$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft File: AwUYVzXgl--zaoYGU7JTq-n-EVw.mft (raw, json) Hash identifier: tzTQ6zbWQFsO9CRtK9VRHFElpro+eHwwOZrp2i4l22s= Subject key identifier: 02:A5:C5:C4:22:8B:ED:1C:3C:4F:DE:94:D0:26:55:DF:CD:A5:31:1F Authority key identifier: 03:05:18:57:35:E0:97:EF:B3:6A:86:06:53:B2:53:AB:E9:FE:11:5C Certificate issuer: /CN=A91AEE40/serialNumber=0305185735E097EFB36A860653B253ABE9FE115C Certificate serial: 01AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft Manifest number: 01A8 Signing time: Sat 27 Apr 2024 04:30:38 +0000 Manifest this update: Sat 27 Apr 2024 04:30:37 +0000 Manifest next update: Sat 04 May 2024 04:30:37 +0000 Files and hashes: 1: AwUYVzXgl--zaoYGU7JTq-n-EVw.crl (hash: bD3bg0Ob1dBu3pIonP7+gtYOGBl7PhJ9IEDY9RkksKM=) 2: 59179A7E0F3211EDA9D57685C4F9AE02.roa (hash: 3MexE2Ef/70Vdkn5/BRpA8PSShaP/zOIN02NAcupUFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.crl rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 03:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 427 (0x1ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEE40/serialNumber=0305185735E097EFB36A860653B253ABE9FE115C Validity Not Before: Apr 27 04:30:37 2024 GMT Not After : May 4 04:30:37 2024 GMT Subject: CN=662c7f6d-93f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:62:32:6b:e9:82:11:8c:43:19:17:10:31:33: da:54:36:ab:9f:3c:7c:a6:79:44:a0:39:f1:fe:57: 67:23:16:9e:12:ce:38:43:34:52:d5:8a:1b:3b:1e: c1:66:f8:b9:9c:24:95:02:a3:2e:de:ae:68:fc:2d: ef:3a:66:c1:1b:df:c8:5a:2c:20:55:0a:f8:ef:27: bc:f1:0a:20:c5:18:39:dc:99:73:1a:7c:d7:1d:a7: 99:58:7f:8a:16:e1:b7:f8:49:82:84:ca:ca:71:18: 21:83:d0:4d:6a:77:5e:dc:41:60:89:1f:2d:d7:e4: 5d:cf:8c:2f:27:16:41:58:77:41:b9:68:28:0d:35: 99:d2:58:af:0b:e3:78:0f:14:ed:5b:ee:06:90:52: 83:3b:b3:8a:e1:ed:5f:bd:35:cf:8f:80:0d:10:e1: 12:76:dc:5e:5a:e4:e0:9a:03:da:79:b1:10:be:68: 58:b7:ed:9e:8e:fe:9f:f6:1b:06:7b:c6:79:85:c2: b5:03:95:7f:9f:1b:45:1c:22:2c:f4:61:13:ae:db: 23:8f:e7:e7:11:1d:7f:44:53:41:0f:93:a4:cd:11: 77:d7:35:04:e7:35:c4:40:99:25:bc:e0:a2:a0:5a: ac:cb:71:ea:06:f2:be:41:5a:bc:df:53:be:69:9f: 56:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A5:C5:C4:22:8B:ED:1C:3C:4F:DE:94:D0:26:55:DF:CD:A5:31:1F X509v3 Authority Key Identifier: keyid:03:05:18:57:35:E0:97:EF:B3:6A:86:06:53:B2:53:AB:E9:FE:11:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:34:57:47:14:da:f0:8c:6b:76:43:73:80:c9:14:c3:99:3e: 8a:fb:e7:cc:0b:0d:20:cb:d4:99:a0:6e:10:74:4a:48:4b:89: cb:0b:0c:f2:15:11:64:c4:6a:2d:3a:66:bb:70:91:e7:df:c6: e6:2c:c4:95:ee:12:c6:db:df:c8:7d:d5:2c:4f:3e:07:cb:a9: 84:6c:ac:a0:e2:93:10:29:19:6e:2f:fc:a2:d0:bb:0e:a3:ca: d4:d8:a1:7d:d7:e7:d1:6f:4c:da:16:c6:a9:69:2e:95:53:4e: 9f:0c:53:5d:67:df:6a:e3:e2:a8:c2:2f:96:8b:c2:74:e1:00: 68:ac:38:b2:90:66:ed:d2:a2:94:90:23:4f:40:03:81:45:c5: 86:56:df:0e:87:55:30:9b:37:61:91:91:42:08:c7:8b:68:e8: e3:45:43:08:af:7e:7c:81:35:0e:ab:62:dd:c6:31:0b:80:25: d7:e0:9b:89:20:f9:fd:1b:62:ff:08:22:b6:57:36:a1:0e:19: 5f:da:61:8d:3e:f4:7b:b1:24:c7:97:da:89:78:5a:c6:0d:e7: dc:58:05:15:a7:79:74:c5:94:f2:97:c1:a2:c1:25:48:69:74: 5e:36:3a:16:f8:10:89:70:70:42:e9:db:e3:99:96:ee:1b:be: 56:31:07:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVFNDAxMTAvBgNVBAUTKDAzMDUxODU3MzVFMDk3RUZCMzZBODYwNjUzQjI1M0FC RTlGRTExNUMwHhcNMjQwNDI3MDQzMDM3WhcNMjQwNTA0MDQzMDM3WjAYMRYwFAYD VQQDEw02NjJjN2Y2ZC05M2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqGIya+mCEYxDGRcQMTPaVDarnzx8pnlEoDnx/ldnIxaeEs44QzRS1YobOx7B Zvi5nCSVAqMu3q5o/C3vOmbBG9/IWiwgVQr47ye88QogxRg53JlzGnzXHaeZWH+K FuG3+EmChMrKcRghg9BNande3EFgiR8t1+Rdz4wvJxZBWHdBuWgoDTWZ0livC+N4 DxTtW+4GkFKDO7OK4e1fvTXPj4ANEOESdtxeWuTgmgPaebEQvmhYt+2ejv6f9hsG e8Z5hcK1A5V/nxtFHCIs9GETrtsjj+fnER1/RFNBD5OkzRF31zUE5zXEQJklvOCi oFqsy3HqBvK+QVq831O+aZ9W0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAKlxcQi i+0cPE/elNAmVd/NpTEfMB8GA1UdIwQYMBaAFAMFGFc14Jfvs2qGBlOyU6vp/hFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUU0MC8wRUVDMjlGODBG MzAxMUVEQjM1NjhBODRDNEY5QUUwMi9Bd1VZVnpYZ2wtLXphb1lHVTdKVHEtbi1F VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F3VVlWelhnbC0temFvWUdVN0pUcS1uLUVWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUU0MC8wRUVDMjlGODBGMzAxMUVEQjM1NjhBODRDNEY5QUUwMi9Bd1VZVnpYZ2wt LXphb1lHVTdKVHEtbi1FVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcNFdHFNrwjGt2Q3OAyRTDmT6K++fMCw0gy9SZoG4QdEpIS4nLCwzy FRFkxGotOma7cJHn38bmLMSV7hLG29/IfdUsTz4Hy6mEbKyg4pMQKRluL/yi0LsO o8rU2KF91+fRb0zaFsapaS6VU06fDFNdZ99q4+Kowi+Wi8J04QBorDiykGbt0qKU kCNPQAOBRcWGVt8Oh1UwmzdhkZFCCMeLaOjjRUMIr358gTUOq2LdxjELgCXX4JuJ IPn9G2L/CCK2VzahDhlf2mGNPvR7sSTHl9qJeFrGDefcWAUVp3l0xZTyl8GiwSVI aXReNjoW+BCJcHBC6dvjmZbuG75WMQfq -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:14 2024 by rpki-client on console-ams.rpki-client.org