$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft File: dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft (raw, json) Hash identifier: 1z+JpAGFd9wF8ADH3CA4EOJA5oAaHqbCAa/neOWpSOA= Subject key identifier: FF:2B:54:7B:9F:03:3B:A8:E8:55:1E:4E:0C:BD:03:CC:8E:DB:52:70 Authority key identifier: 74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A Certificate issuer: /CN=A91A2C5A/serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft Manifest number: 0134 Signing time: Wed 01 May 2024 05:18:24 +0000 Manifest this update: Wed 01 May 2024 05:18:24 +0000 Manifest next update: Wed 08 May 2024 05:18:24 +0000 Files and hashes: 1: dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl (hash: WTpby7jHw03ROE3RPAv0yvQ9U3ujToQAkCZpbszCQ/k=) 2: 88DA4EC83E3511ED8B05E85AC4F9AE02.roa (hash: m+UggDiKnlsr7oDYe2JvPaLjrumOSk4OCYStSoz32JE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2C5A/serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A Validity Not Before: May 1 05:18:24 2024 GMT Not After : May 8 05:18:24 2024 GMT Subject: CN=6631d0a0-8f1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3f:cc:93:fc:d7:23:c3:38:ff:b2:76:f4:6e: fb:04:ca:d5:8c:af:04:9b:33:64:12:5b:a9:49:cf: e8:9f:d1:92:17:8a:6b:39:52:0f:88:d3:f7:aa:81: 96:f9:ef:12:da:c6:c2:85:de:35:e5:5e:33:0d:be: 91:7b:93:52:66:e1:74:e1:a2:5b:74:22:fe:b3:8b: f7:91:57:d7:55:4b:54:eb:b6:d7:83:d8:59:94:41: c0:39:4c:2f:87:72:3e:7a:a8:99:29:0e:70:a4:10: 9b:25:e6:10:2a:80:fa:b3:b9:03:41:ca:d1:fe:48: 8d:90:b4:ea:f1:da:98:27:7f:9b:50:86:40:ad:c4: 34:8f:7d:84:f7:49:67:da:b8:16:97:a3:fa:e4:35: 2c:ee:d4:c9:d7:b9:22:63:93:83:12:4f:ea:8d:ba: 21:8a:a5:57:f0:cc:14:79:3e:2b:a6:cf:06:09:2d: 77:e1:83:d5:97:70:ff:29:87:fd:0c:30:1e:f7:5a: 8e:41:a2:5a:2b:70:96:dc:7a:e1:fa:e4:b6:a0:e3: fb:b5:db:99:a7:d1:57:88:14:ea:c7:1e:34:76:46: a9:fa:dd:13:cf:e2:ae:64:81:27:f7:f7:4a:ac:4b: 08:96:b3:cd:47:0f:ff:01:91:51:63:a8:66:a5:ec: 67:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:2B:54:7B:9F:03:3B:A8:E8:55:1E:4E:0C:BD:03:CC:8E:DB:52:70 X509v3 Authority Key Identifier: keyid:74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:86:24:25:c4:da:d3:9a:4e:ca:69:86:54:6d:84:3f:e3:b6: 1d:05:0a:2b:d5:c9:0e:62:4c:29:c6:81:a9:37:f3:19:0f:7c: 86:24:43:29:55:c1:d1:1e:b6:8a:0c:1a:3a:25:0c:59:d9:09: 99:6a:72:77:77:60:f1:02:0d:29:ec:e8:ac:a5:57:9c:17:ed: bb:9e:fd:55:3a:4a:d8:7b:de:10:10:27:48:66:ac:cf:8a:3e: fd:cc:7f:4d:da:81:5e:a0:f4:95:13:43:da:18:f3:bd:c6:42: 65:1e:98:e1:e6:ef:e0:9a:1f:a2:99:e1:41:b3:45:c0:60:5f: a0:1f:af:15:17:de:6b:f0:b9:ad:6d:07:0a:62:38:cd:5c:38: a8:68:57:f2:11:0a:4f:58:d0:fc:8c:c1:c6:12:0b:f7:98:f7: fb:d8:af:e2:07:ba:a8:fa:e6:c4:16:3b:80:48:37:96:d7:da: b1:f1:e1:04:31:d7:ca:f3:6e:ba:07:68:5c:6f:00:7e:2b:dc: fc:9e:2c:5e:8f:1d:29:cb:e9:18:20:9a:d9:f0:e8:48:14:02: b3:33:46:91:3c:03:aa:e3:6a:ee:24:eb:61:60:72:2f:4b:f1: a7:5d:aa:ef:69:da:5b:7e:bb:37:2f:4b:92:5a:70:94:f2:f4: a7:42:f1:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJDNUExMTAvBgNVBAUTKDc0QkYyRkUyNkQ0NEZGRUY2M0RFNjgzRjQyNDI0ODI0 MEZCNzIyOUEwHhcNMjQwNTAxMDUxODI0WhcNMjQwNTA4MDUxODI0WjAYMRYwFAYD VQQDEw02NjMxZDBhMC04ZjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxT/Mk/zXI8M4/7J29G77BMrVjK8EmzNkElupSc/on9GSF4prOVIPiNP3qoGW +e8S2sbChd415V4zDb6Re5NSZuF04aJbdCL+s4v3kVfXVUtU67bXg9hZlEHAOUwv h3I+eqiZKQ5wpBCbJeYQKoD6s7kDQcrR/kiNkLTq8dqYJ3+bUIZArcQ0j32E90ln 2rgWl6P65DUs7tTJ17kiY5ODEk/qjbohiqVX8MwUeT4rps8GCS134YPVl3D/KYf9 DDAe91qOQaJaK3CW3Hrh+uS2oOP7tduZp9FXiBTqxx40dkap+t0Tz+KuZIEn9/dK rEsIlrPNRw//AZFRY6hmpexnCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP8rVHuf Azuo6FUeTgy9A8yO21JwMB8GA1UdIwQYMBaAFHS/L+JtRP/vY95oP0JCSCQPtyKa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkM1QS8wQUVGMEZEODNF MzIxMUVEOEREN0UwNkFDNEY5QUUwMi9kTDh2NG0xRV8tOWozbWdfUWtKSUpBLTNJ cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RMOHY0bTFFXy05ajNtZ19Ra0pJSkEtM0lwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkM1QS8wQUVGMEZEODNFMzIxMUVEOEREN0UwNkFDNEY5QUUwMi9kTDh2NG0xRV8t OWozbWdfUWtKSUpBLTNJcG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGhiQlxNrTmk7KaYZUbYQ/47YdBQor1ckOYkwpxoGpN/MZD3yGJEMp VcHRHraKDBo6JQxZ2QmZanJ3d2DxAg0p7OispVecF+27nv1VOkrYe94QECdIZqzP ij79zH9N2oFeoPSVE0PaGPO9xkJlHpjh5u/gmh+imeFBs0XAYF+gH68VF95r8Lmt bQcKYjjNXDioaFfyEQpPWND8jMHGEgv3mPf72K/iB7qo+ubEFjuASDeW19qx8eEE MdfK8266B2hcbwB+K9z8nixejx0py+kYIJrZ8OhIFAKzM0aRPAOq42ruJOthYHIv S/GnXarvadpbfrs3L0uSWnCU8vSnQvH2 -----END CERTIFICATE-----Generated at Wed May 1 05:55:44 2024 by rpki-client on console-ams.rpki-client.org