$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft File: SokSJxJpPqAI66ehAaxiJpX67CQ.mft (raw, json) Hash identifier: gf1o/dx0XWSStAiw+S+EgcK+vMHo8CFCOFQn9sfuLQQ= Subject key identifier: 8E:E0:A2:58:BA:DB:22:28:37:12:9A:E3:18:FA:F1:5A:C8:F2:3F:E9 Authority key identifier: 4A:89:12:27:12:69:3E:A0:08:EB:A7:A1:01:AC:62:26:95:FA:EC:24 Certificate issuer: /CN=A91CEF20/serialNumber=4A89122712693EA008EBA7A101AC622695FAEC24 Certificate serial: 039E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft Manifest number: 0398 Signing time: Sat 27 Apr 2024 02:33:00 +0000 Manifest this update: Sat 27 Apr 2024 02:33:00 +0000 Manifest next update: Sat 04 May 2024 02:33:00 +0000 Files and hashes: 1: SokSJxJpPqAI66ehAaxiJpX67CQ.crl (hash: BjJIKBPmG0IPc/MEqkWFfdsLJ1HCnzISY5/bN+ViDF4=) 2: 69BD1776579A11EEB2386282C4F9AE02.roa (hash: fvrI/G4/lZDcaHvJtqlBwFbuS2mrAEvqsqBeZAnHlsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.crl rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 02:32:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 926 (0x39e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEF20/serialNumber=4A89122712693EA008EBA7A101AC622695FAEC24 Validity Not Before: Apr 27 02:33:00 2024 GMT Not After : May 4 02:33:00 2024 GMT Subject: CN=662c63dc-383b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ee:3c:85:f9:d9:e1:12:7b:cc:45:3e:d1:c4: e3:18:ae:f6:f7:56:da:c3:a6:de:70:5f:3e:87:73: d3:16:62:9f:41:1c:98:19:4a:95:58:f4:e9:24:47: 4b:3c:23:90:ab:01:96:a9:d3:09:67:78:d2:ca:25: 8d:0a:f4:30:cf:d8:5d:d9:c4:de:55:6d:fe:5d:a8: a5:92:42:53:35:e0:79:e8:e6:bc:8e:44:a7:b5:b2: a2:e5:0d:07:a5:e5:d9:24:e3:55:3a:01:dc:8c:9a: 12:0e:8e:89:da:2d:8a:42:9e:86:36:de:03:1c:40: f9:10:c4:9f:8c:fd:b5:a5:67:44:38:5e:c0:58:81: 9a:33:62:db:53:ff:83:42:0a:72:67:0b:8c:2e:41: de:3d:bb:fd:82:83:1b:79:0c:4f:dc:bb:c9:24:55: ca:be:77:78:c9:14:e3:40:be:21:7e:fd:06:f8:2a: 4a:36:bc:a1:c8:25:05:84:32:4f:2d:e6:93:be:4e: 65:98:51:ca:aa:64:df:18:eb:08:c9:cd:fe:72:ab: 5a:85:17:11:a1:f0:8a:cf:83:cb:d8:56:6f:d8:8b: 4c:5f:a7:ca:42:ea:cc:66:fc:c4:19:3c:f6:46:24: 8d:2d:af:47:1f:1a:01:ef:6b:7b:67:3f:b3:62:8c: f4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E0:A2:58:BA:DB:22:28:37:12:9A:E3:18:FA:F1:5A:C8:F2:3F:E9 X509v3 Authority Key Identifier: keyid:4A:89:12:27:12:69:3E:A0:08:EB:A7:A1:01:AC:62:26:95:FA:EC:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:c7:ad:71:6a:38:76:11:b4:3f:28:3a:e6:81:63:9c:d7:f8: d9:f0:1b:21:09:58:80:c4:dd:52:b9:6e:97:e6:53:12:8a:4a: 6f:44:8d:ec:5a:8c:57:cb:e5:a2:bf:c8:96:65:96:22:2c:87: ba:ec:43:0b:bd:f6:2a:c2:ec:0b:36:81:50:78:04:cd:1d:59: 74:eb:6f:5f:07:a7:67:a1:97:59:22:fa:14:a4:03:a7:f5:24: 60:bd:6d:57:9f:fa:84:5a:5f:1c:d2:8d:87:24:37:2d:c7:a8: 13:dd:68:95:c8:3a:d1:21:5c:f6:b8:b3:48:b1:ff:a9:31:06: ba:ee:5f:f8:d1:8a:1f:83:bc:4b:f4:da:8d:7f:64:2e:71:d4: c1:0c:9e:91:fc:e4:30:0f:e9:ef:91:52:16:27:7a:fb:99:17: 07:ee:ca:19:17:79:fd:2c:72:b5:f4:0e:0e:6e:92:f9:60:ac: 25:68:04:4a:2a:71:8b:5a:c2:f8:9d:57:d7:82:0f:2a:bb:89: 6e:37:c9:50:76:df:54:91:9f:57:e4:77:47:28:ea:ef:b7:df: 38:82:44:c0:f6:a9:bd:ca:b5:4b:b7:71:92:0d:11:2f:68:ef: 23:11:93:27:4d:21:cc:92:0a:8b:3b:03:f9:ae:ee:d3:0f:1a: 2d:50:b2:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VGMjAxMTAvBgNVBAUTKDRBODkxMjI3MTI2OTNFQTAwOEVCQTdBMTAxQUM2MjI2 OTVGQUVDMjQwHhcNMjQwNDI3MDIzMzAwWhcNMjQwNTA0MDIzMzAwWjAYMRYwFAYD VQQDEw02NjJjNjNkYy0zODNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAze48hfnZ4RJ7zEU+0cTjGK7291baw6becF8+h3PTFmKfQRyYGUqVWPTpJEdL PCOQqwGWqdMJZ3jSyiWNCvQwz9hd2cTeVW3+XailkkJTNeB56Oa8jkSntbKi5Q0H peXZJONVOgHcjJoSDo6J2i2KQp6GNt4DHED5EMSfjP21pWdEOF7AWIGaM2LbU/+D QgpyZwuMLkHePbv9goMbeQxP3LvJJFXKvnd4yRTjQL4hfv0G+CpKNryhyCUFhDJP LeaTvk5lmFHKqmTfGOsIyc3+cqtahRcRofCKz4PL2FZv2ItMX6fKQurMZvzEGTz2 RiSNLa9HHxoB72t7Zz+zYoz00wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7goli6 2yIoNxKa4xj68VrI8j/pMB8GA1UdIwQYMBaAFEqJEicSaT6gCOunoQGsYiaV+uwk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUYyMC9GMjY3MTVCMjRG NUYxMUVDQjAzQjlFMUJDNEY5QUUwMi9Tb2tTSnhKcFBxQUk2NmVoQWF4aUpwWDY3 Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Nva1NKeEpwUHFBSTY2ZWhBYXhpSnBYNjdDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUYyMC9GMjY3MTVCMjRGNUYxMUVDQjAzQjlFMUJDNEY5QUUwMi9Tb2tTSnhKcFBx QUk2NmVoQWF4aUpwWDY3Q1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClx61xajh2EbQ/KDrmgWOc1/jZ8BshCViAxN1SuW6X5lMSikpvRI3s WoxXy+Wiv8iWZZYiLIe67EMLvfYqwuwLNoFQeATNHVl0629fB6dnoZdZIvoUpAOn 9SRgvW1Xn/qEWl8c0o2HJDctx6gT3WiVyDrRIVz2uLNIsf+pMQa67l/40Yofg7xL 9NqNf2QucdTBDJ6R/OQwD+nvkVIWJ3r7mRcH7soZF3n9LHK19A4ObpL5YKwlaARK KnGLWsL4nVfXgg8qu4luN8lQdt9UkZ9X5HdHKOrvt984gkTA9qm9yrVLt3GSDREv aO8jEZMnTSHMkgqLOwP5ru7TDxotULJT -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:32 2024 by rpki-client on console-ams.rpki-client.org