$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft File: 379fgwtQs7_B5TULnGBbt1YSLhE.mft (raw, json) Hash identifier: fGtEt8f7vYo/uPbqy/fpvtgnYEtdqqUkf9iCPzA+qAg= Subject key identifier: 12:37:7A:EF:B9:FB:0B:0B:CE:F9:AE:65:2F:0E:6C:22:2F:48:F1:5E Authority key identifier: DF:BF:5F:83:0B:50:B3:BF:C1:E5:35:0B:9C:60:5B:B7:56:12:2E:11 Certificate issuer: /CN=A91DBB7D/serialNumber=DFBF5F830B50B3BFC1E5350B9C605BB756122E11 Certificate serial: 03FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft Manifest number: 03F6 Signing time: Tue 07 May 2024 02:10:48 +0000 Manifest this update: Tue 07 May 2024 02:10:47 +0000 Manifest next update: Tue 14 May 2024 02:10:47 +0000 Files and hashes: 1: 379fgwtQs7_B5TULnGBbt1YSLhE.crl (hash: m2ocXeawCQfaXHMJ/A4BAHRrLa7OoYGAFBw22+NILmw=) 2: D5C4A54A617B11EC82058668C4F9AE02.roa (hash: v+vVA6ooBVXCQ78o+N06EeD4Zu2vKlMqLngnPLF5bAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.crl rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 02:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1019 (0x3fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBB7D/serialNumber=DFBF5F830B50B3BFC1E5350B9C605BB756122E11 Validity Not Before: May 7 02:10:47 2024 GMT Not After : May 14 02:10:47 2024 GMT Subject: CN=66398da7-ce79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8b:9a:ee:50:56:3b:2c:08:86:f3:4e:80:ae: 52:85:4f:ce:5a:ee:47:44:43:71:b8:67:a8:73:1f: be:1b:67:1d:35:96:2c:94:ac:c4:8e:38:6e:27:65: 2e:7b:d8:86:9e:b1:68:b2:2b:d3:58:4c:59:84:00: 35:72:a3:b3:e0:11:99:c0:49:ad:4d:52:63:0d:6c: c2:6d:8d:b7:1b:8a:62:06:42:55:81:05:27:45:98: 46:02:7f:fb:b0:6e:d3:3c:fc:5d:20:99:9d:92:aa: 3f:d9:6c:d8:d6:9f:34:13:10:1f:47:cb:10:89:df: d5:b9:b2:65:b9:cb:dc:73:47:09:e4:54:17:48:12: 25:f3:b1:9a:e6:48:de:eb:74:fd:e5:fa:ff:69:cc: da:59:fe:18:fd:fe:25:ad:45:58:9f:ae:a2:75:f7: 46:7c:9b:4c:30:cb:6d:82:6b:65:9a:65:0f:0c:a4: dc:54:bd:ba:2d:d8:eb:9e:25:e8:5b:e8:87:40:f0: 71:45:d6:c5:50:66:a9:4f:7d:bd:5a:bb:c6:30:c1: 3f:38:cb:7b:6a:3c:14:82:6c:50:2d:b9:26:1f:91: e3:1c:2e:c9:fc:c9:a7:5c:9e:36:4a:89:e6:78:e2: 63:96:15:67:9b:3f:b5:ee:8e:d2:96:1b:14:5b:74: b4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:37:7A:EF:B9:FB:0B:0B:CE:F9:AE:65:2F:0E:6C:22:2F:48:F1:5E X509v3 Authority Key Identifier: keyid:DF:BF:5F:83:0B:50:B3:BF:C1:E5:35:0B:9C:60:5B:B7:56:12:2E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:61:f9:f8:04:3f:31:f8:a5:96:d3:4e:c8:b9:74:a3:34:bb: f9:11:bb:ed:78:8e:a3:89:d0:d9:4d:0d:b2:67:70:09:15:3f: 7b:43:ea:8c:bc:53:02:8c:cd:8e:8f:da:85:97:55:8a:5c:7e: 26:d5:2b:0f:92:7d:8b:96:e4:ee:fd:5d:27:4f:f3:3f:ec:76: 59:e0:14:ff:d3:ce:36:4b:60:8f:f8:0e:c1:41:5c:21:51:92: 5d:c0:91:16:09:c3:e9:68:1a:df:d8:6f:59:26:2f:b4:74:bf: 2a:09:28:bb:37:a2:26:7d:e4:d8:ec:93:10:d9:ae:d1:c8:dd: c7:a3:64:f5:df:f1:8a:30:98:10:04:0a:77:0e:23:be:05:0b: b1:cb:8f:c9:1a:92:e3:90:3c:72:24:00:16:1d:a9:c7:92:37: 1b:68:69:f0:20:35:6c:58:0c:f9:76:54:0a:65:09:37:82:cb: 4b:af:57:f1:43:b9:54:fd:8c:90:46:e8:8e:8d:5e:99:31:3b: 7a:31:90:68:b8:e9:7c:eb:a7:a6:f9:7f:9c:ee:63:be:8e:d9: ed:88:26:60:a9:ac:96:b6:89:15:00:60:0f:11:7f:e1:b9:49: 4b:8f:71:e5:86:1b:35:52:ee:31:22:8f:7c:11:7a:37:fe:62: 3b:c6:1f:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJCN0QxMTAvBgNVBAUTKERGQkY1RjgzMEI1MEIzQkZDMUU1MzUwQjlDNjA1QkI3 NTYxMjJFMTEwHhcNMjQwNTA3MDIxMDQ3WhcNMjQwNTE0MDIxMDQ3WjAYMRYwFAYD VQQDEw02NjM5OGRhNy1jZTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtIua7lBWOywIhvNOgK5ShU/OWu5HRENxuGeocx++G2cdNZYslKzEjjhuJ2Uu e9iGnrFosivTWExZhAA1cqOz4BGZwEmtTVJjDWzCbY23G4piBkJVgQUnRZhGAn/7 sG7TPPxdIJmdkqo/2WzY1p80ExAfR8sQid/VubJlucvcc0cJ5FQXSBIl87Ga5kje 63T95fr/aczaWf4Y/f4lrUVYn66idfdGfJtMMMttgmtlmmUPDKTcVL26LdjrniXo W+iHQPBxRdbFUGapT329WrvGMME/OMt7ajwUgmxQLbkmH5HjHC7J/MmnXJ42Sonm eOJjlhVnmz+17o7SlhsUW3S0wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBI3eu+5 +wsLzvmuZS8ObCIvSPFeMB8GA1UdIwQYMBaAFN+/X4MLULO/weU1C5xgW7dWEi4R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkI3RC8zMDE3MDk2RTJC QjkxMUVDQjJCMzY3NEZDNEY5QUUwMi8zNzlmZ3d0UXM3X0I1VFVMbkdCYnQxWVNM aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM3OWZnd3RRczdfQjVUVUxuR0JidDFZU0xoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkI3RC8zMDE3MDk2RTJCQjkxMUVDQjJCMzY3NEZDNEY5QUUwMi8zNzlmZ3d0UXM3 X0I1VFVMbkdCYnQxWVNMaEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzYfn4BD8x+KWW007IuXSjNLv5EbvteI6jidDZTQ2yZ3AJFT97Q+qM vFMCjM2Oj9qFl1WKXH4m1SsPkn2LluTu/V0nT/M/7HZZ4BT/0842S2CP+A7BQVwh UZJdwJEWCcPpaBrf2G9ZJi+0dL8qCSi7N6ImfeTY7JMQ2a7RyN3Ho2T13/GKMJgQ BAp3DiO+BQuxy4/JGpLjkDxyJAAWHanHkjcbaGnwIDVsWAz5dlQKZQk3gstLr1fx Q7lU/YyQRuiOjV6ZMTt6MZBouOl866em+X+c7mO+jtntiCZgqayWtokVAGAPEX/h uUlLj3Hlhhs1Uu4xIo98EXo3/mI7xh8B -----END CERTIFICATE-----Generated at Tue May 7 03:10:23 2024 by rpki-client on console-ams.rpki-client.org