$ rpki-client -vvf rpki.apnic.net/member_repository/A91883AD/BA0B0938CAAA11EB93CE215CC4F9AE02/CtqKdljHSbypAEeGlZvGhiB7qp4.mft File: CtqKdljHSbypAEeGlZvGhiB7qp4.mft (raw, json) Hash identifier: 1aJmMdrZ0v7+FK/9lqOsw2WUdBwabxMYeeEH6yMKpWY= Subject key identifier: 2D:EB:99:01:BC:0C:81:13:A1:56:E2:84:28:9B:35:E7:74:F2:0B:09 Authority key identifier: 0A:DA:8A:76:58:C7:49:BC:A9:00:47:86:95:9B:C6:86:20:7B:AA:9E Certificate issuer: /CN=A91883AD/serialNumber=0ADA8A7658C749BCA9004786959BC686207BAA9E Certificate serial: 04EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CtqKdljHSbypAEeGlZvGhiB7qp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91883AD/BA0B0938CAAA11EB93CE215CC4F9AE02/CtqKdljHSbypAEeGlZvGhiB7qp4.mft Manifest number: 04E7 Signing time: Sun 05 May 2024 01:27:45 +0000 Manifest this update: Sun 05 May 2024 01:27:45 +0000 Manifest next update: Sun 12 May 2024 01:27:45 +0000 Files and hashes: 1: CtqKdljHSbypAEeGlZvGhiB7qp4.crl (hash: ZjojRjpUfQVShE/n0FAmgFet8FT53XZH/2c6IrP95YU=) 2: BF21361ECAAE11EBA95C5E64C4F9AE02.roa (hash: MYCCiu6e9PE4f1QOosX9SyDJZv0Bu9U/citZrevd2VM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91883AD/BA0B0938CAAA11EB93CE215CC4F9AE02/CtqKdljHSbypAEeGlZvGhiB7qp4.crl rsync://rpki.apnic.net/member_repository/A91883AD/BA0B0938CAAA11EB93CE215CC4F9AE02/CtqKdljHSbypAEeGlZvGhiB7qp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CtqKdljHSbypAEeGlZvGhiB7qp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1260 (0x4ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91883AD/serialNumber=0ADA8A7658C749BCA9004786959BC686207BAA9E Validity Not Before: May 5 01:27:45 2024 GMT Not After : May 12 01:27:45 2024 GMT Subject: CN=6636e091-121d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:65:b1:7e:65:8b:32:51:23:d2:cf:7e:36:c7: b7:dd:a1:87:85:95:0e:0a:8b:b6:21:f1:02:01:f9: 9e:bd:f8:ef:e0:d9:87:75:b1:d5:45:62:1b:9a:71: 53:c9:e8:66:c3:a3:b3:f3:4f:8f:52:72:3c:28:ce: 64:84:ba:fa:7b:ec:18:16:51:34:40:11:6c:ce:cd: 89:f2:74:03:f2:4f:28:c6:6d:f6:11:d5:f8:c7:ea: 50:24:73:94:6f:be:ec:68:b2:1c:0a:3a:b8:5a:5b: 1c:e3:57:d3:8a:07:3b:c5:ff:d5:d9:fa:67:1c:22: b1:fc:e7:a8:66:a8:64:05:b4:e4:19:c2:03:b4:3e: ad:83:bf:25:dc:c2:7a:f1:e7:18:01:37:b3:3d:1f: 52:6c:63:77:c0:04:92:58:cb:9d:9f:ad:02:54:1f: ab:97:54:15:40:67:22:d8:80:68:03:24:0c:3c:f2: 3f:3d:cb:6f:9c:fe:72:e7:62:36:da:b8:78:98:2c: f5:36:61:c9:5a:60:78:73:af:f9:5e:7b:a2:b2:3f: 0f:54:88:a0:6b:0a:45:eb:47:6e:3c:51:c3:55:88: 82:4e:42:71:e0:1f:cd:90:c0:2e:ac:6e:f9:2e:78: 5e:72:24:34:db:d1:72:83:c1:fc:c7:26:ad:0c:24: 37:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:EB:99:01:BC:0C:81:13:A1:56:E2:84:28:9B:35:E7:74:F2:0B:09 X509v3 Authority Key Identifier: keyid:0A:DA:8A:76:58:C7:49:BC:A9:00:47:86:95:9B:C6:86:20:7B:AA:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91883AD/BA0B0938CAAA11EB93CE215CC4F9AE02/CtqKdljHSbypAEeGlZvGhiB7qp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CtqKdljHSbypAEeGlZvGhiB7qp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883AD/BA0B0938CAAA11EB93CE215CC4F9AE02/CtqKdljHSbypAEeGlZvGhiB7qp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:82:5b:2f:5c:79:c6:70:1e:18:de:3c:3a:42:51:c7:b2:f7: b2:02:a5:5e:f7:c5:a1:36:cb:c2:b0:86:77:bc:03:90:21:c6: 9b:99:69:e2:d4:db:30:1b:52:ba:e7:51:62:bf:ec:96:a3:da: d8:a6:9f:84:24:05:4c:6e:aa:35:37:6f:ce:94:1f:ed:7b:c5: a3:48:2f:dc:13:ed:35:af:2b:75:98:05:f1:65:d4:6a:08:c0: 06:1b:66:ad:08:46:7d:57:f7:9c:6f:c6:16:42:a4:91:b7:e7: 14:e8:41:75:75:e8:02:7d:c0:a9:50:e5:7e:d0:0f:1a:eb:18: 9e:34:ca:c3:3f:f0:fd:ae:bc:2a:5c:58:44:95:04:ee:9a:ed: 64:b4:b7:e4:fd:82:bb:77:32:fe:dc:a5:0c:28:99:70:ec:b4: fa:83:0e:2e:cc:f2:e6:be:08:d2:d7:15:5b:72:19:82:7b:af: 24:1a:eb:88:d3:fb:a2:d3:42:5e:58:4a:77:94:a7:c8:a1:b6: b5:64:3a:b1:64:34:ed:e4:1d:f6:98:75:dd:c3:3b:f7:ab:7f: a4:d9:7b:a5:b8:41:91:6e:d0:9e:4d:e0:cd:ba:37:fa:1e:5f: a2:ef:ad:c8:db:2e:2c:5a:5a:bb:47:76:91:86:ba:9d:3b:1d: 70:ec:ea:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODgzQUQxMTAvBgNVBAUTKDBBREE4QTc2NThDNzQ5QkNBOTAwNDc4Njk1OUJDNjg2 MjA3QkFBOUUwHhcNMjQwNTA1MDEyNzQ1WhcNMjQwNTEyMDEyNzQ1WjAYMRYwFAYD VQQDEw02NjM2ZTA5MS0xMjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApWWxfmWLMlEj0s9+Nse33aGHhZUOCou2IfECAfmevfjv4NmHdbHVRWIbmnFT yehmw6Oz80+PUnI8KM5khLr6e+wYFlE0QBFszs2J8nQD8k8oxm32EdX4x+pQJHOU b77saLIcCjq4Wlsc41fTigc7xf/V2fpnHCKx/OeoZqhkBbTkGcIDtD6tg78l3MJ6 8ecYATezPR9SbGN3wASSWMudn60CVB+rl1QVQGci2IBoAyQMPPI/PctvnP5y52I2 2rh4mCz1NmHJWmB4c6/5Xnuisj8PVIigawpF60duPFHDVYiCTkJx4B/NkMAurG75 LnheciQ029Fyg8H8xyatDCQ34wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC3rmQG8 DIEToVbihCibNed08gsJMB8GA1UdIwQYMBaAFArainZYx0m8qQBHhpWbxoYge6qe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODNBRC9CQTBCMDkzOENB QUExMUVCOTNDRTIxNUNDNEY5QUUwMi9DdHFLZGxqSFNieXBBRWVHbFp2R2hpQjdx cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N0cUtkbGpIU2J5cEFFZUdsWnZHaGlCN3FwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODNBRC9CQTBCMDkzOENBQUExMUVCOTNDRTIxNUNDNEY5QUUwMi9DdHFLZGxqSFNi eXBBRWVHbFp2R2hpQjdxcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWglsvXHnGcB4Y3jw6QlHHsveyAqVe98WhNsvCsIZ3vAOQIcabmWni 1NswG1K651Fiv+yWo9rYpp+EJAVMbqo1N2/OlB/te8WjSC/cE+01ryt1mAXxZdRq CMAGG2atCEZ9V/ecb8YWQqSRt+cU6EF1degCfcCpUOV+0A8a6xieNMrDP/D9rrwq XFhElQTumu1ktLfk/YK7dzL+3KUMKJlw7LT6gw4uzPLmvgjS1xVbchmCe68kGuuI 0/ui00JeWEp3lKfIoba1ZDqxZDTt5B32mHXdwzv3q3+k2XuluEGRbtCeTeDNujf6 Hl+i763I2y4sWlq7R3aRhrqdOx1w7OqV -----END CERTIFICATE-----Generated at Sun May 5 02:13:03 2024 by rpki-client on console-ams.rpki-client.org