$ rpki-client -vvf rpki.apnic.net/member_repository/A91C08FA/ADCB15FE95C311EAAE620149C4F9AE02/oR4sIXmzapZHuVH8YC13kwe_rm4.mft File: oR4sIXmzapZHuVH8YC13kwe_rm4.mft (raw, json) Hash identifier: xfalWgKqKtFeEumEnSLpZsT0lvaqy6fwP4v9YdctZgk= Subject key identifier: 23:C0:0E:FF:6B:D5:8C:BA:E7:C1:E1:03:BA:57:48:46:CE:96:49:CA Authority key identifier: A1:1E:2C:21:79:B3:6A:96:47:B9:51:FC:60:2D:77:93:07:BF:AE:6E Certificate issuer: /CN=A91C08FA/serialNumber=A11E2C2179B36A9647B951FC602D779307BFAE6E Certificate serial: 08A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oR4sIXmzapZHuVH8YC13kwe_rm4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C08FA/ADCB15FE95C311EAAE620149C4F9AE02/oR4sIXmzapZHuVH8YC13kwe_rm4.mft Manifest number: 0899 Signing time: Sat 04 May 2024 21:43:32 +0000 Manifest this update: Sat 04 May 2024 21:43:32 +0000 Manifest next update: Sat 11 May 2024 21:43:32 +0000 Files and hashes: 1: oR4sIXmzapZHuVH8YC13kwe_rm4.crl (hash: x2aU8dicx32YvXNrXbr4HyBrJt1H8E4iIi5crCxCuiY=) 2: 0CF8405C95CD11EA8D1B0C65C4F9AE02.roa (hash: L2FQdcEAehehi36iTYlNTu2HzMsF5TyknQqhhyP6lwI=) 3: F5231922306A11ECAC7AA64DC4F9AE02.roa (hash: vYnaxmsn5vsppe/5G2I+RF+3dKEs/plENyq4vTimQDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C08FA/ADCB15FE95C311EAAE620149C4F9AE02/oR4sIXmzapZHuVH8YC13kwe_rm4.crl rsync://rpki.apnic.net/member_repository/A91C08FA/ADCB15FE95C311EAAE620149C4F9AE02/oR4sIXmzapZHuVH8YC13kwe_rm4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oR4sIXmzapZHuVH8YC13kwe_rm4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2213 (0x8a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C08FA/serialNumber=A11E2C2179B36A9647B951FC602D779307BFAE6E Validity Not Before: May 4 21:43:32 2024 GMT Not After : May 11 21:43:32 2024 GMT Subject: CN=6636ac04-9cba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:56:51:00:9a:f0:49:b8:b4:1f:bc:eb:34:8b: af:65:df:20:fc:5d:c1:26:bd:03:cd:e3:97:d2:2a: 50:98:68:53:69:ee:e6:fb:f5:9a:52:6a:09:b1:d8: 8f:15:78:af:89:de:0f:47:0f:8f:04:67:d7:8a:ec: 83:90:33:51:32:fa:ad:4f:0f:a0:2a:78:1b:9f:20: de:72:5c:ad:df:b6:db:35:9e:27:2f:9f:de:20:ec: 52:48:f6:84:70:24:65:7a:d0:1b:4c:fb:be:85:1e: c2:6c:f3:97:ac:e0:6c:c9:21:eb:4e:5c:57:83:9a: 18:28:02:bb:18:db:17:09:66:79:ac:42:9c:1d:34: c2:27:2d:6d:e4:0b:ff:fd:5f:84:10:25:f4:b0:08: 05:a8:ad:63:f3:f5:d5:c8:36:1c:ce:3e:fd:73:47: 2f:24:68:1f:cc:37:cf:fc:f4:e0:ec:a9:e6:32:72: 3b:2a:98:f2:a7:23:82:f8:c2:5f:1d:83:85:20:1e: 00:ae:6b:a2:86:1b:0a:44:26:38:0e:9d:e5:53:46: 6b:fd:5b:b4:6f:0a:51:44:16:f2:9a:dc:75:90:fd: a5:d0:5b:bc:f9:b8:a1:f8:73:dc:44:27:ad:0b:41: 8c:d4:a6:e9:6b:fb:2a:64:02:56:1a:3a:0b:7c:33: b1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C0:0E:FF:6B:D5:8C:BA:E7:C1:E1:03:BA:57:48:46:CE:96:49:CA X509v3 Authority Key Identifier: keyid:A1:1E:2C:21:79:B3:6A:96:47:B9:51:FC:60:2D:77:93:07:BF:AE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C08FA/ADCB15FE95C311EAAE620149C4F9AE02/oR4sIXmzapZHuVH8YC13kwe_rm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oR4sIXmzapZHuVH8YC13kwe_rm4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C08FA/ADCB15FE95C311EAAE620149C4F9AE02/oR4sIXmzapZHuVH8YC13kwe_rm4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:55:ea:ce:b2:cc:22:aa:5f:e4:3a:c7:4f:43:0a:5a:e6:f0: 68:bc:0d:b7:a7:7b:8c:8d:b2:ca:32:18:d9:af:30:7c:4f:8f: 74:4f:3c:61:21:72:2b:a2:a5:91:29:1d:ed:40:ba:4a:51:ae: 22:ed:96:80:6b:2e:f7:8a:1d:0d:96:34:4c:d1:07:db:0b:13: 04:a5:5b:23:f4:84:62:53:0b:81:86:04:be:64:26:61:8d:83: 97:40:68:0a:79:d4:5e:d5:47:83:9e:c5:c9:36:76:cb:72:cf: e4:dd:a6:93:02:53:18:82:17:fc:a1:49:63:89:80:7d:76:fb: 2c:37:98:66:4f:ef:45:e4:e6:b7:8a:87:83:fe:07:e1:12:f7: d0:7c:5e:a3:be:75:15:d6:0d:46:dd:67:c3:42:72:a1:1c:3f: e2:e9:11:08:0b:18:91:4e:30:f5:ea:39:44:31:1d:c7:b1:7e: 74:14:17:9d:92:7d:0c:b3:40:b8:f5:25:9f:18:46:90:7b:5e: eb:a9:01:89:07:15:5b:1f:36:af:49:70:11:e1:47:78:22:7b: 39:53:58:42:c3:02:4a:a5:0f:16:8c:33:d2:97:a0:94:be:2c: 71:86:89:99:86:1a:92:5f:78:a0:fe:fb:e8:dc:71:b7:6f:d8: 0b:f0:6b:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA4RkExMTAvBgNVBAUTKEExMUUyQzIxNzlCMzZBOTY0N0I5NTFGQzYwMkQ3Nzkz MDdCRkFFNkUwHhcNMjQwNTA0MjE0MzMyWhcNMjQwNTExMjE0MzMyWjAYMRYwFAYD VQQDEw02NjM2YWMwNC05Y2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA51ZRAJrwSbi0H7zrNIuvZd8g/F3BJr0DzeOX0ipQmGhTae7m+/WaUmoJsdiP FXivid4PRw+PBGfXiuyDkDNRMvqtTw+gKngbnyDeclyt37bbNZ4nL5/eIOxSSPaE cCRletAbTPu+hR7CbPOXrOBsySHrTlxXg5oYKAK7GNsXCWZ5rEKcHTTCJy1t5Av/ /V+EECX0sAgFqK1j8/XVyDYczj79c0cvJGgfzDfP/PTg7KnmMnI7KpjypyOC+MJf HYOFIB4ArmuihhsKRCY4Dp3lU0Zr/Vu0bwpRRBbymtx1kP2l0Fu8+bih+HPcRCet C0GM1Kbpa/sqZAJWGjoLfDOx2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCPADv9r 1Yy658HhA7pXSEbOlknKMB8GA1UdIwQYMBaAFKEeLCF5s2qWR7lR/GAtd5MHv65u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDhGQS9BRENCMTVGRTk1 QzMxMUVBQUU2MjAxNDlDNEY5QUUwMi9vUjRzSVhtemFwWkh1Vkg4WUMxM2t3ZV9y bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29SNHNJWG16YXBaSHVWSDhZQzEza3dlX3JtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDhGQS9BRENCMTVGRTk1QzMxMUVBQUU2MjAxNDlDNEY5QUUwMi9vUjRzSVhtemFw Wkh1Vkg4WUMxM2t3ZV9ybTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByVerOsswiql/kOsdPQwpa5vBovA23p3uMjbLKMhjZrzB8T490Tzxh IXIroqWRKR3tQLpKUa4i7ZaAay73ih0NljRM0QfbCxMEpVsj9IRiUwuBhgS+ZCZh jYOXQGgKedRe1UeDnsXJNnbLcs/k3aaTAlMYghf8oUljiYB9dvssN5hmT+9F5Oa3 ioeD/gfhEvfQfF6jvnUV1g1G3WfDQnKhHD/i6REICxiRTjD16jlEMR3HsX50FBed kn0Ms0C49SWfGEaQe17rqQGJBxVbHzavSXAR4Ud4Ins5U1hCwwJKpQ8WjDPSl6CU vixxhomZhhqSX3ig/vvo3HG3b9gL8Gvi -----END CERTIFICATE-----Generated at Sun May 5 00:14:45 2024 by rpki-client on console-ams.rpki-client.org