$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft File: 594x-t7TeUFNZ_u89R2XZRTjQiU.mft (raw, json) Hash identifier: dx6CdTXwl2nymRfDdQDMZ1H8jniBl1ZymHEzaFSvFK8= Subject key identifier: 28:48:96:C0:EE:28:70:9C:15:19:5E:99:72:01:BB:0E:42:90:62:28 Authority key identifier: E7:DE:31:FA:DE:D3:79:41:4D:67:FB:BC:F5:1D:97:65:14:E3:42:25 Certificate issuer: /CN=A91D9FF0/serialNumber=E7DE31FADED379414D67FBBCF51D976514E34225 Certificate serial: 0C9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft Manifest number: 0C82 Signing time: Fri 26 Apr 2024 18:52:38 +0000 Manifest this update: Fri 26 Apr 2024 18:52:37 +0000 Manifest next update: Fri 03 May 2024 18:52:37 +0000 Files and hashes: 1: 594x-t7TeUFNZ_u89R2XZRTjQiU.crl (hash: ylB6oq2n4VPEiquptlpOCFZ8TfQ+wnxq1Jt3UpyUhAM=) 2: CAE1D9E2404611EB913D5C10C4F9AE02.roa (hash: dFozmLHR8wslPBLZJ8/dR41gh8/PVzupvGSJ2JW8U/8=) 3: 06F741E24D6611EC904C6735C4F9AE02.roa (hash: q0fCWE2mgkN7GI3kBJKP025XUut6leYUdARwUVA8nZc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.crl rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 18:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3230 (0xc9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9FF0/serialNumber=E7DE31FADED379414D67FBBCF51D976514E34225 Validity Not Before: Apr 26 18:52:37 2024 GMT Not After : May 3 18:52:37 2024 GMT Subject: CN=662bf7f6-0da5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:10:c5:0a:5e:d0:4e:c0:e0:14:44:0d:d0:7b: fd:b2:50:19:68:ce:dc:80:6a:82:d4:d9:0e:8e:86: 10:47:12:15:ec:7b:15:15:0e:10:da:b5:27:99:c3: b3:7e:5d:cf:04:f1:3c:3c:d0:3d:62:38:83:77:88: fc:6c:b4:dc:74:a8:58:8b:ac:b7:b5:51:b5:3f:d0: 02:0f:2e:6f:80:73:84:76:91:cf:c9:29:79:8a:99: eb:7d:dc:e2:7e:4d:8f:96:0e:ab:2d:f4:51:89:e1: 27:96:87:c3:98:8e:94:30:3f:cd:07:69:72:8b:9c: 26:cd:05:b6:21:77:16:f3:ad:ca:a7:fd:38:0e:c3: 79:11:24:6a:25:c6:d4:32:21:72:df:eb:c8:6c:d2: 4e:fd:99:16:76:66:b6:e6:a7:80:1b:ee:25:e8:84: f5:e5:ae:02:5b:80:80:26:24:ba:00:73:7a:43:ab: 7c:78:5e:17:01:4f:3b:b7:b0:de:d3:da:6a:2d:af: 03:77:80:be:98:06:20:48:46:58:f0:44:db:1a:27: 6b:c2:8e:ce:43:a4:6f:a2:84:e9:f6:6b:86:86:d5: 6b:26:9a:85:51:d5:c5:de:06:b6:75:ba:15:9b:e4: 2c:37:0f:10:ba:d4:da:32:99:93:48:20:72:74:8c: 10:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:48:96:C0:EE:28:70:9C:15:19:5E:99:72:01:BB:0E:42:90:62:28 X509v3 Authority Key Identifier: keyid:E7:DE:31:FA:DE:D3:79:41:4D:67:FB:BC:F5:1D:97:65:14:E3:42:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:04:86:7d:4a:c9:63:f3:0d:7b:e2:8e:fa:5d:2e:9f:6d:21: ac:36:4f:e3:06:70:a1:5a:c8:d6:7b:1c:e3:b1:39:97:3f:7a: 23:8d:3f:cc:74:e7:41:13:d0:79:fa:54:f0:76:cc:fc:2a:a7: 21:8c:5d:a9:68:09:63:63:83:46:df:95:eb:09:89:2a:a8:c2: 54:c4:4a:33:2d:3e:44:40:06:53:41:5e:ec:5d:80:93:d6:f1: ee:1e:3c:e7:7b:fa:3f:8f:9e:13:dc:73:03:c9:af:d1:3b:12: f8:31:9d:55:6d:ca:6b:e7:84:bb:7c:fa:84:1b:77:33:de:d3: 25:b2:c2:02:61:ad:94:50:9c:a9:e3:9a:d7:e4:6e:dd:db:40: 32:4f:16:11:33:b9:75:7d:63:2d:17:02:22:be:ed:84:33:8f: cb:8c:40:6f:7b:ef:42:07:06:3d:e0:26:f9:3c:cd:b2:26:ea: 4e:54:dc:60:d4:de:91:bc:9f:11:36:bd:82:a8:d6:a7:4a:29: 10:b3:2c:06:4d:ed:22:03:0b:c6:e2:48:05:7d:07:26:d0:18: 71:f0:15:9e:2e:2f:e6:38:0b:e8:ca:d5:aa:58:fe:39:5e:14: 85:1d:73:50:16:8a:83:e2:d1:bf:0d:d0:8b:4f:4d:bb:56:10: 98:7d:b6:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlGRjAxMTAvBgNVBAUTKEU3REUzMUZBREVEMzc5NDE0RDY3RkJCQ0Y1MUQ5NzY1 MTRFMzQyMjUwHhcNMjQwNDI2MTg1MjM3WhcNMjQwNTAzMTg1MjM3WjAYMRYwFAYD VQQDEw02NjJiZjdmNi0wZGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1BDFCl7QTsDgFEQN0Hv9slAZaM7cgGqC1NkOjoYQRxIV7HsVFQ4Q2rUnmcOz fl3PBPE8PNA9YjiDd4j8bLTcdKhYi6y3tVG1P9ACDy5vgHOEdpHPySl5ipnrfdzi fk2Plg6rLfRRieEnlofDmI6UMD/NB2lyi5wmzQW2IXcW863Kp/04DsN5ESRqJcbU MiFy3+vIbNJO/ZkWdma25qeAG+4l6IT15a4CW4CAJiS6AHN6Q6t8eF4XAU87t7De 09pqLa8Dd4C+mAYgSEZY8ETbGidrwo7OQ6RvooTp9muGhtVrJpqFUdXF3ga2dboV m+QsNw8QutTaMpmTSCBydIwQ+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFChIlsDu KHCcFRlemXIBuw5CkGIoMB8GA1UdIwQYMBaAFOfeMfre03lBTWf7vPUdl2UU40Il MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUZGMC85NDMzMEZFNkQ0 NjkxMUU5OEYwMTk4MkNDNEY5QUUwMi81OTR4LXQ3VGVVRk5aX3U4OVIyWFpSVGpR aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzU5NHgtdDdUZVVGTlpfdTg5UjJYWlJUalFpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUZGMC85NDMzMEZFNkQ0NjkxMUU5OEYwMTk4MkNDNEY5QUUwMi81OTR4LXQ3VGVV Rk5aX3U4OVIyWFpSVGpRaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJBIZ9Sslj8w174o76XS6fbSGsNk/jBnChWsjWexzjsTmXP3ojjT/M dOdBE9B5+lTwdsz8KqchjF2paAljY4NG35XrCYkqqMJUxEozLT5EQAZTQV7sXYCT 1vHuHjzne/o/j54T3HMDya/ROxL4MZ1Vbcpr54S7fPqEG3cz3tMlssICYa2UUJyp 45rX5G7d20AyTxYRM7l1fWMtFwIivu2EM4/LjEBve+9CBwY94Cb5PM2yJupOVNxg 1N6RvJ8RNr2CqNanSikQsywGTe0iAwvG4kgFfQcm0Bhx8BWeLi/mOAvoytWqWP45 XhSFHXNQFoqD4tG/DdCLT027VhCYfbYS -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:39 2024 by rpki-client on console-ams.rpki-client.org