$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.mft File: 2itDzBg8qOD2qPbapUzdcwb4Yig.mft (raw, json) Hash identifier: tFYfAn/AM/hhlO+1wx/gxU0czsgkndTssKMMcrtT4XU= Subject key identifier: 39:5C:01:5E:D0:EB:01:B0:B4:17:A2:CB:CC:F9:A9:43:1E:22:38:A4 Authority key identifier: DA:2B:43:CC:18:3C:A8:E0:F6:A8:F6:DA:A5:4C:DD:73:06:F8:62:28 Certificate issuer: /CN=A91DF0EC/serialNumber=DA2B43CC183CA8E0F6A8F6DAA54CDD7306F86228 Certificate serial: 093C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.mft Manifest number: 092F Signing time: Sat 04 May 2024 21:20:23 +0000 Manifest this update: Sat 04 May 2024 21:20:23 +0000 Manifest next update: Sat 11 May 2024 21:20:23 +0000 Files and hashes: 1: 2itDzBg8qOD2qPbapUzdcwb4Yig.crl (hash: 5SrnUQ832EJI+7GHfKRtrR6In3fBX4JqgERw+YEKqiM=) 2: 0D6FFE56BA3511ECA20A3817C4F9AE02.roa (hash: XIqQJTy7dTxA5gKIZ4WEkQ1HDOZ4ukIBJQ8ua1/vbI4=) 3: C8A0E422831611EA95762453C4F9AE02.roa (hash: sDxyWDjxy3FFVai72/RKSzm5kH6Wl/u3rzH8bUHmbvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.crl rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2364 (0x93c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF0EC/serialNumber=DA2B43CC183CA8E0F6A8F6DAA54CDD7306F86228 Validity Not Before: May 4 21:20:23 2024 GMT Not After : May 11 21:20:23 2024 GMT Subject: CN=6636a697-1f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2b:81:84:d1:3c:c4:0e:cb:af:a4:15:4f:18: 26:5c:04:04:54:6e:6e:a1:96:70:3d:83:ee:38:55: 67:f6:04:1c:46:6d:e6:a0:55:0d:b1:c2:b2:81:8b: a2:4d:82:78:51:85:f8:da:b3:20:45:31:5c:ef:07: 26:8c:e3:5f:8c:a8:8d:dc:60:e8:6c:86:59:24:7d: f4:9b:37:9c:5f:73:c4:b3:a2:33:46:f3:66:03:6f: 70:62:92:8c:3c:34:3d:0b:4e:90:c0:b8:0e:f7:05: cf:88:20:c3:91:47:ec:f6:47:32:5f:75:b0:d1:c9: 3a:c9:b9:1a:b1:7b:c9:07:0a:13:cf:28:f7:00:0e: 76:c5:80:8d:96:40:eb:a2:0f:b9:b6:78:64:7d:da: 4c:00:43:71:4b:80:08:87:5b:00:bb:62:36:51:05: 0f:c6:94:31:91:4b:d6:68:8a:74:23:9f:93:da:2e: c1:df:db:49:e7:cc:16:8a:c5:35:90:33:e6:22:7a: c2:f7:b6:62:c8:39:0c:2a:7f:a6:62:db:62:02:a9: 22:de:b7:a9:0e:9e:ca:fe:d8:89:1b:b4:d1:7a:14: 9b:d9:af:f1:02:7c:14:51:6f:3c:33:e9:5a:9d:bd: 7d:71:a5:d9:65:02:2f:e2:73:bd:c1:36:db:92:6f: 5f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:5C:01:5E:D0:EB:01:B0:B4:17:A2:CB:CC:F9:A9:43:1E:22:38:A4 X509v3 Authority Key Identifier: keyid:DA:2B:43:CC:18:3C:A8:E0:F6:A8:F6:DA:A5:4C:DD:73:06:F8:62:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:12:31:72:38:9f:44:db:91:aa:b9:6b:ce:9a:c7:8c:c0:33: ec:8b:ef:1e:5b:d8:a9:db:05:ce:90:db:e3:1c:ba:f3:30:6f: d4:7c:c4:fc:a5:0d:40:b7:8a:0b:fd:e4:d3:f1:f7:33:96:f5: ec:6a:27:4b:51:43:78:f6:ec:9b:a1:ad:f0:2f:c4:b8:18:a1: fe:01:75:4e:40:fe:e5:d7:63:0b:05:46:10:72:f4:76:2a:73: 24:35:75:65:f7:62:f8:58:69:71:59:20:c2:91:55:8e:c3:ee: d9:6d:01:53:c2:9f:81:76:d3:f0:fa:e6:18:42:d3:ac:b9:5d: 0b:0a:27:4a:4b:14:31:68:fe:4a:a7:9b:6f:a6:fe:22:eb:14: d3:b8:25:87:c7:df:d7:4e:a5:86:09:90:01:22:43:39:fa:c3: 83:ea:37:19:bc:7b:02:cd:42:bf:2d:c2:68:e4:b6:66:3e:fe: 1b:3b:7b:d4:a6:b4:ec:9a:85:78:b3:d6:e0:84:49:80:76:08: 6f:01:b4:8d:1c:ce:78:5a:5e:37:86:fd:76:50:b7:24:80:b7: d9:7a:07:53:a8:60:5e:30:28:be:a1:bc:5e:41:90:0f:21:f4: b8:8e:97:90:85:a6:08:76:df:c0:7f:75:d5:08:fe:46:d4:9d: 4e:5e:57:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYwRUMxMTAvBgNVBAUTKERBMkI0M0NDMTgzQ0E4RTBGNkE4RjZEQUE1NENERDcz MDZGODYyMjgwHhcNMjQwNTA0MjEyMDIzWhcNMjQwNTExMjEyMDIzWjAYMRYwFAYD VQQDEw02NjM2YTY5Ny0xZjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwCuBhNE8xA7Lr6QVTxgmXAQEVG5uoZZwPYPuOFVn9gQcRm3moFUNscKygYui TYJ4UYX42rMgRTFc7wcmjONfjKiN3GDobIZZJH30mzecX3PEs6IzRvNmA29wYpKM PDQ9C06QwLgO9wXPiCDDkUfs9kcyX3Ww0ck6ybkasXvJBwoTzyj3AA52xYCNlkDr og+5tnhkfdpMAENxS4AIh1sAu2I2UQUPxpQxkUvWaIp0I5+T2i7B39tJ58wWisU1 kDPmInrC97ZiyDkMKn+mYttiAqki3repDp7K/tiJG7TRehSb2a/xAnwUUW88M+la nb19caXZZQIv4nO9wTbbkm9fmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDlcAV7Q 6wGwtBeiy8z5qUMeIjikMB8GA1UdIwQYMBaAFNorQ8wYPKjg9qj22qVM3XMG+GIo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjBFQy85OTFDRUY3RTc5 NTgxMUVBOTNBRTk2NDZDNEY5QUUwMi8yaXREekJnOHFPRDJxUGJhcFV6ZGN3YjRZ aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJpdER6Qmc4cU9EMnFQYmFwVXpkY3diNFlpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjBFQy85OTFDRUY3RTc5NTgxMUVBOTNBRTk2NDZDNEY5QUUwMi8yaXREekJnOHFP RDJxUGJhcFV6ZGN3YjRZaWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsEjFyOJ9E25GquWvOmseMwDPsi+8eW9ip2wXOkNvjHLrzMG/UfMT8 pQ1At4oL/eTT8fczlvXsaidLUUN49uyboa3wL8S4GKH+AXVOQP7l12MLBUYQcvR2 KnMkNXVl92L4WGlxWSDCkVWOw+7ZbQFTwp+BdtPw+uYYQtOsuV0LCidKSxQxaP5K p5tvpv4i6xTTuCWHx9/XTqWGCZABIkM5+sOD6jcZvHsCzUK/LcJo5LZmPv4bO3vU prTsmoV4s9bghEmAdghvAbSNHM54Wl43hv12ULckgLfZegdTqGBeMCi+obxeQZAP IfS4jpeQhaYIdt/Af3XVCP5G1J1OXle7 -----END CERTIFICATE-----Generated at Sat May 4 22:06:54 2024 by rpki-client on console-ams.rpki-client.org