$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft File: k524p4YADCa65IN7bs2uD4q60bA.mft (raw, json) Hash identifier: nA174AdRMceCK5YKw0GVfG15rQOwreZpFsVkUSA7708= Subject key identifier: 16:53:9B:3F:FD:68:F6:67:0A:24:B5:C5:A7:67:8A:6F:AE:38:B8:9C Authority key identifier: 93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0 Certificate issuer: /CN=A91CDEB3/serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0 Certificate serial: 1806 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft Manifest number: 17EA Signing time: Thu 02 May 2024 17:02:32 +0000 Manifest this update: Thu 02 May 2024 17:02:32 +0000 Manifest next update: Thu 09 May 2024 17:02:32 +0000 Files and hashes: 1: k524p4YADCa65IN7bs2uD4q60bA.crl (hash: Q787YoS+j80eVJvvFAMxIoUcjMHurnqB/8XgygWyvKQ=) 2: 5705E30EFC7A11E8BFCC760AC4F9AE02.roa (hash: n97P+4V0tKPB5lzYkARlGRCQJJyVTdEeSb9i+z1QIAM=) 3: A6ACA298858911E88026B416C4F9AE02.roa (hash: Q2m770Vn+WGuanvd0RoTq0rdlgedJHaVYLneYgONfTA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 17:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6150 (0x1806) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDEB3/serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0 Validity Not Before: May 2 17:02:32 2024 GMT Not After : May 9 17:02:32 2024 GMT Subject: CN=6633c728-36c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:58:61:b0:89:d2:f7:57:90:42:ca:31:d1:6f: fe:ac:1e:58:84:9e:e2:97:b9:bf:fc:4b:d9:cf:eb: f8:9d:8f:ff:f3:3b:a7:c4:05:39:22:01:d1:dd:8c: 4a:9c:d9:2b:56:ec:dc:a4:fe:65:32:8e:45:14:17: 41:08:a4:30:b2:fe:25:76:3e:47:27:e8:58:d1:87: 75:fb:80:64:6b:ee:d4:77:b1:58:d0:04:42:dc:5f: ba:7b:66:96:80:7e:13:a3:62:bf:c2:3d:8e:a8:73: 29:82:4d:7f:53:d4:bb:f5:03:7f:4c:94:03:3c:0b: 9b:f0:b9:78:19:68:a9:33:fe:c0:16:5f:b5:e0:1c: 97:ad:30:32:da:f8:d2:69:4a:b1:df:d0:bf:51:24: 08:69:d0:1f:cd:bb:36:3f:75:90:b3:22:8a:83:94: 86:74:ef:a7:ba:44:9f:69:f8:c2:92:9d:6f:7f:f2: fa:fd:fb:b2:63:38:6e:60:a2:dc:d8:60:3d:8b:d1: c6:bb:ee:cf:bc:f5:34:14:ff:4b:1b:fe:3e:93:30: 2b:15:a6:7b:86:71:8d:3e:35:03:d2:c8:4a:48:54: 9c:2b:04:85:d3:87:5c:59:73:c6:ea:e3:49:de:0f: 86:e2:a2:6e:fc:f4:4c:1f:c9:8a:1c:54:d6:60:9a: 8c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:53:9B:3F:FD:68:F6:67:0A:24:B5:C5:A7:67:8A:6F:AE:38:B8:9C X509v3 Authority Key Identifier: keyid:93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:0e:65:90:f7:a6:e4:61:94:e3:bd:79:12:b7:b3:eb:08:83: 0b:96:cc:5e:e2:62:1d:ce:b7:17:7a:7e:54:02:2b:bd:8b:0c: 5f:69:9c:bc:a1:38:81:69:8f:6d:5e:e4:b5:8b:98:60:36:72: 9d:d4:68:39:80:7a:cc:b0:c9:b5:c4:26:e3:b7:a3:33:2a:d8: 01:d6:de:77:2c:b1:b2:39:d9:df:08:d5:05:b7:da:c1:05:3f: 45:17:64:5b:b1:68:82:0f:96:68:44:ad:8e:9f:55:68:83:0d: 16:a7:66:91:87:28:f9:72:50:aa:4d:71:32:00:5f:83:00:1c: 14:00:a4:bd:cd:63:b6:a2:65:3b:e4:e9:7d:97:c1:b5:31:17: 1c:7f:28:11:ea:4c:84:f0:6d:fa:4f:b7:f0:16:3b:b7:0f:aa: 5a:d1:17:b7:30:cb:f0:2a:ea:c6:14:4a:f0:a5:db:62:82:25: 18:3e:dc:4d:be:aa:bf:e6:41:19:1e:da:10:e3:5b:e0:8b:ec: d2:65:fd:dd:a8:5e:f7:6e:f9:7f:0d:eb:36:94:9c:be:e5:c8: 11:42:d1:24:33:c8:2e:8b:69:0e:f1:cd:fa:b9:8b:f4:b5:70: 1b:e0:bc:61:86:e7:35:24:0a:02:17:ee:3e:43:e6:27:84:49: bf:b2:e0:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RFQjMxMTAvBgNVBAUTKDkzOURCOEE3ODYwMDBDMjZCQUU0ODM3QjZFQ0RBRTBG OEFCQUQxQjAwHhcNMjQwNTAyMTcwMjMyWhcNMjQwNTA5MTcwMjMyWjAYMRYwFAYD VQQDEw02NjMzYzcyOC0zNmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVhhsInS91eQQsox0W/+rB5YhJ7il7m//EvZz+v4nY//8zunxAU5IgHR3YxK nNkrVuzcpP5lMo5FFBdBCKQwsv4ldj5HJ+hY0Yd1+4Bka+7Ud7FY0ARC3F+6e2aW gH4To2K/wj2OqHMpgk1/U9S79QN/TJQDPAub8Ll4GWipM/7AFl+14ByXrTAy2vjS aUqx39C/USQIadAfzbs2P3WQsyKKg5SGdO+nukSfafjCkp1vf/L6/fuyYzhuYKLc 2GA9i9HGu+7PvPU0FP9LG/4+kzArFaZ7hnGNPjUD0shKSFScKwSF04dcWXPG6uNJ 3g+G4qJu/PRMH8mKHFTWYJqMIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBZTmz/9 aPZnCiS1xadnim+uOLicMB8GA1UdIwQYMBaAFJOduKeGAAwmuuSDe27Nrg+KutGw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREVCMy81RDczNUQ0Njk2 REUxMUU3QkE3RDJBNzdDNEY5QUUwMi9rNTI0cDRZQURDYTY1SU43YnMydUQ0cTYw YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s1MjRwNFlBRENhNjVJTjdiczJ1RDRxNjBiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REVCMy81RDczNUQ0Njk2REUxMUU3QkE3RDJBNzdDNEY5QUUwMi9rNTI0cDRZQURD YTY1SU43YnMydUQ0cTYwYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoDmWQ96bkYZTjvXkSt7PrCIMLlsxe4mIdzrcXen5UAiu9iwxfaZy8 oTiBaY9tXuS1i5hgNnKd1Gg5gHrMsMm1xCbjt6MzKtgB1t53LLGyOdnfCNUFt9rB BT9FF2RbsWiCD5ZoRK2On1Vogw0Wp2aRhyj5clCqTXEyAF+DABwUAKS9zWO2omU7 5Ol9l8G1MRccfygR6kyE8G36T7fwFju3D6pa0Re3MMvwKurGFErwpdtigiUYPtxN vqq/5kEZHtoQ41vgi+zSZf3dqF73bvl/Des2lJy+5cgRQtEkM8gui2kO8c36uYv0 tXAb4Lxhhuc1JAoCF+4+Q+YnhEm/suDY -----END CERTIFICATE-----Generated at Thu May 2 20:04:59 2024 by rpki-client on console-ams.rpki-client.org