$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft File: AJko8LjNMO2gVjCoumdOdiqdKDM.mft (raw, json) Hash identifier: Gytz0NLN09HN5jk1FvvRrwwmYZ1mzyHxiooaw7U0XSs= Subject key identifier: FB:1B:A9:91:96:01:2E:F2:7C:A3:F9:3F:CC:CB:A5:22:07:A2:49:60 Authority key identifier: 00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33 Certificate issuer: /CN=A91CE5A6/serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833 Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft Manifest number: 7B Signing time: Wed 15 May 2024 07:24:00 +0000 Manifest this update: Wed 15 May 2024 07:24:00 +0000 Manifest next update: Wed 22 May 2024 07:24:00 +0000 Files and hashes: 1: AJko8LjNMO2gVjCoumdOdiqdKDM.crl (hash: izaW8E1s7OOO4PoHbvLKiaBta0KCy0ps0QN2o9YIen8=) 2: EC56413A5B4B11EE9A031C81C4F9AE02.roa (hash: Hh0/f6NytDdeyTGJ1ZKz3ERIyV3jDbMOhWYWKs/vNpU=) 3: 7022F6EE5B4611EE9093F11EC4F9AE02.roa (hash: e0200w8zEsZ5WKCdPwZ5CedunKufXXzWVfu8693DHy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:23:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE5A6/serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833 Validity Not Before: May 15 07:24:00 2024 GMT Not After : May 22 07:24:00 2024 GMT Subject: CN=66446310-b834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:66:c0:2a:e8:94:09:d5:c2:99:86:64:89:a1: 0f:38:21:03:da:0f:49:19:bd:24:0a:af:49:79:7b: ef:32:52:e3:fe:7e:89:61:d2:0a:ed:e4:ef:ac:ea: 6e:9c:8d:ef:e3:e2:4b:8d:b4:79:bf:41:00:95:9a: 84:b5:1c:50:6e:6a:83:36:8e:c9:10:c7:fa:6d:2c: 53:2b:31:12:be:e4:32:df:a1:1d:46:0c:20:48:d8: 40:6e:c1:0c:15:b9:51:7b:40:06:4f:60:8c:55:84: 99:3c:98:66:b0:b0:15:ac:af:12:a3:de:2f:1c:b2: d1:0e:54:b8:06:34:b3:ab:29:a1:b3:17:fa:35:9e: ed:46:ce:0f:f7:b2:61:4b:06:a8:ba:c8:3b:e1:3f: 70:d6:c4:c3:fc:f3:d6:c0:98:f3:2a:8e:12:6f:20: a5:40:93:13:a4:07:2f:24:7a:ba:c5:da:6f:f0:96: 6e:b2:66:5a:db:c5:6a:71:2e:6b:50:c5:1b:0e:35: 1e:c7:5f:17:0f:c6:e7:21:5b:57:c7:e5:c6:43:50: 8c:87:ca:b8:d9:64:96:e4:db:16:f9:d6:f7:42:96: b5:a1:17:4a:34:62:30:d4:6f:6e:6f:40:fc:97:8e: 89:04:4a:48:75:dd:ba:53:c6:2e:f6:08:89:48:17: a0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:1B:A9:91:96:01:2E:F2:7C:A3:F9:3F:CC:CB:A5:22:07:A2:49:60 X509v3 Authority Key Identifier: keyid:00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:35:38:df:7f:a4:07:ec:ed:c6:2e:ef:f6:1c:8a:ba:a5:b4: 75:e3:6b:9c:a2:37:61:c7:89:82:db:31:7d:d7:a0:9e:5f:86: 72:24:86:19:dd:d0:2e:47:8a:ed:24:e8:c2:59:a9:a1:e3:df: 40:33:c0:8e:8d:ac:6d:f2:77:b0:84:ac:87:8d:b3:85:dd:cb: 4d:0c:db:37:aa:91:72:a3:10:9c:db:86:90:df:d2:26:59:f9: d9:eb:67:87:96:39:b3:38:59:0a:a1:0a:f5:f2:83:e3:e2:45: cb:27:e3:d1:54:8c:10:94:3f:2a:c6:3e:05:d1:63:94:64:c0: 4c:3c:f0:84:3c:24:10:db:53:8d:0e:13:1d:c3:0e:c1:d8:c7: b6:44:e6:1e:7b:44:41:4e:47:b8:c6:76:4e:7a:68:e7:ac:39: fe:ca:59:53:e7:3f:4d:a5:2b:06:ba:9d:74:2c:71:38:5e:5a: 3e:be:da:4c:0b:64:f1:02:a4:e3:23:83:d7:e8:66:01:9b:a4: 67:18:e8:b8:9f:de:8c:ec:e2:cb:83:12:bc:21:d9:de:69:ce: c7:c7:c0:53:be:fc:18:bc:da:70:af:8f:89:1f:1d:42:8a:94: b8:85:2d:86:11:3a:e5:91:71:fe:5f:11:50:e9:ff:41:ad:05: d4:74:43:08 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RTVBNjExMC8GA1UEBRMoMDA5OTI4RjBCOENEMzBFREEwNTYzMEE4QkE2NzRFNzYy QTlEMjgzMzAeFw0yNDA1MTUwNzI0MDBaFw0yNDA1MjIwNzI0MDBaMBgxFjAUBgNV BAMTDTY2NDQ2MzEwLWI4MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkZsAq6JQJ1cKZhmSJoQ84IQPaD0kZvSQKr0l5e+8yUuP+folh0grt5O+s6m6c je/j4kuNtHm/QQCVmoS1HFBuaoM2jskQx/ptLFMrMRK+5DLfoR1GDCBI2EBuwQwV uVF7QAZPYIxVhJk8mGawsBWsrxKj3i8cstEOVLgGNLOrKaGzF/o1nu1Gzg/3smFL Bqi6yDvhP3DWxMP889bAmPMqjhJvIKVAkxOkBy8kerrF2m/wlm6yZlrbxWpxLmtQ xRsONR7HXxcPxuchW1fH5cZDUIyHyrjZZJbk2xb51vdClrWhF0o0YjDUb25vQPyX jokESkh13bpTxi72CIlIF6D1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+xupkZYB LvJ8o/k/zMulIgeiSWAwHwYDVR0jBBgwFoAUAJko8LjNMO2gVjCoumdOdiqdKDMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFNUE2L0IzNzQ5NzEwNUIz RjExRUU4RjFEM0Q2RUM0RjlBRTAyL0FKa284TGpOTU8yZ1ZqQ291bWRPZGlxZEtE TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQUprbzhMak5NTzJnVmpDb3VtZE9kaXFkS0RNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF NUE2L0IzNzQ5NzEwNUIzRjExRUU4RjFEM0Q2RUM0RjlBRTAyL0FKa284TGpOTU8y Z1ZqQ291bWRPZGlxZEtETS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADU1ON9/pAfs7cYu7/YcirqltHXja5yiN2HHiYLbMX3XoJ5fhnIkhhnd 0C5Hiu0k6MJZqaHj30AzwI6NrG3yd7CErIeNs4Xdy00M2zeqkXKjEJzbhpDf0iZZ +dnrZ4eWObM4WQqhCvXyg+PiRcsn49FUjBCUPyrGPgXRY5RkwEw88IQ8JBDbU40O Ex3DDsHYx7ZE5h57REFOR7jGdk56aOesOf7KWVPnP02lKwa6nXQscTheWj6+2kwL ZPECpOMjg9foZgGbpGcY6Lif3ozs4suDErwh2d5pzsfHwFO+/Bi82nCvj4kfHUKK lLiFLYYROuWRcf5fEVDp/0GtBdR0Qwg= -----END CERTIFICATE-----Generated at Wed May 15 09:04:45 2024 by rpki-client on console-ams.rpki-client.org