$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft File: Sr2iSte9no2c77NZONCoeIBMYuQ.mft (raw, json) Hash identifier: FnZAHa+8qRsqwKS95L2yqz+Ukcgi5+qum8+YJ8XMDGE= Subject key identifier: A5:DA:6F:39:89:13:0F:18:26:31:12:84:D8:99:7F:73:9D:5D:9F:83 Authority key identifier: 4A:BD:A2:4A:D7:BD:9E:8D:9C:EF:B3:59:38:D0:A8:78:80:4C:62:E4 Certificate issuer: /CN=A91BE096/serialNumber=4ABDA24AD7BD9E8D9CEFB35938D0A878804C62E4 Certificate serial: 0FD2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft Manifest number: 0FBA Signing time: Mon 06 May 2024 18:09:18 +0000 Manifest this update: Mon 06 May 2024 18:09:17 +0000 Manifest next update: Mon 13 May 2024 18:09:17 +0000 Files and hashes: 1: Sr2iSte9no2c77NZONCoeIBMYuQ.crl (hash: euEm7vvTEmf66TZBkyQRAMtaooxt8Yvb1/bqleYOO/A=) 2: 60E695B6C52A11EE80D54071C4F9AE02.roa (hash: xMhBBK2HlSTh8kZjh6hONzCuzrzym+9yLs2qqxEXI4U=) 3: A3F44008D7A211EEA4F45676C4F9AE02.roa (hash: a7dziqAdCKwHsLIsEIGDuAGznbdMDCGC/Dis+R5cbyY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.crl rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 18:09:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4050 (0xfd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE096/serialNumber=4ABDA24AD7BD9E8D9CEFB35938D0A878804C62E4 Validity Not Before: May 6 18:09:17 2024 GMT Not After : May 13 18:09:17 2024 GMT Subject: CN=66391ccd-e85d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:4b:52:66:83:14:27:b8:e2:ae:a8:48:74:f4: 99:98:a9:03:dc:d4:f9:f8:53:ba:8d:f2:08:86:24: d2:bb:07:eb:56:94:ba:ef:31:21:9b:82:42:c1:ed: 81:5b:b2:25:28:98:12:66:92:8d:6a:f1:c2:1a:c4: f2:85:2d:d7:8b:f2:8d:15:de:b1:0d:64:ea:7d:4c: 82:36:79:91:9f:e0:c1:62:cd:3c:13:96:36:c1:ee: ea:90:83:a1:c8:d1:47:51:37:9b:1e:cb:28:f3:64: 89:52:04:82:b0:42:50:67:54:9e:02:8b:e7:9d:c2: 36:d8:6d:53:ea:aa:12:82:21:18:78:4b:f2:90:89: 05:f2:28:79:11:40:68:0c:c8:53:eb:17:95:07:8d: 62:cb:0a:61:7a:1a:bf:7f:86:36:2c:1f:96:66:ce: 45:a2:3e:6f:64:cb:46:2d:ec:43:2b:1d:3a:29:02: ee:79:ee:8f:3f:63:ac:68:87:43:55:29:99:9f:38: 50:39:7f:bc:e8:12:b9:4d:81:f6:25:9d:de:27:2f: 49:d4:24:a3:30:65:75:9c:6d:4c:86:5d:44:f2:35: 0e:29:83:31:dc:d7:97:94:3d:99:2f:17:77:df:ec: 97:e4:4d:29:38:30:82:79:5c:6d:e2:01:bc:92:9d: 0d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:DA:6F:39:89:13:0F:18:26:31:12:84:D8:99:7F:73:9D:5D:9F:83 X509v3 Authority Key Identifier: keyid:4A:BD:A2:4A:D7:BD:9E:8D:9C:EF:B3:59:38:D0:A8:78:80:4C:62:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:c4:30:46:cc:04:3e:03:6d:cf:0f:5f:b6:b6:0f:cb:35:ac: df:34:e7:03:1e:13:f3:32:5a:5f:81:3b:3a:51:75:d0:39:c8: 9a:10:62:b4:1a:cb:75:3e:25:25:06:70:c2:18:86:27:22:7c: 74:24:3a:de:a9:59:73:2c:b2:71:75:13:46:f2:4d:62:d3:57: 2b:4d:ee:88:be:8c:90:86:e9:fd:28:b5:8c:e9:6b:74:a1:a2: b5:ac:71:2f:4f:04:1d:68:58:56:ef:1f:84:50:b2:8f:0b:68: 8c:49:d7:ad:c8:ef:e0:60:10:e0:10:9a:fe:94:94:83:4d:9a: fa:ce:b3:80:3f:52:ad:53:0f:27:9b:20:e4:01:c1:a2:76:59: 2d:ac:1e:7e:4c:3d:b6:c7:f8:dd:26:23:78:dd:db:5c:64:9e: 98:0c:5f:6f:c6:64:32:48:b0:15:22:c8:5f:c1:62:95:6e:1b: a4:0c:8a:2a:c4:73:95:86:f7:cc:cd:fc:a3:2d:4d:e9:21:ee: fd:b4:7a:e0:25:54:de:c8:e2:50:2f:87:4c:46:b3:f4:a4:b0: 20:7d:9b:6f:cc:23:3f:46:08:b7:18:a4:22:26:d1:34:ed:7f: 5b:8e:9d:6b:08:25:80:66:0b:81:7c:8d:ee:51:fc:f3:ec:1a: 8d:d9:b2:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUwOTYxMTAvBgNVBAUTKDRBQkRBMjRBRDdCRDlFOEQ5Q0VGQjM1OTM4RDBBODc4 ODA0QzYyRTQwHhcNMjQwNTA2MTgwOTE3WhcNMjQwNTEzMTgwOTE3WjAYMRYwFAYD VQQDEw02NjM5MWNjZC1lODVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ktSZoMUJ7jirqhIdPSZmKkD3NT5+FO6jfIIhiTSuwfrVpS67zEhm4JCwe2B W7IlKJgSZpKNavHCGsTyhS3Xi/KNFd6xDWTqfUyCNnmRn+DBYs08E5Y2we7qkIOh yNFHUTebHsso82SJUgSCsEJQZ1SeAovnncI22G1T6qoSgiEYeEvykIkF8ih5EUBo DMhT6xeVB41iywphehq/f4Y2LB+WZs5Foj5vZMtGLexDKx06KQLuee6PP2OsaIdD VSmZnzhQOX+86BK5TYH2JZ3eJy9J1CSjMGV1nG1Mhl1E8jUOKYMx3NeXlD2ZLxd3 3+yX5E0pODCCeVxt4gG8kp0NlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKXabzmJ Ew8YJjEShNiZf3OdXZ+DMB8GA1UdIwQYMBaAFEq9okrXvZ6NnO+zWTjQqHiATGLk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTA5Ni8yRkJCNDQwRTMz NDUxMUU5OThDNTY3M0JDNEY5QUUwMi9TcjJpU3RlOW5vMmM3N05aT05Db2VJQk1Z dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NyMmlTdGU5bm8yYzc3TlpPTkNvZUlCTVl1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTA5Ni8yRkJCNDQwRTMzNDUxMUU5OThDNTY3M0JDNEY5QUUwMi9TcjJpU3RlOW5v MmM3N05aT05Db2VJQk1ZdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBExDBGzAQ+A23PD1+2tg/LNazfNOcDHhPzMlpfgTs6UXXQOciaEGK0 Gst1PiUlBnDCGIYnInx0JDreqVlzLLJxdRNG8k1i01crTe6IvoyQhun9KLWM6Wt0 oaK1rHEvTwQdaFhW7x+EULKPC2iMSdetyO/gYBDgEJr+lJSDTZr6zrOAP1KtUw8n myDkAcGidlktrB5+TD22x/jdJiN43dtcZJ6YDF9vxmQySLAVIshfwWKVbhukDIoq xHOVhvfMzfyjLU3pIe79tHrgJVTeyOJQL4dMRrP0pLAgfZtvzCM/Rgi3GKQiJtE0 7X9bjp1rCCWAZguBfI3uUfzz7BqN2bL5 -----END CERTIFICATE-----Generated at Mon May 6 20:19:43 2024 by rpki-client on console-ams.rpki-client.org