$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.mft File: rRapGbMt65RQ0upjx51QMV2RgVU.mft (raw, json) Hash identifier: rD2wMohb96BnUYvC9I0najnV+uiMi/u6Ofo98kc9UHg= Subject key identifier: D4:24:F6:D5:95:D8:A4:74:2B:FB:74:F8:E6:4F:09:76:BC:64:77:7A Authority key identifier: AD:16:A9:19:B3:2D:EB:94:50:D2:EA:63:C7:9D:50:31:5D:91:81:55 Certificate issuer: /CN=A91DBA0F/serialNumber=AD16A919B32DEB9450D2EA63C79D50315D918155 Certificate serial: 0A18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRapGbMt65RQ0upjx51QMV2RgVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.mft Manifest number: 0A0F Signing time: Sat 04 May 2024 20:48:10 +0000 Manifest this update: Sat 04 May 2024 20:48:10 +0000 Manifest next update: Sat 11 May 2024 20:48:10 +0000 Files and hashes: 1: rRapGbMt65RQ0upjx51QMV2RgVU.crl (hash: OPSJm8D0PqLSvcTD2AHdl9lFftuYyqBCAn0cbjxedDg=) 2: D54C8E6C4DBD11EAAF427F1AC4F9AE02.roa (hash: l0l7N2oeU6miB+wmaaP2nYxuLtMs+PGnzOc6Ikq4rno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.crl rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRapGbMt65RQ0upjx51QMV2RgVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 20:48:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2584 (0xa18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBA0F/serialNumber=AD16A919B32DEB9450D2EA63C79D50315D918155 Validity Not Before: May 4 20:48:10 2024 GMT Not After : May 11 20:48:10 2024 GMT Subject: CN=66369f0a-940a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:74:c3:8f:0c:17:3e:f6:2a:e2:2b:32:62:73: bd:8b:dc:62:25:6e:2c:ee:3a:15:99:3d:ef:5c:7f: 69:0b:63:cf:f1:5a:a3:18:c1:49:24:05:b5:f6:0c: 8d:68:bc:4c:03:8d:79:a8:e9:06:87:93:e5:72:90: 68:47:f3:d4:9d:08:02:33:eb:0c:56:db:a1:c4:01: e2:43:0b:15:d4:97:1a:35:d6:99:aa:96:bd:c9:f0: a6:4b:0d:b9:44:70:04:16:1d:f9:df:5f:e6:e9:35: fd:a4:90:c0:7f:e8:9e:f3:cf:cd:ab:c8:eb:32:8a: 9d:87:6b:78:80:9e:75:e4:5f:76:dc:b5:92:22:b8: 43:c9:30:9f:38:b2:67:c7:cb:d5:51:7f:34:c0:25: a5:c2:5a:85:b0:e4:a4:9b:1e:38:54:cc:b7:b3:ea: 22:90:c8:3d:3b:5b:25:51:d6:dc:0d:40:60:06:7a: 5b:d2:5d:4f:94:9e:40:47:7f:33:08:20:32:a1:2b: 7e:fa:c6:36:1e:d9:ce:d7:60:9f:b1:94:87:e0:83: 67:fb:12:0a:25:d6:34:d0:a5:42:a5:09:2b:f7:32: dd:ab:32:71:c5:61:64:48:68:f2:bc:cd:46:74:c6: ab:53:7b:16:fa:1f:97:e4:5f:5f:36:d3:3e:c1:af: 33:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:24:F6:D5:95:D8:A4:74:2B:FB:74:F8:E6:4F:09:76:BC:64:77:7A X509v3 Authority Key Identifier: keyid:AD:16:A9:19:B3:2D:EB:94:50:D2:EA:63:C7:9D:50:31:5D:91:81:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRapGbMt65RQ0upjx51QMV2RgVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:8a:0e:db:a2:b3:ad:8d:9c:22:02:b8:85:a1:1a:59:f0:00: 8a:a3:15:62:ab:27:3c:12:f3:58:61:e5:2f:8f:c8:c1:4a:7c: 65:8f:60:e8:0c:ba:7a:88:29:b9:12:be:82:44:f6:95:69:a6: 51:18:4e:24:ea:58:9c:54:a1:95:92:42:15:17:19:f4:57:62: f9:d7:2f:d5:80:1b:ed:29:fc:3d:23:cd:dd:12:c1:af:d0:1c: a6:34:e0:ae:80:be:5b:85:ca:03:51:ab:3c:af:62:fe:87:84: a9:3c:72:f2:2c:25:b2:5a:d7:d4:1f:de:88:da:69:fb:9f:2d: 25:33:61:4f:b5:db:bb:e6:5d:69:7a:d1:06:dc:39:81:7a:b0: 87:e0:61:ef:0e:e8:e2:ff:d3:d5:54:fd:df:b3:50:0b:25:a4: 96:40:02:ed:0d:6c:bb:18:b0:4e:fa:ed:96:32:b2:81:b4:73: 59:cb:c2:bb:b7:bf:43:a0:12:8c:fd:f2:75:d7:96:24:54:b6: 12:71:6f:2e:19:f4:14:a5:6f:8a:e9:b2:92:f5:25:a1:96:32: db:bd:d9:e5:fb:77:65:22:b8:04:ae:45:96:82:63:9e:f7:ae: f6:86:37:b1:e3:a4:a8:dc:79:48:a3:80:d8:6c:cd:22:39:e1: 9f:f2:c8:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBMEYxMTAvBgNVBAUTKEFEMTZBOTE5QjMyREVCOTQ1MEQyRUE2M0M3OUQ1MDMx NUQ5MTgxNTUwHhcNMjQwNTA0MjA0ODEwWhcNMjQwNTExMjA0ODEwWjAYMRYwFAYD VQQDEw02NjM2OWYwYS05NDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8XTDjwwXPvYq4isyYnO9i9xiJW4s7joVmT3vXH9pC2PP8VqjGMFJJAW19gyN aLxMA415qOkGh5PlcpBoR/PUnQgCM+sMVtuhxAHiQwsV1JcaNdaZqpa9yfCmSw25 RHAEFh3531/m6TX9pJDAf+ie88/Nq8jrMoqdh2t4gJ515F923LWSIrhDyTCfOLJn x8vVUX80wCWlwlqFsOSkmx44VMy3s+oikMg9O1slUdbcDUBgBnpb0l1PlJ5AR38z CCAyoSt++sY2HtnO12CfsZSH4INn+xIKJdY00KVCpQkr9zLdqzJxxWFkSGjyvM1G dMarU3sW+h+X5F9fNtM+wa8zuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQk9tWV 2KR0K/t0+OZPCXa8ZHd6MB8GA1UdIwQYMBaAFK0WqRmzLeuUUNLqY8edUDFdkYFV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkEwRi9EOTAwNjdGRTRD RDcxMUVBQjQ1NTU4NDVDNEY5QUUwMi9yUmFwR2JNdDY1UlEwdXBqeDUxUU1WMlJn VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JSYXBHYk10NjVSUTB1cGp4NTFRTVYyUmdWVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkEwRi9EOTAwNjdGRTRDRDcxMUVBQjQ1NTU4NDVDNEY5QUUwMi9yUmFwR2JNdDY1 UlEwdXBqeDUxUU1WMlJnVlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2ig7borOtjZwiAriFoRpZ8ACKoxViqyc8EvNYYeUvj8jBSnxlj2Do DLp6iCm5Er6CRPaVaaZRGE4k6licVKGVkkIVFxn0V2L51y/VgBvtKfw9I83dEsGv 0BymNOCugL5bhcoDUas8r2L+h4SpPHLyLCWyWtfUH96I2mn7ny0lM2FPtdu75l1p etEG3DmBerCH4GHvDuji/9PVVP3fs1ALJaSWQALtDWy7GLBO+u2WMrKBtHNZy8K7 t79DoBKM/fJ115YkVLYScW8uGfQUpW+K6bKS9SWhljLbvdnl+3dlIrgErkWWgmOe 9672hjex46So3HlIo4DYbM0iOeGf8si+ -----END CERTIFICATE-----Generated at Sat May 4 22:06:54 2024 by rpki-client on console-ams.rpki-client.org