$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECA1F/09D37E48DB0711EB9F659537C4F9AE02/p_soeDndrIqKyBZ_BwQbayW9V9o.mft File: p_soeDndrIqKyBZ_BwQbayW9V9o.mft (raw, json) Hash identifier: w8DRpCFcENHhIN7JbGQUF29x7uU70y0dKrmkC3UL7Ik= Subject key identifier: 7C:D6:E3:2B:9F:D5:FE:B5:BD:51:EA:7D:10:D1:83:D0:2F:D2:EC:0B Authority key identifier: A7:FB:28:78:39:DD:AC:8A:8A:C8:16:7F:07:04:1B:6B:25:BD:57:DA Certificate issuer: /CN=A91ECA1F/serialNumber=A7FB287839DDAC8A8AC8167F07041B6B25BD57DA Certificate serial: 04BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_soeDndrIqKyBZ_BwQbayW9V9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECA1F/09D37E48DB0711EB9F659537C4F9AE02/p_soeDndrIqKyBZ_BwQbayW9V9o.mft Manifest number: 04B9 Signing time: Sun 05 May 2024 01:37:52 +0000 Manifest this update: Sun 05 May 2024 01:37:52 +0000 Manifest next update: Sun 12 May 2024 01:37:52 +0000 Files and hashes: 1: p_soeDndrIqKyBZ_BwQbayW9V9o.crl (hash: Htxy46lzjmQK8d1MHwoSJy3gnvvuxISuho9np96SsEk=) 2: 8CBC85F8BA3511ECA20A3817C4F9AE02.roa (hash: 7ftrSg8k0A8IlBqdHDr5B+eZcGv8HCwzC5OC28xuw/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECA1F/09D37E48DB0711EB9F659537C4F9AE02/p_soeDndrIqKyBZ_BwQbayW9V9o.crl rsync://rpki.apnic.net/member_repository/A91ECA1F/09D37E48DB0711EB9F659537C4F9AE02/p_soeDndrIqKyBZ_BwQbayW9V9o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_soeDndrIqKyBZ_BwQbayW9V9o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1214 (0x4be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECA1F/serialNumber=A7FB287839DDAC8A8AC8167F07041B6B25BD57DA Validity Not Before: May 5 01:37:52 2024 GMT Not After : May 12 01:37:52 2024 GMT Subject: CN=6636e2f0-30d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0b:f5:b7:93:a6:38:41:bc:eb:d7:17:4e:9d: ac:3c:f8:e3:56:c9:a6:89:20:c2:68:36:82:4b:22: fc:fb:8e:81:07:39:6f:2c:ae:bb:23:20:4d:be:f3: 03:26:04:0c:a9:f1:14:d7:e7:a9:57:8f:ed:68:5c: 85:df:b8:af:f4:7d:22:fc:be:64:3f:56:c2:47:1e: ce:43:d3:e1:5d:c3:61:d1:fe:42:cd:78:aa:bf:ce: 61:c7:3a:bf:e6:a2:83:28:7c:b7:06:3a:5a:d6:f4: ce:7e:c6:36:5b:e2:04:7e:ce:5d:9a:7d:2f:70:e5: 37:89:4d:ee:2a:d5:55:98:a5:2d:02:f5:83:4f:2a: de:3b:5c:0e:58:39:1f:c6:cb:e9:7e:f7:46:6f:93: 1a:79:95:1f:02:5e:0c:4e:1b:86:03:8b:9b:14:b8: 43:96:10:2c:5a:1f:ba:9a:11:c9:89:ff:a7:53:b1: af:07:b9:a2:31:18:ff:84:0e:d7:0b:80:cc:24:3e: 65:ea:54:f7:59:c4:86:2a:33:b1:5b:bd:69:af:d4: df:16:65:00:1e:bd:20:62:cc:67:c7:31:86:83:a2: fd:49:5b:5c:4a:5c:eb:6d:bb:be:ba:62:99:88:97: d0:48:86:58:95:40:45:2f:5f:51:2f:93:d8:3f:7b: 90:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D6:E3:2B:9F:D5:FE:B5:BD:51:EA:7D:10:D1:83:D0:2F:D2:EC:0B X509v3 Authority Key Identifier: keyid:A7:FB:28:78:39:DD:AC:8A:8A:C8:16:7F:07:04:1B:6B:25:BD:57:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECA1F/09D37E48DB0711EB9F659537C4F9AE02/p_soeDndrIqKyBZ_BwQbayW9V9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_soeDndrIqKyBZ_BwQbayW9V9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECA1F/09D37E48DB0711EB9F659537C4F9AE02/p_soeDndrIqKyBZ_BwQbayW9V9o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:28:ef:f9:98:f4:72:f4:0d:8c:8c:8e:f2:13:b3:1a:f1:66: db:8b:1e:4a:ea:9c:d0:1e:46:4d:e0:05:6d:1a:ac:40:91:00: f5:88:a8:04:de:ba:1c:8b:1c:df:20:3e:3b:d2:ec:33:71:f0: 3e:76:dc:23:bd:69:2f:ea:9b:5c:39:72:ef:ac:13:ac:e7:78: ed:6c:7d:1e:bc:6d:79:bb:d8:34:f9:87:fc:89:19:77:6f:06: 0c:f1:df:26:7e:5c:4e:c1:ef:c6:c9:a2:e2:b5:9f:c5:c6:e3: 86:7d:24:4e:4a:ea:2f:8e:a5:65:19:86:cf:2c:a2:e0:f3:d5: 32:84:6a:ae:ab:6e:08:37:49:fe:aa:83:f2:5d:9e:c0:67:7e: 98:a3:37:d9:f1:c7:66:59:46:5f:2f:82:a7:71:16:0f:07:66: 5a:0a:e7:d6:43:54:28:82:06:8f:2e:a7:e8:b6:50:0d:bc:b5: 08:62:95:6d:9a:fd:ab:b0:06:7a:1f:df:23:c7:9e:94:ac:a7: c1:ee:4c:24:e8:28:8c:e8:d0:de:ea:01:9c:4c:42:e4:01:c7: 7b:1c:d5:b0:f7:9a:a8:94:0b:d3:30:dc:1e:41:0c:92:fb:7a: 28:cc:56:1c:51:ae:23:b6:a8:de:9e:e3:cf:27:c8:d3:7b:58: e0:0a:11:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNBMUYxMTAvBgNVBAUTKEE3RkIyODc4MzlEREFDOEE4QUM4MTY3RjA3MDQxQjZC MjVCRDU3REEwHhcNMjQwNTA1MDEzNzUyWhcNMjQwNTEyMDEzNzUyWjAYMRYwFAYD VQQDEw02NjM2ZTJmMC0zMGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygv1t5OmOEG869cXTp2sPPjjVsmmiSDCaDaCSyL8+46BBzlvLK67IyBNvvMD JgQMqfEU1+epV4/taFyF37iv9H0i/L5kP1bCRx7OQ9PhXcNh0f5CzXiqv85hxzq/ 5qKDKHy3Bjpa1vTOfsY2W+IEfs5dmn0vcOU3iU3uKtVVmKUtAvWDTyreO1wOWDkf xsvpfvdGb5MaeZUfAl4MThuGA4ubFLhDlhAsWh+6mhHJif+nU7GvB7miMRj/hA7X C4DMJD5l6lT3WcSGKjOxW71pr9TfFmUAHr0gYsxnxzGGg6L9SVtcSlzrbbu+umKZ iJfQSIZYlUBFL19RL5PYP3uQOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHzW4yuf 1f61vVHqfRDRg9Av0uwLMB8GA1UdIwQYMBaAFKf7KHg53ayKisgWfwcEG2slvVfa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0ExRi8wOUQzN0U0OERC MDcxMUVCOUY2NTk1MzdDNEY5QUUwMi9wX3NvZURuZHJJcUt5QlpfQndRYmF5VzlW OW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Bfc29lRG5kcklxS3lCWl9Cd1FiYXlXOVY5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0ExRi8wOUQzN0U0OERCMDcxMUVCOUY2NTk1MzdDNEY5QUUwMi9wX3NvZURuZHJJ cUt5QlpfQndRYmF5VzlWOW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxKO/5mPRy9A2MjI7yE7Ma8Wbbix5K6pzQHkZN4AVtGqxAkQD1iKgE 3rocixzfID470uwzcfA+dtwjvWkv6ptcOXLvrBOs53jtbH0evG15u9g0+Yf8iRl3 bwYM8d8mflxOwe/GyaLitZ/FxuOGfSROSuovjqVlGYbPLKLg89UyhGquq24IN0n+ qoPyXZ7AZ36YozfZ8cdmWUZfL4KncRYPB2ZaCufWQ1QoggaPLqfotlANvLUIYpVt mv2rsAZ6H98jx56UrKfB7kwk6CiM6NDe6gGcTELkAcd7HNWw95qolAvTMNweQQyS +3oozFYcUa4jtqjenuPPJ8jTe1jgChGU -----END CERTIFICATE-----Generated at Sun May 5 02:13:05 2024 by rpki-client on console-ams.rpki-client.org