$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft File: 156odshIAT1wTjIDr31ghtsCx50.mft (raw, json) Hash identifier: c7pl59LiBItxeFbRimWW0TTGJnYSnE2phlNwz9tvKWw= Subject key identifier: E9:86:8A:A6:7D:0F:0B:9B:22:1A:FB:1D:12:5F:8B:9F:90:FF:36:D6 Authority key identifier: D7:9E:A8:76:C8:48:01:3D:70:4E:32:03:AF:7D:60:86:DB:02:C7:9D Certificate issuer: /CN=A91EB7B8/serialNumber=D79EA876C848013D704E3203AF7D6086DB02C79D Certificate serial: 0241 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/156odshIAT1wTjIDr31ghtsCx50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft Manifest number: 023A Signing time: Sat 27 Apr 2024 03:55:42 +0000 Manifest this update: Sat 27 Apr 2024 03:55:42 +0000 Manifest next update: Sat 04 May 2024 03:55:42 +0000 Files and hashes: 1: 156odshIAT1wTjIDr31ghtsCx50.crl (hash: imq1GoWRdYFrf8o1M+O+6PgvAnRDwwiDtFNmtm/IRbE=) 2: BD8AAEBAD6BE11EEAAFF5049C4F9AE02.roa (hash: 8azX6zcdxTFG+P4Xnx30M0oByKkEDCOgwEnTNCtYIKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.crl rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/156odshIAT1wTjIDr31ghtsCx50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 03:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 577 (0x241) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB7B8/serialNumber=D79EA876C848013D704E3203AF7D6086DB02C79D Validity Not Before: Apr 27 03:55:42 2024 GMT Not After : May 4 03:55:42 2024 GMT Subject: CN=662c773e-96de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:60:d1:80:ec:6e:d5:c2:bd:b1:cb:f6:53:64: 9a:72:fa:21:6c:9d:20:00:92:d5:df:d2:1b:14:61: 2a:1c:40:b8:f4:88:14:5f:00:1e:03:82:81:97:0e: 1b:be:80:79:ea:67:02:8a:3b:e0:d5:87:e4:5d:c0: 5f:f7:b1:95:e7:d6:24:e0:b4:92:ac:eb:99:26:ac: f8:3b:75:52:f3:c1:1f:68:51:b5:ac:e5:8e:81:20: 83:18:e9:04:e1:80:ea:3e:65:bf:28:da:ef:bf:24: a3:f2:6b:f3:15:c8:a3:2e:45:67:06:46:00:68:57: fe:ee:79:87:75:b0:a7:1d:26:41:80:39:c0:a1:5a: d7:1b:f1:50:37:65:d6:6e:f7:4e:cf:0f:92:56:87: 32:d2:6a:cc:cd:be:3d:30:fb:54:65:b2:ab:0c:67: f7:53:0a:8c:80:90:c4:96:d0:39:bd:37:8e:04:10: c5:ab:cd:63:d0:f4:01:5e:ff:af:13:2b:e7:91:7d: a8:55:96:bb:70:a0:6d:3e:a9:a4:58:a7:4d:4e:6f: 54:41:9f:2c:ff:53:5b:b5:d8:20:7a:02:b0:5e:0d: 5f:7e:22:06:9c:5c:30:9b:ce:3f:3b:fb:f4:4d:c2: a3:01:d8:c2:0c:6e:1d:76:5c:8b:bb:b9:b3:62:dc: 3e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:86:8A:A6:7D:0F:0B:9B:22:1A:FB:1D:12:5F:8B:9F:90:FF:36:D6 X509v3 Authority Key Identifier: keyid:D7:9E:A8:76:C8:48:01:3D:70:4E:32:03:AF:7D:60:86:DB:02:C7:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/156odshIAT1wTjIDr31ghtsCx50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:72:14:3b:20:8f:30:41:4c:3a:25:6c:2b:f2:43:02:b5:8d: 89:14:ce:83:19:5a:05:07:fa:55:de:5f:89:39:4d:25:7b:89: 7e:1a:15:19:59:32:aa:27:86:6f:96:3b:99:f9:88:82:ba:ca: 63:43:69:1b:c4:38:f8:7f:a2:fe:50:b8:8a:4b:dd:3f:1a:88: 5f:73:da:51:bd:63:34:f8:e7:ab:41:f1:9d:8f:0a:36:8d:5c: 8c:16:f6:64:96:c6:a6:22:09:1d:0f:39:53:a2:d1:64:06:00: 5b:21:5e:51:62:81:87:53:f2:fb:e2:14:cd:ed:75:05:3e:ab: 24:0f:89:0f:6e:ca:8e:ce:d9:d2:92:14:e1:fb:e9:ec:41:40: 31:c4:51:36:58:f4:32:8b:03:cd:f6:f2:71:9d:41:9c:3e:7a: 31:34:21:03:ef:08:fa:94:01:e8:14:37:95:f5:5b:c7:4a:85: 55:e2:90:00:64:4b:3d:5a:aa:9a:f6:15:f1:1d:ec:2a:fe:61: df:4f:70:60:cf:14:78:50:f0:af:62:ca:d2:ca:a6:2e:ea:f9: 37:88:75:8a:91:bf:cc:50:a1:b1:53:30:9d:83:d4:1d:e3:ba: c1:39:44:a8:e1:ad:50:10:bc:e5:02:40:a4:8e:ea:29:4f:f1: 7e:09:95:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI3QjgxMTAvBgNVBAUTKEQ3OUVBODc2Qzg0ODAxM0Q3MDRFMzIwM0FGN0Q2MDg2 REIwMkM3OUQwHhcNMjQwNDI3MDM1NTQyWhcNMjQwNTA0MDM1NTQyWjAYMRYwFAYD VQQDEw02NjJjNzczZS05NmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo2DRgOxu1cK9scv2U2SacvohbJ0gAJLV39IbFGEqHEC49IgUXwAeA4KBlw4b voB56mcCijvg1YfkXcBf97GV59Yk4LSSrOuZJqz4O3VS88EfaFG1rOWOgSCDGOkE 4YDqPmW/KNrvvySj8mvzFcijLkVnBkYAaFf+7nmHdbCnHSZBgDnAoVrXG/FQN2XW bvdOzw+SVocy0mrMzb49MPtUZbKrDGf3UwqMgJDEltA5vTeOBBDFq81j0PQBXv+v EyvnkX2oVZa7cKBtPqmkWKdNTm9UQZ8s/1NbtdggegKwXg1ffiIGnFwwm84/O/v0 TcKjAdjCDG4ddlyLu7mzYtw+jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOmGiqZ9 DwubIhr7HRJfi5+Q/zbWMB8GA1UdIwQYMBaAFNeeqHbISAE9cE4yA699YIbbAsed MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjdCOC80REUxNkNFNEQ4 MTgxMUVDQjY0OTNENUFDNEY5QUUwMi8xNTZvZHNoSUFUMXdUaklEcjMxZ2h0c0N4 NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1Nm9kc2hJQVQxd1RqSURyMzFnaHRzQ3g1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjdCOC80REUxNkNFNEQ4MTgxMUVDQjY0OTNENUFDNEY5QUUwMi8xNTZvZHNoSUFU MXdUaklEcjMxZ2h0c0N4NTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBachQ7II8wQUw6JWwr8kMCtY2JFM6DGVoFB/pV3l+JOU0le4l+GhUZ WTKqJ4ZvljuZ+YiCuspjQ2kbxDj4f6L+ULiKS90/Gohfc9pRvWM0+OerQfGdjwo2 jVyMFvZklsamIgkdDzlTotFkBgBbIV5RYoGHU/L74hTN7XUFPqskD4kPbsqOztnS khTh++nsQUAxxFE2WPQyiwPN9vJxnUGcPnoxNCED7wj6lAHoFDeV9VvHSoVV4pAA ZEs9Wqqa9hXxHewq/mHfT3BgzxR4UPCvYsrSyqYu6vk3iHWKkb/MUKGxUzCdg9Qd 47rBOUSo4a1QELzlAkCkjuopT/F+CZWQ -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:51 2024 by rpki-client on console-ams.rpki-client.org