5:c8:35:86:ce:f2:29:0b:79:2c: 71:cc:2e:52:bc:4f:94:22:93:74:6a:c7:1b:90:95: 8c:9c:d8:9c:4e:1d:c3:e4:33:4b:35:fc:fb:27:11: f7:aa:d5:ee:dd:5d:32:3f:a6:ed:7d:b5:6f:6c:d7: a4:b5:ee:ce:e5:28:4c:55:95:32:ee:f4:ea:6f:51: f7:e0:95:87:5d:d1:c3:60:e5:c3:17:a0:b1:22:49: 16:63:c6:7a:f7:8e:8e:dd:35:6e:b7:0c:03:29:92: 91:1c:76:2b:f0:89:95:84:46:8a:57:7c:8b:73:f1: a9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:A0:A8:F3:A5:98:AD:75:09:A4:83:D2:56:6A:A4:80:43:D2:AD:BE X509v3 Authority Key Identifier: keyid:71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:34:3c:3f:cc:93:45:d9:ad:d1:c9:9f:3d:2d:3f:2a:c1:3a: c0:9b:fd:d5:cd:26:37:38:29:d4:bd:d9:6c:94:df:8d:a9:f0: d7:5d:44:06:33:fc:60:e8:93:3e:4b:ec:7a:0d:a0:ad:79:50: c2:46:70:2a:e9:d1:0e:9b:9d:a4:9a:cd:b8:d6:08:e7:01:51: d5:1c:17:58:b6:52:69:de:21:df:14:ea:c9:ec:03:38:64:5c: 86:82:9e:c5:63:44:c9:71:0b:8c:6c:b4:ff:4f:de:19:60:21: f8:ae:63:73:5d:5c:28:34:78:ef:0e:ec:3c:b5:ad:3f:f6:a1: e4:33:61:b8:86:c9:6f:db:e8:7e:de:a1:fe:06:3f:b5:67:be: 83:ed:e7:56:ae:a8:0d:0d:da:8e:06:c6:cb:4b:d8:18:42:da: aa:46:c5:43:f9:db:9c:84:bc:22:d7:0e:0d:38:60:8e:04:1a: 92:cc:08:cd:ba:7f:3c:f9:e6:d5:01:22:4c:a2:1d:a5:1d:6b: d5:b8:fa:70:e7:4f:56:71:90:ab:17:58:f1:e4:b0:ad:a6:f2: d5:36:b4:72:50:c0:be:78:99:bf:6b:7b:30:08:66:e3:8f:4e: 57:ae:38:50:14:cd:8a:56:d8:76:aa:06:6f:20:da:1f:47:19: fa:88:4d:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4RTMxMTAvBgNVBAUTKDcxQzFFOEUwNTQwNDlBQ0ZEOUFBMjE5M0FGMUQ0OEM2 RDFEMDI1RTEwHhcNMjQwNTE3MDE1NzQxWhcNMjQwNTI0MDE1NzQxWjAYMRYwFAYD VQQDEw02NjQ2Yjk5NS0yNjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAquptgoEROnwbgo5zi6CT9szB8JXCO6kDN18W/MUMu/wt+o3P790K7covWkNp CujQ9eCkHeYkjZi718ZcD/H1H/FhWh2IQA+0/h65jMxqU49cpFcp3VGA9pmevDiJ o2uge73sIxV7ZwfKlHgtiXQXjYlKyaDI6mRolpQXww4UWnD+eOvbLSnwO+9F2bXI NYbO8ikLeSxxzC5SvE+UIpN0ascbkJWMnNicTh3D5DNLNfz7JxH3qtXu3V0yP6bt fbVvbNekte7O5ShMVZUy7vTqb1H34JWHXdHDYOXDF6CxIkkWY8Z6946O3TVutwwD KZKRHHYr8ImVhEaKV3yLc/Gp4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJSgqPOl mK11CaSD0lZqpIBD0q2+MB8GA1UdIwQYMBaAFHHB6OBUBJrP2aohk68dSMbR0CXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhFMy81MzkzQzBFRTAw MjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1zX1pxaUdUcngxSXh0SFFK ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjSG80RlFFbXNfWnFpR1RyeDFJeHRIUUplRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhFMy81MzkzQzBFRTAwMjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1z X1pxaUdUcngxSXh0SFFKZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0NDw/zJNF2a3RyZ89LT8qwTrAm/3VzSY3OCnUvdlslN+NqfDXXUQG M/xg6JM+S+x6DaCteVDCRnAq6dEOm52kms241gjnAVHVHBdYtlJp3iHfFOrJ7AM4 ZFyGgp7FY0TJcQuMbLT/T94ZYCH4rmNzXVwoNHjvDuw8ta0/9qHkM2G4hslv2+h+ 3qH+Bj+1Z76D7edWrqgNDdqOBsbLS9gYQtqqRsVD+duchLwi1w4NOGCOBBqSzAjN un88+ebVASJMoh2lHWvVuPpw509WcZCrF1jx5LCtpvLVNrRyUMC+eJm/a3swCGbj j05XrjhQFM2KVth2qgZvINofRxn6iE1b -----END CERTIFICATE-----Generated at Fri May 17 03:06:29 2024 by rpki-client on console-ams.rpki-client.org