$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.mft File: IAAAWsWhdEBL07_CmUMyPpYGJbk.mft (raw, json) Hash identifier: NVOzGo/AXlvN6wWnnHUCfraHpyJn5wmmZwyp78AMvjo= Subject key identifier: CC:A7:67:D1:A3:8E:3A:CC:74:06:FF:8F:37:78:D5:65:A1:9A:1B:61 Authority key identifier: 20:00:00:5A:C5:A1:74:40:4B:D3:BF:C2:99:43:32:3E:96:06:25:B9 Certificate issuer: /CN=A91DA590/serialNumber=2000005AC5A174404BD3BFC29943323E960625B9 Certificate serial: 027B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAAAWsWhdEBL07_CmUMyPpYGJbk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.mft Manifest number: 0276 Signing time: Wed 01 May 2024 04:03:48 +0000 Manifest this update: Wed 01 May 2024 04:03:47 +0000 Manifest next update: Wed 08 May 2024 04:03:47 +0000 Files and hashes: 1: IAAAWsWhdEBL07_CmUMyPpYGJbk.crl (hash: iSSVmVtalkQniq1M/gDsRLLW0db2ZG90nkL3JDX9ahY=) 2: 09E46A74C07F11ECB0707F18C4F9AE02.roa (hash: NFHEfCpEER6CvkaGaVW8rkMzJ0zWJXrp5pmvd1v+A2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.crl rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAAAWsWhdEBL07_CmUMyPpYGJbk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 635 (0x27b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA590/serialNumber=2000005AC5A174404BD3BFC29943323E960625B9 Validity Not Before: May 1 04:03:47 2024 GMT Not After : May 8 04:03:47 2024 GMT Subject: CN=6631bf24-a385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8e:a3:29:d1:70:54:dd:10:3e:b5:f2:4e:7d: 22:c0:ce:24:4a:1f:af:80:32:5f:a8:79:b1:a8:7d: 31:f2:04:25:a7:e3:a6:b9:44:c1:7e:78:ab:6f:b6: 2e:4c:56:4d:8f:ac:ff:10:43:60:f8:08:89:39:9a: d0:81:d7:c3:2b:91:dd:58:70:66:8e:37:09:bf:18: 89:c0:d6:49:1c:f8:07:8f:c6:ca:6b:e3:3d:09:38: b5:99:ee:2b:11:c3:f9:a9:ca:6c:ef:e7:1d:b8:83: 56:4b:80:5c:5e:b6:41:bd:16:6d:40:90:08:01:91: f1:de:cd:1b:b8:bd:a7:e8:66:21:8b:5e:05:c5:f3: ef:13:c1:92:7c:47:cb:db:e5:39:1e:bc:c3:1f:b4: 75:30:7d:bc:2f:8e:44:8b:7c:49:63:c2:5a:9c:11: 5a:07:c9:f4:04:e6:e4:d6:1f:9a:3e:2f:d0:3f:d9: 3a:23:22:2b:82:7f:e1:c0:e0:f8:17:4e:bc:5b:14: c2:f0:98:ba:34:0b:2f:be:f1:2c:c3:f1:57:6e:d9: c7:49:19:ae:0f:e8:3f:97:13:4a:bc:9b:20:8a:17: 2c:98:52:f6:51:82:6a:c9:11:4d:f9:dd:2b:07:da: d7:ea:0b:84:ee:8d:d9:f5:fa:cc:30:96:0b:a7:ff: 2e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:A7:67:D1:A3:8E:3A:CC:74:06:FF:8F:37:78:D5:65:A1:9A:1B:61 X509v3 Authority Key Identifier: keyid:20:00:00:5A:C5:A1:74:40:4B:D3:BF:C2:99:43:32:3E:96:06:25:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAAAWsWhdEBL07_CmUMyPpYGJbk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:01:60:5e:40:82:dc:80:cd:b5:93:be:24:bf:52:fc:a8:53: df:e2:e3:40:7f:cb:4e:06:01:30:7d:30:ae:ee:3f:19:ef:d3: e7:c3:57:76:64:ff:60:79:40:68:6c:6d:f3:2c:ec:69:ef:89: 04:dc:a2:17:58:04:bc:e2:f4:5b:86:7c:ab:8c:97:0a:ef:48: a1:08:20:98:ba:cc:e9:51:99:27:85:06:b8:ea:d5:10:15:fb: 9a:bc:fb:ce:11:be:d8:6f:09:fa:a7:53:76:5e:97:2f:4a:53: be:62:07:80:8f:d6:ef:ff:94:a7:ad:b8:07:f8:05:36:0c:df: 51:db:d5:4c:62:20:c3:88:71:ae:d6:bf:de:8a:34:94:aa:5c: ec:74:bc:6c:96:4f:98:1b:21:af:35:12:00:b4:98:d9:d9:b3: 47:05:68:37:86:c9:dc:11:a2:3b:fb:48:d8:5d:b7:b2:99:a0: 8b:a2:4c:41:27:7e:7f:dc:ab:69:d1:05:59:83:38:18:2f:bc: 78:45:59:d7:a6:ab:11:ad:5b:40:91:99:43:c7:c1:ae:d4:25: 5a:f8:83:e6:af:b4:68:1c:b4:27:1a:e5:24:21:5b:23:e6:db: 49:1f:af:b8:b2:8d:64:de:29:fc:6b:90:b2:45:ee:4f:92:7e: 3a:9d:01:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE1OTAxMTAvBgNVBAUTKDIwMDAwMDVBQzVBMTc0NDA0QkQzQkZDMjk5NDMzMjNF OTYwNjI1QjkwHhcNMjQwNTAxMDQwMzQ3WhcNMjQwNTA4MDQwMzQ3WjAYMRYwFAYD VQQDEw02NjMxYmYyNC1hMzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzo6jKdFwVN0QPrXyTn0iwM4kSh+vgDJfqHmxqH0x8gQlp+OmuUTBfnirb7Yu TFZNj6z/EENg+AiJOZrQgdfDK5HdWHBmjjcJvxiJwNZJHPgHj8bKa+M9CTi1me4r EcP5qcps7+cduINWS4BcXrZBvRZtQJAIAZHx3s0buL2n6GYhi14FxfPvE8GSfEfL 2+U5HrzDH7R1MH28L45Ei3xJY8JanBFaB8n0BObk1h+aPi/QP9k6IyIrgn/hwOD4 F068WxTC8Ji6NAsvvvEsw/FXbtnHSRmuD+g/lxNKvJsgihcsmFL2UYJqyRFN+d0r B9rX6guE7o3Z9frMMJYLp/8uLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMynZ9Gj jjrMdAb/jzd41WWhmhthMB8GA1UdIwQYMBaAFCAAAFrFoXRAS9O/wplDMj6WBiW5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTU5MC85NTEwRTg2QUMw N0IxMUVDOTg3Qjg0N0ZDNEY5QUUwMi9JQUFBV3NXaGRFQkwwN19DbVVNeVBwWUdK YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lBQUFXc1doZEVCTDA3X0NtVU15UHBZR0piay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTU5MC85NTEwRTg2QUMwN0IxMUVDOTg3Qjg0N0ZDNEY5QUUwMi9JQUFBV3NXaGRF QkwwN19DbVVNeVBwWUdKYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCAWBeQILcgM21k74kv1L8qFPf4uNAf8tOBgEwfTCu7j8Z79Pnw1d2 ZP9geUBobG3zLOxp74kE3KIXWAS84vRbhnyrjJcK70ihCCCYuszpUZknhQa46tUQ FfuavPvOEb7Ybwn6p1N2XpcvSlO+YgeAj9bv/5SnrbgH+AU2DN9R29VMYiDDiHGu 1r/eijSUqlzsdLxslk+YGyGvNRIAtJjZ2bNHBWg3hsncEaI7+0jYXbeymaCLokxB J35/3Ktp0QVZgzgYL7x4RVnXpqsRrVtAkZlDx8Gu1CVa+IPmr7RoHLQnGuUkIVsj 5ttJH6+4so1k3in8a5CyRe5Pkn46nQH4 -----END CERTIFICATE-----Generated at Wed May 1 04:49:29 2024 by rpki-client on console-ams.rpki-client.org