$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft File: edZsZKYWWi5Ms31JcA5sdhhBw5o.mft (raw, json) Hash identifier: GeVELFNnrDrHVJtl6WNMLrMFBFm24YRPfaqGB7UCw9g= Subject key identifier: 5A:FC:7A:32:10:C2:43:43:A0:38:48:CC:D9:63:0D:A8:AB:43:7D:6E Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A Certificate issuer: /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A Certificate serial: 1319 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft Manifest number: 12CC Signing time: Thu 02 May 2024 17:40:06 +0000 Manifest this update: Thu 02 May 2024 17:40:06 +0000 Manifest next update: Thu 09 May 2024 17:40:06 +0000 Files and hashes: 1: edZsZKYWWi5Ms31JcA5sdhhBw5o.crl (hash: PvFzTIpJKLzVZTwHzOCMgqshM+oHm8NIHeu+nE1ZE6M=) 2: C24FF4C8050D11EA8626AD5DC4F9AE02.roa (hash: 6c3OfbdlQja3hzdttFkCHz1g2QneRQ6AJCKu8c3JNW0=) 3: 1F90160E87F211ECBEBC5339C4F9AE02.roa (hash: Sh9ZEftSDUCNsonrPL5hdIuQ6kK6oBuLl7Au9KuBgaU=) 4: CC7502F8670E11EC90C22B7EC4F9AE02.roa (hash: qSs7QVljBsGrP5H4M7LOXLUI5O3b+eyIfSUCsf7sAlE=) 5: 17780EF09B3C11E8A13BA63AC4F9AE02.roa (hash: hx51tu3BzE0Ovl4vomnYpy0oQpk07CS6QaPZ68JMslE=) 6: 1DE5F30A87F211ECBEBC5339C4F9AE02.roa (hash: ZV/5no5yLR6f3lGoNEw7gCH+hQmzKRm3RpB9ZrjngFo=) 7: 92F5E790172E11EA9CCC934DC4F9AE02.roa (hash: jDoCRBF6kiTj2dJwnWoV26m0sDgX4Eurt4HndOXvH2w=) 8: 85C534069AA711EBB9BBD670C4F9AE02.roa (hash: eb2cB1NyAI3fojRDEJ1cXYgoo9rBGtAnt/RNlzawDQw=) 9: 7CD480F64E4D11EAAE4CAC65C4F9AE02.roa (hash: jCSMxi5V4DvG7dONOcGap9wJ76BjQ4HDsVO1HunAywM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 17:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4889 (0x1319) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A Validity Not Before: May 2 17:40:06 2024 GMT Not After : May 9 17:40:06 2024 GMT Subject: CN=6633cff6-eb96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d3:a6:42:7e:bf:df:03:65:8e:99:88:48:3f: 8f:bb:f1:3e:da:f4:94:83:5e:72:b8:38:dd:71:f7: e5:84:1e:1f:fc:e1:ce:5c:3d:77:64:78:0e:32:44: 25:0e:78:00:af:1c:8f:91:f8:d1:01:0c:db:7e:4d: 43:e3:a2:77:5e:ed:3f:bf:f4:96:e6:2c:52:89:d3: 14:62:66:6d:1a:13:a3:d9:22:d0:27:6e:17:43:1b: 3d:03:ce:e2:20:f6:ce:0c:56:57:10:dd:0e:85:36: 47:3c:80:81:19:cd:ee:f3:6e:eb:84:a5:28:22:5c: 93:2e:09:cd:57:9d:a7:70:63:a2:27:16:ea:ff:21: 67:37:79:3b:1f:ef:f7:0a:a3:d7:72:ae:de:63:70: 6d:ae:af:1e:d1:28:db:92:63:91:99:11:27:8a:7e: 0d:b9:3c:e4:95:04:ac:f8:5b:5c:3d:58:b3:9b:8e: 94:7c:50:4b:73:fb:78:e7:4b:a8:fa:80:a6:61:0d: e8:4a:26:b6:8c:d0:f0:c5:96:ab:a2:fe:af:5b:01: e5:a9:77:33:f0:85:e5:d4:37:b7:54:a8:e4:39:23: b1:65:b9:17:ab:bd:f5:4c:74:8e:5f:25:60:80:75: 84:58:e7:c3:d0:e8:66:10:f0:fe:7e:86:b3:1a:28: 27:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:FC:7A:32:10:C2:43:43:A0:38:48:CC:D9:63:0D:A8:AB:43:7D:6E X509v3 Authority Key Identifier: keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:fe:f0:ec:c2:fc:28:73:cb:66:29:38:c0:6b:68:50:54:45: 94:7e:53:7a:b7:07:8a:76:e3:7d:54:93:25:5a:bf:71:77:b7: 63:ed:56:20:eb:8a:c5:80:7b:fa:fd:ac:6b:b0:9b:c4:06:bc: bb:61:41:97:39:f6:aa:fe:3c:4e:e8:b3:ef:7e:85:3d:4d:ee: 9f:40:0a:da:86:03:22:44:22:27:90:08:f5:f0:3d:bb:25:dd: d2:78:48:4a:76:5b:5a:1d:48:8d:32:4c:8a:f6:ca:4f:a7:90: ee:8d:90:0e:ff:7a:7d:b2:3e:8e:20:c3:d2:e9:e7:1b:f0:76: 1e:f4:24:e9:0e:e4:83:9b:d6:c7:fc:8a:3d:50:9c:64:f4:08: 4d:31:c3:99:e4:83:00:78:1c:5f:17:34:74:18:da:62:93:63: f8:80:49:08:90:2f:eb:13:ab:06:03:a2:c6:31:fb:6a:6c:84: 04:39:48:3a:22:53:cc:70:8a:01:4c:0d:e7:ab:7e:51:b4:a5: 7f:5f:d6:09:52:c7:43:67:aa:21:91:53:0a:f8:4f:5c:43:27: 33:8d:f2:cc:c3:0d:0e:eb:4c:2f:29:95:f8:db:73:e7:ca:7e: 2a:13:36:eb:76:c7:42:5b:c5:6d:fe:1e:1c:19:f8:34:47:e9: 7e:c3:72:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICExkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM4NDcxMTAvBgNVBAUTKDc5RDY2QzY0QTYxNjVBMkU0Q0IzN0Q0OTcwMEU2Qzc2 MTg0MUMzOUEwHhcNMjQwNTAyMTc0MDA2WhcNMjQwNTA5MTc0MDA2WjAYMRYwFAYD VQQDEw02NjMzY2ZmNi1lYjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo9OmQn6/3wNljpmISD+Pu/E+2vSUg15yuDjdcfflhB4f/OHOXD13ZHgOMkQl DngArxyPkfjRAQzbfk1D46J3Xu0/v/SW5ixSidMUYmZtGhOj2SLQJ24XQxs9A87i IPbODFZXEN0OhTZHPICBGc3u827rhKUoIlyTLgnNV52ncGOiJxbq/yFnN3k7H+/3 CqPXcq7eY3Btrq8e0SjbkmORmREnin4NuTzklQSs+FtcPVizm46UfFBLc/t450uo +oCmYQ3oSia2jNDwxZarov6vWwHlqXcz8IXl1De3VKjkOSOxZbkXq731THSOXyVg gHWEWOfD0OhmEPD+foazGignLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFr8ejIQ wkNDoDhIzNljDairQ31uMB8GA1UdIwQYMBaAFHnWbGSmFlouTLN9SXAObHYYQcOa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzg0Ny9BQ0Y5NDM1MjlB RjMxMUU4QUFCNEQ1NURDNEY5QUUwMi9lZFpzWktZV1dpNU1zMzFKY0E1c2RoaEJ3 NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VkWnNaS1lXV2k1TXMzMUpjQTVzZGhoQnc1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qzg0Ny9BQ0Y5NDM1MjlBRjMxMUU4QUFCNEQ1NURDNEY5QUUwMi9lZFpzWktZV1dp NU1zMzFKY0E1c2RoaEJ3NW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBm/vDswvwoc8tmKTjAa2hQVEWUflN6tweKduN9VJMlWr9xd7dj7VYg 64rFgHv6/axrsJvEBry7YUGXOfaq/jxO6LPvfoU9Te6fQArahgMiRCInkAj18D27 Jd3SeEhKdltaHUiNMkyK9spPp5DujZAO/3p9sj6OIMPS6ecb8HYe9CTpDuSDm9bH /Io9UJxk9AhNMcOZ5IMAeBxfFzR0GNpik2P4gEkIkC/rE6sGA6LGMftqbIQEOUg6 IlPMcIoBTA3nq35RtKV/X9YJUsdDZ6ohkVMK+E9cQyczjfLMww0O60wvKZX423Pn yn4qEzbrdsdCW8Vt/h4cGfg0R+l+w3I8 -----END CERTIFICATE-----Generated at Thu May 2 20:04:53 2024 by rpki-client on console-ams.rpki-client.org