$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft File: h38lpB-22zz021rZIUTvtx6SZ3o.mft (raw, json) Hash identifier: 0g5yWMtpSxEyjDMYv3H40glq2EWqnP/czzO7AT2qFdk= Subject key identifier: B3:41:FF:9F:D4:80:B9:B4:7C:DA:C6:4C:07:25:84:E0:C6:7D:0F:AB Authority key identifier: 87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A Certificate issuer: /CN=A91B0E3A/serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Certificate serial: 0B90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft Manifest number: 0B78 Signing time: Thu 02 May 2024 19:33:27 +0000 Manifest this update: Thu 02 May 2024 19:33:27 +0000 Manifest next update: Thu 09 May 2024 19:33:27 +0000 Files and hashes: 1: h38lpB-22zz021rZIUTvtx6SZ3o.crl (hash: P9iqQrSxe5ql3/eJpgSD4q6dQafa2PbyKNaNHy1UVkM=) 2: 418D45209C8211EC86AE3D68C4F9AE02.roa (hash: eSbQcGhw0ukTZJ0/wZICc6CuamExZ02/K90pQlli4GA=) 3: D8CC971846AE11EBA761792FC4F9AE02.roa (hash: IiIc5xUTZ8oRwlcSaPJOjkHqtV0dE6cfiu/UrEZUXsY=) 4: 4072F91E9C8211EC86AE3D68C4F9AE02.roa (hash: 227U+Y7IsViWC5xL5UQ7nk+j/lM05o1xqA9lAXBDVrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 19:33:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2960 (0xb90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0E3A/serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Validity Not Before: May 2 19:33:27 2024 GMT Not After : May 9 19:33:27 2024 GMT Subject: CN=6633ea87-d870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:72:a4:3e:d6:a7:b1:81:fe:4f:b0:e5:0a:25: c4:7a:f7:a5:df:a7:95:2a:02:a0:8c:3e:3c:e5:84: 34:1d:d6:45:37:c9:2b:42:80:be:87:b7:3b:41:60: 44:38:32:c4:ed:13:c3:3e:ea:d5:f4:d7:18:8a:ae: f3:59:cc:af:b3:27:10:bb:07:01:95:33:90:bf:33: 4d:79:34:9a:07:09:9d:88:d2:8d:ab:51:62:24:5b: fc:9f:8b:71:49:37:c6:c7:b9:89:ad:b2:9d:10:17: 0b:7b:37:35:f2:d8:5a:9b:6e:35:17:ce:f0:ab:34: 7c:25:94:ec:28:a5:5d:2b:94:41:db:ab:b7:dc:d2: df:80:d7:c4:e4:ef:bd:8e:c4:9c:d6:0a:6b:b9:6f: 71:19:10:8d:f9:35:e9:64:90:25:8f:d9:f5:d0:6b: 55:f0:41:bd:b0:2f:9f:bd:75:84:6f:7b:7d:85:1d: 35:47:e9:29:56:68:d3:4c:65:d9:04:14:5c:08:85: ef:d5:56:f5:b2:6a:7f:31:20:d5:8e:2e:2e:95:f9: 34:fd:d1:16:b8:89:3d:68:38:bf:ff:25:5d:e2:73: 67:1a:8d:71:d7:d4:8f:5f:eb:a7:53:a1:8d:2d:ae: 86:10:4d:c5:84:6a:61:c8:7e:f7:3f:04:65:10:d8: 2a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:41:FF:9F:D4:80:B9:B4:7C:DA:C6:4C:07:25:84:E0:C6:7D:0F:AB X509v3 Authority Key Identifier: keyid:87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:bc:f7:26:a5:30:a8:f8:60:11:27:c6:ec:a3:82:0c:cb:c1: aa:fd:e9:69:5e:99:85:49:1d:4e:9c:30:7e:cb:ff:2f:4d:c4: 6e:83:27:52:1b:f4:eb:5b:4b:5e:e5:89:86:c2:26:19:bb:10: dc:19:be:70:86:86:d7:28:91:24:9a:03:52:88:8e:a3:fd:84: 25:73:0b:a5:bc:42:3b:65:c4:6d:c9:97:90:f5:15:d9:60:63: 21:d9:09:0a:e5:95:07:25:26:99:59:53:e4:7b:eb:9c:ad:24: 2c:b5:8b:df:bb:54:b0:23:55:87:cb:f8:44:a2:db:f6:52:34: 4f:cf:e0:20:15:df:1e:cf:a8:a4:ad:86:9d:78:d1:26:55:65: af:29:ef:88:87:0d:dc:55:10:88:5e:3f:9a:85:f4:27:83:f2: a7:36:92:cf:26:79:a8:3d:74:30:98:1c:0a:01:79:5a:ac:e3: eb:75:ca:7d:1f:0d:e3:f7:8d:82:34:c5:a4:30:3b:df:36:d9: 10:65:a9:4a:4c:62:22:5c:a8:6e:03:fb:ea:14:0c:df:91:99: 36:97:0c:25:48:6e:69:44:7e:6a:bf:bb:d3:a3:8a:3a:28:9f: 9b:39:20:5f:39:fa:92:5e:42:41:53:3d:6c:bd:94:f5:ff:2e: 10:d0:b4:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBFM0ExMTAvBgNVBAUTKDg3N0YyNUE0MUZCNkRCM0NGNERCNUFEOTIxNDRFRkI3 MUU5MjY3N0EwHhcNMjQwNTAyMTkzMzI3WhcNMjQwNTA5MTkzMzI3WjAYMRYwFAYD VQQDEw02NjMzZWE4Ny1kODcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunKkPtansYH+T7DlCiXEevel36eVKgKgjD485YQ0HdZFN8krQoC+h7c7QWBE ODLE7RPDPurV9NcYiq7zWcyvsycQuwcBlTOQvzNNeTSaBwmdiNKNq1FiJFv8n4tx STfGx7mJrbKdEBcLezc18tham241F87wqzR8JZTsKKVdK5RB26u33NLfgNfE5O+9 jsSc1gpruW9xGRCN+TXpZJAlj9n10GtV8EG9sC+fvXWEb3t9hR01R+kpVmjTTGXZ BBRcCIXv1Vb1smp/MSDVji4ulfk0/dEWuIk9aDi//yVd4nNnGo1x19SPX+unU6GN La6GEE3FhGphyH73PwRlENgqWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLNB/5/U gLm0fNrGTAclhODGfQ+rMB8GA1UdIwQYMBaAFId/JaQftts89Nta2SFE77cekmd6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEUzQS84RTQzRjVENjA2 QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6ejAyMXJaSVVUdnR4NlNa M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gzOGxwQi0yMnp6MDIxclpJVVR2dHg2U1ozby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEUzQS84RTQzRjVENjA2QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6 ejAyMXJaSVVUdnR4NlNaM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmvPcmpTCo+GARJ8bso4IMy8Gq/elpXpmFSR1OnDB+y/8vTcRugydS G/TrW0te5YmGwiYZuxDcGb5whobXKJEkmgNSiI6j/YQlcwulvEI7ZcRtyZeQ9RXZ YGMh2QkK5ZUHJSaZWVPke+ucrSQstYvfu1SwI1WHy/hEotv2UjRPz+AgFd8ez6ik rYadeNEmVWWvKe+Ihw3cVRCIXj+ahfQng/KnNpLPJnmoPXQwmBwKAXlarOPrdcp9 Hw3j942CNMWkMDvfNtkQZalKTGIiXKhuA/vqFAzfkZk2lwwlSG5pRH5qv7vTo4o6 KJ+bOSBfOfqSXkJBUz1svZT1/y4Q0LQL -----END CERTIFICATE-----Generated at Thu May 2 22:28:56 2024 by rpki-client on console-ams.rpki-client.org