$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft File: mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft (raw, json) Hash identifier: twhrZ3UdL+UFoKuW3ywzGpqmQYGStssfGILnxnCM6b0= Subject key identifier: 96:EE:D8:29:87:A2:29:EE:12:A8:45:83:D8:D7:47:F4:9B:8D:6B:FF Authority key identifier: 9A:4D:AF:8F:CA:85:E1:93:D3:4E:A4:95:97:99:6D:ED:17:CB:DF:1E Certificate issuer: /CN=A91B6D28/serialNumber=9A4DAF8FCA85E193D34EA49597996DED17CBDF1E Certificate serial: 33CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft Manifest number: 33C5 Signing time: Sat 04 May 2024 14:51:56 +0000 Manifest this update: Sat 04 May 2024 14:51:56 +0000 Manifest next update: Sat 11 May 2024 14:51:56 +0000 Files and hashes: 1: mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl (hash: qyAxjCUPPPHt3PXSkWoMJdTfWfY/II0NnWf5JSq/NMU=) 2: E1F7FE5C091C11EABCF80D55C4F9AE02.roa (hash: BcTRn5EfUdghEYe/YZiNeeDPqkT/Bf8AcojVAkwa34A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13260 (0x33cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6D28/serialNumber=9A4DAF8FCA85E193D34EA49597996DED17CBDF1E Validity Not Before: May 4 14:51:56 2024 GMT Not After : May 11 14:51:56 2024 GMT Subject: CN=66364b8c-81df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1e:f5:ee:1d:db:04:fe:b6:d2:cc:57:b0:f9: 03:9e:4d:98:9d:2b:f8:b2:e4:cc:82:44:62:5e:4d: d2:66:b4:e9:9a:b4:79:72:b3:1c:96:c0:88:8c:dc: 32:23:af:22:1f:7b:0d:c5:ef:63:37:af:87:4b:62: f8:b2:34:17:80:82:f4:a6:18:1a:7a:28:8b:5b:76: 7f:11:e0:cb:e9:8b:97:f6:94:4c:ad:ba:ce:6c:58: 9d:14:fe:c4:6a:ff:01:46:c6:e2:4f:3b:3d:ac:e1: 99:ae:ba:4c:aa:3f:01:c0:cb:5c:45:49:89:d9:ac: 67:98:fc:80:83:a2:8d:9e:35:40:a1:e2:d2:c4:04: 57:45:d1:26:d6:d2:ae:8a:4b:cd:4f:91:ac:47:5f: 68:f2:19:ac:2e:ae:81:54:58:39:9a:5b:96:b6:61: 8c:8a:75:43:59:37:d2:1f:04:47:f4:9d:70:a8:32: 67:a4:ea:3f:b9:90:fe:7c:38:01:88:5c:a3:84:bd: a8:ee:21:b9:c1:17:f9:6f:95:e7:5f:1f:52:df:55: 3f:3a:1e:f6:7d:b3:c5:ff:79:4d:c7:4a:5c:ca:79: 03:0e:68:d6:5f:75:95:cd:64:73:83:9c:f5:01:ae: d3:42:f6:2e:33:eb:ce:da:49:86:43:06:4b:5b:89: 3f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:EE:D8:29:87:A2:29:EE:12:A8:45:83:D8:D7:47:F4:9B:8D:6B:FF X509v3 Authority Key Identifier: keyid:9A:4D:AF:8F:CA:85:E1:93:D3:4E:A4:95:97:99:6D:ED:17:CB:DF:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:e9:80:4d:00:0a:14:07:94:cc:77:b1:0d:a9:1a:1d:92:99: c3:d3:08:b5:e2:89:a5:54:76:a5:24:d4:bf:81:48:72:cc:d7: 5a:8f:7d:28:72:73:06:be:5b:33:00:98:7e:73:45:18:20:01: ae:2c:91:a7:58:e3:a6:6b:0d:de:80:9b:15:e5:07:31:88:c2: f3:0e:26:e7:6a:50:f9:04:a9:11:0a:af:c5:22:f5:56:ed:2b: ce:f4:75:71:f5:b6:74:38:07:cf:59:9d:60:fa:93:6d:10:23: 55:cd:1b:8b:44:43:3c:a4:7f:b7:8c:d8:dc:3f:a8:94:dd:4d: 3c:26:2e:00:ca:97:e3:67:fc:01:94:fb:14:2c:c1:20:14:be: 3b:44:98:ad:00:ff:68:8d:bf:f9:bc:a1:29:0b:39:6b:41:ac: b0:20:67:94:ee:5e:0f:9c:03:f2:39:8d:10:7f:2f:97:c5:eb: 5c:c1:07:9f:89:8d:b2:16:88:93:bb:07:68:49:ef:70:be:3f: cb:3b:a8:f3:79:65:17:ab:9f:bd:61:d3:8e:92:8a:2d:93:62: 6f:7a:d1:63:f3:f8:12:d8:14:c6:8b:1c:66:a5:be:74:bd:34: f0:22:d1:1f:a8:5b:e3:48:2b:10:68:48:5d:ba:d2:8f:d9:62: 9f:8e:52:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZEMjgxMTAvBgNVBAUTKDlBNERBRjhGQ0E4NUUxOTNEMzRFQTQ5NTk3OTk2REVE MTdDQkRGMUUwHhcNMjQwNTA0MTQ1MTU2WhcNMjQwNTExMTQ1MTU2WjAYMRYwFAYD VQQDEw02NjM2NGI4Yy04MWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsB717h3bBP620sxXsPkDnk2YnSv4suTMgkRiXk3SZrTpmrR5crMclsCIjNwy I68iH3sNxe9jN6+HS2L4sjQXgIL0phgaeiiLW3Z/EeDL6YuX9pRMrbrObFidFP7E av8BRsbiTzs9rOGZrrpMqj8BwMtcRUmJ2axnmPyAg6KNnjVAoeLSxARXRdEm1tKu ikvNT5GsR19o8hmsLq6BVFg5mluWtmGMinVDWTfSHwRH9J1wqDJnpOo/uZD+fDgB iFyjhL2o7iG5wRf5b5XnXx9S31U/Oh72fbPF/3lNx0pcynkDDmjWX3WVzWRzg5z1 Aa7TQvYuM+vO2kmGQwZLW4k/+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJbu2CmH oinuEqhFg9jXR/SbjWv/MB8GA1UdIwQYMBaAFJpNr4/KheGT006klZeZbe0Xy98e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkQyOC82MUQ0NTMxMDFE OTIxMUUyOUM1RjNBRjUwOEIwMkNEMi9tazJ2ajhxRjRaUFRUcVNWbDVsdDdSZkwz eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21rMnZqOHFGNFpQVFRxU1ZsNWx0N1JmTDN4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkQyOC82MUQ0NTMxMDFEOTIxMUUyOUM1RjNBRjUwOEIwMkNEMi9tazJ2ajhxRjRa UFRUcVNWbDVsdDdSZkwzeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl6YBNAAoUB5TMd7ENqRodkpnD0wi14omlVHalJNS/gUhyzNdaj30o cnMGvlszAJh+c0UYIAGuLJGnWOOmaw3egJsV5QcxiMLzDibnalD5BKkRCq/FIvVW 7SvO9HVx9bZ0OAfPWZ1g+pNtECNVzRuLREM8pH+3jNjcP6iU3U08Ji4AypfjZ/wB lPsULMEgFL47RJitAP9ojb/5vKEpCzlrQaywIGeU7l4PnAPyOY0Qfy+XxetcwQef iY2yFoiTuwdoSe9wvj/LO6jzeWUXq5+9YdOOkootk2JvetFj8/gS2BTGixxmpb50 vTTwItEfqFvjSCsQaEhdutKP2WKfjlIr -----END CERTIFICATE-----Generated at Sat May 4 15:55:04 2024 by rpki-client on console-ams.rpki-client.org