$ rpki-client -vvf rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.mft File: 47jqsa6RbflaLVWue7e7eaULSuc.mft (raw, json) Hash identifier: 6OrzOf/7Ht/lQkBiU9ABOK97kSZr0HYqtVJ4tXyGw6g= Subject key identifier: 2F:07:15:C1:7E:95:44:57:8B:83:5F:84:5F:97:34:33:51:46:4E:D1 Authority key identifier: E3:B8:EA:B1:AE:91:6D:F9:5A:2D:55:AE:7B:B7:BB:79:A5:0B:4A:E7 Certificate issuer: /CN=A918B591/serialNumber=E3B8EAB1AE916DF95A2D55AE7BB7BB79A50B4AE7 Certificate serial: 066F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47jqsa6RbflaLVWue7e7eaULSuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.mft Manifest number: 066A Signing time: Thu 02 May 2024 23:39:12 +0000 Manifest this update: Thu 02 May 2024 23:39:11 +0000 Manifest next update: Thu 09 May 2024 23:39:11 +0000 Files and hashes: 1: 47jqsa6RbflaLVWue7e7eaULSuc.crl (hash: PSaV3GtghRxny5i+RQJ9ZSrm+VHeTMuoU1OhURzb40M=) 2: D2E2417A2F7211EB80969C22C4F9AE02.roa (hash: 5hXuw5V++QagpBJ1Df5xzXXy68/h9f8Vvx58YBpkE8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.crl rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47jqsa6RbflaLVWue7e7eaULSuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 23:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1647 (0x66f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B591/serialNumber=E3B8EAB1AE916DF95A2D55AE7BB7BB79A50B4AE7 Validity Not Before: May 2 23:39:11 2024 GMT Not After : May 9 23:39:11 2024 GMT Subject: CN=66342420-d639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e5:65:cb:38:cc:d1:6e:86:d2:c1:f7:04:38: 36:d1:c0:d6:71:44:88:16:d1:b3:67:fe:32:01:74: f8:ed:3f:fd:fb:82:17:12:14:56:21:1f:28:a6:9f: b2:15:ea:a1:e2:fa:99:10:a9:dc:b2:77:7a:d3:17: 69:e0:fa:55:5a:18:ad:1c:5c:0d:af:d8:e9:8c:6b: 30:95:fe:7b:bd:a9:41:ce:cc:ee:d0:2a:15:68:1c: 23:d0:5e:a7:9c:f1:b0:ee:71:a3:0d:d7:38:03:23: 86:9f:25:b8:a6:3b:34:af:e6:25:3e:c0:95:ad:21: de:d7:83:83:e8:ba:7f:62:f3:2b:52:01:20:4a:15: f3:b4:9c:51:6b:a5:50:3c:df:7b:30:6b:30:60:31: f5:62:fc:52:51:36:80:00:e6:5b:fe:1b:74:ff:c7: 19:9f:85:68:e1:72:04:f6:5f:9f:0a:b6:fd:ce:b6: de:15:46:73:fd:d8:d8:ec:7a:62:e9:c0:f4:84:ab: 11:a3:ae:a1:d9:f7:6f:39:89:1a:1c:0e:29:60:2f: 4c:56:a3:22:ea:b0:28:53:79:df:9d:b9:36:b7:d3: 80:d3:8e:26:ef:17:a7:0b:42:67:60:a7:a5:8e:cf: 6b:dd:55:09:eb:dd:68:87:50:f1:17:ae:11:d3:6a: 3c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:07:15:C1:7E:95:44:57:8B:83:5F:84:5F:97:34:33:51:46:4E:D1 X509v3 Authority Key Identifier: keyid:E3:B8:EA:B1:AE:91:6D:F9:5A:2D:55:AE:7B:B7:BB:79:A5:0B:4A:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47jqsa6RbflaLVWue7e7eaULSuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:15:c4:93:12:60:8a:88:b9:65:95:be:31:07:01:28:88:c4: 52:76:83:52:30:9e:15:a9:bd:8a:94:69:41:ee:7a:ba:ec:f9: d4:83:4f:5d:58:ee:24:ec:b5:7f:b4:bb:eb:aa:5c:02:bc:5b: 75:6b:09:63:af:04:b2:7e:54:9e:a9:6a:4a:8a:1e:ed:35:b0: 1a:8b:0a:0a:8a:3a:78:f4:1c:cd:ce:14:2f:ac:e8:5d:f3:c6: d1:9b:09:ee:73:71:c7:22:be:69:22:c6:65:51:bd:66:ed:eb: fb:91:c5:50:2e:7b:77:c1:a8:91:67:f9:68:75:81:03:fc:d5: c9:24:22:84:c0:c9:47:15:c2:0c:56:f0:1e:bc:8d:e3:0c:68: ff:7c:39:07:01:dc:99:8e:a8:fb:e1:9e:8c:a2:97:eb:db:f4: 6e:fc:11:c4:47:4c:1c:11:f2:32:d1:f6:c7:c1:78:5b:54:4a: 22:bd:64:9c:79:85:e2:20:dc:96:d7:18:10:c6:61:34:5b:96: 50:43:a7:ff:5f:af:36:91:6c:2b:b7:85:cf:81:b5:08:54:f0: 48:c9:bb:5b:a2:2e:6d:06:2f:42:1d:c8:2c:e0:a1:80:1b:41: 2c:14:d6:32:72:cd:a8:b0:85:79:79:8a:cd:f8:3c:ef:c4:85: de:67:85:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI1OTExMTAvBgNVBAUTKEUzQjhFQUIxQUU5MTZERjk1QTJENTVBRTdCQjdCQjc5 QTUwQjRBRTcwHhcNMjQwNTAyMjMzOTExWhcNMjQwNTA5MjMzOTExWjAYMRYwFAYD VQQDEw02NjM0MjQyMC1kNjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1eVlyzjM0W6G0sH3BDg20cDWcUSIFtGzZ/4yAXT47T/9+4IXEhRWIR8opp+y Feqh4vqZEKncsnd60xdp4PpVWhitHFwNr9jpjGswlf57valBzszu0CoVaBwj0F6n nPGw7nGjDdc4AyOGnyW4pjs0r+YlPsCVrSHe14OD6Lp/YvMrUgEgShXztJxRa6VQ PN97MGswYDH1YvxSUTaAAOZb/ht0/8cZn4Vo4XIE9l+fCrb9zrbeFUZz/djY7Hpi 6cD0hKsRo66h2fdvOYkaHA4pYC9MVqMi6rAoU3nfnbk2t9OA044m7xenC0JnYKel js9r3VUJ691oh1DxF64R02o8aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC8HFcF+ lURXi4NfhF+XNDNRRk7RMB8GA1UdIwQYMBaAFOO46rGukW35Wi1Vrnu3u3mlC0rn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjU5MS9EMjMzQzY0NjJG NzExMUVCQjZFRDNFMjJDNEY5QUUwMi80N2pxc2E2UmJmbGFMVld1ZTdlN2VhVUxT dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ3anFzYTZSYmZsYUxWV3VlN2U3ZWFVTFN1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjU5MS9EMjMzQzY0NjJGNzExMUVCQjZFRDNFMjJDNEY5QUUwMi80N2pxc2E2UmJm bGFMVld1ZTdlN2VhVUxTdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsFcSTEmCKiLlllb4xBwEoiMRSdoNSMJ4Vqb2KlGlB7nq67PnUg09d WO4k7LV/tLvrqlwCvFt1awljrwSyflSeqWpKih7tNbAaiwoKijp49BzNzhQvrOhd 88bRmwnuc3HHIr5pIsZlUb1m7ev7kcVQLnt3waiRZ/lodYED/NXJJCKEwMlHFcIM VvAevI3jDGj/fDkHAdyZjqj74Z6Mopfr2/Ru/BHER0wcEfIy0fbHwXhbVEoivWSc eYXiINyW1xgQxmE0W5ZQQ6f/X682kWwrt4XPgbUIVPBIybtboi5tBi9CHcgs4KGA G0EsFNYycs2osIV5eYrN+DzvxIXeZ4VJ -----END CERTIFICATE-----Generated at Fri May 3 00:48:29 2024 by rpki-client on console-ams.rpki-client.org