$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft File: ABXboDjLzLFS7RcROqCo1ddIjSE.mft (raw, json) Hash identifier: VnKI/ljE4GuKEPfwjiuYqIIJeFncpSswhzIXPDAmgp0= Subject key identifier: 4C:7C:55:35:A1:ED:0B:BA:44:1B:D8:86:15:80:D2:FE:12:28:ED:2E Authority key identifier: 00:15:DB:A0:38:CB:CC:B1:52:ED:17:11:3A:A0:A8:D5:D7:48:8D:21 Certificate issuer: /CN=A91CC564/serialNumber=0015DBA038CBCCB152ED17113AA0A8D5D7488D21 Certificate serial: 07AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft Manifest number: 07A9 Signing time: Thu 02 May 2024 22:15:52 +0000 Manifest this update: Thu 02 May 2024 22:15:52 +0000 Manifest next update: Thu 09 May 2024 22:15:52 +0000 Files and hashes: 1: ABXboDjLzLFS7RcROqCo1ddIjSE.crl (hash: j3/sr6thl9oF5ETrP4FH0fPTnjmbSOTpUQiH9ck38CU=) 2: 74CCA13ADBE811EA8D063B7DC4F9AE02.roa (hash: s+fxG626O565z30xIKSf6zC0kXOgcLRjsTejlwJYpnk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.crl rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:15:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1966 (0x7ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC564/serialNumber=0015DBA038CBCCB152ED17113AA0A8D5D7488D21 Validity Not Before: May 2 22:15:52 2024 GMT Not After : May 9 22:15:52 2024 GMT Subject: CN=66341098-7322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4c:8c:74:e8:bd:89:64:f1:49:6f:96:17:2b: 8c:0e:b7:70:c0:af:c4:67:cf:71:24:75:1f:2a:cb: d4:9f:28:4b:9a:26:2f:7d:c9:a3:a5:62:47:8a:2c: 95:b3:41:53:1d:31:81:73:0a:2c:ab:90:4a:82:e0: 58:6b:8a:df:ae:de:58:40:c3:0e:11:66:71:fb:d3: c6:00:60:07:b1:5d:3d:41:23:3b:36:b6:57:59:a1: 2c:e7:29:b2:6c:8c:0c:5e:88:df:9b:f4:32:6c:b4: 95:cd:af:54:82:c4:3d:d0:66:bc:d1:78:ee:88:48: 13:16:61:37:63:9e:95:2a:8d:be:bc:9c:99:83:aa: 18:9b:e7:8d:91:c8:43:98:8c:ba:ac:10:38:21:49: 19:8b:72:75:e2:b6:d8:cc:0e:6c:20:79:af:97:08: 31:5c:ad:0f:7d:19:03:8c:d6:60:78:fd:91:cf:1f: 4f:6b:95:7d:d9:d9:b7:94:f5:35:25:c6:c7:eb:5f: 9a:99:f3:ad:39:f2:a6:70:93:7e:c0:b6:b4:55:f0: b9:9b:aa:82:c5:e4:75:56:b0:7a:09:43:33:2b:fb: 19:54:ba:2f:3b:d1:82:8b:37:3b:7c:f8:51:25:44: 7e:46:94:78:60:ef:6c:c7:6e:fd:da:ce:57:93:90: e9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:7C:55:35:A1:ED:0B:BA:44:1B:D8:86:15:80:D2:FE:12:28:ED:2E X509v3 Authority Key Identifier: keyid:00:15:DB:A0:38:CB:CC:B1:52:ED:17:11:3A:A0:A8:D5:D7:48:8D:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:a9:70:fd:ab:be:4b:a0:5d:94:35:e7:3c:67:b1:f2:2c:f8: 5b:30:db:ee:8d:0b:d3:07:30:c6:26:51:69:58:bf:86:e6:a0: 8b:79:3d:73:9e:39:50:ba:d6:c8:d4:06:8f:e2:ae:54:23:4a: f6:54:76:5f:ec:aa:ba:18:51:bb:08:7d:d2:38:85:d5:5f:ae: 66:57:3a:7d:4f:11:6b:24:6c:42:8b:8d:a4:b2:10:02:af:c7: 07:30:c7:d6:e1:b7:34:55:f7:56:c8:e0:43:c5:0e:7a:1b:b0: 2a:56:eb:43:c1:84:66:92:cd:bc:10:28:a0:ec:2b:73:ed:17: 95:ca:4d:c3:dc:35:c9:e9:23:1e:16:58:97:9f:04:89:cd:92: 8e:0e:7d:0e:24:13:91:23:85:45:ad:81:cf:f9:51:56:2d:76: f3:73:93:58:6b:a5:69:63:64:16:00:4d:c3:85:d9:ec:a7:ff: ed:11:3a:73:6c:2f:4b:f8:f1:2d:7b:c5:a2:b0:3e:7e:51:0c: 24:3c:44:85:a6:a5:bf:b2:0e:e0:02:97:f6:6f:de:4f:56:96: 96:41:8d:76:a1:a1:b4:a8:fe:cd:30:4d:89:67:21:4e:0a:4a: 90:b3:57:26:0e:50:d0:b8:9f:70:50:d7:06:00:b8:f4:c0:4f: 06:67:64:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M1NjQxMTAvBgNVBAUTKDAwMTVEQkEwMzhDQkNDQjE1MkVEMTcxMTNBQTBBOEQ1 RDc0ODhEMjEwHhcNMjQwNTAyMjIxNTUyWhcNMjQwNTA5MjIxNTUyWjAYMRYwFAYD VQQDEw02NjM0MTA5OC03MzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyEyMdOi9iWTxSW+WFyuMDrdwwK/EZ89xJHUfKsvUnyhLmiYvfcmjpWJHiiyV s0FTHTGBcwosq5BKguBYa4rfrt5YQMMOEWZx+9PGAGAHsV09QSM7NrZXWaEs5ymy bIwMXojfm/QybLSVza9UgsQ90Ga80XjuiEgTFmE3Y56VKo2+vJyZg6oYm+eNkchD mIy6rBA4IUkZi3J14rbYzA5sIHmvlwgxXK0PfRkDjNZgeP2Rzx9Pa5V92dm3lPU1 JcbH61+amfOtOfKmcJN+wLa0VfC5m6qCxeR1VrB6CUMzK/sZVLovO9GCizc7fPhR JUR+RpR4YO9sx2792s5Xk5DptwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEx8VTWh 7Qu6RBvYhhWA0v4SKO0uMB8GA1UdIwQYMBaAFAAV26A4y8yxUu0XETqgqNXXSI0h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzU2NC80RjI5RDBDNEM0 MEYxMUVBOUMxNUI0NzBDNEY5QUUwMi9BQlhib0RqTHpMRlM3UmNST3FDbzFkZElq U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FCWGJvRGpMekxGUzdSY1JPcUNvMWRkSWpTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzU2NC80RjI5RDBDNEM0MEYxMUVBOUMxNUI0NzBDNEY5QUUwMi9BQlhib0RqTHpM RlM3UmNST3FDbzFkZElqU0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0qXD9q75LoF2UNec8Z7HyLPhbMNvujQvTBzDGJlFpWL+G5qCLeT1z njlQutbI1AaP4q5UI0r2VHZf7Kq6GFG7CH3SOIXVX65mVzp9TxFrJGxCi42kshAC r8cHMMfW4bc0VfdWyOBDxQ56G7AqVutDwYRmks28ECig7Ctz7ReVyk3D3DXJ6SMe FliXnwSJzZKODn0OJBORI4VFrYHP+VFWLXbzc5NYa6VpY2QWAE3Dhdnsp//tETpz bC9L+PEte8WisD5+UQwkPESFpqW/sg7gApf2b95PVpaWQY12oaG0qP7NME2JZyFO CkqQs1cmDlDQuJ9wUNcGALj0wE8GZ2Qu -----END CERTIFICATE-----Generated at Thu May 2 23:19:03 2024 by rpki-client on console-ams.rpki-client.org