$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft File: a63X1dESgRLXCrSiRSQBQo-dCXs.mft (raw, json) Hash identifier: YAcymMEWWdN/7tvAceAvdNTc8HRl2TUbR+ffeuhzOYo= Subject key identifier: 15:1B:6B:09:C2:0A:0A:0C:5B:52:B8:53:57:1A:4A:5E:1C:97:72:45 Authority key identifier: 6B:AD:D7:D5:D1:12:81:12:D7:0A:B4:A2:45:24:01:42:8F:9D:09:7B Certificate issuer: /CN=A91CC86F/serialNumber=6BADD7D5D1128112D70AB4A2452401428F9D097B Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft Manifest number: AA Signing time: Wed 15 May 2024 06:46:17 +0000 Manifest this update: Wed 15 May 2024 06:46:16 +0000 Manifest next update: Wed 22 May 2024 06:46:16 +0000 Files and hashes: 1: a63X1dESgRLXCrSiRSQBQo-dCXs.crl (hash: NVH4IBuFbL2toMkfCU6mEt9Lqbk4sebvlAMj/LTrwVI=) 2: AE1747DE13FC11EEAD14AF35C4F9AE02.roa (hash: SjzQsiMXXUwMUhqxH4SbKSbTY6l2gMlc5UwMwdwZfmo=) 3: 96F5D26CFD5A11EEA0731E55C4F9AE02.roa (hash: h31OD+paHKVtmW9dd/XJwp4Tsen28jqaYSTZqjqvncg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.crl rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 06:46:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC86F/serialNumber=6BADD7D5D1128112D70AB4A2452401428F9D097B Validity Not Before: May 15 06:46:16 2024 GMT Not After : May 22 06:46:16 2024 GMT Subject: CN=66445a38-2e44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:16:43:b4:3a:6c:89:c2:66:22:8c:46:ab:f8: 51:8e:c0:36:64:6f:06:3b:1b:9c:28:14:64:72:2a: 9f:b5:c6:0b:a9:64:77:5a:a3:46:4c:1b:20:42:8e: 88:a0:8d:07:be:bf:8b:b8:80:0e:16:70:87:cf:24: 69:b4:55:c5:28:72:68:75:fa:40:3c:2e:ad:19:d9: f4:01:90:bc:c6:f8:29:13:80:49:58:b7:7a:69:74: a8:97:01:d0:74:15:ac:65:53:5d:8d:8a:d6:24:6b: de:37:a7:aa:80:7e:9d:ff:a7:29:4f:e0:8e:b6:62: 79:03:85:99:6b:1b:1a:fb:05:10:c8:6d:f8:3a:77: 44:9f:50:1f:f8:40:e5:b4:1e:fa:8f:6b:28:9a:7d: 0a:c0:81:26:d9:46:5e:bf:51:11:78:54:4f:4a:d2: e4:2d:3b:15:0c:7d:cf:02:40:ca:a1:13:e6:67:81: 37:e8:30:80:84:7f:42:58:73:25:45:69:65:3f:e9: 2e:27:65:6a:df:4d:c1:c2:68:a7:57:1e:ff:df:83: 8f:1b:dd:cd:39:16:fd:5b:11:f2:e5:9d:12:ac:2b: 3d:bd:7b:80:ff:0c:11:3a:0d:33:ec:b3:6d:19:c1: 1a:bc:05:59:c8:54:1a:09:1d:8f:16:bc:4e:96:16: 85:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:1B:6B:09:C2:0A:0A:0C:5B:52:B8:53:57:1A:4A:5E:1C:97:72:45 X509v3 Authority Key Identifier: keyid:6B:AD:D7:D5:D1:12:81:12:D7:0A:B4:A2:45:24:01:42:8F:9D:09:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:cc:72:24:b2:2c:9d:59:3a:a2:2a:1f:41:31:c9:25:86:08: 46:59:6f:81:5b:5d:86:d2:fd:2b:86:b6:46:ab:1d:38:07:61: 7c:ea:36:2b:5c:e5:15:2e:da:d3:bc:49:0e:a8:81:50:61:b6: 1c:96:fd:aa:53:ac:db:e9:78:25:2c:c8:fe:75:59:c6:7a:ca: 38:ce:7c:ad:05:79:7e:98:37:d6:d1:14:6d:62:2c:a5:bc:65: 19:bf:f8:13:64:37:f7:ee:4e:2c:13:3d:2f:1e:22:c7:6e:29: 7a:65:87:a1:75:bf:2b:7a:b6:af:ef:2b:fe:19:5f:90:88:03: 54:14:37:83:ff:32:e5:35:06:fd:a3:82:08:c3:e2:10:8c:e6: 6d:a1:b4:92:d4:43:d0:62:65:45:ca:25:04:c9:61:c2:bc:a9: 25:91:7a:90:6c:fd:89:c0:8a:6b:10:1d:be:ea:34:75:a0:af: 88:3c:6a:f3:a0:29:71:24:ba:26:68:e1:78:ba:7f:3d:2b:4f: c2:1b:c1:e5:ed:39:7e:00:36:a6:b2:9c:87:51:74:e2:7e:d2: be:2c:6f:fc:7e:aa:5f:9b:cb:cd:a3:55:64:81:0e:c1:59:b8: f4:bc:9a:61:ee:7e:35:6c:3d:4e:88:0c:02:4f:de:9d:63:55: f7:b3:bc:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M4NkYxMTAvBgNVBAUTKDZCQUREN0Q1RDExMjgxMTJENzBBQjRBMjQ1MjQwMTQy OEY5RDA5N0IwHhcNMjQwNTE1MDY0NjE2WhcNMjQwNTIyMDY0NjE2WjAYMRYwFAYD VQQDEw02NjQ0NWEzOC0yZTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1RZDtDpsicJmIoxGq/hRjsA2ZG8GOxucKBRkciqftcYLqWR3WqNGTBsgQo6I oI0Hvr+LuIAOFnCHzyRptFXFKHJodfpAPC6tGdn0AZC8xvgpE4BJWLd6aXSolwHQ dBWsZVNdjYrWJGveN6eqgH6d/6cpT+COtmJ5A4WZaxsa+wUQyG34OndEn1Af+EDl tB76j2somn0KwIEm2UZev1EReFRPStLkLTsVDH3PAkDKoRPmZ4E36DCAhH9CWHMl RWllP+kuJ2Vq303BwminVx7/34OPG93NORb9WxHy5Z0SrCs9vXuA/wwROg0z7LNt GcEavAVZyFQaCR2PFrxOlhaFKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBUbawnC CgoMW1K4U1caSl4cl3JFMB8GA1UdIwQYMBaAFGut19XREoES1wq0okUkAUKPnQl7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzg2Ri80N0JBMjhBRTEz RjYxMUVFOTI1RjBBMzZDNEY5QUUwMi9hNjNYMWRFU2dSTFhDclNpUlNRQlFvLWRD WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E2M1gxZEVTZ1JMWENyU2lSU1FCUW8tZENYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Qzg2Ri80N0JBMjhBRTEzRjYxMUVFOTI1RjBBMzZDNEY5QUUwMi9hNjNYMWRFU2dS TFhDclNpUlNRQlFvLWRDWHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBszHIksiydWTqiKh9BMcklhghGWW+BW12G0v0rhrZGqx04B2F86jYr XOUVLtrTvEkOqIFQYbYclv2qU6zb6XglLMj+dVnGeso4znytBXl+mDfW0RRtYiyl vGUZv/gTZDf37k4sEz0vHiLHbil6ZYehdb8rerav7yv+GV+QiANUFDeD/zLlNQb9 o4IIw+IQjOZtobSS1EPQYmVFyiUEyWHCvKklkXqQbP2JwIprEB2+6jR1oK+IPGrz oClxJLomaOF4un89K0/CG8Hl7Tl+ADamspyHUXTiftK+LG/8fqpfm8vNo1VkgQ7B Wbj0vJph7n41bD1OiAwCT96dY1X3s7w4 -----END CERTIFICATE-----Generated at Wed May 15 09:04:45 2024 by rpki-client on console-ams.rpki-client.org