$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.mft File: t3KDxTMROjkeMdlFJxhqz4OZol8.mft (raw, json) Hash identifier: FOCJFPQd7uaVbbDRG2Gk+HJ1D9SxCfZuG6+R3NCDHpc= Subject key identifier: 07:04:CA:81:6D:11:54:AA:F1:D9:45:3C:B9:0C:39:3E:EB:DB:F2:95 Authority key identifier: B7:72:83:C5:33:11:3A:39:1E:31:D9:45:27:18:6A:CF:83:99:A2:5F Certificate issuer: /CN=A91AEE4B/serialNumber=B77283C533113A391E31D94527186ACF8399A25F Certificate serial: 0A37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KDxTMROjkeMdlFJxhqz4OZol8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.mft Manifest number: 0A2F Signing time: Tue 30 Apr 2024 20:51:58 +0000 Manifest this update: Tue 30 Apr 2024 20:51:57 +0000 Manifest next update: Tue 07 May 2024 20:51:57 +0000 Files and hashes: 1: t3KDxTMROjkeMdlFJxhqz4OZol8.crl (hash: kdQB/y0z/aMfAt0ycgpnLKvqlCWZJf46tnZ9KFzNIbQ=) 2: 02F1850E45A611EA81CD145AC4F9AE02.roa (hash: HEc94XWDCUE8Dd4fhqUhOT9/bxga1Jbgeml+ll/dsec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.crl rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KDxTMROjkeMdlFJxhqz4OZol8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 20:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2615 (0xa37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEE4B/serialNumber=B77283C533113A391E31D94527186ACF8399A25F Validity Not Before: Apr 30 20:51:57 2024 GMT Not After : May 7 20:51:57 2024 GMT Subject: CN=663159ee-b681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:91:a6:f6:80:c3:4e:9e:ad:16:e2:b5:3c:08: 8f:b4:9d:38:20:a0:5e:fd:2f:00:08:e3:f3:82:45: 0f:8b:71:90:25:48:ad:ae:d0:83:23:9f:89:9c:96: 5e:2c:40:48:22:d7:bf:b6:74:dc:87:51:e5:d7:e2: 0d:e0:0d:25:a2:5c:00:af:66:81:71:1d:c9:42:d5: 96:a4:4a:56:54:a8:53:ea:e2:46:65:34:b2:bb:35: ec:3f:37:55:40:2b:a6:ca:39:fc:18:b9:c7:73:0f: 1d:a6:8f:9e:11:18:22:25:50:84:e3:15:e5:30:14: 13:e5:a6:12:6b:4b:b0:4c:97:ef:11:11:74:06:d9: 2a:81:88:01:ec:6a:d4:fa:ab:3c:7e:fe:93:14:75: 9b:82:ce:a2:66:81:cf:d0:d6:ef:31:a8:e8:45:45: 3d:b5:fd:6f:e3:53:61:b9:10:9f:e8:22:4d:e2:69: 03:a4:5a:9d:ef:eb:48:b7:e3:a6:93:61:f7:3e:d3: e7:04:73:14:76:5c:39:fd:f1:97:19:e7:ec:18:aa: f9:b1:c4:cf:ce:72:a1:23:2e:64:7b:16:21:6e:41: 95:7e:33:d3:db:71:91:c2:36:d1:e5:c8:c7:47:8b: 29:51:f4:6f:ac:6c:67:73:1d:b7:9c:bb:de:bf:6a: 6d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:04:CA:81:6D:11:54:AA:F1:D9:45:3C:B9:0C:39:3E:EB:DB:F2:95 X509v3 Authority Key Identifier: keyid:B7:72:83:C5:33:11:3A:39:1E:31:D9:45:27:18:6A:CF:83:99:A2:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KDxTMROjkeMdlFJxhqz4OZol8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:db:0c:44:5d:5b:2b:e2:c3:f5:6f:42:90:b8:16:15:44:44: 5c:7f:bf:88:04:71:4d:1e:c4:06:08:ca:f8:11:07:f7:26:ea: a9:47:84:81:f0:3e:01:d7:2e:f7:7c:f6:95:72:0c:ab:ea:60: c6:51:12:15:c6:44:cd:51:ad:9b:d6:db:6c:0e:a1:ba:fd:8b: 78:81:b4:bb:ee:a7:43:23:79:23:f6:80:72:72:20:33:23:6c: 91:c0:78:cc:a3:b2:10:04:31:7e:28:96:56:40:3f:15:15:cc: 6f:4e:ee:df:83:a6:6c:d8:0b:a5:1c:f0:e1:d3:9f:d2:43:70: 42:19:7c:ff:77:b5:7c:a2:c8:3b:69:86:8d:c2:a4:25:71:9d: ef:a5:cb:8f:36:16:8b:69:25:ca:0c:28:7f:f2:96:3a:d8:6c: 5b:cf:aa:e4:43:07:af:4d:c0:6e:8c:4e:70:b2:1b:3f:9c:7b: 86:11:0b:1a:71:68:f1:4d:c5:27:53:64:25:4f:6d:9e:74:35: 38:97:6b:4e:ae:51:aa:3a:79:88:88:d0:60:78:e2:e1:22:84: f7:e6:dc:72:32:96:3d:4e:2f:72:bd:9f:a2:67:34:06:d5:0c: d4:3a:39:37:44:6c:57:cc:9f:5d:24:a0:49:61:be:c6:aa:92: 9f:1c:3b:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVFNEIxMTAvBgNVBAUTKEI3NzI4M0M1MzMxMTNBMzkxRTMxRDk0NTI3MTg2QUNG ODM5OUEyNUYwHhcNMjQwNDMwMjA1MTU3WhcNMjQwNTA3MjA1MTU3WjAYMRYwFAYD VQQDEw02NjMxNTllZS1iNjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmpGm9oDDTp6tFuK1PAiPtJ04IKBe/S8ACOPzgkUPi3GQJUitrtCDI5+JnJZe LEBIIte/tnTch1Hl1+IN4A0lolwAr2aBcR3JQtWWpEpWVKhT6uJGZTSyuzXsPzdV QCumyjn8GLnHcw8dpo+eERgiJVCE4xXlMBQT5aYSa0uwTJfvERF0BtkqgYgB7GrU +qs8fv6TFHWbgs6iZoHP0NbvMajoRUU9tf1v41NhuRCf6CJN4mkDpFqd7+tIt+Om k2H3PtPnBHMUdlw5/fGXGefsGKr5scTPznKhIy5kexYhbkGVfjPT23GRwjbR5cjH R4spUfRvrGxncx23nLvev2ptCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAcEyoFt EVSq8dlFPLkMOT7r2/KVMB8GA1UdIwQYMBaAFLdyg8UzETo5HjHZRScYas+DmaJf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUU0Qi82M0RGRjgwMjQ1 QTQxMUVBOTQyRTA5NTdDNEY5QUUwMi90M0tEeFRNUk9qa2VNZGxGSnhocXo0T1pv bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QzS0R4VE1ST2prZU1kbEZKeGhxejRPWm9sOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUU0Qi82M0RGRjgwMjQ1QTQxMUVBOTQyRTA5NTdDNEY5QUUwMi90M0tEeFRNUk9q a2VNZGxGSnhocXo0T1pvbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBC2wxEXVsr4sP1b0KQuBYVRERcf7+IBHFNHsQGCMr4EQf3JuqpR4SB 8D4B1y73fPaVcgyr6mDGURIVxkTNUa2b1ttsDqG6/Yt4gbS77qdDI3kj9oByciAz I2yRwHjMo7IQBDF+KJZWQD8VFcxvTu7fg6Zs2AulHPDh05/SQ3BCGXz/d7V8osg7 aYaNwqQlcZ3vpcuPNhaLaSXKDCh/8pY62Gxbz6rkQwevTcBujE5wshs/nHuGEQsa cWjxTcUnU2QlT22edDU4l2tOrlGqOnmIiNBgeOLhIoT35txyMpY9Ti9yvZ+iZzQG 1QzUOjk3RGxXzJ9dJKBJYb7GqpKfHDsG -----END CERTIFICATE-----Generated at Tue Apr 30 21:59:04 2024 by rpki-client on console-ams.rpki-client.org