$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.mft File: C99de_bArcNvIwEoNtjC3CQnkzw.mft (raw, json) Hash identifier: diNzIsD75u0pfIICvfR/lWBMx7BC12QHMmjlYRYUGkE= Subject key identifier: B2:76:23:CA:26:48:0E:0D:D0:83:4D:1D:BD:45:16:5D:29:8E:2F:A9 Authority key identifier: 0B:DF:5D:7B:F6:C0:AD:C3:6F:23:01:28:36:D8:C2:DC:24:27:93:3C Certificate issuer: /CN=A91D6499/serialNumber=0BDF5D7BF6C0ADC36F23012836D8C2DC2427933C Certificate serial: 05BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C99de_bArcNvIwEoNtjC3CQnkzw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.mft Manifest number: 05B3 Signing time: Fri 03 May 2024 00:20:05 +0000 Manifest this update: Fri 03 May 2024 00:20:04 +0000 Manifest next update: Fri 10 May 2024 00:20:04 +0000 Files and hashes: 1: C99de_bArcNvIwEoNtjC3CQnkzw.crl (hash: RCvFIQURV2B7gnFyWXvQkP4Sbwks+n4djNusV962Qt4=) 2: FAEF1526DE9E11ECBEA8AB0EC4F9AE02.roa (hash: Ow760t1s1bI9rozHNixWmhllz8PZzwdexK28soC0QGk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.crl rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C99de_bArcNvIwEoNtjC3CQnkzw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:20:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1466 (0x5ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6499/serialNumber=0BDF5D7BF6C0ADC36F23012836D8C2DC2427933C Validity Not Before: May 3 00:20:04 2024 GMT Not After : May 10 00:20:04 2024 GMT Subject: CN=66342db5-866a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:64:ea:e1:c9:c8:f1:ea:b1:6a:29:da:d7:d6: 8b:15:70:e7:b7:53:af:25:8a:63:cb:3f:a0:69:3a: 27:50:c6:84:a0:c7:be:92:74:58:b4:9d:fb:9d:2e: 50:c9:0b:fe:bc:b9:da:e9:20:86:49:11:ed:52:6b: a0:65:a6:cb:5d:e4:27:36:56:ec:a8:48:ff:a3:1e: a0:5e:c5:8e:48:99:47:b7:1b:50:91:60:00:c7:9a: 71:20:69:61:81:0c:89:f8:09:38:5a:7e:28:c6:51: 37:3f:5b:0e:f6:c2:fc:bb:09:92:af:6e:54:cd:37: df:55:bc:ab:a6:5e:c2:df:72:4d:d3:fb:aa:07:a5: 85:d1:c6:b8:ff:4d:f6:1a:96:46:0f:58:98:36:51: 10:07:b2:12:6a:c1:cb:44:fa:4b:95:59:c6:34:3d: 29:90:35:04:5b:50:6d:ff:05:37:5c:f9:51:2c:d0: 0b:85:cf:a7:e7:80:44:e7:e8:b5:b8:f8:f7:2c:c8: 1a:7e:1f:b7:df:c4:53:28:79:ca:77:25:3f:7b:c2: c3:75:e0:70:e1:02:a2:a8:ec:33:5c:92:99:88:a8: 3d:a2:14:da:90:a7:10:9a:88:f5:fa:06:51:52:39: 51:78:27:b2:06:25:e0:22:05:83:0c:99:53:11:d5: ea:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:76:23:CA:26:48:0E:0D:D0:83:4D:1D:BD:45:16:5D:29:8E:2F:A9 X509v3 Authority Key Identifier: keyid:0B:DF:5D:7B:F6:C0:AD:C3:6F:23:01:28:36:D8:C2:DC:24:27:93:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C99de_bArcNvIwEoNtjC3CQnkzw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:0d:64:5b:19:f4:9c:96:4b:33:4a:d7:05:fb:5f:bf:01:cc: 7e:a2:40:87:e2:ec:ee:a3:34:f7:03:a1:d9:69:cd:57:5f:07: 7d:ba:02:e0:c7:7f:35:03:99:8f:16:ec:98:18:41:f4:89:52: 59:67:23:77:f2:56:29:f8:7d:0d:16:0b:6b:a4:30:38:de:e7: 01:91:c0:f2:90:55:c4:40:14:c4:4c:62:41:3f:d9:72:d5:4f: 7b:57:df:65:5c:3e:b2:01:94:7e:47:5a:5e:3e:bc:5a:2b:0e: b6:51:9a:48:e2:5e:58:72:5a:7c:fb:9c:dd:70:90:2a:4f:d4: cf:9e:2e:e4:d6:48:85:27:5a:cf:28:17:dc:a3:0c:8d:fe:c6: 3a:c4:c9:43:35:0a:70:2b:e2:14:7f:0c:2b:90:3d:3a:b6:95: 94:3b:b3:e0:e8:87:c3:66:46:5f:5e:c9:1c:58:a5:07:bc:c0: df:49:7d:e1:f9:1f:bf:57:fc:ae:55:d4:a4:97:ef:58:03:60: 31:aa:4d:4e:30:28:69:12:b5:9f:1b:64:57:f0:01:a7:71:77: 41:64:66:95:fb:99:94:9b:6f:6b:c4:0b:5d:4d:ac:2d:6c:a4: eb:f2:1e:61:18:97:28:e7:45:72:7e:f1:27:cf:11:89:34:f1: 1b:db:58:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY0OTkxMTAvBgNVBAUTKDBCREY1RDdCRjZDMEFEQzM2RjIzMDEyODM2RDhDMkRD MjQyNzkzM0MwHhcNMjQwNTAzMDAyMDA0WhcNMjQwNTEwMDAyMDA0WjAYMRYwFAYD VQQDEw02NjM0MmRiNS04NjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA32Tq4cnI8eqxaina19aLFXDnt1OvJYpjyz+gaTonUMaEoMe+knRYtJ37nS5Q yQv+vLna6SCGSRHtUmugZabLXeQnNlbsqEj/ox6gXsWOSJlHtxtQkWAAx5pxIGlh gQyJ+Ak4Wn4oxlE3P1sO9sL8uwmSr25UzTffVbyrpl7C33JN0/uqB6WF0ca4/032 GpZGD1iYNlEQB7ISasHLRPpLlVnGND0pkDUEW1Bt/wU3XPlRLNALhc+n54BE5+i1 uPj3LMgafh+338RTKHnKdyU/e8LDdeBw4QKiqOwzXJKZiKg9ohTakKcQmoj1+gZR UjlReCeyBiXgIgWDDJlTEdXqowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLJ2I8om SA4N0INNHb1FFl0pji+pMB8GA1UdIwQYMBaAFAvfXXv2wK3DbyMBKDbYwtwkJ5M8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjQ5OS85RjgzNkM1Mjc4 MDkxMUVCQTE2QUUxNTZDNEY5QUUwMi9DOTlkZV9iQXJjTnZJd0VvTnRqQzNDUW5r encuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M5OWRlX2JBcmNOdkl3RW9OdGpDM0NRbmt6dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjQ5OS85RjgzNkM1Mjc4MDkxMUVCQTE2QUUxNTZDNEY5QUUwMi9DOTlkZV9iQXJj TnZJd0VvTnRqQzNDUW5rencubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtDWRbGfSclkszStcF+1+/Acx+okCH4uzuozT3A6HZac1XXwd9ugLg x381A5mPFuyYGEH0iVJZZyN38lYp+H0NFgtrpDA43ucBkcDykFXEQBTETGJBP9ly 1U97V99lXD6yAZR+R1pePrxaKw62UZpI4l5Yclp8+5zdcJAqT9TPni7k1kiFJ1rP KBfcowyN/sY6xMlDNQpwK+IUfwwrkD06tpWUO7Pg6IfDZkZfXskcWKUHvMDfSX3h +R+/V/yuVdSkl+9YA2Axqk1OMChpErWfG2RX8AGncXdBZGaV+5mUm29rxAtdTawt bKTr8h5hGJco50VyfvEnzxGJNPEb21jE -----END CERTIFICATE-----Generated at Fri May 3 03:10:56 2024 by rpki-client on console-ams.rpki-client.org