$ rpki-client -vvf rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft File: f30yDyoH5DPdvf4oV_XTGTVFF7k.mft (raw, json) Hash identifier: VTAwKw2GKerWpvJ33pQxdwh24HHtJXOxT4rTlKo44+4= Subject key identifier: 22:DB:5D:9E:C9:36:D8:37:3D:F2:B9:CA:F1:63:AC:F4:DE:7C:21:3A Authority key identifier: 7F:7D:32:0F:2A:07:E4:33:DD:BD:FE:28:57:F5:D3:19:35:45:17:B9 Certificate issuer: /CN=A914877B/serialNumber=7F7D320F2A07E433DDBDFE2857F5D319354517B9 Certificate serial: 0B08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f30yDyoH5DPdvf4oV_XTGTVFF7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft Manifest number: 0B02 Signing time: Tue 30 Apr 2024 20:13:58 +0000 Manifest this update: Tue 30 Apr 2024 20:13:57 +0000 Manifest next update: Tue 07 May 2024 20:13:57 +0000 Files and hashes: 1: f30yDyoH5DPdvf4oV_XTGTVFF7k.crl (hash: 3c56Bcxg3BYt/yxk8XgZuKlre0c7Isl/zkrbQcjYSD8=) 2: 800676321BD311EAA341A62DC4F9AE02.roa (hash: hq+WCeu57GK7QwPLCZIIEFuAz033VUg/q65IqyekInE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.crl rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f30yDyoH5DPdvf4oV_XTGTVFF7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 20:13:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2824 (0xb08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914877B/serialNumber=7F7D320F2A07E433DDBDFE2857F5D319354517B9 Validity Not Before: Apr 30 20:13:57 2024 GMT Not After : May 7 20:13:57 2024 GMT Subject: CN=66315106-dd9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b4:55:6f:9e:e5:3b:ba:58:0f:22:47:e6:c2: 01:32:f8:29:84:0a:83:e0:7c:08:49:0b:8d:d1:0c: d7:c4:4e:0c:cd:c0:41:3e:48:45:14:e0:d8:74:f8: a6:c3:81:0c:c1:15:78:e3:89:26:c7:f9:c0:0e:d5: 9b:d4:c4:2e:c2:30:fa:33:08:84:51:15:10:73:1b: 08:b7:62:7a:e4:d7:c1:4b:b5:49:2a:0f:70:6e:42: 0d:71:a0:e8:0d:5e:19:6e:1f:a4:fa:e9:c6:77:5a: d7:de:c4:5b:20:67:48:3b:63:5e:d6:3a:04:c2:a4: c4:12:a4:30:dd:45:76:87:1e:c2:1b:36:08:04:e6: 42:bc:d6:8d:e4:6c:ee:7c:7d:c5:42:40:bd:d7:f7: b9:73:d6:74:1d:0b:55:2d:3a:29:0e:1f:03:99:17: 3c:de:24:55:09:de:95:33:2e:db:31:14:6f:d7:44: 8e:a3:b7:4c:67:ee:ed:dd:03:2f:22:45:34:8c:e1: c2:aa:52:ce:7a:35:3f:3c:94:ae:66:f0:84:e5:44: a7:76:8c:1c:61:69:b4:e8:4e:4f:e6:7a:fb:9b:da: a8:d9:85:d3:d3:39:65:9a:9d:22:95:23:40:2e:ac: bb:21:33:5e:72:68:69:ed:2d:34:3c:bf:8c:13:11: 48:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:DB:5D:9E:C9:36:D8:37:3D:F2:B9:CA:F1:63:AC:F4:DE:7C:21:3A X509v3 Authority Key Identifier: keyid:7F:7D:32:0F:2A:07:E4:33:DD:BD:FE:28:57:F5:D3:19:35:45:17:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f30yDyoH5DPdvf4oV_XTGTVFF7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:dd:3e:03:3b:12:ce:ea:49:8f:72:67:a7:ba:3c:43:cb:4e: 06:9b:01:77:95:ca:de:b0:dd:80:68:93:18:b3:e5:55:c3:9a: 65:e4:5e:3e:bf:0e:68:b9:a2:30:c9:7a:67:7e:f1:0b:60:ba: 08:86:06:3d:22:0b:a3:2f:5e:a7:25:10:27:a4:b3:3e:64:b6: 34:ba:0f:e9:dd:c1:f8:a9:64:1a:14:52:91:f7:84:45:8a:43: d3:d4:b1:07:6a:1d:eb:3f:c0:55:4a:5a:ba:c7:d3:47:e9:88: 83:d1:a4:fd:dd:68:b9:e6:c8:d4:2b:6a:d8:ab:8e:b8:6c:59: 28:00:b9:63:0f:2b:df:f6:83:8e:40:8e:35:61:fe:55:5d:9d: 93:a5:1e:77:3b:22:ff:b6:42:7d:0b:c4:82:4b:1b:6b:92:c0: 65:c2:42:83:90:4d:73:59:5a:22:e8:31:60:68:70:09:65:a6: 68:8d:ac:5e:44:35:90:47:b9:04:75:45:ea:7b:19:93:e7:87: 0c:12:a6:58:b9:d1:d7:7f:6e:e5:02:ae:88:12:3b:f1:09:e4: 30:56:c9:aa:3d:e5:2a:40:f4:ea:03:ab:03:3e:63:f6:20:c1: bb:2c:b4:63:e9:a5:ee:b0:2d:2b:d8:f0:9c:4b:78:fc:56:a3: 07:51:88:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg3N0IxMTAvBgNVBAUTKDdGN0QzMjBGMkEwN0U0MzNEREJERkUyODU3RjVEMzE5 MzU0NTE3QjkwHhcNMjQwNDMwMjAxMzU3WhcNMjQwNTA3MjAxMzU3WjAYMRYwFAYD VQQDEw02NjMxNTEwNi1kZDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7RVb57lO7pYDyJH5sIBMvgphAqD4HwISQuN0QzXxE4MzcBBPkhFFODYdPim w4EMwRV444kmx/nADtWb1MQuwjD6MwiEURUQcxsIt2J65NfBS7VJKg9wbkINcaDo DV4Zbh+k+unGd1rX3sRbIGdIO2Ne1joEwqTEEqQw3UV2hx7CGzYIBOZCvNaN5Gzu fH3FQkC91/e5c9Z0HQtVLTopDh8DmRc83iRVCd6VMy7bMRRv10SOo7dMZ+7t3QMv IkU0jOHCqlLOejU/PJSuZvCE5USndowcYWm06E5P5nr7m9qo2YXT0zllmp0ilSNA Lqy7ITNecmhp7S00PL+MExFIBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCLbXZ7J Ntg3PfK5yvFjrPTefCE6MB8GA1UdIwQYMBaAFH99Mg8qB+Qz3b3+KFf10xk1RRe5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODc3Qi8yNTkxMDExRTFC RDIxMUVBQUJEMEVFMkFDNEY5QUUwMi9mMzB5RHlvSDVEUGR2ZjRvVl9YVEdUVkZG N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YzMHlEeW9INURQZHZmNG9WX1hUR1RWRkY3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODc3Qi8yNTkxMDExRTFCRDIxMUVBQUJEMEVFMkFDNEY5QUUwMi9mMzB5RHlvSDVE UGR2ZjRvVl9YVEdUVkZGN2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCR3T4DOxLO6kmPcmenujxDy04GmwF3lcresN2AaJMYs+VVw5pl5F4+ vw5ouaIwyXpnfvELYLoIhgY9IgujL16nJRAnpLM+ZLY0ug/p3cH4qWQaFFKR94RF ikPT1LEHah3rP8BVSlq6x9NH6YiD0aT93Wi55sjUK2rYq464bFkoALljDyvf9oOO QI41Yf5VXZ2TpR53OyL/tkJ9C8SCSxtrksBlwkKDkE1zWVoi6DFgaHAJZaZojaxe RDWQR7kEdUXqexmT54cMEqZYudHXf27lAq6IEjvxCeQwVsmqPeUqQPTqA6sDPmP2 IMG7LLRj6aXusC0r2PCcS3j8VqMHUYhJ -----END CERTIFICATE-----Generated at Tue Apr 30 21:58:52 2024 by rpki-client on console-ams.rpki-client.org