$ rpki-client -vvf rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft File: 0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft (raw, json) Hash identifier: DwPY2+35/SDXXyTxmiJKvsNCoNVWFl5s8ce+uP53di4= Subject key identifier: 9D:72:84:95:73:E8:E7:D2:B2:E4:D5:CC:18:3E:2E:B8:17:9D:BE:B5 Authority key identifier: D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC Certificate issuer: /CN=A916B33E/serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC Certificate serial: 17B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft Manifest number: 1759 Signing time: Tue 26 Mar 2024 17:00:59 +0000 Manifest this update: Tue 26 Mar 2024 17:00:58 +0000 Manifest next update: Tue 02 Apr 2024 17:00:58 +0000 Files and hashes: 1: 0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl (hash: SvWkqJ7mGr4fAYcvxjSkPJIM3wV5mbY/r9t1IP13Gvw=) 2: B6928054843011EAB4270B83C4F9AE02.roa (hash: IvieDBIWYD7SEWEg8q7DQzhCW5pSv0jVUWMmKbpL9M0=) 3: A108D60CF92E11EA8946AD6AC4F9AE02.roa (hash: KJsZzW4EFAQDdM8B6E3IlGr5JYBkqVAvXOg7Q+GRy4c=) 4: A084D2B2F92E11EA8946AD6AC4F9AE02.roa (hash: ZMGcpYpyDrx5Nlm3hmxSXoAmdIiGiv7MUzbtEfqvlWM=) 5: B5629336843011EAB4270B83C4F9AE02.roa (hash: X614Nr7ujJ8UnBOJIaOHUT2BrUgmubnzmFfczIemC/w=) 6: E3ED0E12882611EAA5182C45C4F9AE02.roa (hash: a+0ggFHPecRkSli+CpwWZcbSrBDtGI7gx9QcvnxtIVc=) 7: B728544E843011EAB4270B83C4F9AE02.roa (hash: YfDmB/QaBB/8X0tfxFe8aFOSIeGyaNiqnqcAalVs0kc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Apr 2024 17:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6073 (0x17b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B33E/serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC Validity Not Before: Mar 26 17:00:58 2024 GMT Not After : Apr 2 17:00:58 2024 GMT Subject: CN=6602ff4a-4a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:99:65:89:a9:60:9b:ea:f0:e2:11:5f:c4:5a: 73:61:03:e4:f7:50:c9:5b:05:52:24:1a:ad:e3:bc: 87:39:39:57:2e:51:59:13:77:a7:90:bb:c3:1a:1a: 1f:a5:ff:eb:b6:07:13:96:c7:11:01:40:65:6a:e3: 82:a8:dd:2c:1b:ff:76:cb:39:05:5a:98:14:ee:9a: 4e:ee:b5:1a:e1:13:56:0c:89:b9:a9:22:c7:16:6d: ac:b4:b4:f9:c8:9c:66:89:ea:ff:a6:71:c4:9e:42: 4b:cc:02:8d:8d:19:db:66:99:90:d4:a2:10:e9:78: 15:6f:a5:31:8d:f3:95:7d:79:fa:8d:01:de:08:5d: 0f:97:49:de:a4:ac:c9:12:a5:5f:8e:41:ae:e9:c0: 97:6f:43:b2:35:57:ff:fc:01:b2:5a:1f:ae:c0:78: 45:a3:65:c5:db:25:44:da:0e:a7:3c:66:eb:84:3c: 4a:4e:e5:79:21:da:06:81:e5:e1:e2:a5:78:f6:3d: 78:5a:d1:f9:01:2c:e5:d9:6b:dc:d8:0a:b8:5c:36: a4:8b:f7:a3:08:1b:4d:00:f8:53:64:76:2a:db:43: 00:20:db:fb:e1:08:3c:f8:40:9e:c2:36:56:9f:f1: 04:15:59:6b:f4:19:70:d6:58:f3:90:a8:b6:42:02: 51:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:72:84:95:73:E8:E7:D2:B2:E4:D5:CC:18:3E:2E:B8:17:9D:BE:B5 X509v3 Authority Key Identifier: keyid:D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:39:75:77:f4:fe:a9:31:a0:cf:f5:9c:34:a4:51:04:be:8b: a7:0d:ab:c7:29:ce:2e:7f:15:64:18:32:32:6a:2c:2c:a7:ba: a0:9e:a2:d6:09:f7:53:65:10:92:81:ed:95:90:d2:5c:0a:96: e6:de:56:7d:22:ed:78:ba:e4:d7:ed:06:88:eb:e2:22:57:03: 62:9f:ef:7b:cf:cf:c6:e1:76:e6:89:d0:c4:9a:63:59:91:09: 19:ce:d8:58:f6:27:2f:12:6e:5a:9e:a9:61:07:41:18:56:76: 8f:4e:d9:35:ce:e0:a6:d9:33:6b:80:16:e2:58:89:78:d7:08: a0:7a:e5:8d:b3:a3:e7:0e:48:6f:54:6b:c0:bf:1b:73:1c:32: 37:49:00:f6:0c:c1:3a:36:42:c9:20:d6:1c:62:dd:99:3e:1d: e5:4e:fa:6e:95:0f:13:01:6e:48:81:c9:5d:84:3b:5b:53:56: 02:57:98:e8:0f:8c:6f:6b:a7:9e:4c:3f:ba:49:f8:09:fc:e9: e5:10:64:63:c2:43:59:ac:7f:32:eb:fb:18:3a:bc:d4:e1:03: 63:6d:2c:35:dc:77:6a:2d:29:de:be:d2:1b:44:0c:28:f8:2a: ba:6d:f5:f5:ea:93:62:2e:12:02:02:43:b0:ca:28:40:67:58: 21:08:6f:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIzM0UxMTAvBgNVBAUTKEQwMDcyRURFQjY3RTE3NTJBQjc1MjI2M0E0RkQ5NDUw REQzQTMzRUMwHhcNMjQwMzI2MTcwMDU4WhcNMjQwNDAyMTcwMDU4WjAYMRYwFAYD VQQDEw02NjAyZmY0YS00YTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqpllialgm+rw4hFfxFpzYQPk91DJWwVSJBqt47yHOTlXLlFZE3enkLvDGhof pf/rtgcTlscRAUBlauOCqN0sG/92yzkFWpgU7ppO7rUa4RNWDIm5qSLHFm2stLT5 yJxmier/pnHEnkJLzAKNjRnbZpmQ1KIQ6XgVb6UxjfOVfXn6jQHeCF0Pl0nepKzJ EqVfjkGu6cCXb0OyNVf//AGyWh+uwHhFo2XF2yVE2g6nPGbrhDxKTuV5IdoGgeXh 4qV49j14WtH5ASzl2Wvc2Aq4XDaki/ejCBtNAPhTZHYq20MAINv74Qg8+ECewjZW n/EEFVlr9Blw1ljzkKi2QgJRsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ1yhJVz 6OfSsuTVzBg+LrgXnb61MB8GA1UdIwQYMBaAFNAHLt62fhdSq3UiY6T9lFDdOjPs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjMzRS8yRjY2QjU3QUI4 M0UxMUU3QTAxRDY2NTBDNEY5QUUwMi8wQWN1M3JaLUYxS3JkU0pqcFAyVVVOMDZN LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBBY3UzclotRjFLcmRTSmpwUDJVVU4wNk0tdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjMzRS8yRjY2QjU3QUI4M0UxMUU3QTAxRDY2NTBDNEY5QUUwMi8wQWN1M3JaLUYx S3JkU0pqcFAyVVVOMDZNLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZOXV39P6pMaDP9Zw0pFEEvounDavHKc4ufxVkGDIyaiwsp7qgnqLW CfdTZRCSge2VkNJcCpbm3lZ9Iu14uuTX7QaI6+IiVwNin+97z8/G4XbmidDEmmNZ kQkZzthY9icvEm5anqlhB0EYVnaPTtk1zuCm2TNrgBbiWIl41wigeuWNs6PnDkhv VGvAvxtzHDI3SQD2DME6NkLJINYcYt2ZPh3lTvpulQ8TAW5IgcldhDtbU1YCV5jo D4xva6eeTD+6SfgJ/OnlEGRjwkNZrH8y6/sYOrzU4QNjbSw13HdqLSnevtIbRAwo +Cq6bfX16pNiLhICAkOwyihAZ1ghCG8F -----END CERTIFICATE-----Generated at Tue Mar 26 18:02:43 2024 by rpki-client on console-ams.rpki-client.org