$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft File: xE8qyrKneZlDFaqTsyPam0dce5o.mft (raw, json) Hash identifier: Az9pfZjXIBQB0o2kLqyRa2+r3+nxPwSc9YNBtQMbQ7A= Subject key identifier: 00:08:62:E9:50:B2:C4:96:06:81:57:D4:FD:FE:5E:28:F7:81:31:79 Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A Certificate issuer: /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Certificate serial: 02CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft Manifest number: 02BF Signing time: Sun 05 May 2024 03:40:34 +0000 Manifest this update: Sun 05 May 2024 03:40:33 +0000 Manifest next update: Sun 12 May 2024 03:40:33 +0000 Files and hashes: 1: xE8qyrKneZlDFaqTsyPam0dce5o.crl (hash: VSqmfFHL70c8VsXDJ8FvUlVukPn5bQiRh6d3QYVK9eU=) 2: 0A90D37481F111EE9004B21AC4F9AE02.roa (hash: 2I9IEN9zY1M9/iiiNpTlxWghriCahKvG+6nECUgG5Vk=) 3: F3EFD9AA8E8711EE90D68539C4F9AE02.roa (hash: scWbmVnpew3VrLWYiHJOJEyclO7ltcpuSiXsKrZEPPQ=) 4: 3091AB2A81F111EE9CCDE11AC4F9AE02.roa (hash: 8s9RZoWhuXaL/OgRzbyz5adndAQTYe/JD4RJBSvRHGk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 716 (0x2cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Validity Not Before: May 5 03:40:33 2024 GMT Not After : May 12 03:40:33 2024 GMT Subject: CN=6636ffb2-30ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:3e:54:ab:a7:8f:1a:e3:7a:87:72:90:13:f7: 85:9c:56:65:a2:fd:b0:b2:43:68:20:8a:e5:e6:4f: b0:a9:55:de:06:74:39:e2:9c:e2:a5:5e:6b:24:e4: 92:1b:06:8e:9f:56:31:63:af:f7:4f:53:34:52:12: 3f:f2:1f:38:cd:6c:92:50:a1:ac:a3:e2:c8:e2:a2: 47:de:71:66:60:05:0b:c0:96:9c:88:2a:4a:ae:b2: cc:d0:10:a6:80:65:5c:93:da:90:d3:e1:cd:16:2c: b4:1e:09:56:16:9b:42:52:7b:f7:8c:f1:15:1b:fd: b2:32:7d:f2:c2:41:8f:39:23:a4:a9:23:c1:d2:71: d5:39:b9:8f:5c:72:53:9a:ae:a5:a9:ad:82:fc:a1: 83:47:fd:40:11:38:5b:62:d1:da:95:ec:9e:b2:fd: 14:c8:c5:c1:27:d0:9f:fd:47:da:8e:a6:12:2e:d8: a4:d7:6a:77:45:6d:3e:eb:e4:cc:dc:9b:5e:07:17: a5:59:13:51:54:08:70:73:4a:70:0c:7d:2c:03:e0: 9b:24:f0:62:f5:ab:7e:4b:8e:6b:bf:54:32:65:51: 9b:19:32:0f:82:a8:cc:c5:29:bf:03:2b:f8:5b:94: 0e:11:22:76:09:cf:1b:cb:9c:14:f2:10:ae:b1:86: 39:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:08:62:E9:50:B2:C4:96:06:81:57:D4:FD:FE:5E:28:F7:81:31:79 X509v3 Authority Key Identifier: keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:7f:3e:d1:63:73:58:ee:b3:86:b5:3c:45:3c:d7:af:fb:39: 2d:7f:30:da:13:e5:69:8e:2b:47:f2:8b:69:80:52:de:ef:fe: 36:52:9c:24:dc:14:6c:f6:92:47:78:43:4c:5c:d9:a9:69:d1: 7c:5f:09:52:2d:4e:21:f1:3d:44:2f:47:02:df:34:4d:ea:e4: ef:75:cc:3f:2a:92:c7:27:72:89:0b:71:78:73:86:ca:c6:70: 2a:66:55:2a:a9:11:f3:e6:27:90:55:69:b9:47:5b:00:9a:e1: 20:2b:48:94:a2:ab:14:ee:1d:79:e8:67:44:e5:13:04:60:89: 25:a2:8f:f8:01:f9:8a:3e:62:a1:93:00:83:7b:2a:5b:ec:71: 93:ab:fc:f4:fb:6c:6a:77:38:de:6c:0d:b6:dd:51:f9:62:dc: e9:94:18:16:98:ff:7e:88:f3:bf:fd:d5:d6:83:6d:4f:65:25: 93:4f:af:a7:07:35:d4:77:e5:35:d1:c6:48:0b:6f:28:b8:b6: 88:85:31:2a:c9:c9:95:d7:7a:47:22:d8:ed:bd:fe:1a:d4:3b: 62:5e:28:db:1f:84:1d:79:65:f9:f2:b6:88:41:17:fe:21:4a: bd:d6:41:e5:0e:63:6c:04:79:56:6a:d7:d4:5d:ab:a0:d2:b3: 8d:75:c6:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRDRjExMTAvBgNVBAUTKEM0NEYyQUNBQjJBNzc5OTk0MzE1QUE5M0IzMjNEQTlC NDc1QzdCOUEwHhcNMjQwNTA1MDM0MDMzWhcNMjQwNTEyMDM0MDMzWjAYMRYwFAYD VQQDEw02NjM2ZmZiMi0zMGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4j5Uq6ePGuN6h3KQE/eFnFZlov2wskNoIIrl5k+wqVXeBnQ54pzipV5rJOSS GwaOn1YxY6/3T1M0UhI/8h84zWySUKGso+LI4qJH3nFmYAULwJaciCpKrrLM0BCm gGVck9qQ0+HNFiy0HglWFptCUnv3jPEVG/2yMn3ywkGPOSOkqSPB0nHVObmPXHJT mq6lqa2C/KGDR/1AEThbYtHaleyesv0UyMXBJ9Cf/UfajqYSLtik12p3RW0+6+TM 3JteBxelWRNRVAhwc0pwDH0sA+CbJPBi9at+S45rv1QyZVGbGTIPgqjMxSm/Ayv4 W5QOESJ2Cc8by5wU8hCusYY5IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAAIYulQ ssSWBoFX1P3+Xij3gTF5MB8GA1UdIwQYMBaAFMRPKsqyp3mZQxWqk7Mj2ptHXHua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRENGMS9FQjU5MTEyMkE4 M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVabERGYXFUc3lQYW0wZGNl NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hFOHF5cktuZVpsREZhcVRzeVBhbTBkY2U1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RENGMS9FQjU5MTEyMkE4M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVa bERGYXFUc3lQYW0wZGNlNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCffz7RY3NY7rOGtTxFPNev+zktfzDaE+VpjitH8otpgFLe7/42Upwk 3BRs9pJHeENMXNmpadF8XwlSLU4h8T1EL0cC3zRN6uTvdcw/KpLHJ3KJC3F4c4bK xnAqZlUqqRHz5ieQVWm5R1sAmuEgK0iUoqsU7h156GdE5RMEYIkloo/4AfmKPmKh kwCDeypb7HGTq/z0+2xqdzjebA223VH5YtzplBgWmP9+iPO//dXWg21PZSWTT6+n BzXUd+U10cZIC28ouLaIhTEqycmV13pHItjtvf4a1DtiXijbH4QdeWX58raIQRf+ IUq91kHlDmNsBHlWatfUXaug0rONdcb1 -----END CERTIFICATE-----Generated at Sun May 5 04:40:00 2024 by rpki-client on console-ams.rpki-client.org