$ rpki-client -vvf rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft File: 1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft (raw, json) Hash identifier: FK56S/y563N9FgOj3TyuEBeuaZYVBJVNm+HWWaGvwNk= Subject key identifier: 45:7E:14:BB:1B:C7:DB:29:D1:01:85:98:E1:51:E9:7D:16:3B:C2:63 Authority key identifier: D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59 Certificate issuer: /CN=A91233F8/serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759 Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft Manifest number: 0513 Signing time: Tue 07 May 2024 02:02:56 +0000 Manifest this update: Tue 07 May 2024 02:02:55 +0000 Manifest next update: Tue 14 May 2024 02:02:55 +0000 Files and hashes: 1: 1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl (hash: szYOHuLHVBzmdItoVr7yqkldaB2K6R/2MgHG5Bg+qno=) 2: 1B4BA08497A711EDA815F80AC4F9AE02.roa (hash: Er/UNtkgc4K2xubRlL1RClLvC/mnL1xU/Bb7WH0Noi8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 02:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91233F8/serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759 Validity Not Before: May 7 02:02:55 2024 GMT Not After : May 14 02:02:55 2024 GMT Subject: CN=66398bd0-b5b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:af:58:9a:b7:6b:2a:86:a8:8f:82:64:cc:a0: 68:a8:68:5b:07:0e:af:eb:78:7b:b8:65:5d:cb:62: 7d:7e:cc:dd:cf:55:a0:44:2b:46:42:10:a2:e1:57: d0:1a:80:90:33:d8:ae:95:ac:36:2f:71:67:5f:0a: 3b:1d:62:07:f7:74:14:de:06:7b:6d:27:7d:b2:d7: 59:b2:4b:66:d9:da:3d:aa:51:82:01:95:c6:99:dd: a1:e3:06:75:25:73:88:3b:45:dd:ee:9c:67:de:92: 74:e2:b0:98:bf:09:46:be:f9:ec:6c:26:db:70:0b: 56:08:bb:bd:4f:db:1c:3e:cf:bc:02:eb:80:b3:11: 14:94:db:c6:cf:30:af:a6:63:b8:4a:e0:59:d7:e4: 85:c6:70:54:0d:c6:f4:a7:6e:01:af:a2:74:c9:38: 9d:e6:82:50:4f:63:da:63:4f:b0:8c:9d:67:0d:6c: ea:79:38:b0:df:2f:71:18:e1:0c:8e:ba:43:b3:d7: b6:6a:5a:44:57:77:63:6d:0d:52:cd:2c:b0:cd:60: 04:e2:97:9a:7e:fa:21:60:f8:ac:35:a0:9f:29:20: eb:af:84:de:85:6a:16:28:a6:47:b0:9f:27:2c:37: 42:f8:ad:c8:f7:82:99:b1:7a:35:41:b4:ed:c8:80: 7a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:7E:14:BB:1B:C7:DB:29:D1:01:85:98:E1:51:E9:7D:16:3B:C2:63 X509v3 Authority Key Identifier: keyid:D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:79:9c:5f:d0:df:a9:f3:3c:0d:f2:94:96:99:43:f6:8d:f7: 05:5e:23:00:7c:62:9b:c6:3d:c8:7f:e6:9b:78:1f:3e:c0:f2: e4:3c:db:fd:b8:63:46:e8:4b:0a:f0:93:1c:ac:95:66:a2:87: 9b:e8:29:94:56:3a:da:d6:69:1a:5f:86:ea:a1:f9:fe:5e:e6: 02:e8:9c:b8:1f:20:f2:07:e0:67:d7:c9:09:5b:2a:17:d8:10: e4:f4:d4:d6:bf:86:fd:12:b5:b8:b2:1a:a8:a7:bb:d7:07:42: 0c:47:c0:34:ab:7c:fb:6e:54:18:47:b7:29:62:7b:f9:2b:86: d2:d3:b2:3b:e2:ac:7b:a5:26:27:9b:6d:c2:6d:34:ea:7e:64: 7a:65:16:89:25:e3:3e:ab:8b:0f:d0:61:1c:7a:b5:3a:45:e3: a4:b3:84:f8:e8:34:48:3c:4f:f0:af:61:88:26:29:5b:bd:5e: cb:b2:49:55:d6:dc:aa:8a:2e:13:49:6c:21:ec:83:db:7c:59: 5b:2b:19:6e:c7:57:69:04:e1:93:3a:76:7c:5b:ab:c8:07:08: c5:9f:33:6e:13:53:02:49:fa:fc:40:32:aa:e9:8e:ae:2c:0d: a3:a8:bf:12:34:f4:11:b4:7e:d1:05:87:6d:aa:c2:b4:f8:cb: da:05:ad:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMzRjgxMTAvBgNVBAUTKEQ0MzRFNTlFOThFNDUwOEVFQUE0MERGOTYwREE0RjMz NDI0MTY3NTkwHhcNMjQwNTA3MDIwMjU1WhcNMjQwNTE0MDIwMjU1WjAYMRYwFAYD VQQDEw02NjM5OGJkMC1iNWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA669YmrdrKoaoj4JkzKBoqGhbBw6v63h7uGVdy2J9fszdz1WgRCtGQhCi4VfQ GoCQM9iulaw2L3FnXwo7HWIH93QU3gZ7bSd9stdZsktm2do9qlGCAZXGmd2h4wZ1 JXOIO0Xd7pxn3pJ04rCYvwlGvvnsbCbbcAtWCLu9T9scPs+8AuuAsxEUlNvGzzCv pmO4SuBZ1+SFxnBUDcb0p24Br6J0yTid5oJQT2PaY0+wjJ1nDWzqeTiw3y9xGOEM jrpDs9e2alpEV3djbQ1SzSywzWAE4peafvohYPisNaCfKSDrr4TehWoWKKZHsJ8n LDdC+K3I94KZsXo1QbTtyIB6QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEV+FLsb x9sp0QGFmOFR6X0WO8JjMB8GA1UdIwQYMBaAFNQ05Z6Y5FCO6qQN+WDaTzNCQWdZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzNGOC9GMDkwMTlENjFC QjcxMUVDOTAzRDhBNENDNEY5QUUwMi8xRFRsbnBqa1VJN3FwQTM1WU5wUE0wSkJa MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFEVGxucGprVUk3cXBBMzVZTnBQTTBKQloxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzNGOC9GMDkwMTlENjFCQjcxMUVDOTAzRDhBNENDNEY5QUUwMi8xRFRsbnBqa1VJ N3FwQTM1WU5wUE0wSkJaMWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQeZxf0N+p8zwN8pSWmUP2jfcFXiMAfGKbxj3If+abeB8+wPLkPNv9 uGNG6EsK8JMcrJVmooeb6CmUVjra1mkaX4bqofn+XuYC6Jy4HyDyB+Bn18kJWyoX 2BDk9NTWv4b9ErW4shqop7vXB0IMR8A0q3z7blQYR7cpYnv5K4bS07I74qx7pSYn m23CbTTqfmR6ZRaJJeM+q4sP0GEcerU6ReOks4T46DRIPE/wr2GIJilbvV7LsklV 1tyqii4TSWwh7IPbfFlbKxlux1dpBOGTOnZ8W6vIBwjFnzNuE1MCSfr8QDKq6Y6u LA2jqL8SNPQRtH7RBYdtqsK0+MvaBa01 -----END CERTIFICATE-----Generated at Tue May 7 03:10:18 2024 by rpki-client on console-ams.rpki-client.org