$ rpki-client -vvf rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft File: 53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft (raw, json) Hash identifier: +DpLppcUN8CQWzB/uZrAbwUbStILa4er2WT7OluRK68= Subject key identifier: A0:8E:41:DA:9C:F4:E5:73:2C:AD:74:28:3E:E2:B7:C8:27:8C:60:53 Authority key identifier: E7:7B:87:14:68:05:E2:60:4B:49:EE:F2:B4:A4:38:CB:D2:A5:14:24 Certificate issuer: /CN=A91447E7/serialNumber=E77B87146805E2604B49EEF2B4A438CBD2A51424 Certificate serial: 01C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft Manifest number: 01B2 Signing time: Sun 05 May 2024 04:44:14 +0000 Manifest this update: Sun 05 May 2024 04:44:14 +0000 Manifest next update: Sun 12 May 2024 04:44:14 +0000 Files and hashes: 1: 53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl (hash: sJRjuazSoRFIGi2zyKHOwZdtqayQMHYaZXFEk4TjS0Y=) 2: 60A2CF98817811EE9E9A211DC4F9AE02.roa (hash: R0aEmWYt7qWh8VZsIsVbnMi1K15W6JJ4UNNAi3xfbH8=) 3: 195EA596AC8711EEAC4B2427C4F9AE02.roa (hash: k6uvbVGtGi58Ry2nuRuJB3leni9kRHqzzj/ygd+RWIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 448 (0x1c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91447E7/serialNumber=E77B87146805E2604B49EEF2B4A438CBD2A51424 Validity Not Before: May 5 04:44:14 2024 GMT Not After : May 12 04:44:14 2024 GMT Subject: CN=66370e9e-d1fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:51:36:6b:31:32:7d:b9:5b:e4:25:3b:84:53: 90:ef:b1:29:8d:63:0b:55:da:7f:e3:d0:7f:ce:11: 6a:79:25:4e:b7:95:71:d2:20:fb:44:8a:62:a6:2b: ca:38:28:9f:bd:6f:86:20:83:5e:40:8b:e6:60:8b: 18:88:5f:4d:44:7f:ca:c9:e4:67:ad:5b:cc:44:5e: 78:1d:9f:82:04:93:23:f1:78:bf:7b:9f:31:47:a6: b3:03:bc:a5:f0:96:2d:b0:29:10:24:94:23:b4:21: 72:bd:33:11:dc:36:95:09:6a:ce:91:3f:66:a3:01: b4:14:8d:a0:d5:75:98:00:0b:63:4d:16:ab:4e:a1: 4e:7b:d1:de:66:a4:d0:22:f3:94:bc:57:bf:18:4b: 4b:e4:85:a2:a0:2b:3a:97:1b:bf:f7:12:9a:9b:65: 5f:ae:4a:78:a6:9b:df:b4:c5:6a:ee:89:49:10:e0: 82:96:30:16:bf:d1:df:b4:40:ff:e8:f8:6d:3c:25: 45:3a:70:5f:76:17:01:20:2f:b7:2f:44:7e:0d:7b: 31:55:f2:2d:55:16:0e:6a:08:2e:44:c7:ef:11:d3: 28:af:63:3f:da:40:5f:3f:bf:0a:6f:a5:fd:01:a1: 43:36:ac:23:de:9a:d7:06:0d:d7:cd:1f:ae:44:97: 3c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:8E:41:DA:9C:F4:E5:73:2C:AD:74:28:3E:E2:B7:C8:27:8C:60:53 X509v3 Authority Key Identifier: keyid:E7:7B:87:14:68:05:E2:60:4B:49:EE:F2:B4:A4:38:CB:D2:A5:14:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:2b:62:48:09:33:f3:fb:d4:fe:1a:0a:18:5b:77:fe:e7:85: 27:8c:f2:a9:a2:e6:bd:58:80:8e:ce:40:8e:c2:de:ed:ef:41: 39:a9:13:d9:d5:64:a9:ac:6c:5f:bb:ed:9c:48:7c:5d:af:6a: 34:d7:ac:c5:c2:46:05:41:ac:d7:97:65:1c:33:e1:28:a0:0f: 46:c7:4d:2a:3d:8c:02:af:d0:26:b6:ab:7d:9b:73:95:f4:b2: 0a:ad:28:aa:e7:8b:2c:05:bb:5d:99:90:9d:f4:55:d1:da:2d: c9:4f:53:2f:32:53:75:ca:20:da:51:9f:da:ea:ca:45:9d:07: d4:c4:c1:22:b9:c8:37:7a:54:ad:31:e9:35:06:a2:69:8f:c8: 08:42:36:40:65:42:b1:47:2b:22:5d:46:1b:5d:e4:34:89:8f: cd:20:fd:1f:e7:02:85:e5:db:f3:ac:6b:97:dd:29:9c:73:bb: 4f:c0:a7:25:9d:6e:9f:ff:fd:8e:2a:73:66:a0:68:81:ec:82: 23:9f:67:3c:da:15:14:e5:0c:ca:5a:49:91:3d:d8:b6:6c:4b: ff:7a:f2:96:84:c6:1e:fb:a9:71:78:8f:da:2d:26:bd:7e:04: f7:32:8d:51:47:55:e9:ba:eb:92:00:7c:62:77:eb:63:ca:db: c0:1e:90:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ3RTcxMTAvBgNVBAUTKEU3N0I4NzE0NjgwNUUyNjA0QjQ5RUVGMkI0QTQzOENC RDJBNTE0MjQwHhcNMjQwNTA1MDQ0NDE0WhcNMjQwNTEyMDQ0NDE0WjAYMRYwFAYD VQQDEw02NjM3MGU5ZS1kMWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1E2azEyfblb5CU7hFOQ77EpjWMLVdp/49B/zhFqeSVOt5Vx0iD7RIpipivK OCifvW+GIINeQIvmYIsYiF9NRH/KyeRnrVvMRF54HZ+CBJMj8Xi/e58xR6azA7yl 8JYtsCkQJJQjtCFyvTMR3DaVCWrOkT9mowG0FI2g1XWYAAtjTRarTqFOe9HeZqTQ IvOUvFe/GEtL5IWioCs6lxu/9xKam2Vfrkp4ppvftMVq7olJEOCCljAWv9HftED/ 6PhtPCVFOnBfdhcBIC+3L0R+DXsxVfItVRYOagguRMfvEdMor2M/2kBfP78Kb6X9 AaFDNqwj3prXBg3XzR+uRJc8AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKCOQdqc 9OVzLK10KD7it8gnjGBTMB8GA1UdIwQYMBaAFOd7hxRoBeJgS0nu8rSkOMvSpRQk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDdFNy9GRTQ0NjlEMjEz MDExMUVEQURDRTVDN0RDNEY5QUUwMi81M3VIRkdnRjRtQkxTZTd5dEtRNHk5S2xG Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUzdUhGR2dGNG1CTFNlN3l0S1E0eTlLbEZDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDdFNy9GRTQ0NjlEMjEzMDExMUVEQURDRTVDN0RDNEY5QUUwMi81M3VIRkdnRjRt QkxTZTd5dEtRNHk5S2xGQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3K2JICTPz+9T+GgoYW3f+54UnjPKpoua9WICOzkCOwt7t70E5qRPZ 1WSprGxfu+2cSHxdr2o016zFwkYFQazXl2UcM+EooA9Gx00qPYwCr9Amtqt9m3OV 9LIKrSiq54ssBbtdmZCd9FXR2i3JT1MvMlN1yiDaUZ/a6spFnQfUxMEiucg3elSt Mek1BqJpj8gIQjZAZUKxRysiXUYbXeQ0iY/NIP0f5wKF5dvzrGuX3Smcc7tPwKcl nW6f//2OKnNmoGiB7IIjn2c82hUU5QzKWkmRPdi2bEv/evKWhMYe+6lxeI/aLSa9 fgT3Mo1RR1XpuuuSAHxid+tjytvAHpB/ -----END CERTIFICATE-----Generated at Sun May 5 05:30:49 2024 by rpki-client on console-ams.rpki-client.org