$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.mft File: U05nXomsmsMC9TCid1KM-Bo8UwY.mft (raw, json) Hash identifier: bqAwlXXLyZyecOYF/KSa8ock+MB4vVBt1PPaaTn7we4= Subject key identifier: 23:C7:B9:11:0C:09:82:64:15:86:90:06:B5:FF:D8:56:60:6E:AB:E6 Authority key identifier: 53:4E:67:5E:89:AC:9A:C3:02:F5:30:A2:77:52:8C:F8:1A:3C:53:06 Certificate issuer: /CN=A91CC1EB/serialNumber=534E675E89AC9AC302F530A277528CF81A3C5306 Certificate serial: 04DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U05nXomsmsMC9TCid1KM-Bo8UwY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.mft Manifest number: 04CD Signing time: Fri 03 May 2024 01:37:19 +0000 Manifest this update: Fri 03 May 2024 01:37:18 +0000 Manifest next update: Fri 10 May 2024 01:37:18 +0000 Files and hashes: 1: U05nXomsmsMC9TCid1KM-Bo8UwY.crl (hash: lrkD62z3D5jggu2ZEgKqK0qfzDbBrDh/kt/Vhe893/s=) 2: 5C0006B4E1B711EEA6D7F740C4F9AE02.roa (hash: uD0SlFN84GC2MoE4vVvfp4yng005Xq5iK1CMSLwmVKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.crl rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U05nXomsmsMC9TCid1KM-Bo8UwY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1247 (0x4df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC1EB/serialNumber=534E675E89AC9AC302F530A277528CF81A3C5306 Validity Not Before: May 3 01:37:18 2024 GMT Not After : May 10 01:37:18 2024 GMT Subject: CN=66343fce-49e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:4a:34:b2:b8:ff:c3:b5:f3:d5:ad:da:1f:7b: d0:01:51:26:df:11:39:97:4c:17:30:84:80:6f:33: ec:16:aa:67:02:4b:73:84:4d:f0:21:f3:cd:89:97: b1:6f:ea:7c:b9:b8:4a:93:e1:6b:2f:05:91:f9:85: 8b:1f:a0:01:d8:af:92:a6:1d:fb:ec:ed:bb:1d:12: a4:95:aa:93:89:e5:45:24:18:21:07:66:2d:c9:25: fe:99:4d:f7:d3:3a:3f:b9:6f:37:8a:33:f3:1f:79: f5:6e:75:7a:df:6a:4e:f9:7e:fa:8e:e1:1c:e9:28: a4:07:a3:4f:2e:13:bc:0e:99:51:0d:a1:3d:f7:21: 2e:41:ee:bf:75:3a:f3:db:08:de:7d:39:d2:43:e8: 31:18:cd:40:6a:6e:61:ce:cb:b1:6a:24:ae:2a:a3: 9f:f5:1a:55:95:c1:3e:5e:7d:58:fe:5e:04:f4:e1: 17:49:b0:7f:c0:4d:29:3a:e8:f1:96:c0:f3:4c:1d: 8c:e7:b3:c2:4d:67:c9:c8:c5:9a:d1:6a:f0:39:ce: 61:22:2d:67:6e:82:b9:a7:3b:54:63:3c:55:9f:c6: 3d:af:84:39:8b:2e:5c:79:a0:80:73:04:ce:c8:16: 42:41:90:b8:a1:38:54:da:18:0a:08:bc:77:21:15: 92:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C7:B9:11:0C:09:82:64:15:86:90:06:B5:FF:D8:56:60:6E:AB:E6 X509v3 Authority Key Identifier: keyid:53:4E:67:5E:89:AC:9A:C3:02:F5:30:A2:77:52:8C:F8:1A:3C:53:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U05nXomsmsMC9TCid1KM-Bo8UwY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ce:d6:9c:58:a0:72:ec:3d:09:8e:08:62:d6:1d:85:bc:f6: 31:df:a0:db:fa:1c:62:aa:0d:2e:ec:5a:f6:2d:42:4e:2c:7a: a4:7e:5c:b1:3b:c2:bd:42:49:a4:ad:0a:d1:91:e0:95:a2:2e: 12:13:b7:43:ef:10:94:eb:82:60:91:a4:31:fa:40:15:05:84: 98:2a:9a:b3:2b:a7:64:95:5d:55:d9:f0:bc:0e:5c:a2:c9:ee: 17:08:76:6a:99:10:7b:65:60:57:18:24:38:34:ac:bd:2f:47: a9:09:8a:97:17:c1:21:74:7a:87:1d:59:27:08:4a:d3:db:41: ba:18:b9:1e:94:c3:b4:18:9f:cc:4f:ce:e4:86:93:15:65:15: 8f:3f:2f:4d:00:45:de:b2:c4:12:21:a4:9b:63:92:07:ff:7a: 95:d9:3a:94:5e:7d:bf:e0:2f:24:ba:57:a5:a9:9e:f7:cd:90: 9e:f8:76:16:12:39:7e:4f:d9:79:a7:ec:08:61:25:cf:ff:43: f2:46:78:83:22:56:43:c5:27:31:3a:c8:a6:28:b7:e8:6d:53: fb:20:b3:70:a8:08:40:de:63:c6:ee:6b:50:45:a5:86:da:46: 55:49:fd:d5:21:2b:e6:ec:f2:23:ad:4f:27:33:00:34:7e:36: 46:1f:70:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0MxRUIxMTAvBgNVBAUTKDUzNEU2NzVFODlBQzlBQzMwMkY1MzBBMjc3NTI4Q0Y4 MUEzQzUzMDYwHhcNMjQwNTAzMDEzNzE4WhcNMjQwNTEwMDEzNzE4WjAYMRYwFAYD VQQDEw02NjM0M2ZjZS00OWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA80o0srj/w7Xz1a3aH3vQAVEm3xE5l0wXMISAbzPsFqpnAktzhE3wIfPNiZex b+p8ubhKk+FrLwWR+YWLH6AB2K+Sph377O27HRKklaqTieVFJBghB2YtySX+mU33 0zo/uW83ijPzH3n1bnV632pO+X76juEc6SikB6NPLhO8DplRDaE99yEuQe6/dTrz 2wjefTnSQ+gxGM1Aam5hzsuxaiSuKqOf9RpVlcE+Xn1Y/l4E9OEXSbB/wE0pOujx lsDzTB2M57PCTWfJyMWa0WrwOc5hIi1nboK5pztUYzxVn8Y9r4Q5iy5ceaCAcwTO yBZCQZC4oThU2hgKCLx3IRWSjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCPHuREM CYJkFYaQBrX/2FZgbqvmMB8GA1UdIwQYMBaAFFNOZ16JrJrDAvUwondSjPgaPFMG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzFFQi9BQzM4NEFBNkRE ODIxMUVCOTU4RDFDMzBDNEY5QUUwMi9VMDVuWG9tc21zTUM5VENpZDFLTS1CbzhV d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UwNW5Yb21zbXNNQzlUQ2lkMUtNLUJvOFV3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzFFQi9BQzM4NEFBNkREODIxMUVCOTU4RDFDMzBDNEY5QUUwMi9VMDVuWG9tc21z TUM5VENpZDFLTS1CbzhVd1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8ztacWKBy7D0Jjghi1h2FvPYx36Db+hxiqg0u7Fr2LUJOLHqkflyx O8K9QkmkrQrRkeCVoi4SE7dD7xCU64JgkaQx+kAVBYSYKpqzK6dklV1V2fC8Dlyi ye4XCHZqmRB7ZWBXGCQ4NKy9L0epCYqXF8EhdHqHHVknCErT20G6GLkelMO0GJ/M T87khpMVZRWPPy9NAEXessQSIaSbY5IH/3qV2TqUXn2/4C8kulelqZ73zZCe+HYW Ejl+T9l5p+wIYSXP/0PyRniDIlZDxScxOsimKLfobVP7ILNwqAhA3mPG7mtQRaWG 2kZVSf3VISvm7PIjrU8nMwA0fjZGH3C8 -----END CERTIFICATE-----Generated at Fri May 3 03:10:56 2024 by rpki-client on console-ams.rpki-client.org