$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft File: 05fnjG3TxpaFEzQVMschiNd1Z68.mft (raw, json) Hash identifier: dvkVW/CjtA79APaOOt3DM963a3W1xetP/afysIfFXBI= Subject key identifier: A5:B0:01:17:D1:0E:77:CC:58:4D:D9:A8:C8:A2:E9:DC:23:DD:62:C9 Authority key identifier: D3:97:E7:8C:6D:D3:C6:96:85:13:34:15:32:C7:21:88:D7:75:67:AF Certificate issuer: /CN=A91D3CA7/serialNumber=D397E78C6DD3C6968513341532C72188D77567AF Certificate serial: 01EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft Manifest number: 01EC Signing time: Mon 29 Apr 2024 04:09:42 +0000 Manifest this update: Mon 29 Apr 2024 04:09:42 +0000 Manifest next update: Mon 06 May 2024 04:09:42 +0000 Files and hashes: 1: 05fnjG3TxpaFEzQVMschiNd1Z68.crl (hash: in6/nWRLCpWpcAqTOZi+ChieoU1qYexKETx5HuEv56g=) 2: DE183F1CF46611EC815F7283C4F9AE02.roa (hash: jZ+fbCmFpDe3AVLm/QAPb0U3O5GfjcwKULXaUMQBjxE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.crl rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 04:09:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 494 (0x1ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3CA7/serialNumber=D397E78C6DD3C6968513341532C72188D77567AF Validity Not Before: Apr 29 04:09:42 2024 GMT Not After : May 6 04:09:42 2024 GMT Subject: CN=662f1d86-cc85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3e:92:bc:31:aa:4d:0c:f7:4d:10:a0:6e:78: c9:f8:0c:82:eb:10:45:0e:6d:70:89:f5:4b:9c:44: 6e:12:3e:71:3f:ed:81:09:83:a8:9d:71:cb:63:5a: 2c:94:55:f3:04:fb:2a:83:3d:00:2b:54:6b:06:28: 1b:44:67:aa:78:09:83:5c:ab:fa:7e:c4:26:d9:76: 03:ae:11:cd:86:d2:de:2f:51:c4:0d:47:8c:9b:35: c2:e1:7c:90:ea:c6:a1:94:69:94:f1:3b:6d:de:55: f5:b7:b1:c6:ac:12:2c:45:fc:33:25:14:fd:9a:d1: 65:a2:ce:be:88:ec:ec:49:a1:36:17:6a:e7:31:18: ab:cd:57:38:dc:ac:e5:b3:89:d1:ba:9a:3d:3b:e5: 0c:9b:e5:4c:b3:d6:87:ed:3c:8f:0e:a8:4d:76:5e: 09:82:0f:43:59:d1:ef:c7:fb:2a:c9:35:2c:1d:7c: 95:cd:d7:22:69:40:25:b4:d3:de:3c:4c:5c:fb:96: ee:27:e3:54:25:6a:e5:aa:15:84:7d:43:1f:43:fa: 88:67:8f:63:47:02:a3:58:de:8c:44:ae:9a:7d:97: 3d:9c:45:1a:9f:8c:07:45:6c:fb:05:fe:85:8a:44: 4b:6c:63:b6:fb:94:1f:04:a6:40:db:e8:97:33:ad: 04:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B0:01:17:D1:0E:77:CC:58:4D:D9:A8:C8:A2:E9:DC:23:DD:62:C9 X509v3 Authority Key Identifier: keyid:D3:97:E7:8C:6D:D3:C6:96:85:13:34:15:32:C7:21:88:D7:75:67:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:33:f2:87:09:f4:51:c3:73:64:1e:2e:a6:b3:0f:77:56:5e: 62:0a:92:87:59:fb:ab:c0:ac:77:27:94:b9:60:d1:23:41:f6: 64:87:82:43:12:bc:8b:dc:d3:65:23:f4:fd:11:52:9e:18:23: 31:98:9f:af:80:56:51:ad:08:b8:25:2d:b4:f2:76:ee:14:96: e5:69:e2:6c:6a:5a:bf:da:d1:25:f3:44:92:a3:40:54:1b:70: 56:e4:0c:8d:1c:d3:28:e0:56:d9:c8:8c:87:fb:06:b9:aa:b8: e0:26:72:ef:ef:7d:8f:f2:d0:ab:11:54:a5:23:01:6e:16:43: 86:ef:8d:fb:88:0e:24:71:ee:e1:eb:81:7f:90:ee:53:01:3e: 48:e4:6e:2c:c8:1f:d2:51:2b:25:3f:67:fb:cb:d6:bf:5f:33: 7b:a4:b4:57:e0:fb:f7:61:fe:a0:1a:5a:d3:d0:0c:7d:4d:eb: 16:d2:61:6c:78:90:19:8d:81:18:a9:96:0d:74:98:2c:8b:49: 81:51:47:00:14:41:2a:09:bc:51:87:58:c4:72:42:af:f3:7a: d5:c0:5c:23:1f:ff:1d:9e:51:09:1c:bb:9c:74:ae:58:8e:9b: a8:4c:e1:5a:37:0c:01:60:87:5f:9d:18:f2:65:4c:f9:6c:e3: 8e:a8:61:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNDQTcxMTAvBgNVBAUTKEQzOTdFNzhDNkREM0M2OTY4NTEzMzQxNTMyQzcyMTg4 RDc3NTY3QUYwHhcNMjQwNDI5MDQwOTQyWhcNMjQwNTA2MDQwOTQyWjAYMRYwFAYD VQQDEw02NjJmMWQ4Ni1jYzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvj6SvDGqTQz3TRCgbnjJ+AyC6xBFDm1wifVLnERuEj5xP+2BCYOonXHLY1os lFXzBPsqgz0AK1RrBigbRGeqeAmDXKv6fsQm2XYDrhHNhtLeL1HEDUeMmzXC4XyQ 6sahlGmU8Ttt3lX1t7HGrBIsRfwzJRT9mtFlos6+iOzsSaE2F2rnMRirzVc43Kzl s4nRupo9O+UMm+VMs9aH7TyPDqhNdl4Jgg9DWdHvx/sqyTUsHXyVzdciaUAltNPe PExc+5buJ+NUJWrlqhWEfUMfQ/qIZ49jRwKjWN6MRK6afZc9nEUan4wHRWz7Bf6F ikRLbGO2+5QfBKZA2+iXM60EGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKWwARfR DnfMWE3ZqMii6dwj3WLJMB8GA1UdIwQYMBaAFNOX54xt08aWhRM0FTLHIYjXdWev MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0NBNy8zRjBFMEUwNkY0 NjExMUVDODIzQ0EwN0NDNEY5QUUwMi8wNWZuakczVHhwYUZFelFWTXNjaGlOZDFa NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA1Zm5qRzNUeHBhRkV6UVZNc2NoaU5kMVo2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0NBNy8zRjBFMEUwNkY0NjExMUVDODIzQ0EwN0NDNEY5QUUwMi8wNWZuakczVHhw YUZFelFWTXNjaGlOZDFaNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUM/KHCfRRw3NkHi6msw93Vl5iCpKHWfurwKx3J5S5YNEjQfZkh4JD EryL3NNlI/T9EVKeGCMxmJ+vgFZRrQi4JS208nbuFJblaeJsalq/2tEl80SSo0BU G3BW5AyNHNMo4FbZyIyH+wa5qrjgJnLv732P8tCrEVSlIwFuFkOG7437iA4kce7h 64F/kO5TAT5I5G4syB/SUSslP2f7y9a/XzN7pLRX4Pv3Yf6gGlrT0Ax9TesW0mFs eJAZjYEYqZYNdJgsi0mBUUcAFEEqCbxRh1jEckKv83rVwFwjH/8dnlEJHLucdK5Y jpuoTOFaNwwBYIdfnRjyZUz5bOOOqGEH -----END CERTIFICATE-----Generated at Tue Apr 30 19:22:46 2024 by rpki-client on console-ams.rpki-client.org