$ rpki-client -vvf rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft File: ihprqbt2zysN7jXqTP0vX_jAieM.mft (raw, json) Hash identifier: nx5XR9N89MpMp9LpYHnsvYmLR/mb2hNDQ+6Xuokv3l8= Subject key identifier: 32:33:90:9A:EF:C2:16:9B:EE:3D:2E:14:2E:54:A4:FE:7A:42:D4:84 Authority key identifier: 8A:1A:6B:A9:BB:76:CF:2B:0D:EE:35:EA:4C:FD:2F:5F:F8:C0:89:E3 Certificate issuer: /CN=A91C36EE/serialNumber=8A1A6BA9BB76CF2B0DEE35EA4CFD2F5FF8C089E3 Certificate serial: 0B1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft Manifest number: 0B16 Signing time: Sat 04 May 2024 20:01:24 +0000 Manifest this update: Sat 04 May 2024 20:01:24 +0000 Manifest next update: Sat 11 May 2024 20:01:24 +0000 Files and hashes: 1: ihprqbt2zysN7jXqTP0vX_jAieM.crl (hash: iagQQRp1qclyrQvkTlH2YU+z7m76WxbPkqUjPcAm9CU=) 2: 6FCF7FF2180411EA9AA70A57C4F9AE02.roa (hash: mKEtXAReo073pS6G/Scd6VusUJKflX5sGzsP9WFHvuk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.crl rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2843 (0xb1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C36EE/serialNumber=8A1A6BA9BB76CF2B0DEE35EA4CFD2F5FF8C089E3 Validity Not Before: May 4 20:01:24 2024 GMT Not After : May 11 20:01:24 2024 GMT Subject: CN=66369414-bb3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7e:e2:61:2c:61:68:da:bb:bb:66:ce:bf:ac: ca:5a:34:34:b1:ad:22:df:07:88:68:fd:18:11:c1: 1d:ba:36:76:bd:5d:15:34:d0:f0:3d:ce:df:cd:47: d1:ff:db:53:fb:42:b9:fb:0d:78:d8:bd:10:83:00: 1b:e3:36:e9:be:cb:0f:d9:23:85:3e:7e:d7:c1:94: 87:62:0d:10:08:a7:f6:65:36:9e:de:25:40:08:f2: 53:63:1f:4f:55:08:20:5d:3b:5e:95:54:3e:2c:6f: 26:de:2e:f1:23:9d:97:ce:21:dc:b1:8a:aa:c8:b6: e6:35:4d:03:50:98:d7:45:1d:61:ba:aa:94:a3:19: bc:47:d7:e5:b8:28:34:ad:f4:2a:e7:dc:7a:d7:bd: 05:6d:ea:f2:82:e4:25:2d:89:02:f1:23:bd:ea:55: de:59:3a:34:91:2b:cf:1e:13:07:21:09:1f:f1:b2: b7:17:17:bc:e7:34:85:c1:f1:f3:20:12:7f:19:cf: a4:54:7e:59:30:72:ae:3f:a9:29:a8:35:ee:c1:ca: 35:9c:25:34:04:9c:26:d6:c2:2b:96:7d:3e:d7:3f: 76:65:bf:8c:a4:3a:a8:b5:17:5c:dc:90:60:aa:1f: a4:c6:45:4f:b0:97:57:19:dc:48:89:f5:8b:f1:ab: c3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:33:90:9A:EF:C2:16:9B:EE:3D:2E:14:2E:54:A4:FE:7A:42:D4:84 X509v3 Authority Key Identifier: keyid:8A:1A:6B:A9:BB:76:CF:2B:0D:EE:35:EA:4C:FD:2F:5F:F8:C0:89:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:95:44:3d:a6:d5:bd:e5:d4:e9:00:52:d5:d9:0d:66:59:41: 57:fe:e0:06:43:93:0f:e2:9f:3d:d5:f3:46:c0:4d:9d:67:16: 19:ba:32:87:49:f9:e7:27:c7:64:08:c1:c0:51:37:57:55:2d: e1:89:90:08:85:0e:49:91:18:8a:05:e8:52:21:f3:7d:db:f4: 93:c2:13:0c:a7:e5:79:41:cc:d8:84:e5:3d:21:a7:ea:91:12: 5b:a4:4d:0a:0a:58:86:a3:7d:2e:d4:45:8d:4b:9d:13:e0:71: bc:00:1f:d0:36:7e:24:b8:ee:c8:e9:3c:f5:f5:1f:37:da:1f: 2f:d1:10:c4:d8:df:80:b7:3b:a5:7f:cf:a1:95:79:62:e8:54: e9:c6:a4:18:4a:d2:8b:d7:f8:02:8d:fe:57:03:36:ef:56:3f: da:9c:2c:8e:96:e1:1b:5f:67:e2:49:1b:28:25:69:46:17:72: 61:f3:4e:8c:c2:be:fa:db:ad:c2:72:c2:cc:81:79:3a:08:e7: 77:25:c7:25:93:f8:9f:1c:01:e7:b2:8f:2e:35:f5:11:fe:c4: 52:78:f0:d9:1b:e2:ba:c0:6e:bc:37:fa:7d:e3:2c:a1:76:a7: d1:1b:3f:17:b9:d7:3f:77:25:42:79:64:e9:27:a9:c0:df:6f: 80:51:15:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM2RUUxMTAvBgNVBAUTKDhBMUE2QkE5QkI3NkNGMkIwREVFMzVFQTRDRkQyRjVG RjhDMDg5RTMwHhcNMjQwNTA0MjAwMTI0WhcNMjQwNTExMjAwMTI0WjAYMRYwFAYD VQQDEw02NjM2OTQxNC1iYjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv37iYSxhaNq7u2bOv6zKWjQ0sa0i3weIaP0YEcEdujZ2vV0VNNDwPc7fzUfR /9tT+0K5+w142L0QgwAb4zbpvssP2SOFPn7XwZSHYg0QCKf2ZTae3iVACPJTYx9P VQggXTtelVQ+LG8m3i7xI52XziHcsYqqyLbmNU0DUJjXRR1huqqUoxm8R9fluCg0 rfQq59x6170FberyguQlLYkC8SO96lXeWTo0kSvPHhMHIQkf8bK3Fxe85zSFwfHz IBJ/Gc+kVH5ZMHKuP6kpqDXuwco1nCU0BJwm1sIrln0+1z92Zb+MpDqotRdc3JBg qh+kxkVPsJdXGdxIifWL8avDNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDIzkJrv whab7j0uFC5UpP56QtSEMB8GA1UdIwQYMBaAFIoaa6m7ds8rDe416kz9L1/4wInj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzZFRS9BOEMxQzg3QTE4 MDMxMUVBQkVDODJCNTZDNEY5QUUwMi9paHBycWJ0Mnp5c043alhxVFAwdlhfakFp ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2locHJxYnQyenlzTjdqWHFUUDB2WF9qQWllTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzZFRS9BOEMxQzg3QTE4MDMxMUVBQkVDODJCNTZDNEY5QUUwMi9paHBycWJ0Mnp5 c043alhxVFAwdlhfakFpZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAclUQ9ptW95dTpAFLV2Q1mWUFX/uAGQ5MP4p891fNGwE2dZxYZujKH SfnnJ8dkCMHAUTdXVS3hiZAIhQ5JkRiKBehSIfN92/STwhMMp+V5QczYhOU9Iafq kRJbpE0KCliGo30u1EWNS50T4HG8AB/QNn4kuO7I6Tz19R832h8v0RDE2N+Atzul f8+hlXli6FTpxqQYStKL1/gCjf5XAzbvVj/anCyOluEbX2fiSRsoJWlGF3Jh806M wr76263CcsLMgXk6COd3Jcclk/ifHAHnso8uNfUR/sRSePDZG+K6wG68N/p94yyh dqfRGz8Xudc/dyVCeWTpJ6nA32+AURUo -----END CERTIFICATE-----Generated at Sat May 4 21:19:31 2024 by rpki-client on console-ams.rpki-client.org