$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft File: 0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft (raw, json) Hash identifier: pza9uCfNUWemGWJHtZ7nEto21t4Irm5NJQSSzBXhYjM= Subject key identifier: D1:16:DE:E6:6A:47:9F:F4:2E:50:29:B3:62:05:12:91:40:82:11:FE Authority key identifier: D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0 Certificate issuer: /CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0 Certificate serial: 0877 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft Manifest number: 083E Signing time: Sat 04 May 2024 22:01:17 +0000 Manifest this update: Sat 04 May 2024 22:01:17 +0000 Manifest next update: Sat 11 May 2024 22:01:17 +0000 Files and hashes: 1: 0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl (hash: knTvjtWpeaXJ7wUHUP+bFevVWSyN/a9uredTj3c17zs=) 2: 880A2B1EB26D11EEB1ADB21AC4F9AE02.roa (hash: KNHIPapW/T943NvxPhbFGmjSj7sAOJx3G4aK6MQoMc4=) 3: 5CF2A18AF35511EEA1F4093DC4F9AE02.roa (hash: T7ygfSSW9BQAXeUj5M4AbhaK0F8epK7W7c+74y0YkhU=) 4: 092420B8CCE211EE8A4B3130C4F9AE02.roa (hash: kBDg0zIX8kcCrBfvjQ2DhtqnT0zOKjXNLDjYx84C1Go=) 5: 51B031C80E8D11EE89A0B128C4F9AE02.roa (hash: TjvAc6jpZ9U97nYJG6DnvYohT4lBnpgp5Lc+Qvz205I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2167 (0x877) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0 Validity Not Before: May 4 22:01:17 2024 GMT Not After : May 11 22:01:17 2024 GMT Subject: CN=6636b02d-0c4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:70:ff:8c:49:7a:ed:87:b1:57:fb:ec:6f:5b: 13:4e:4a:83:2d:7a:97:ed:a1:55:b6:ab:c7:f2:ac: 4e:21:2b:bb:5d:3e:82:fd:53:fb:d9:74:71:82:85: d8:e6:a8:91:df:d8:36:b0:c3:a2:69:51:aa:22:02: a6:25:e5:3b:60:f2:02:30:17:a2:9e:06:da:7b:5d: ea:7f:65:34:37:f2:9c:69:ef:6f:8b:54:58:9e:20: b1:e2:e0:c4:d4:5d:9e:36:2c:6c:56:7b:ea:b6:f8: 90:d5:11:36:9c:02:ed:5b:86:49:10:1e:e7:6c:25: c1:dd:f3:1d:ac:4d:a9:9a:b3:da:23:8e:4f:ba:ed: eb:61:28:58:fd:88:8f:40:3b:03:53:e2:1a:34:68: 67:f4:87:c8:e8:71:37:76:a3:e5:b5:e9:a7:ba:83: 17:5e:67:37:e5:ca:6c:48:e1:0d:7e:09:07:8a:12: 09:3d:c1:35:fa:7e:23:ec:0b:81:a5:d5:c8:7d:a0: aa:95:25:7e:da:aa:39:53:b9:fd:9c:db:e5:c9:cc: 07:6e:5d:df:d0:f2:3d:25:7e:9d:94:b8:ff:65:81: a8:8c:c9:e5:1a:8b:a2:39:39:79:fc:68:39:68:47: da:c3:b7:74:c4:54:1a:d4:3b:db:40:16:e0:8e:76: 59:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:16:DE:E6:6A:47:9F:F4:2E:50:29:B3:62:05:12:91:40:82:11:FE X509v3 Authority Key Identifier: keyid:D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:2c:45:e7:5b:46:cb:62:b7:7a:93:4a:d4:c0:09:82:bb:36: dc:06:38:4c:04:bc:be:7a:fc:f9:be:d8:8f:b9:5d:67:7e:8b: 28:91:9d:49:f9:6f:fd:be:10:98:28:5c:ed:e6:39:c2:cb:0e: a2:20:0b:19:65:d3:d2:a3:4c:71:c1:a1:dc:14:1b:5d:00:fe: a6:fd:b8:3a:de:6d:de:b4:b5:37:d3:8a:17:3e:85:12:6a:6d: d8:3d:9e:8f:53:97:74:a0:c1:37:9d:bb:8e:31:f2:8c:9f:44: ea:49:b9:5f:8a:24:e8:1d:e2:a8:b9:3f:34:2d:7e:06:53:d8: 37:08:63:3a:c9:b4:a0:91:cc:f2:79:cc:aa:c7:c4:35:ab:3e: 1e:3e:21:b1:f4:a8:36:4b:84:aa:9b:5a:b2:9e:f2:31:37:30: 7a:17:74:35:56:2a:e0:67:91:96:8d:4f:e6:d5:5b:02:67:43: f2:62:3b:0b:c1:3c:e0:77:5a:df:01:04:b9:0d:ea:61:d7:79: 76:3f:8e:4f:fe:b6:db:44:e0:47:89:a6:2a:25:4d:e9:43:5e: 24:8f:73:fa:5e:0b:f9:f5:be:9f:54:ee:e2:2f:0f:f2:cc:23: 76:9a:bf:2b:03:a2:a4:ce:79:ba:8f:be:15:2b:ad:02:98:ee: ef:f5:f8:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhGMjcxMTAvBgNVBAUTKEQxQTM2Q0Q4RUQyMzU1MDgyNzYxQTNEQjEzRUREMzBE RkRBMkNGRDAwHhcNMjQwNTA0MjIwMTE3WhcNMjQwNTExMjIwMTE3WjAYMRYwFAYD VQQDEw02NjM2YjAyZC0wYzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArHD/jEl67YexV/vsb1sTTkqDLXqX7aFVtqvH8qxOISu7XT6C/VP72XRxgoXY 5qiR39g2sMOiaVGqIgKmJeU7YPICMBeingbae13qf2U0N/Kcae9vi1RYniCx4uDE 1F2eNixsVnvqtviQ1RE2nALtW4ZJEB7nbCXB3fMdrE2pmrPaI45Puu3rYShY/YiP QDsDU+IaNGhn9IfI6HE3dqPltemnuoMXXmc35cpsSOENfgkHihIJPcE1+n4j7AuB pdXIfaCqlSV+2qo5U7n9nNvlycwHbl3f0PI9JX6dlLj/ZYGojMnlGouiOTl5/Gg5 aEfaw7d0xFQa1DvbQBbgjnZZawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNEW3uZq R5/0LlAps2IFEpFAghH+MB8GA1UdIwQYMBaAFNGjbNjtI1UIJ2Gj2xPt0w39os/Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEYyNy83RjUyMjlBOEIw OTIxMUVBQjVEQkVDNThDNEY5QUUwMi8wYU5zMk8walZRZ25ZYVBiRS0zVERmMml6 OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBhTnMyTzBqVlFnbllhUGJFLTNURGYyaXo5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEYyNy83RjUyMjlBOEIwOTIxMUVBQjVEQkVDNThDNEY5QUUwMi8wYU5zMk8walZR Z25ZYVBiRS0zVERmMml6OUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLLEXnW0bLYrd6k0rUwAmCuzbcBjhMBLy+evz5vtiPuV1nfosokZ1J +W/9vhCYKFzt5jnCyw6iIAsZZdPSo0xxwaHcFBtdAP6m/bg63m3etLU304oXPoUS am3YPZ6PU5d0oME3nbuOMfKMn0TqSblfiiToHeKouT80LX4GU9g3CGM6ybSgkczy ecyqx8Q1qz4ePiGx9Kg2S4Sqm1qynvIxNzB6F3Q1VirgZ5GWjU/m1VsCZ0PyYjsL wTzgd1rfAQS5Deph13l2P45P/rbbROBHiaYqJU3pQ14kj3P6Xgv59b6fVO7iLw/y zCN2mr8rA6Kkznm6j74VK60CmO7v9fgV -----END CERTIFICATE-----Generated at Sun May 5 00:14:45 2024 by rpki-client on console-ams.rpki-client.org