$ rpki-client -vvf rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft File: dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft (raw, json) Hash identifier: xKallnt5HJrcEtIyhyBWIqSkJZsLzLWhXpUubumT64k= Subject key identifier: C1:2C:D4:BF:CB:8F:D5:EB:F9:36:DA:99:3D:4C:EA:A0:A2:30:50:13 Authority key identifier: 77:06:D0:88:E9:21:DE:8B:01:EB:BA:06:20:1D:04:15:0E:86:4D:04 Certificate issuer: /CN=A91557BA/serialNumber=7706D088E921DE8B01EBBA06201D04150E864D04 Certificate serial: 0B8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft Manifest number: 0B82 Signing time: Mon 06 May 2024 19:26:51 +0000 Manifest this update: Mon 06 May 2024 19:26:51 +0000 Manifest next update: Mon 13 May 2024 19:26:51 +0000 Files and hashes: 1: dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl (hash: SQmQQwDY+LONH1BxkeXDzwlTK/oj5xbEp3VvhGayDFU=) 2: D68289BE984B11ECB04DAB38C4F9AE02.roa (hash: 0gxNTMeRk0FZXFUFm3TqARct7ccARqhdMl770N275VY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 18:53:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2955 (0xb8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557BA/serialNumber=7706D088E921DE8B01EBBA06201D04150E864D04 Validity Not Before: May 6 19:26:51 2024 GMT Not After : May 13 19:26:51 2024 GMT Subject: CN=66392efb-362e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:41:0e:89:42:60:19:19:c0:85:f9:21:f2:ed: 18:17:b8:54:70:b7:53:33:70:4e:52:0b:4c:cd:e9: ef:ab:e1:92:d9:17:7e:ea:77:51:ff:a8:44:81:6d: e3:94:d6:73:99:98:9f:db:db:39:31:e8:e4:70:7a: ec:66:4f:d6:05:8e:c7:19:40:f2:bb:6d:c0:1d:92: 77:32:aa:a9:63:94:24:8e:22:9d:59:5d:cb:33:57: bc:0b:2c:c6:4a:1d:25:89:a5:57:3f:20:d1:2f:fa: 66:1a:77:bd:b7:33:fb:96:30:24:5c:7f:4c:a9:6f: da:15:b1:2b:df:fe:2b:66:61:31:17:1c:39:6f:24: 24:88:8e:ab:6d:a5:7c:6c:02:e2:fc:27:b8:18:ff: c1:20:85:db:aa:aa:db:ef:9a:26:f5:bb:af:7b:ae: 39:db:8b:21:5e:bf:b6:ce:fe:bf:8b:d4:06:0d:8c: 5f:18:30:bf:40:db:7b:a9:88:70:4d:ea:ff:bf:23: 73:b9:20:66:37:01:cb:ee:0f:39:e0:27:53:6e:25: 00:b7:d7:49:4c:b4:c4:0e:4b:29:93:8f:cc:c6:6b: 84:37:4c:32:48:b1:31:68:71:da:a0:b8:2a:eb:5b: 39:70:c1:97:5e:82:ce:65:ab:84:c3:93:75:d9:99: ae:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:2C:D4:BF:CB:8F:D5:EB:F9:36:DA:99:3D:4C:EA:A0:A2:30:50:13 X509v3 Authority Key Identifier: keyid:77:06:D0:88:E9:21:DE:8B:01:EB:BA:06:20:1D:04:15:0E:86:4D:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:a8:67:cf:b1:4a:09:a4:47:8f:5c:2c:64:4f:ce:ac:ca:a6: 21:a8:fa:11:b2:fe:9e:63:d0:07:7e:b3:f9:3d:0c:1b:b7:20: e1:08:d8:a0:e7:49:93:af:a1:20:0d:5a:03:06:6d:23:d9:59: 75:90:c5:32:3d:06:23:db:76:f6:15:dd:ae:6c:87:8f:91:1a: 30:37:cf:21:03:67:25:09:6a:8a:37:ca:45:f2:db:de:91:ef: b2:22:74:1f:cf:32:b7:3d:45:e5:5f:ba:44:70:aa:9a:4e:10: 7d:cf:2c:85:47:e8:00:a4:7d:ac:f0:7d:f3:2f:b3:ed:fa:83: e4:92:96:1b:13:f2:36:58:3b:3a:12:2e:1f:60:88:f9:d5:b2: 3b:6b:9d:28:f9:55:a3:cf:33:c3:66:6a:51:b9:27:51:ba:0f: 71:8d:50:06:12:fb:ad:d1:90:5a:62:e8:49:c2:23:ff:34:37: 1e:85:57:4b:dd:7f:7d:ad:c1:3e:22:a2:3f:98:ca:20:13:2e: 04:02:31:6a:a9:c3:14:a0:16:85:be:6d:d4:93:4e:50:6b:03: f8:e1:5a:83:cc:ea:d4:94:3f:b1:6d:6e:03:0c:b2:e2:9e:8c: 1e:7c:7f:67:dc:9e:2b:b7:50:b0:89:c6:2a:dd:31:fc:70:d4: 40:3b:2c:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3QkExMTAvBgNVBAUTKDc3MDZEMDg4RTkyMURFOEIwMUVCQkEwNjIwMUQwNDE1 MEU4NjREMDQwHhcNMjQwNTA2MTkyNjUxWhcNMjQwNTEzMTkyNjUxWjAYMRYwFAYD VQQDEw02NjM5MmVmYi0zNjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArkEOiUJgGRnAhfkh8u0YF7hUcLdTM3BOUgtMzenvq+GS2Rd+6ndR/6hEgW3j lNZzmZif29s5MejkcHrsZk/WBY7HGUDyu23AHZJ3MqqpY5QkjiKdWV3LM1e8CyzG Sh0liaVXPyDRL/pmGne9tzP7ljAkXH9MqW/aFbEr3/4rZmExFxw5byQkiI6rbaV8 bALi/Ce4GP/BIIXbqqrb75om9buve64524shXr+2zv6/i9QGDYxfGDC/QNt7qYhw Ter/vyNzuSBmNwHL7g854CdTbiUAt9dJTLTEDkspk4/MxmuEN0wySLExaHHaoLgq 61s5cMGXXoLOZauEw5N12ZmuQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMEs1L/L j9Xr+TbamT1M6qCiMFATMB8GA1UdIwQYMBaAFHcG0IjpId6LAeu6BiAdBBUOhk0E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdCQS82RTc0OTUxMDA0 RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9kd2JRaU9raDNvc0I2N29HSUIwRUZRNkdU UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R3YlFpT2toM29zQjY3b0dJQjBFRlE2R1RRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTdCQS82RTc0OTUxMDA0RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9kd2JRaU9raDNv c0I2N29HSUIwRUZRNkdUUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPqGfPsUoJpEePXCxkT86syqYhqPoRsv6eY9AHfrP5PQwbtyDhCNig 50mTr6EgDVoDBm0j2Vl1kMUyPQYj23b2Fd2ubIePkRowN88hA2clCWqKN8pF8tve ke+yInQfzzK3PUXlX7pEcKqaThB9zyyFR+gApH2s8H3zL7Pt+oPkkpYbE/I2WDs6 Ei4fYIj51bI7a50o+VWjzzPDZmpRuSdRug9xjVAGEvut0ZBaYuhJwiP/NDcehVdL 3X99rcE+IqI/mMogEy4EAjFqqcMUoBaFvm3Uk05QawP44VqDzOrUlD+xbW4DDLLi nowefH9n3J4rt1CwicYq3TH8cNRAOyxb -----END CERTIFICATE-----Generated at Mon May 6 20:19:31 2024 by rpki-client on console-ams.rpki-client.org