$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft File: _Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft (raw, json) Hash identifier: Ym8Op6cq0YNbJHNE18Zlg+RxrkTTLKVnqavSSOhgFaA= Subject key identifier: 38:4A:8B:9C:E0:CE:F5:0C:A9:60:01:05:7E:06:D2:00:4D:A1:00:E4 Authority key identifier: FC:7B:39:4F:8F:9C:BF:9C:DD:20:93:C2:72:6D:DF:E9:13:FA:A9:CE Certificate issuer: /CN=A91D2A6D/serialNumber=FC7B394F8F9CBF9CDD2093C2726DDFE913FAA9CE Certificate serial: 01B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft Manifest number: 01B3 Signing time: Fri 03 May 2024 04:38:18 +0000 Manifest this update: Fri 03 May 2024 04:38:18 +0000 Manifest next update: Fri 10 May 2024 04:38:18 +0000 Files and hashes: 1: _Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl (hash: RRYR/NPF3ajWrqlIyOtVTK9Oyq1vqgxItrycpruHSHs=) 2: 7B18C5B40CCE11ED97C94316C4F9AE02.roa (hash: de6AgBdYKFDLnPJ/PEBqqKvZDu++14qokiXxuhux/kU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 438 (0x1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2A6D/serialNumber=FC7B394F8F9CBF9CDD2093C2726DDFE913FAA9CE Validity Not Before: May 3 04:38:18 2024 GMT Not After : May 10 04:38:18 2024 GMT Subject: CN=66346a3a-894c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:2b:48:7d:c7:93:9d:7a:f9:b3:f6:a5:ab:33: 0e:13:c5:54:13:37:f1:0c:a2:12:78:7d:e3:ee:07: 02:e9:d8:18:a6:e0:b7:f0:24:20:28:bf:d4:41:3d: 70:61:29:28:44:70:1a:a5:d6:bf:31:79:7a:59:23: fe:cc:e6:57:a6:d0:62:07:ce:e7:ba:00:6b:a9:dd: 45:21:64:5f:65:3c:77:a5:74:aa:60:ba:41:68:3f: 25:37:b4:b6:e5:c2:b9:a3:6a:9d:c9:ff:1e:5d:b1: 57:4a:87:75:8b:2f:de:c6:b2:2f:62:01:f4:65:1d: d0:c7:ef:a4:87:42:a3:37:b0:c1:60:10:fc:3d:37: 25:df:16:bd:8f:6d:1f:dd:82:73:61:c2:5a:30:7c: 3d:b2:7a:6d:93:40:4c:a5:34:3f:5a:00:44:93:fd: 7f:db:ae:c2:60:7c:be:58:13:0d:39:fc:c2:fd:6b: 3d:a9:aa:86:2a:dc:4d:3f:a8:2a:14:5c:af:42:f9: 5e:1a:64:7d:7c:fd:de:a8:ba:0f:b4:ef:fa:e2:01: e5:9a:e9:23:1e:e5:0d:6f:2c:d6:73:67:1f:73:c0: da:20:63:20:a2:ef:7c:82:47:ee:ed:cd:70:82:29: d3:47:52:23:1d:0a:22:54:e9:db:16:24:3a:ac:c5: 13:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:4A:8B:9C:E0:CE:F5:0C:A9:60:01:05:7E:06:D2:00:4D:A1:00:E4 X509v3 Authority Key Identifier: keyid:FC:7B:39:4F:8F:9C:BF:9C:DD:20:93:C2:72:6D:DF:E9:13:FA:A9:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:74:29:63:1e:0d:e9:dd:bf:44:bd:72:f4:0a:f8:c9:1b:87: f2:d1:85:0d:15:8d:21:cb:24:96:ee:00:72:45:e2:ec:d7:9f: b2:09:be:92:81:b9:4e:19:4d:70:7a:72:25:28:f1:ce:bf:90: b9:c8:d1:91:6e:1f:ca:78:71:65:bc:f5:12:e1:9e:39:15:d4: 64:fb:8b:fb:c3:48:ac:77:58:41:58:cc:8e:6f:ad:7f:3e:22: 95:7e:8d:a9:19:8a:da:91:c3:a1:6c:da:8e:67:f0:99:a8:1f: 94:b4:b9:c1:3b:69:97:55:8b:18:5d:66:76:db:6a:22:e3:3e: b5:ec:f2:07:05:28:e2:1c:84:63:d8:69:a9:f6:2f:72:05:b0: c2:9b:08:0f:ed:cb:ee:02:19:e3:50:b7:77:60:eb:de:dd:47: b2:bd:cb:39:e2:ab:40:24:df:18:ce:7c:f5:2d:17:2b:53:18: 59:41:e0:c1:27:b3:4f:d3:82:a7:a0:5c:84:2d:ba:c4:6a:b1: cc:7d:37:9d:7d:9e:4d:6e:03:09:31:c9:60:8a:03:18:4a:b2: 6a:db:83:6d:f4:a1:eb:13:df:4c:32:a6:ed:73:60:93:14:8d: 04:bc:43:8e:f5:6d:88:63:ee:6c:c4:a6:03:58:24:5c:95:80: 69:59:8c:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJBNkQxMTAvBgNVBAUTKEZDN0IzOTRGOEY5Q0JGOUNERDIwOTNDMjcyNkRERkU5 MTNGQUE5Q0UwHhcNMjQwNTAzMDQzODE4WhcNMjQwNTEwMDQzODE4WjAYMRYwFAYD VQQDEw02NjM0NmEzYS04OTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5itIfceTnXr5s/alqzMOE8VUEzfxDKISeH3j7gcC6dgYpuC38CQgKL/UQT1w YSkoRHAapda/MXl6WSP+zOZXptBiB87nugBrqd1FIWRfZTx3pXSqYLpBaD8lN7S2 5cK5o2qdyf8eXbFXSod1iy/exrIvYgH0ZR3Qx++kh0KjN7DBYBD8PTcl3xa9j20f 3YJzYcJaMHw9snptk0BMpTQ/WgBEk/1/267CYHy+WBMNOfzC/Ws9qaqGKtxNP6gq FFyvQvleGmR9fP3eqLoPtO/64gHlmukjHuUNbyzWc2cfc8DaIGMgou98gkfu7c1w ginTR1IjHQoiVOnbFiQ6rMUTvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDhKi5zg zvUMqWABBX4G0gBNoQDkMB8GA1UdIwQYMBaAFPx7OU+PnL+c3SCTwnJt3+kT+qnO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkE2RC83RjhENjNCNDBD Q0IxMUVEQjNDRDQ3NjhDNEY5QUUwMi9fSHM1VDQtY3Y1emRJSlBDY20zZjZSUDZx YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19IczVUNC1jdjV6ZElKUENjbTNmNlJQNnFjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkE2RC83RjhENjNCNDBDQ0IxMUVEQjNDRDQ3NjhDNEY5QUUwMi9fSHM1VDQtY3Y1 emRJSlBDY20zZjZSUDZxYzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3dCljHg3p3b9EvXL0CvjJG4fy0YUNFY0hyySW7gByReLs15+yCb6S gblOGU1wenIlKPHOv5C5yNGRbh/KeHFlvPUS4Z45FdRk+4v7w0isd1hBWMyOb61/ PiKVfo2pGYrakcOhbNqOZ/CZqB+UtLnBO2mXVYsYXWZ222oi4z617PIHBSjiHIRj 2Gmp9i9yBbDCmwgP7cvuAhnjULd3YOve3Ueyvcs54qtAJN8Yznz1LRcrUxhZQeDB J7NP04KnoFyELbrEarHMfTedfZ5NbgMJMclgigMYSrJq24Nt9KHrE99MMqbtc2CT FI0EvEOO9W2IY+5sxKYDWCRclYBpWYxK -----END CERTIFICATE-----Generated at Fri May 3 05:32:36 2024 by rpki-client on console-ams.rpki-client.org