$ rpki-client -vvf rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft File: ROq4zxyb1totteNCtBx0fuOkUF8.mft (raw, json) Hash identifier: jI+nx8/HjXNlxdVwgGrN6k0P1JnmMzrurT82II2oif8= Subject key identifier: 4B:13:6F:36:8B:AF:09:38:E5:53:BC:E0:F8:63:CA:62:CA:5E:0B:96 Authority key identifier: 44:EA:B8:CF:1C:9B:D6:DA:2D:B5:E3:42:B4:1C:74:7E:E3:A4:50:5F Certificate issuer: /CN=A91B00B6/serialNumber=44EAB8CF1C9BD6DA2DB5E342B41C747EE3A4505F Certificate serial: 0940 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROq4zxyb1totteNCtBx0fuOkUF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft Manifest number: 093B Signing time: Sat 04 May 2024 21:17:46 +0000 Manifest this update: Sat 04 May 2024 21:17:46 +0000 Manifest next update: Sat 11 May 2024 21:17:46 +0000 Files and hashes: 1: ROq4zxyb1totteNCtBx0fuOkUF8.crl (hash: SLG2xFu8t+sVTf5WEB1mnrajR7YAEY2ifFiQlQw2ITw=) 2: 800EC4AE756F11EAAA2E0F6CC4F9AE02.roa (hash: iFLleCrx5lJW9+fJUCH6MH2zTLB5N+94fs57s6ev9K4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.crl rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROq4zxyb1totteNCtBx0fuOkUF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:17:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2368 (0x940) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B00B6/serialNumber=44EAB8CF1C9BD6DA2DB5E342B41C747EE3A4505F Validity Not Before: May 4 21:17:46 2024 GMT Not After : May 11 21:17:46 2024 GMT Subject: CN=6636a5fa-f2d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b2:96:31:a2:d5:9d:f5:b1:61:9c:3f:83:fa: 63:a6:a7:35:f5:93:d6:fa:ec:97:2e:94:65:b6:a5: 98:98:bc:ef:3d:21:1b:c2:47:88:4d:aa:66:f0:aa: 4f:a5:46:e4:4e:19:96:90:30:59:6a:8c:57:63:1c: ee:8e:ea:20:b0:5c:93:cf:f5:44:fe:0d:e2:c8:04: b5:47:8c:ac:fb:a7:30:40:11:61:37:e9:c7:68:82: ce:63:02:71:6c:cd:d3:bd:26:09:1e:39:64:c4:78: b8:ea:b6:30:ce:6b:8a:32:63:85:d7:8d:35:95:cb: 73:4b:98:c6:4d:9c:a4:ec:61:d9:91:f2:4d:84:48: c6:1d:8a:3a:73:52:b3:c3:9c:72:0b:db:2b:79:ca: 1b:ce:57:e2:56:81:45:54:6f:bc:e5:86:d9:8d:68: ed:56:6d:0d:5d:6b:1f:b1:c2:f9:15:02:70:58:88: fa:aa:4a:df:5d:e9:71:be:e4:13:ee:e3:d8:75:81: bd:07:ec:08:a9:87:40:ab:33:66:9c:3a:19:6a:c1: 1a:3c:dc:f8:d6:f1:4f:de:c9:30:82:76:f7:cb:b8: 9b:47:ca:d5:91:26:46:9b:fd:8a:83:49:69:b3:4b: 6e:61:0d:1d:5f:43:34:05:b8:16:ae:34:d5:6f:b9: fe:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:13:6F:36:8B:AF:09:38:E5:53:BC:E0:F8:63:CA:62:CA:5E:0B:96 X509v3 Authority Key Identifier: keyid:44:EA:B8:CF:1C:9B:D6:DA:2D:B5:E3:42:B4:1C:74:7E:E3:A4:50:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROq4zxyb1totteNCtBx0fuOkUF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:32:1f:ba:5e:f9:80:16:af:ef:ea:b1:d9:61:96:38:40:ec: 19:2e:f2:76:c0:dc:8a:da:f9:df:22:83:cc:e1:f2:94:0c:4a: 3b:f4:b6:b4:5c:17:cc:12:59:be:51:c4:93:fe:a4:d9:af:2f: ab:22:a2:2d:4b:ab:0f:95:57:56:33:32:a6:d1:05:fa:14:85: 07:40:d9:88:b7:e2:af:8f:62:3d:f9:76:8e:8b:ef:e0:af:15: 5d:b7:bf:00:40:9c:0c:8e:01:33:e1:7b:58:51:eb:09:b3:49: 3e:e8:e9:f5:f9:e5:0b:1f:b0:99:c5:3e:59:18:5c:1e:81:d6: 5d:54:5d:7c:6c:8f:4d:1c:1a:b7:fd:8b:90:7b:e1:9f:6d:ba: 2d:3e:38:c6:cc:a5:46:71:8a:37:f9:8d:2a:ed:0a:00:0f:de: bd:d5:62:d4:b4:4c:fa:70:04:75:7f:84:b1:41:49:69:03:f9: 4c:e7:57:82:36:cd:4f:0f:e4:e7:0e:b6:a2:af:ec:ab:07:da: 4e:d2:fb:53:48:83:51:bf:c8:83:d2:35:5d:ea:41:04:e4:01: e3:f4:2f:20:83:4c:3b:a7:49:de:dd:b1:ef:8a:59:f8:b8:f1: 61:93:3a:50:ee:8b:6d:36:4e:fd:81:41:ec:3d:48:a6:d1:b2: ed:fd:ac:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAwQjYxMTAvBgNVBAUTKDQ0RUFCOENGMUM5QkQ2REEyREI1RTM0MkI0MUM3NDdF RTNBNDUwNUYwHhcNMjQwNTA0MjExNzQ2WhcNMjQwNTExMjExNzQ2WjAYMRYwFAYD VQQDEw02NjM2YTVmYS1mMmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrKWMaLVnfWxYZw/g/pjpqc19ZPW+uyXLpRltqWYmLzvPSEbwkeITapm8KpP pUbkThmWkDBZaoxXYxzujuogsFyTz/VE/g3iyAS1R4ys+6cwQBFhN+nHaILOYwJx bM3TvSYJHjlkxHi46rYwzmuKMmOF1401lctzS5jGTZyk7GHZkfJNhEjGHYo6c1Kz w5xyC9srecobzlfiVoFFVG+85YbZjWjtVm0NXWsfscL5FQJwWIj6qkrfXelxvuQT 7uPYdYG9B+wIqYdAqzNmnDoZasEaPNz41vFP3skwgnb3y7ibR8rVkSZGm/2Kg0lp s0tuYQ0dX0M0BbgWrjTVb7n+jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEsTbzaL rwk45VO84PhjymLKXguWMB8GA1UdIwQYMBaAFETquM8cm9baLbXjQrQcdH7jpFBf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDBCNi85RjlBRjdBODc1 NkUxMUVBOTkxNDIzNkJDNEY5QUUwMi9ST3E0enh5YjF0b3R0ZU5DdEJ4MGZ1T2tV RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JPcTR6eHliMXRvdHRlTkN0QngwZnVPa1VGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDBCNi85RjlBRjdBODc1NkUxMUVBOTkxNDIzNkJDNEY5QUUwMi9ST3E0enh5YjF0 b3R0ZU5DdEJ4MGZ1T2tVRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFMh+6XvmAFq/v6rHZYZY4QOwZLvJ2wNyK2vnfIoPM4fKUDEo79La0 XBfMElm+UcST/qTZry+rIqItS6sPlVdWMzKm0QX6FIUHQNmIt+Kvj2I9+XaOi+/g rxVdt78AQJwMjgEz4XtYUesJs0k+6On1+eULH7CZxT5ZGFwegdZdVF18bI9NHBq3 /YuQe+GfbbotPjjGzKVGcYo3+Y0q7QoAD9691WLUtEz6cAR1f4SxQUlpA/lM51eC Ns1PD+TnDrair+yrB9pO0vtTSINRv8iD0jVd6kEE5AHj9C8gg0w7p0ne3bHviln4 uPFhkzpQ7ottNk79gUHsPUim0bLt/awe -----END CERTIFICATE-----Generated at Sat May 4 22:06:53 2024 by rpki-client on console-ams.rpki-client.org