$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft File: cOo3wZMr00-ztIWaNIMaEOYR0PY.mft (raw, json) Hash identifier: IRWHBIDjk8qKzgshX184RCj4MWkGt7erMycXQbP0ZKI= Subject key identifier: 63:F6:EA:F9:FA:F0:64:D6:D3:69:62:D6:6D:E2:DD:72:AA:AF:0F:BE Authority key identifier: 70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6 Certificate issuer: /CN=A91BA1BF/serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft Manifest number: 66 Signing time: Tue 07 May 2024 07:38:30 +0000 Manifest this update: Tue 07 May 2024 07:38:30 +0000 Manifest next update: Tue 14 May 2024 07:38:30 +0000 Files and hashes: 1: cOo3wZMr00-ztIWaNIMaEOYR0PY.crl (hash: 2IOj7M+kORqgU5oAVm8r6fI011nuIHGOWuB0NCQVh+s=) 2: BC630BAE84FC11EE9887345FC4F9AE02.roa (hash: HKes2c/mu/stmt2Gj7jYGxcfITdkDU7yK/r1/eYcQTI=) 3: 7C58D40872CD11EE81C60650C4F9AE02.roa (hash: 4DDqrhtY8b8rHCDj+Skj070p4+6ZZIBVfZJKH74aD2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 07:38:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA1BF/serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6 Validity Not Before: May 7 07:38:30 2024 GMT Not After : May 14 07:38:30 2024 GMT Subject: CN=6639da76-449a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2f:56:97:aa:7a:00:84:e3:cc:fc:15:0e:4e: 8c:71:e8:c3:9f:5e:6c:03:1c:28:15:f2:d4:1d:db: d6:05:f6:3e:09:5f:f8:72:2c:bc:cd:48:9a:a2:a7: b0:e7:d7:07:dc:60:ed:cb:5c:8f:29:d4:3d:a5:33: 93:cf:ee:62:d2:32:b0:ec:ee:1b:5f:42:d3:43:b2: 3b:9e:96:1a:ae:db:78:11:a4:d0:35:24:c5:c0:9c: 0f:c1:93:9a:e4:af:42:53:9b:d0:12:e1:1f:aa:a5: 14:88:48:de:ab:3f:73:7f:e8:9c:00:5a:b7:f8:04: 1d:ab:36:26:36:35:a6:98:6a:a9:12:1e:50:72:9f: a9:bf:37:9d:ea:76:aa:99:d3:03:e7:19:11:0a:d5: 69:cc:8b:c5:41:0f:40:af:9a:14:41:06:bc:f3:7c: 9c:52:ba:f1:27:28:4c:af:ad:ad:96:a9:50:cd:3e: e4:7c:02:18:c0:36:dc:63:08:74:cc:a0:b4:3f:12: 10:4e:ac:6c:77:2b:2e:6e:99:df:bc:7a:44:f1:64: 25:31:2c:ef:47:55:f8:52:58:67:36:9d:b2:5d:90: 2c:2a:96:9e:23:be:82:e3:1d:40:8c:1e:1b:d7:85: 09:25:71:4d:cf:ad:2f:7b:00:df:3a:a3:5f:4f:8a: e7:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F6:EA:F9:FA:F0:64:D6:D3:69:62:D6:6D:E2:DD:72:AA:AF:0F:BE X509v3 Authority Key Identifier: keyid:70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:44:df:bf:f7:07:3a:3b:7b:6c:3c:91:99:65:78:8b:57:d4: 58:14:ce:c5:5a:87:ce:62:6f:ee:c7:6a:65:8e:e1:c2:89:b0: 93:35:d1:74:7d:14:73:5c:24:31:37:04:02:1d:ca:6d:2e:30: 2e:6d:6e:48:b5:a7:f8:6c:33:9e:bc:0a:c3:1c:78:61:62:cf: ba:3a:32:35:37:81:f9:41:30:5d:de:4d:c2:a1:29:fa:7d:72: 2f:4c:9a:46:e0:4b:41:e2:71:3b:ea:2c:3e:95:e0:3e:4d:8f: 70:e7:57:e9:32:7a:03:d4:fa:98:db:a9:c7:2d:23:db:6a:dd: ac:84:98:12:24:61:c7:b4:66:fd:5f:32:01:8e:cb:d9:b0:80: 88:a1:26:ee:c9:26:61:7c:2a:01:98:03:d4:ce:df:c5:a4:31: 85:c7:7a:17:45:63:77:cc:75:65:b3:9c:47:27:0a:4a:0e:6a: eb:40:5e:a0:76:87:19:47:bb:e6:e3:86:2f:be:f7:21:03:6b: d8:1a:be:25:81:cd:3d:77:1a:db:5f:43:8d:ee:a7:0d:f0:2c: 6e:17:de:58:0a:bb:38:ac:b4:a4:9f:ce:fd:71:78:4e:d9:3d: 74:c4:e4:2f:3b:45:98:5a:0f:6a:fd:53:1c:64:78:7e:7c:1e: f2:72:8e:8a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QTFCRjExMC8GA1UEBRMoNzBFQTM3QzE5MzJCRDM0RkIzQjQ4NTlBMzQ4MzFBMTBF NjExRDBGNjAeFw0yNDA1MDcwNzM4MzBaFw0yNDA1MTQwNzM4MzBaMBgxFjAUBgNV BAMTDTY2MzlkYTc2LTQ0OWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEL1aXqnoAhOPM/BUOToxx6MOfXmwDHCgV8tQd29YF9j4JX/hyLLzNSJqip7Dn 1wfcYO3LXI8p1D2lM5PP7mLSMrDs7htfQtNDsjuelhqu23gRpNA1JMXAnA/Bk5rk r0JTm9AS4R+qpRSISN6rP3N/6JwAWrf4BB2rNiY2NaaYaqkSHlByn6m/N53qdqqZ 0wPnGREK1WnMi8VBD0CvmhRBBrzzfJxSuvEnKEyvra2WqVDNPuR8AhjANtxjCHTM oLQ/EhBOrGx3Ky5umd+8ekTxZCUxLO9HVfhSWGc2nbJdkCwqlp4jvoLjHUCMHhvX hQklcU3PrS97AN86o19PiudhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUY/bq+frw ZNbTaWLWbeLdcqqvD74wHwYDVR0jBBgwFoAUcOo3wZMr00+ztIWaNIMaEOYR0PYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJBMUJGLzg0RTEwQTQyNzJD QzExRUVCNzk0NUE0REM0RjlBRTAyL2NPbzN3Wk1yMDAtenRJV2FOSU1hRU9ZUjBQ WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY09vM3daTXIwMC16dElXYU5JTWFFT1lSMFBZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJB MUJGLzg0RTEwQTQyNzJDQzExRUVCNzk0NUE0REM0RjlBRTAyL2NPbzN3Wk1yMDAt enRJV2FOSU1hRU9ZUjBQWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADRE37/3Bzo7e2w8kZlleItX1FgUzsVah85ib+7HamWO4cKJsJM10XR9 FHNcJDE3BAIdym0uMC5tbki1p/hsM568CsMceGFiz7o6MjU3gflBMF3eTcKhKfp9 ci9MmkbgS0HicTvqLD6V4D5Nj3DnV+kyegPU+pjbqcctI9tq3ayEmBIkYce0Zv1f MgGOy9mwgIihJu7JJmF8KgGYA9TO38WkMYXHehdFY3fMdWWznEcnCkoOautAXqB2 hxlHu+bjhi++9yEDa9gaviWBzT13GttfQ43upw3wLG4X3lgKuzistKSfzv1xeE7Z PXTE5C87RZhaD2r9UxxkeH58HvJyjoo= -----END CERTIFICATE-----Generated at Tue May 7 09:19:50 2024 by rpki-client on console-ams.rpki-client.org