$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft File: AKZAby8KlHvrUUE2cN9yG611usQ.mft (raw, json) Hash identifier: DLVZ7sz/KCE7iYX3qWPwA4pH1Ly5UyeYLnHEvF3pj5Q= Subject key identifier: 95:AD:F2:EF:E3:DA:30:A2:BA:7F:0F:EC:0D:D6:02:18:5C:FB:88:27 Authority key identifier: 00:A6:40:6F:2F:0A:94:7B:EB:51:41:36:70:DF:72:1B:AD:75:BA:C4 Certificate issuer: /CN=A91AF0B6/serialNumber=00A6406F2F0A947BEB51413670DF721BAD75BAC4 Certificate serial: 0278 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft Manifest number: 0275 Signing time: Wed 01 May 2024 04:02:40 +0000 Manifest this update: Wed 01 May 2024 04:02:39 +0000 Manifest next update: Wed 08 May 2024 04:02:39 +0000 Files and hashes: 1: AKZAby8KlHvrUUE2cN9yG611usQ.crl (hash: 9qNTriY8tQA8m9pgMUcw0DP2cACdwyoVAjIxUkqKHPI=) 2: FB1D01D4BF8B11ECB9B8D351C4F9AE02.roa (hash: SBU8GVreyOnldCYNvt0nDJnVdYm/HEq3WcHOf4U77zE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.crl rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 632 (0x278) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF0B6/serialNumber=00A6406F2F0A947BEB51413670DF721BAD75BAC4 Validity Not Before: May 1 04:02:39 2024 GMT Not After : May 8 04:02:39 2024 GMT Subject: CN=6631bee0-68f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1e:40:8a:22:30:eb:d7:3d:29:bf:f7:d5:be: a1:ad:f9:14:c8:05:ed:98:5b:03:d5:65:22:0b:25: ed:ba:f2:63:3f:af:0b:0a:c7:23:7b:31:8e:88:18: 91:3a:ab:fc:4f:7b:ae:ca:27:cf:6a:89:24:1f:7d: 2d:f7:44:e3:5c:dc:21:2c:f0:14:25:6a:f5:93:f3: c1:f5:74:4b:da:90:72:47:ea:4b:ae:20:2b:50:e9: 4b:61:19:5a:f9:b3:4a:47:f5:85:3b:6e:1a:69:33: d6:41:4d:39:c1:06:d9:1c:4f:99:10:15:3d:ae:ac: 43:92:38:25:90:b0:fb:a8:bf:8b:5e:d2:27:82:d5: 93:a0:5b:41:b1:b6:a2:71:95:a2:24:45:f1:5a:61: d9:84:73:c0:98:74:d6:8e:56:8f:73:e4:25:02:46: e4:e6:ae:26:4a:d1:52:2a:99:c4:b2:ef:9a:1c:78: 3e:4d:c7:b3:8a:db:67:c7:d7:3a:62:2f:19:f0:01: e3:92:ed:66:d1:5b:22:c5:87:25:0b:8e:e8:cb:22: b1:04:24:ee:4b:4e:3a:7f:9c:c4:ed:fd:f4:2a:4d: 70:53:ac:7a:7e:4f:dd:b5:64:ea:0c:49:d4:6e:80: 2d:1e:b6:df:4e:5d:6a:55:14:78:ee:39:b4:e7:70: b1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:AD:F2:EF:E3:DA:30:A2:BA:7F:0F:EC:0D:D6:02:18:5C:FB:88:27 X509v3 Authority Key Identifier: keyid:00:A6:40:6F:2F:0A:94:7B:EB:51:41:36:70:DF:72:1B:AD:75:BA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:f1:22:28:38:7a:7d:ce:aa:24:21:6d:72:50:f2:c2:0c:3d: d8:b9:5b:0c:2e:ba:89:af:1d:d6:95:ec:02:e6:5a:c0:22:af: 7e:4b:76:a3:b7:56:79:76:60:fd:2d:ec:87:9c:e8:65:43:5b: 10:ae:cd:a8:e1:79:57:ed:32:59:38:12:18:8d:67:d7:4b:e9: 4f:33:03:1f:50:cf:53:78:56:8e:15:df:e7:18:fb:d8:0d:d7: 12:08:9e:82:34:de:fc:1c:b4:e2:ea:0f:65:88:e2:3a:e2:25: 5a:c0:a0:8b:d4:af:84:58:b3:56:63:aa:4f:fb:75:fc:46:0b: 18:ea:67:ad:bd:97:0d:dd:df:58:d7:d2:59:30:c6:a5:6a:68: d5:0f:5c:80:80:ee:38:9e:af:35:61:a9:03:a9:f8:05:93:ac: ec:9b:d6:36:13:0a:50:31:c1:39:56:55:b6:f5:81:60:88:f8: f3:c2:dd:77:9e:58:83:35:a0:ae:7e:01:cd:c7:d4:36:bb:52: eb:87:66:b9:eb:06:d2:1d:c9:b0:aa:c8:3a:29:74:fc:39:11: 17:35:cf:87:4b:de:3b:b4:37:93:e8:67:73:bb:04:5b:36:b9: b5:76:33:04:a3:8a:a5:09:c5:43:7b:0b:63:61:51:3a:f1:85: 7a:0c:d1:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwQjYxMTAvBgNVBAUTKDAwQTY0MDZGMkYwQTk0N0JFQjUxNDEzNjcwREY3MjFC QUQ3NUJBQzQwHhcNMjQwNTAxMDQwMjM5WhcNMjQwNTA4MDQwMjM5WjAYMRYwFAYD VQQDEw02NjMxYmVlMC02OGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnR5AiiIw69c9Kb/31b6hrfkUyAXtmFsD1WUiCyXtuvJjP68LCscjezGOiBiR Oqv8T3uuyifPaokkH30t90TjXNwhLPAUJWr1k/PB9XRL2pByR+pLriArUOlLYRla +bNKR/WFO24aaTPWQU05wQbZHE+ZEBU9rqxDkjglkLD7qL+LXtIngtWToFtBsbai cZWiJEXxWmHZhHPAmHTWjlaPc+QlAkbk5q4mStFSKpnEsu+aHHg+Tcezittnx9c6 Yi8Z8AHjku1m0VsixYclC47oyyKxBCTuS046f5zE7f30Kk1wU6x6fk/dtWTqDEnU boAtHrbfTl1qVRR47jm053CxHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJWt8u/j 2jCiun8P7A3WAhhc+4gnMB8GA1UdIwQYMBaAFACmQG8vCpR761FBNnDfchutdbrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjBCNi8wNzU5MzhENkJG ODgxMUVDQjFFMjVBMzBDNEY5QUUwMi9BS1pBYnk4S2xIdnJVVUUyY045eUc2MTF1 c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FLWkFieThLbEh2clVVRTJjTjl5RzYxMXVzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjBCNi8wNzU5MzhENkJGODgxMUVDQjFFMjVBMzBDNEY5QUUwMi9BS1pBYnk4S2xI dnJVVUUyY045eUc2MTF1c1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCz8SIoOHp9zqokIW1yUPLCDD3YuVsMLrqJrx3WlewC5lrAIq9+S3aj t1Z5dmD9LeyHnOhlQ1sQrs2o4XlX7TJZOBIYjWfXS+lPMwMfUM9TeFaOFd/nGPvY DdcSCJ6CNN78HLTi6g9liOI64iVawKCL1K+EWLNWY6pP+3X8RgsY6metvZcN3d9Y 19JZMMalamjVD1yAgO44nq81YakDqfgFk6zsm9Y2EwpQMcE5VlW29YFgiPjzwt13 nliDNaCufgHNx9Q2u1Lrh2a56wbSHcmwqsg6KXT8OREXNc+HS947tDeT6GdzuwRb Nrm1djMEo4qlCcVDewtjYVE68YV6DNFg -----END CERTIFICATE-----Generated at Wed May 1 04:49:27 2024 by rpki-client on console-ams.rpki-client.org