$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft File: mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft (raw, json) Hash identifier: sHgGoRIh3TMn13IzOW22Ek7w+L069WVgSo3SwrCRw4I= Subject key identifier: 6F:73:D7:F5:D2:D3:2D:2A:BF:F2:56:77:D1:FA:FB:29:F5:FF:87:6C Authority key identifier: 98:9F:89:D6:8C:86:83:4A:F8:2D:9D:27:D1:6E:55:C0:9A:6E:F7:BC Certificate issuer: /CN=A91BE6D3/serialNumber=989F89D68C86834AF82D9D27D16E55C09A6EF7BC Certificate serial: 03D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft Manifest number: 03D1 Signing time: Fri 03 May 2024 02:28:06 +0000 Manifest this update: Fri 03 May 2024 02:28:05 +0000 Manifest next update: Fri 10 May 2024 02:28:05 +0000 Files and hashes: 1: mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl (hash: f2r2cryYv4uNnYbDoC005pUEL4mhluiRfnQfCf/8S/c=) 2: FB782FD2721311EE8754E20FC4F9AE02.roa (hash: I/EUtcnIOgWuSMRX1/ctogprNtew+jz+1ODHN5r7tpo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 981 (0x3d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE6D3/serialNumber=989F89D68C86834AF82D9D27D16E55C09A6EF7BC Validity Not Before: May 3 02:28:05 2024 GMT Not After : May 10 02:28:05 2024 GMT Subject: CN=66344bb5-5dca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d6:ba:82:a6:97:b3:95:72:32:86:f6:a7:ca: aa:e6:72:95:14:8b:a5:64:0f:75:dd:b5:58:75:05: 87:cd:1f:e9:05:bd:92:bd:67:44:fc:4c:a8:5b:0e: a4:d2:e2:6b:80:fc:cd:a0:c1:e9:de:76:24:90:15: f0:53:1a:3a:db:6a:38:02:81:eb:ce:8d:a5:9e:fb: be:f7:ad:f1:a9:6e:5c:12:b5:7a:95:f7:d8:39:e8: cc:a4:c3:9f:af:ab:63:8e:7f:90:aa:36:8c:bc:95: 11:1f:35:af:d7:a9:9a:d3:cf:65:bd:13:58:9f:d9: ac:6a:30:12:a9:13:b2:88:03:d2:53:1d:9d:52:04: 42:46:04:c1:5f:37:5d:a9:87:48:d3:6f:ae:ba:aa: 23:21:d6:bb:61:77:83:17:80:8e:db:ed:3c:e0:72: f8:20:48:f1:47:79:b8:f7:b0:cd:44:d7:ea:6e:86: dc:5d:61:b4:79:57:f7:a3:54:11:8a:90:b8:b5:4c: ff:e1:d1:83:cc:fc:76:51:49:36:ab:89:dc:44:70: fd:4d:d1:c1:b7:1f:e4:51:0e:5e:e7:53:0c:13:93: ab:ae:ce:d9:cc:0f:11:cb:5f:82:71:d6:61:4d:d2: 7d:78:77:87:d1:19:4b:49:a2:56:0a:70:b0:84:e2: 72:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:73:D7:F5:D2:D3:2D:2A:BF:F2:56:77:D1:FA:FB:29:F5:FF:87:6C X509v3 Authority Key Identifier: keyid:98:9F:89:D6:8C:86:83:4A:F8:2D:9D:27:D1:6E:55:C0:9A:6E:F7:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:f6:da:09:5a:40:c0:37:15:e9:48:30:f2:69:d3:e0:ec:5a: da:d9:b6:45:b0:30:de:04:e4:0f:ff:ad:b7:cc:20:de:2c:0c: e4:66:d2:f5:da:6a:89:eb:06:6a:39:db:37:70:3a:13:d3:90: 45:ab:f6:6c:33:ee:a2:fd:8b:e3:97:1d:6b:8d:71:be:04:d4: 12:58:2a:1c:1e:0a:71:d4:69:90:2a:b4:5a:d8:49:2f:4d:aa: 29:75:56:6f:79:13:4f:80:b8:12:af:e9:9f:50:32:b7:50:62: 3d:c8:b8:c5:39:dc:69:d9:34:bb:e2:84:ed:a7:5d:f2:62:7c: 65:60:5b:fa:03:22:64:4b:31:a2:d6:f8:5d:5d:f1:61:ba:1b: 11:e4:e4:2b:11:5d:5a:e4:8f:ad:38:d5:8e:f4:39:0d:20:9c: 0f:f3:2a:b2:1e:2e:e1:92:6e:71:ea:fb:dc:8c:1c:a0:80:08: d1:12:da:94:75:c0:ad:d0:ac:0a:36:14:f7:ef:be:5c:07:af: 66:19:90:9c:ba:da:5a:c4:04:b3:5d:1c:4c:ba:b7:a7:f7:d3: f3:f5:9b:0c:86:23:b3:d5:d5:ab:0b:a7:15:a0:1f:cc:e4:7e: 7e:d2:24:87:ac:36:52:26:1d:f5:32:7a:31:fb:00:63:6c:f1: e0:a5:96:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU2RDMxMTAvBgNVBAUTKDk4OUY4OUQ2OEM4NjgzNEFGODJEOUQyN0QxNkU1NUMw OUE2RUY3QkMwHhcNMjQwNTAzMDIyODA1WhcNMjQwNTEwMDIyODA1WjAYMRYwFAYD VQQDEw02NjM0NGJiNS01ZGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9a6gqaXs5VyMob2p8qq5nKVFIulZA913bVYdQWHzR/pBb2SvWdE/EyoWw6k 0uJrgPzNoMHp3nYkkBXwUxo622o4AoHrzo2lnvu+963xqW5cErV6lffYOejMpMOf r6tjjn+QqjaMvJURHzWv16ma089lvRNYn9msajASqROyiAPSUx2dUgRCRgTBXzdd qYdI02+uuqojIda7YXeDF4CO2+084HL4IEjxR3m497DNRNfqbobcXWG0eVf3o1QR ipC4tUz/4dGDzPx2UUk2q4ncRHD9TdHBtx/kUQ5e51MME5Orrs7ZzA8Ry1+CcdZh TdJ9eHeH0RlLSaJWCnCwhOJySwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG9z1/XS 0y0qv/JWd9H6+yn1/4dsMB8GA1UdIwQYMBaAFJifidaMhoNK+C2dJ9FuVcCabve8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTZEMy9FRjkzODM1QTM3 OTIxMUVDOUM2QzlCNjlDNEY5QUUwMi9tSi1KMW95R2cwcjRMWjBuMFc1VndKcHU5 N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21KLUoxb3lHZzByNExaMG4wVzVWd0pwdTk3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTZEMy9FRjkzODM1QTM3OTIxMUVDOUM2QzlCNjlDNEY5QUUwMi9tSi1KMW95R2cw cjRMWjBuMFc1VndKcHU5N3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB9toJWkDANxXpSDDyadPg7Fra2bZFsDDeBOQP/623zCDeLAzkZtL1 2mqJ6wZqOds3cDoT05BFq/ZsM+6i/Yvjlx1rjXG+BNQSWCocHgpx1GmQKrRa2Ekv TaopdVZveRNPgLgSr+mfUDK3UGI9yLjFOdxp2TS74oTtp13yYnxlYFv6AyJkSzGi 1vhdXfFhuhsR5OQrEV1a5I+tONWO9DkNIJwP8yqyHi7hkm5x6vvcjByggAjREtqU dcCt0KwKNhT3775cB69mGZCcutpaxASzXRxMuren99Pz9ZsMhiOz1dWrC6cVoB/M 5H5+0iSHrDZSJh31Mnox+wBjbPHgpZYN -----END CERTIFICATE-----Generated at Fri May 3 03:10:56 2024 by rpki-client on console-ams.rpki-client.org