$ rpki-client -vvf rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft File: -APDcY8OgSDUPrA0gJ9qiziE15s.mft (raw, json) Hash identifier: d7afitLzZxjx5U9T4Enq+MEw3oEhxM5v1a66TZpP93M= Subject key identifier: B8:63:FC:11:FC:C2:E7:2D:DE:70:08:76:CE:24:22:EB:1E:79:23:B2 Authority key identifier: F8:03:C3:71:8F:0E:81:20:D4:3E:B0:34:80:9F:6A:8B:38:84:D7:9B Certificate issuer: /CN=A91A36B8/serialNumber=F803C3718F0E8120D43EB034809F6A8B3884D79B Certificate serial: 0171 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft Manifest number: 016D Signing time: Tue 07 May 2024 04:49:53 +0000 Manifest this update: Tue 07 May 2024 04:49:52 +0000 Manifest next update: Tue 14 May 2024 04:49:52 +0000 Files and hashes: 1: -APDcY8OgSDUPrA0gJ9qiziE15s.crl (hash: N5+HEx2n/dpEAK+oKesltjNC7RAwoBYDu+WU0VoQxmo=) 2: 0C04EFB43C9811EDB6A25D4FC4F9AE02.roa (hash: ptaynjpCcf9jSwWToThsqL77hDnUEMGJ8JCx1NH4OwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.crl rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 04:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 369 (0x171) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A36B8/serialNumber=F803C3718F0E8120D43EB034809F6A8B3884D79B Validity Not Before: May 7 04:49:52 2024 GMT Not After : May 14 04:49:52 2024 GMT Subject: CN=6639b2f1-2e99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7f:29:31:9e:d2:21:0a:b9:af:44:dd:93:02: 96:b8:33:48:41:4c:e6:18:0a:37:1b:ba:52:2c:bb: 46:38:6e:ea:dd:0e:2a:70:5e:47:5d:7b:4c:74:30: b4:e9:e0:d0:95:1a:6d:cf:df:9f:4c:85:36:52:15: c0:10:8a:ac:9f:13:69:c9:f3:d9:5b:e0:9e:5c:83: 4f:c9:08:0e:9c:f5:83:03:31:b6:36:c1:6d:dc:0d: de:f7:86:79:01:b4:b8:a2:c2:99:ce:32:e9:1a:db: 78:d7:8a:43:bf:e6:2e:f9:a7:c5:17:e7:8f:12:80: 26:36:5a:c4:41:e5:ae:f8:88:7c:58:97:34:f3:0c: 95:cf:e9:21:4d:78:11:8d:d6:9a:4c:76:04:3a:85: f7:c4:f1:9b:23:56:67:98:e3:70:fc:e2:0f:76:8f: ff:8b:59:22:5d:3c:bd:f2:c5:43:97:df:60:af:5b: d6:57:98:d6:bd:33:6b:c6:c9:c1:9f:aa:5a:76:c8: 64:14:bb:7b:e4:8b:64:3b:cb:59:20:41:eb:71:2c: 25:4f:79:84:d5:43:f5:ba:a6:c7:c3:78:40:cc:0d: 7d:9d:2a:e4:7f:71:f1:52:8f:00:a6:32:c1:0e:49: 54:fd:cb:ea:da:a8:e6:43:c0:b7:7a:a1:ba:31:93: 85:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:63:FC:11:FC:C2:E7:2D:DE:70:08:76:CE:24:22:EB:1E:79:23:B2 X509v3 Authority Key Identifier: keyid:F8:03:C3:71:8F:0E:81:20:D4:3E:B0:34:80:9F:6A:8B:38:84:D7:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ef:f9:ea:b7:ee:ad:ca:35:34:5a:e6:8b:14:67:9d:b9:5b:10: a5:9f:46:da:77:25:b0:52:32:91:70:73:aa:19:03:3e:69:1b: 1f:a3:00:33:73:bc:89:5e:fd:72:07:d9:5d:69:83:13:30:e4: 94:2a:5b:2f:98:ac:ab:28:15:ea:b5:d9:2c:70:e8:45:2c:40: 3d:e3:f2:1c:81:20:09:5f:00:26:ef:59:5a:fb:15:07:ae:0c: f4:ea:6f:2b:6a:2a:66:75:78:fa:a9:6f:1f:b1:cb:71:b2:df: fa:4d:bf:9a:65:09:31:a8:8b:0f:62:ab:52:57:11:ca:0c:cf: 11:bb:9a:83:fc:ea:b1:a7:94:22:3b:2b:84:8a:65:31:bc:79: 34:94:5e:c0:a8:37:6b:e4:94:20:d8:be:ee:c6:31:e5:de:34: cf:93:d9:2f:23:69:94:d1:0d:30:cd:cc:78:86:94:ba:2b:8a: 84:ee:cc:c2:33:d8:ec:da:45:31:e7:3c:fd:86:15:c3:8c:91: a4:38:ca:aa:74:15:54:b3:e3:07:72:55:4b:04:5e:a6:7e:48: 8f:85:5c:a3:75:8a:10:2f:ca:e4:1f:0e:63:d8:15:3f:42:98: ac:a8:54:30:98:6f:82:a4:4b:2a:31:e0:02:9e:05:51:c4:5d: 00:e0:c7:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM2QjgxMTAvBgNVBAUTKEY4MDNDMzcxOEYwRTgxMjBENDNFQjAzNDgwOUY2QThC Mzg4NEQ3OUIwHhcNMjQwNTA3MDQ0OTUyWhcNMjQwNTE0MDQ0OTUyWjAYMRYwFAYD VQQDEw02NjM5YjJmMS0yZTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyX8pMZ7SIQq5r0TdkwKWuDNIQUzmGAo3G7pSLLtGOG7q3Q4qcF5HXXtMdDC0 6eDQlRptz9+fTIU2UhXAEIqsnxNpyfPZW+CeXINPyQgOnPWDAzG2NsFt3A3e94Z5 AbS4osKZzjLpGtt414pDv+Yu+afFF+ePEoAmNlrEQeWu+Ih8WJc08wyVz+khTXgR jdaaTHYEOoX3xPGbI1ZnmONw/OIPdo//i1kiXTy98sVDl99gr1vWV5jWvTNrxsnB n6padshkFLt75ItkO8tZIEHrcSwlT3mE1UP1uqbHw3hAzA19nSrkf3HxUo8ApjLB DklU/cvq2qjmQ8C3eqG6MZOFEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLhj/BH8 wuct3nAIds4kIuseeSOyMB8GA1UdIwQYMBaAFPgDw3GPDoEg1D6wNICfaos4hNeb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzZCOC8zODg0MTMxODJB NjMxMUVEQTEyNzIwM0ZDNEY5QUUwMi8tQVBEY1k4T2dTRFVQckEwZ0o5cWl6aUUx NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1BUERjWThPZ1NEVVByQTBnSjlxaXppRTE1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzZCOC8zODg0MTMxODJBNjMxMUVEQTEyNzIwM0ZDNEY5QUUwMi8tQVBEY1k4T2dT RFVQckEwZ0o5cWl6aUUxNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDv+eq37q3KNTRa5osUZ525WxCln0badyWwUjKRcHOqGQM+aRsfowAz c7yJXv1yB9ldaYMTMOSUKlsvmKyrKBXqtdkscOhFLEA94/IcgSAJXwAm71la+xUH rgz06m8raipmdXj6qW8fsctxst/6Tb+aZQkxqIsPYqtSVxHKDM8Ru5qD/Oqxp5Qi OyuEimUxvHk0lF7AqDdr5JQg2L7uxjHl3jTPk9kvI2mU0Q0wzcx4hpS6K4qE7szC M9js2kUx5zz9hhXDjJGkOMqqdBVUs+MHclVLBF6mfkiPhVyjdYoQL8rkHw5j2BU/ QpisqFQwmG+CpEsqMeACngVRxF0A4Mee -----END CERTIFICATE-----Generated at Tue May 7 05:34:57 2024 by rpki-client on console-ams.rpki-client.org