$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft File: dxIwqC7bwncWqz3GqC_FrsRe72c.mft (raw, json) Hash identifier: /w2YxWB5E2H7Fi+VnmC24CqAo+Lhvcy238BRPVfwJFc= Subject key identifier: 10:01:D2:BC:70:72:F1:B4:C6:9D:D0:70:64:09:52:35:2F:6B:E0:AB Authority key identifier: 77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67 Certificate issuer: /CN=A91E4463/serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67 Certificate serial: 0B60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft Manifest number: 0B49 Signing time: Sat 18 May 2024 19:45:34 +0000 Manifest this update: Sat 18 May 2024 19:45:33 +0000 Manifest next update: Sat 25 May 2024 19:45:33 +0000 Files and hashes: 1: dxIwqC7bwncWqz3GqC_FrsRe72c.crl (hash: Qr11M+jaG16i2P0ZwQR418QHgm5zAIpMo5esbt40RV4=) 2: 51152BBEC31611EDB9713281C4F9AE02.roa (hash: a38R/kJjWCmAAQODsxLv22bFWHt+FOdsqY9kypBmIYs=) 3: AF625B0680FA11EC96280855C4F9AE02.roa (hash: E3B3g4VAEyLf5g5lxP3OkUQYcv0XXwClQf1bCMVwZF8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:45:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2912 (0xb60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4463/serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67 Validity Not Before: May 18 19:45:33 2024 GMT Not After : May 25 19:45:33 2024 GMT Subject: CN=6649055e-b2d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:92:e9:33:ec:1f:12:3c:c3:57:56:0c:00:57: 14:bc:aa:8a:a3:54:84:1b:0d:8a:02:50:5f:ba:a0: f6:ed:d4:07:16:25:f1:fa:16:46:94:e6:c5:96:e2: 20:02:db:bc:9b:ff:9f:f8:58:95:ec:21:33:5a:5d: 7f:e4:ae:82:cb:c4:ac:a4:d0:b8:8d:0d:84:00:d8: da:b6:fb:dd:29:b0:1c:0d:6f:4e:db:b9:e8:d9:c1: 48:76:63:2b:c3:f8:57:b8:6f:75:47:97:e1:9f:0e: 3f:fc:bf:a5:ad:5c:65:cb:a2:fd:02:a8:57:48:8d: 67:bf:7c:32:95:c5:a6:0e:fa:6f:94:0f:92:62:80: 60:ef:1a:81:4f:c1:14:46:d1:bf:87:3e:33:22:93: db:88:e5:db:a3:5a:5f:3b:ae:83:22:fc:c7:0c:b0: 1f:28:0a:b6:ed:39:b9:ef:ff:ba:ac:d8:b9:25:4a: e1:6f:a8:f0:5a:3b:e9:31:3c:b7:a9:1a:8b:7f:cc: 2f:4e:6e:63:13:d9:87:a8:4d:2c:db:3a:3a:88:9f: d2:29:b4:e4:5c:96:51:eb:eb:ff:0b:35:49:5f:a4: f9:84:bf:da:b1:55:f0:d6:c9:1a:7d:52:2b:dc:00: 72:9c:f9:b6:96:ed:ef:16:47:3e:39:0b:d4:dd:8c: c0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:01:D2:BC:70:72:F1:B4:C6:9D:D0:70:64:09:52:35:2F:6B:E0:AB X509v3 Authority Key Identifier: keyid:77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:fe:df:05:b4:80:b6:3b:95:a2:70:6c:1a:01:59:32:30:1c: ca:6a:33:a9:22:f4:a3:9d:6a:be:97:5d:07:7f:ca:e2:60:ac: f3:88:74:23:68:cb:08:8d:61:38:eb:6d:85:11:17:e3:37:1c: 68:17:70:ca:28:15:95:5c:61:6c:ca:e3:c6:56:7e:ab:97:c8: 72:d2:55:a7:ec:92:ee:60:31:42:08:dd:5e:fa:8f:b3:8d:7e: 55:2e:dd:a2:c8:16:b7:b1:9b:47:f6:95:f0:ad:8e:24:ad:aa: 4e:94:e4:7b:fa:f6:16:53:02:54:62:1c:68:52:88:1e:46:bc: 3f:c9:32:36:86:be:e6:7c:53:d1:22:72:1f:e2:7a:73:0e:6a: 6d:55:97:a9:71:c0:d8:f1:38:f5:1c:32:eb:fb:e4:97:6d:23: 24:85:ba:4a:d5:4a:05:98:94:17:06:8a:6e:16:ac:dd:e8:7c: 57:24:cc:d9:01:ed:b0:ec:f1:cb:8d:76:db:e5:4b:5f:a4:6b: 54:1d:5b:e7:e5:55:21:6c:c4:bd:25:b6:d3:7b:54:5a:7d:94: 6f:cc:8d:f8:9f:a2:16:ce:3e:ae:ba:b0:e1:5a:37:b3:28:39: cc:0b:42:27:22:7c:a5:e3:9f:e1:10:8b:f1:ec:81:bb:cd:46: 68:52:25:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ0NjMxMTAvBgNVBAUTKDc3MTIzMEE4MkVEQkMyNzcxNkFCM0RDNkE4MkZDNUFF QzQ1RUVGNjcwHhcNMjQwNTE4MTk0NTMzWhcNMjQwNTI1MTk0NTMzWjAYMRYwFAYD VQQDEw02NjQ5MDU1ZS1iMmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/ZLpM+wfEjzDV1YMAFcUvKqKo1SEGw2KAlBfuqD27dQHFiXx+hZGlObFluIg Atu8m/+f+FiV7CEzWl1/5K6Cy8SspNC4jQ2EANjatvvdKbAcDW9O27no2cFIdmMr w/hXuG91R5fhnw4//L+lrVxly6L9AqhXSI1nv3wylcWmDvpvlA+SYoBg7xqBT8EU RtG/hz4zIpPbiOXbo1pfO66DIvzHDLAfKAq27Tm57/+6rNi5JUrhb6jwWjvpMTy3 qRqLf8wvTm5jE9mHqE0s2zo6iJ/SKbTkXJZR6+v/CzVJX6T5hL/asVXw1skafVIr 3ABynPm2lu3vFkc+OQvU3YzAdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBAB0rxw cvG0xp3QcGQJUjUva+CrMB8GA1UdIwQYMBaAFHcSMKgu28J3Fqs9xqgvxa7EXu9n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDQ2My9BNEQ0NDAwQzEz OUYxMUVBQTY1ODI4NjBDNEY5QUUwMi9keEl3cUM3YnduY1dxejNHcUNfRnJzUmU3 MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R4SXdxQzdid25jV3F6M0dxQ19GcnNSZTcyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDQ2My9BNEQ0NDAwQzEzOUYxMUVBQTY1ODI4NjBDNEY5QUUwMi9keEl3cUM3Yndu Y1dxejNHcUNfRnJzUmU3MmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt/t8FtIC2O5WicGwaAVkyMBzKajOpIvSjnWq+l10Hf8riYKzziHQj aMsIjWE4622FERfjNxxoF3DKKBWVXGFsyuPGVn6rl8hy0lWn7JLuYDFCCN1e+o+z jX5VLt2iyBa3sZtH9pXwrY4krapOlOR7+vYWUwJUYhxoUogeRrw/yTI2hr7mfFPR InIf4npzDmptVZepccDY8Tj1HDLr++SXbSMkhbpK1UoFmJQXBopuFqzd6HxXJMzZ Ae2w7PHLjXbb5UtfpGtUHVvn5VUhbMS9JbbTe1RafZRvzI34n6IWzj6uurDhWjez KDnMC0InInyl45/hEIvx7IG7zUZoUiW2 -----END CERTIFICATE-----Generated at Sat May 18 21:31:32 2024 by rpki-client on console-ams.rpki-client.org