$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft File: 88hJQLK99AJViHBvWcHm7D0hR_A.mft (raw, json) Hash identifier: acy56gSne9DpNT8Mauyiw1vaxnmcgI0lUVbr5UV1EV4= Subject key identifier: EE:27:B2:F8:92:A0:40:4C:44:FD:5C:F2:E9:F0:87:27:81:79:78:5B Authority key identifier: F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0 Certificate issuer: /CN=A91BCC23/serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0 Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft Manifest number: 60 Signing time: Wed 15 May 2024 07:45:22 +0000 Manifest this update: Wed 15 May 2024 07:45:22 +0000 Manifest next update: Wed 22 May 2024 07:45:22 +0000 Files and hashes: 1: 88hJQLK99AJViHBvWcHm7D0hR_A.crl (hash: qdwMMuzRI3giCnQqsqlYYClDtt7pM0a3VbpJRmaoFZ0=) 2: D36C048A81E211EEAF423C87C4F9AE02.roa (hash: AgEcJkKDpEPBaGjrS9V0jt2iST6E+qzc3K1SEhivhc4=) 3: FC3C8A6A81E211EE963BAB87C4F9AE02.roa (hash: 548P4XWsPS3JTWuhyip3nqsrffc51BRt/khZw2JCljI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:45:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCC23/serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0 Validity Not Before: May 15 07:45:22 2024 GMT Not After : May 22 07:45:22 2024 GMT Subject: CN=66446812-c026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:77:21:0d:5e:4a:17:38:0c:d2:76:20:a0:2f: b8:fd:96:00:21:b6:b1:dc:b0:73:89:88:28:a4:47: 88:06:05:08:15:7e:f4:b5:8b:27:8a:25:dc:91:2c: 34:6b:93:22:54:dc:76:97:31:c1:79:d6:e5:d1:74: 95:db:2d:18:c8:fa:a5:93:7a:9d:d9:a3:9c:01:da: da:b1:47:b2:88:77:a7:01:71:5f:a3:d8:7f:a9:e1: c8:fe:b2:42:90:65:9d:9b:fd:1f:a7:0c:79:be:7d: 49:c6:80:b7:c7:ec:ce:cb:e4:d2:9a:72:2d:a2:7a: 05:3f:13:04:2e:a0:d6:df:a8:56:07:88:c1:29:e3: bc:46:36:7d:0c:3b:2f:54:32:9c:74:3e:d7:f1:63: 1f:62:6a:37:8f:53:49:28:86:e9:d4:58:6a:32:0e: ee:9d:ba:a9:86:bb:ae:c0:03:2f:d1:c9:01:5d:54: 71:49:6e:ee:39:07:50:86:d0:88:4f:0e:93:47:4e: ee:71:bb:9c:65:c3:79:d0:3c:38:16:fe:00:6b:e9: 1b:07:bd:e4:ea:1f:cd:e7:03:e6:ad:1e:55:c8:20: cc:6d:d8:d7:86:8e:77:ef:b5:c9:04:65:10:c7:44: 10:d4:9b:90:a8:cd:34:7e:c3:2c:01:15:4d:af:a0: 7b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:27:B2:F8:92:A0:40:4C:44:FD:5C:F2:E9:F0:87:27:81:79:78:5B X509v3 Authority Key Identifier: keyid:F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:0a:fa:37:42:fa:f3:4b:d7:51:54:6d:23:9d:5f:37:9c:38: 89:bc:a1:ab:3e:e8:fb:78:ba:49:0f:4d:bd:9f:bd:16:3d:44: a1:cc:4a:c9:ba:54:f4:d1:dc:4b:71:fa:d1:2e:8f:69:e9:3a: f7:de:8b:dd:44:03:df:96:c0:da:0f:b0:6d:95:ec:7b:76:20: 3d:ff:bf:e7:ec:e0:54:1e:19:b3:7a:1b:82:7d:1d:7f:5a:b7: 33:9a:91:3c:2c:b1:70:c0:c4:f6:9b:f5:05:ad:0d:d3:04:f6: 85:c8:44:9e:46:46:66:e0:42:16:43:55:1b:c9:d1:5e:33:7f: af:d9:fa:d3:89:d6:58:09:ad:48:46:09:fd:f9:85:32:77:67: 04:33:b7:de:6c:01:2c:63:79:99:d9:9a:26:be:16:8b:e2:7f: 04:de:eb:e5:a0:e7:5f:20:79:3d:08:9f:55:40:11:01:5d:e3: 99:81:09:65:04:54:4e:e2:5d:45:80:57:db:46:ef:97:e7:f8: 4a:5e:41:a4:6a:c2:ce:e3:07:c5:6a:a3:6e:8d:7f:fa:26:32: 48:99:fd:ed:1e:34:51:27:c3:41:0f:9a:d3:0f:21:71:6f:c7: 96:03:ac:bd:fa:10:75:a3:3c:f6:e2:df:be:7e:30:01:b0:43: 72:0d:06:03 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC Q0MyMzExMC8GA1UEBRMoRjNDODQ5NDBCMkJERjQwMjU1ODg3MDZGNTlDMUU2RUMz RDIxNDdGMDAeFw0yNDA1MTUwNzQ1MjJaFw0yNDA1MjIwNzQ1MjJaMBgxFjAUBgNV BAMTDTY2NDQ2ODEyLWMwMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhdyENXkoXOAzSdiCgL7j9lgAhtrHcsHOJiCikR4gGBQgVfvS1iyeKJdyRLDRr kyJU3HaXMcF51uXRdJXbLRjI+qWTep3Zo5wB2tqxR7KId6cBcV+j2H+p4cj+skKQ ZZ2b/R+nDHm+fUnGgLfH7M7L5NKaci2iegU/EwQuoNbfqFYHiMEp47xGNn0MOy9U Mpx0PtfxYx9iajePU0kohunUWGoyDu6duqmGu67AAy/RyQFdVHFJbu45B1CG0IhP DpNHTu5xu5xlw3nQPDgW/gBr6RsHveTqH83nA+atHlXIIMxt2NeGjnfvtckEZRDH RBDUm5CozTR+wywBFU2voHs5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7iey+JKg QExE/Vzy6fCHJ4F5eFswHwYDVR0jBBgwFoAU88hJQLK99AJViHBvWcHm7D0hR/Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDQzIzLzkyNUM4MENFODFF MTExRUU4Q0Y2NkIwQUM0RjlBRTAyLzg4aEpRTEs5OUFKVmlIQnZXY0htN0QwaFJf QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvODhoSlFMSzk5QUpWaUhCdldjSG03RDBoUl9BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJD QzIzLzkyNUM4MENFODFFMTExRUU4Q0Y2NkIwQUM0RjlBRTAyLzg4aEpRTEs5OUFK VmlIQnZXY0htN0QwaFJfQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAMK+jdC+vNL11FUbSOdXzecOIm8oas+6Pt4ukkPTb2fvRY9RKHMSsm6 VPTR3Etx+tEuj2npOvfei91EA9+WwNoPsG2V7Ht2ID3/v+fs4FQeGbN6G4J9HX9a tzOakTwssXDAxPab9QWtDdME9oXIRJ5GRmbgQhZDVRvJ0V4zf6/Z+tOJ1lgJrUhG Cf35hTJ3ZwQzt95sASxjeZnZmia+FovifwTe6+Wg518geT0In1VAEQFd45mBCWUE VE7iXUWAV9tG75fn+EpeQaRqws7jB8Vqo26Nf/omMkiZ/e0eNFEnw0EPmtMPIXFv x5YDrL36EHWjPPbi375+MAGwQ3INBgM= -----END CERTIFICATE-----Generated at Wed May 15 09:04:44 2024 by rpki-client on console-ams.rpki-client.org