$ rpki-client -vvf rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/DB8k6eYChXae9hTPqBPuUayemP4.mft File: DB8k6eYChXae9hTPqBPuUayemP4.mft (raw, json) Hash identifier: Gp+65CUR61rlrMWJ3vPl0TzyqDLfDpC58HeJPHGPkSw= Subject key identifier: 9F:C8:03:81:07:A7:31:2C:76:A0:4F:58:DC:DF:EB:E3:93:98:31:0C Authority key identifier: 0C:1F:24:E9:E6:02:85:76:9E:F6:14:CF:A8:13:EE:51:AC:9E:98:FE Certificate issuer: /CN=A91E754F/serialNumber=0C1F24E9E60285769EF614CFA813EE51AC9E98FE Certificate serial: 0599 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DB8k6eYChXae9hTPqBPuUayemP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/DB8k6eYChXae9hTPqBPuUayemP4.mft Manifest number: 0593 Signing time: Fri 03 May 2024 00:33:19 +0000 Manifest this update: Fri 03 May 2024 00:33:19 +0000 Manifest next update: Fri 10 May 2024 00:33:19 +0000 Files and hashes: 1: DB8k6eYChXae9hTPqBPuUayemP4.crl (hash: 7FXFAzk4Zd1xTLOq1tIuXHkZYIROCWdlsPyCmz9wegU=) 2: 26F67E0A842011EB8A4C635AC4F9AE02.roa (hash: gOnXbNeu+S+eCDT5stBppZX1cESI7ntwOeiwcOw+aHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/DB8k6eYChXae9hTPqBPuUayemP4.crl rsync://rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/DB8k6eYChXae9hTPqBPuUayemP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DB8k6eYChXae9hTPqBPuUayemP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1433 (0x599) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E754F/serialNumber=0C1F24E9E60285769EF614CFA813EE51AC9E98FE Validity Not Before: May 3 00:33:19 2024 GMT Not After : May 10 00:33:19 2024 GMT Subject: CN=663430cf-d9e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:38:03:32:d7:24:20:d6:13:2b:b5:25:bd:23: eb:db:81:c5:4f:7f:e1:5a:3c:18:26:5e:43:79:81: 65:7b:6d:2f:eb:84:be:d4:73:b0:b3:12:d0:07:94: ae:25:ce:da:9f:87:d2:be:a2:7d:c5:03:ba:52:ac: c1:e3:e1:65:6a:07:b4:32:64:71:3f:81:db:1d:ee: f5:8e:46:65:f4:db:a6:14:cf:06:5c:3e:5d:22:5e: d9:96:68:6b:98:20:0f:1a:4a:92:83:d8:e6:4e:0a: 08:08:b9:41:9e:23:24:66:32:93:6f:17:84:e0:cd: 34:1c:94:14:56:85:f1:ae:f4:ac:cd:ef:0a:d3:31: 3d:93:3f:03:36:05:a4:43:f2:48:b5:3c:15:15:16: 95:62:f7:90:93:d7:c7:03:87:cb:29:2d:e8:8d:ea: 41:98:b9:bc:cc:57:18:ce:bc:38:db:c2:8e:e2:dd: b2:78:fa:cc:25:34:c4:4b:e0:3b:1a:54:15:5b:7c: 58:07:25:6d:6d:ab:d8:3e:be:67:12:f8:99:3e:46: d1:43:b1:9d:9e:00:e6:77:9f:d7:f6:cd:3b:0a:61: 33:b1:10:72:86:a7:06:a7:b4:15:9e:84:d6:39:42: ba:64:e7:a7:29:5f:1a:f5:46:e3:90:2e:42:73:1a: b9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C8:03:81:07:A7:31:2C:76:A0:4F:58:DC:DF:EB:E3:93:98:31:0C X509v3 Authority Key Identifier: keyid:0C:1F:24:E9:E6:02:85:76:9E:F6:14:CF:A8:13:EE:51:AC:9E:98:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/DB8k6eYChXae9hTPqBPuUayemP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DB8k6eYChXae9hTPqBPuUayemP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/DB8k6eYChXae9hTPqBPuUayemP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:02:f0:18:af:d0:5e:2c:d9:51:aa:82:ab:dc:83:d8:89:ce: ac:d0:c3:3a:68:5a:ed:62:dd:3b:72:8b:df:ce:51:a7:ce:4e: b8:73:1a:39:38:47:ea:f3:a4:ea:74:1f:eb:a2:ec:7c:3b:5c: 4a:29:2a:fb:6f:4a:08:0b:7c:04:ac:49:94:c9:8e:57:be:ea: 0c:9b:aa:e4:7c:28:0a:36:23:1a:9a:57:73:b7:9b:ee:ff:19: 5a:91:d6:f9:7f:47:3e:2a:e3:7e:84:7b:4f:79:d1:46:10:41: 5a:44:39:0d:88:09:f9:7e:58:ed:35:b7:b8:ba:b5:ea:e7:89: ce:e2:bd:d9:cb:3f:2a:61:1d:33:7f:b4:11:32:53:a0:b3:38: 94:cc:93:04:21:73:1b:28:24:ff:db:f4:13:8f:0e:ae:d6:2a: 47:34:9b:72:29:0c:81:db:43:37:b2:1a:10:cd:e0:12:c8:e7: a5:57:6d:c5:b4:4e:a2:e7:97:54:0e:ba:ff:b2:56:02:a6:44: 2d:7b:0a:c8:39:0e:b7:67:3d:3b:ab:52:3a:9a:37:49:21:0c: 98:57:9c:56:79:42:27:27:05:66:0f:1d:bc:4d:d1:e4:a7:5f: ff:22:80:39:e3:28:9f:f6:75:f6:a8:01:4d:bb:cb:85:77:80: 92:5a:63:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc1NEYxMTAvBgNVBAUTKDBDMUYyNEU5RTYwMjg1NzY5RUY2MTRDRkE4MTNFRTUx QUM5RTk4RkUwHhcNMjQwNTAzMDAzMzE5WhcNMjQwNTEwMDAzMzE5WjAYMRYwFAYD VQQDEw02NjM0MzBjZi1kOWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmDgDMtckINYTK7UlvSPr24HFT3/hWjwYJl5DeYFle20v64S+1HOwsxLQB5Su Jc7an4fSvqJ9xQO6UqzB4+Flage0MmRxP4HbHe71jkZl9NumFM8GXD5dIl7Zlmhr mCAPGkqSg9jmTgoICLlBniMkZjKTbxeE4M00HJQUVoXxrvSsze8K0zE9kz8DNgWk Q/JItTwVFRaVYveQk9fHA4fLKS3ojepBmLm8zFcYzrw428KO4t2yePrMJTTES+A7 GlQVW3xYByVtbavYPr5nEviZPkbRQ7GdngDmd5/X9s07CmEzsRByhqcGp7QVnoTW OUK6ZOenKV8a9UbjkC5Ccxq5XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/IA4EH pzEsdqBPWNzf6+OTmDEMMB8GA1UdIwQYMBaAFAwfJOnmAoV2nvYUz6gT7lGsnpj+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzU0Ri9CNDUyQkY4Qzg0 MUQxMUVCQTA4N0JGMzFDNEY5QUUwMi9EQjhrNmVZQ2hYYWU5aFRQcUJQdVVheWVt UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RCOGs2ZVlDaFhhZTloVFBxQlB1VWF5ZW1QNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzU0Ri9CNDUyQkY4Qzg0MUQxMUVCQTA4N0JGMzFDNEY5QUUwMi9EQjhrNmVZQ2hY YWU5aFRQcUJQdVVheWVtUDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLAvAYr9BeLNlRqoKr3IPYic6s0MM6aFrtYt07covfzlGnzk64cxo5 OEfq86TqdB/roux8O1xKKSr7b0oIC3wErEmUyY5XvuoMm6rkfCgKNiMamldzt5vu /xlakdb5f0c+KuN+hHtPedFGEEFaRDkNiAn5fljtNbe4urXq54nO4r3Zyz8qYR0z f7QRMlOgsziUzJMEIXMbKCT/2/QTjw6u1ipHNJtyKQyB20M3shoQzeASyOelV23F tE6i55dUDrr/slYCpkQtewrIOQ63Zz07q1I6mjdJIQyYV5xWeUInJwVmDx28TdHk p1//IoA54yif9nX2qAFNu8uFd4CSWmMZ -----END CERTIFICATE-----Generated at Fri May 3 03:10:57 2024 by rpki-client on console-ams.rpki-client.org