$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft File: aTn8BA2lwwt2bceU-cpML0Gsruo.mft (raw, json) Hash identifier: e26I4/ytVv+zPwzQ/1JCmIkBvCs2slO3WvLXaqBEyXQ= Subject key identifier: B1:0A:60:FF:59:3E:D7:16:C6:61:98:85:94:D4:2A:C5:49:C2:A1:A0 Authority key identifier: 69:39:FC:04:0D:A5:C3:0B:76:6D:C7:94:F9:CA:4C:2F:41:AC:AE:EA Certificate issuer: /CN=A91A2A1F/serialNumber=6939FC040DA5C30B766DC794F9CA4C2F41ACAEEA Certificate serial: 0380 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTn8BA2lwwt2bceU-cpML0Gsruo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft Manifest number: 0370 Signing time: Sat 27 Apr 2024 02:47:03 +0000 Manifest this update: Sat 27 Apr 2024 02:47:02 +0000 Manifest next update: Sat 04 May 2024 02:47:02 +0000 Files and hashes: 1: aTn8BA2lwwt2bceU-cpML0Gsruo.crl (hash: 4WVYRlDK/FmZdp1c8kvjJwVxMj+jtzQaJwveDO/ML6o=) 2: 17ABE41ACAF611EE894A2D50C4F9AE02.roa (hash: ENs5h3d3/0FRfpleT1ZWwfZ58WpuD7RI9PwpHA3W3eE=) 3: 27E42824621B11ECB96F443FC4F9AE02.roa (hash: /4JjWeyiUMQJMCybOXSSMIkBFPveZ27gZsbVEQ7V2tQ=) 4: 63E8739003C111EEB2272068C4F9AE02.roa (hash: GruXBNsoLQvj/P1gk1jgYpHV8Jab2lStx+J+qr87vdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.crl rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTn8BA2lwwt2bceU-cpML0Gsruo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 02:47:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 896 (0x380) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2A1F/serialNumber=6939FC040DA5C30B766DC794F9CA4C2F41ACAEEA Validity Not Before: Apr 27 02:47:02 2024 GMT Not After : May 4 02:47:02 2024 GMT Subject: CN=662c6727-9e97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e5:57:c2:6a:0e:62:37:9c:22:7a:e4:a6:85: 4d:dd:4b:45:c6:71:12:bb:14:f6:b2:50:29:64:be: 3f:12:99:c2:e6:cb:5a:74:08:46:f1:31:9d:b6:c9: aa:67:bc:2d:ea:29:37:7f:0d:ad:e5:b6:79:3b:02: 6a:8b:f4:df:1e:57:eb:60:7f:5a:f1:93:39:5a:0a: bc:35:bf:e9:e5:a0:66:6a:76:d6:11:1c:12:ca:a7: f1:85:f4:bb:8d:36:74:37:b4:46:b0:d3:a1:eb:9d: 37:03:f3:9b:54:ef:f2:90:f4:d8:0c:08:30:72:13: b7:c9:14:0c:b4:9f:3b:9f:ad:70:5d:7b:d7:33:23: 30:58:fc:f9:93:2e:ba:c8:96:bd:40:94:7b:71:f2: 78:87:da:44:d1:74:50:71:26:10:c7:49:e9:4d:e0: 2a:a0:ee:e1:52:fa:39:b6:eb:9c:87:03:44:ab:fa: 10:35:e2:5d:8b:91:b9:3c:53:c6:8c:39:5f:f9:de: e9:a8:a5:19:02:6f:7e:98:6b:08:9b:e6:6d:76:25: 88:bc:27:ee:e0:9a:2b:ad:f5:e2:6e:4a:0a:62:c8: 5b:10:a2:dc:51:63:cb:ff:91:da:c5:40:8a:ce:e4: ea:15:c7:d4:c4:e0:79:3b:00:68:f7:37:44:58:1a: 72:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:0A:60:FF:59:3E:D7:16:C6:61:98:85:94:D4:2A:C5:49:C2:A1:A0 X509v3 Authority Key Identifier: keyid:69:39:FC:04:0D:A5:C3:0B:76:6D:C7:94:F9:CA:4C:2F:41:AC:AE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTn8BA2lwwt2bceU-cpML0Gsruo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:30:08:60:21:2b:d0:27:15:48:a7:83:9f:03:70:ec:6c:b1: 0d:14:d3:a8:b2:1b:95:06:fa:99:ce:71:68:53:09:80:b6:d5: ae:b9:01:56:0f:ca:67:7c:70:f0:e9:96:bc:b8:7e:cf:d5:76: b2:99:5d:bc:c8:19:89:9a:53:d0:07:c0:8e:10:f2:43:9a:3a: fc:e5:ce:70:ab:af:de:d2:35:b9:8e:14:74:28:d9:2c:22:ac: 01:9a:b4:9c:0a:c9:99:2e:c7:df:1b:fb:71:5a:42:21:e0:a9: ce:98:11:ac:2c:79:60:16:9e:c1:92:67:7f:72:e9:c8:d3:7b: 75:14:9d:ea:46:18:89:1a:f6:8f:2a:aa:d9:04:95:d0:dc:a5: c8:cb:ed:95:24:6b:c7:41:73:07:81:8c:e8:e4:f3:1c:bb:2b: 17:38:f4:0a:bd:f0:20:92:e3:d9:ef:2b:ef:5e:fa:50:cc:09: a2:6a:2d:c1:d4:9b:bc:0e:e7:72:86:e2:21:7b:35:30:d6:d0: a0:06:42:b0:3c:2a:e7:e9:9b:50:b9:5e:68:a3:5c:4f:d0:9f: 35:d0:6d:51:f2:25:cf:92:2f:aa:8c:0e:20:b6:58:ad:e5:95: f2:68:79:f0:c3:e5:10:0c:75:d9:31:ee:fa:65:cf:63:09:78: f7:5d:ed:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJBMUYxMTAvBgNVBAUTKDY5MzlGQzA0MERBNUMzMEI3NjZEQzc5NEY5Q0E0QzJG NDFBQ0FFRUEwHhcNMjQwNDI3MDI0NzAyWhcNMjQwNTA0MDI0NzAyWjAYMRYwFAYD VQQDEw02NjJjNjcyNy05ZTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1+VXwmoOYjecInrkpoVN3UtFxnESuxT2slApZL4/EpnC5stadAhG8TGdtsmq Z7wt6ik3fw2t5bZ5OwJqi/TfHlfrYH9a8ZM5Wgq8Nb/p5aBmanbWERwSyqfxhfS7 jTZ0N7RGsNOh6503A/ObVO/ykPTYDAgwchO3yRQMtJ87n61wXXvXMyMwWPz5ky66 yJa9QJR7cfJ4h9pE0XRQcSYQx0npTeAqoO7hUvo5tuuchwNEq/oQNeJdi5G5PFPG jDlf+d7pqKUZAm9+mGsIm+ZtdiWIvCfu4JorrfXibkoKYshbEKLcUWPL/5HaxUCK zuTqFcfUxOB5OwBo9zdEWBpycQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLEKYP9Z PtcWxmGYhZTUKsVJwqGgMB8GA1UdIwQYMBaAFGk5/AQNpcMLdm3HlPnKTC9BrK7q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkExRi8xRUNGRkM0QzYy MTkxMUVDOTlBNTVGM0VDNEY5QUUwMi9hVG44QkEybHd3dDJiY2VVLWNwTUwwR3Ny dW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FUbjhCQTJsd3d0MmJjZVUtY3BNTDBHc3J1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkExRi8xRUNGRkM0QzYyMTkxMUVDOTlBNTVGM0VDNEY5QUUwMi9hVG44QkEybHd3 dDJiY2VVLWNwTUwwR3NydW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJMAhgISvQJxVIp4OfA3DsbLENFNOoshuVBvqZznFoUwmAttWuuQFW D8pnfHDw6Za8uH7P1XaymV28yBmJmlPQB8COEPJDmjr85c5wq6/e0jW5jhR0KNks IqwBmrScCsmZLsffG/txWkIh4KnOmBGsLHlgFp7Bkmd/cunI03t1FJ3qRhiJGvaP KqrZBJXQ3KXIy+2VJGvHQXMHgYzo5PMcuysXOPQKvfAgkuPZ7yvvXvpQzAmiai3B 1Ju8DudyhuIhezUw1tCgBkKwPCrn6ZtQuV5oo1xP0J810G1R8iXPki+qjA4gtlit 5ZXyaHnww+UQDHXZMe76Zc9jCXj3Xe1V -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:00 2024 by rpki-client on console-ams.rpki-client.org