$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft File: p4emPknujsb5dRFgfxt8Ww3xFk4.mft (raw, json) Hash identifier: 86tVDiukBTGFwvJYO+8cz3E7OV4/cHD709SnyC4G6kQ= Subject key identifier: 38:C7:E0:EF:B0:72:97:EB:43:C5:96:21:E0:3A:DE:07:C2:6A:AD:2E Authority key identifier: A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E Certificate issuer: /CN=A91A0A6C/serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E Certificate serial: 0903 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft Manifest number: 08FA Signing time: Sat 04 May 2024 21:27:15 +0000 Manifest this update: Sat 04 May 2024 21:27:14 +0000 Manifest next update: Sat 11 May 2024 21:27:14 +0000 Files and hashes: 1: p4emPknujsb5dRFgfxt8Ww3xFk4.crl (hash: bU4qzVi9Xax/9RKzgQyYZDvpQiHX2tHYnbVrSLsMYPs=) 2: CFDF8B8A5B5D11EE967F161DC4F9AE02.roa (hash: gmPw0/XxS6by0eGadVEva2pNqJ0sYAzIpNRugtlXu4s=) 3: B13B2E5A5B5D11EEADF5C61CC4F9AE02.roa (hash: BuhJgDsyCsja/6NR2KvBldmlI45GwmmzEaspPRYxwho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2307 (0x903) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0A6C/serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E Validity Not Before: May 4 21:27:14 2024 GMT Not After : May 11 21:27:14 2024 GMT Subject: CN=6636a833-09f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:62:1a:62:65:27:c3:78:05:1b:d8:42:22:6f: 50:e1:ce:90:ad:39:20:89:36:0c:16:4b:30:b6:45: 02:a1:9f:00:0d:cb:d1:7c:f5:c3:88:5c:87:5b:3b: 4c:dd:e9:52:98:71:b4:3a:ca:ff:61:cb:97:20:c0: f7:6c:f7:4e:94:f1:4e:45:63:1a:ae:41:e1:33:90: 47:ec:71:3c:ff:88:08:94:8d:e0:c0:ee:00:b8:1b: 23:e4:2d:2a:65:c6:50:d9:28:c8:c3:19:d9:81:de: b5:a7:1a:86:70:9f:62:a2:68:fd:82:67:a6:06:e9: 5f:25:67:1b:48:90:9f:e4:1e:bc:9d:f0:3b:ff:4d: 57:69:4d:58:27:c3:a0:83:05:17:b8:8e:ab:0e:f1: 89:e0:c3:85:b5:b5:fb:db:88:f5:7d:ec:2d:79:20: 8f:6a:ff:cc:86:db:7d:d3:82:40:c5:78:a6:cb:e7: f8:b0:9a:a8:65:77:08:bf:4c:53:b1:7b:08:78:0a: ca:0a:2e:0e:b5:6b:a4:10:2b:1b:26:ad:c6:14:69: 29:0c:24:62:4a:a7:b8:9c:8d:84:55:d4:1e:9e:0b: 4c:60:f7:4a:f0:d7:f3:53:0c:82:5a:9e:8b:73:5b: 1f:11:f8:a2:45:b2:ab:f7:18:5e:20:2e:8f:24:d7: 85:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C7:E0:EF:B0:72:97:EB:43:C5:96:21:E0:3A:DE:07:C2:6A:AD:2E X509v3 Authority Key Identifier: keyid:A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:78:8e:00:4b:b9:60:b3:80:47:0f:63:02:a9:82:35:14:9e: 66:d8:a1:4c:98:79:86:ff:03:cb:7a:04:be:67:17:a4:52:11: 33:99:5b:05:f0:cb:b6:b2:10:b3:c0:27:37:df:f5:53:83:35: 62:ca:3c:a1:e1:2a:a3:07:07:b5:c2:20:43:8c:f8:53:7d:74: 9e:8d:aa:56:55:0f:d0:05:f9:7a:69:55:9f:af:15:f9:92:41: dc:1a:f4:2d:7d:c5:13:79:0d:c3:b0:62:36:09:7e:ed:0e:f9: d4:2e:e6:06:b1:7a:a3:5d:8c:b8:58:f0:b5:64:f4:77:7b:1d: 4a:0c:16:42:0c:6c:c6:ee:26:3c:a6:96:1f:d4:8c:8c:0a:54: e6:ac:7b:85:ca:08:0b:c1:0a:9e:22:1d:7c:25:a3:4c:89:6a: 43:bc:ea:46:a6:bc:54:78:dd:e4:8f:e6:82:96:bd:4a:ad:26: 0e:be:75:f2:d0:63:06:61:eb:1f:21:d5:8f:6d:79:10:60:0c: 59:66:6b:af:b6:72:e8:75:a4:ac:31:3b:02:db:c1:5d:20:b9: 46:9a:b4:c2:15:e2:7a:79:54:75:11:cc:f7:b7:f9:c8:e7:ee: b1:4b:70:8d:d7:f6:35:b0:94:e7:bb:73:c4:7b:97:15:dc:aa: 36:a3:c6:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBBNkMxMTAvBgNVBAUTKEE3ODdBNjNFNDlFRThFQzZGOTc1MTE2MDdGMUI3QzVC MERGMTE2NEUwHhcNMjQwNTA0MjEyNzE0WhcNMjQwNTExMjEyNzE0WjAYMRYwFAYD VQQDEw02NjM2YTgzMy0wOWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2IaYmUnw3gFG9hCIm9Q4c6QrTkgiTYMFkswtkUCoZ8ADcvRfPXDiFyHWztM 3elSmHG0Osr/YcuXIMD3bPdOlPFORWMarkHhM5BH7HE8/4gIlI3gwO4AuBsj5C0q ZcZQ2SjIwxnZgd61pxqGcJ9iomj9gmemBulfJWcbSJCf5B68nfA7/01XaU1YJ8Og gwUXuI6rDvGJ4MOFtbX724j1fewteSCPav/Mhtt904JAxXimy+f4sJqoZXcIv0xT sXsIeArKCi4OtWukECsbJq3GFGkpDCRiSqe4nI2EVdQengtMYPdK8NfzUwyCWp6L c1sfEfiiRbKr9xheIC6PJNeF3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDjH4O+w cpfrQ8WWIeA63gfCaq0uMB8GA1UdIwQYMBaAFKeHpj5J7o7G+XURYH8bfFsN8RZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEE2Qy9COTE2RjM4ODgy QzIxMUVBOUE1MTQ2MzlDNEY5QUUwMi9wNGVtUGtudWpzYjVkUkZnZnh0OFd3M3hG azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A0ZW1Qa251anNiNWRSRmdmeHQ4V3czeEZrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEE2Qy9COTE2RjM4ODgyQzIxMUVBOUE1MTQ2MzlDNEY5QUUwMi9wNGVtUGtudWpz YjVkUkZnZnh0OFd3M3hGazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6eI4AS7lgs4BHD2MCqYI1FJ5m2KFMmHmG/wPLegS+ZxekUhEzmVsF 8Mu2shCzwCc33/VTgzViyjyh4SqjBwe1wiBDjPhTfXSejapWVQ/QBfl6aVWfrxX5 kkHcGvQtfcUTeQ3DsGI2CX7tDvnULuYGsXqjXYy4WPC1ZPR3ex1KDBZCDGzG7iY8 ppYf1IyMClTmrHuFyggLwQqeIh18JaNMiWpDvOpGprxUeN3kj+aClr1KrSYOvnXy 0GMGYesfIdWPbXkQYAxZZmuvtnLodaSsMTsC28FdILlGmrTCFeJ6eVR1Ecz3t/nI 5+6xS3CN1/Y1sJTnu3PEe5cV3Ko2o8aS -----END CERTIFICATE-----Generated at Sat May 4 22:06:53 2024 by rpki-client on console-ams.rpki-client.org