$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft File: rHyecYIsBWGFGGRT-WCywejKlOM.mft (raw, json) Hash identifier: 7SR3EI6ybbQvQ6H6D/6EvCjNOAaXMXQS+EUsCyHe62Y= Subject key identifier: D5:00:15:1D:1B:0B:DC:66:A3:A4:4E:C9:F9:49:EC:94:A5:8A:C5:A1 Authority key identifier: AC:7C:9E:71:82:2C:05:61:85:18:64:53:F9:60:B2:C1:E8:CA:94:E3 Certificate issuer: /CN=A91F4BB3/serialNumber=AC7C9E71822C056185186453F960B2C1E8CA94E3 Certificate serial: 038A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft Manifest number: 0382 Signing time: Tue 07 May 2024 02:43:54 +0000 Manifest this update: Tue 07 May 2024 02:43:53 +0000 Manifest next update: Tue 14 May 2024 02:43:53 +0000 Files and hashes: 1: rHyecYIsBWGFGGRT-WCywejKlOM.crl (hash: SX7AC8vtqn5pUDE6RqNDn27wBERbvbgniyxN+QppClM=) 2: AFDD7E16DA6011EC9A304C24C4F9AE02.roa (hash: A4cao1ypJynEcdW6HC5d/P241PVIeOu+8/rdLAZLoLo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.crl rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 02:43:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 906 (0x38a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4BB3/serialNumber=AC7C9E71822C056185186453F960B2C1E8CA94E3 Validity Not Before: May 7 02:43:53 2024 GMT Not After : May 14 02:43:53 2024 GMT Subject: CN=6639956a-1bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:04:9e:0c:4e:dc:35:bf:03:35:a8:88:8b:e0: 80:08:07:02:19:b4:93:df:9d:e5:3c:89:4a:c5:24: 45:1e:c9:a6:a5:ad:c6:a2:e5:2f:8d:7e:7b:2c:78: 54:88:f0:ec:23:e4:80:f3:ca:43:14:6f:26:5c:5c: 94:7c:70:15:67:ea:5f:3b:3f:b7:0f:54:59:fe:0a: e2:aa:ed:73:36:b0:2b:69:2f:94:dd:4b:5f:d9:cb: fb:7b:86:8b:73:c5:b1:b0:d9:1a:fd:42:60:61:c1: 1b:37:8e:a9:ca:a5:1b:cb:0e:5e:9a:86:92:e3:2c: ce:44:2e:ea:a5:af:5d:76:dd:ce:af:5a:69:26:e3: 2a:e1:11:fa:47:98:ff:11:6a:59:4b:19:46:b0:20: ac:59:67:0b:b8:17:0b:15:17:9a:0f:6e:67:10:e1: c0:e6:db:68:a5:59:a3:c1:ae:c0:c2:93:48:a9:0e: f8:81:f6:d4:50:9c:56:a2:45:18:9c:5e:35:a0:47: 55:a1:a2:ef:49:25:04:5d:54:6a:18:a1:2b:08:7b: 69:d9:50:ec:8c:e9:07:e0:79:81:b7:1a:22:e2:64: 07:3d:c0:45:b5:4a:77:83:33:72:20:77:4d:e6:59: 45:3c:49:92:f7:97:84:fd:54:bb:54:13:a2:fb:7f: 3b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:00:15:1D:1B:0B:DC:66:A3:A4:4E:C9:F9:49:EC:94:A5:8A:C5:A1 X509v3 Authority Key Identifier: keyid:AC:7C:9E:71:82:2C:05:61:85:18:64:53:F9:60:B2:C1:E8:CA:94:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:16:82:ff:4c:62:a2:cc:f7:86:54:ec:ec:81:97:2f:9f:c0: 47:25:fd:07:3d:76:ea:7d:96:f2:0f:16:17:fd:d3:d5:cf:d6: 3c:22:1d:62:7f:61:cb:22:9f:cd:58:f5:dd:0c:57:20:60:ff: ba:8f:9d:35:65:aa:89:85:96:3f:9f:36:b7:52:1e:36:0d:4d: b4:56:db:d7:15:a2:f3:d0:ca:86:85:52:cf:a6:64:07:4e:66: ac:6d:ed:a9:ff:f3:8a:14:fd:13:d2:8d:79:b0:d8:5c:47:c4: 22:b6:90:59:3a:a2:c1:c3:17:8f:fc:43:5d:7b:b9:e4:76:4a: b1:d8:52:ba:2e:b6:51:73:1b:c3:51:4b:23:ac:ba:be:24:cb: d1:60:b1:80:35:d6:c3:c1:b3:84:de:41:1c:0f:d6:02:45:2f: af:5d:9d:58:bb:f2:89:2b:3d:e3:08:bc:35:47:89:25:46:b9: 35:62:17:32:ea:75:a5:1d:7b:3b:58:eb:fa:51:12:a1:a8:f9: 58:af:6c:44:d4:aa:05:29:1a:a5:89:65:d6:f5:b8:16:4e:93: f7:c3:3e:eb:c7:ff:ef:ac:57:6b:9b:7e:4f:da:4b:23:e3:3c: b6:87:88:24:69:b7:36:2b:0d:0c:76:7a:ef:a0:92:18:77:88: 1d:95:55:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCQjMxMTAvBgNVBAUTKEFDN0M5RTcxODIyQzA1NjE4NTE4NjQ1M0Y5NjBCMkMx RThDQTk0RTMwHhcNMjQwNTA3MDI0MzUzWhcNMjQwNTE0MDI0MzUzWjAYMRYwFAYD VQQDEw02NjM5OTU2YS0xYmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwSeDE7cNb8DNaiIi+CACAcCGbST353lPIlKxSRFHsmmpa3GouUvjX57LHhU iPDsI+SA88pDFG8mXFyUfHAVZ+pfOz+3D1RZ/griqu1zNrAraS+U3Utf2cv7e4aL c8WxsNka/UJgYcEbN46pyqUbyw5emoaS4yzORC7qpa9ddt3Or1ppJuMq4RH6R5j/ EWpZSxlGsCCsWWcLuBcLFReaD25nEOHA5ttopVmjwa7AwpNIqQ74gfbUUJxWokUY nF41oEdVoaLvSSUEXVRqGKErCHtp2VDsjOkH4HmBtxoi4mQHPcBFtUp3gzNyIHdN 5llFPEmS95eE/VS7VBOi+3876wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNUAFR0b C9xmo6ROyflJ7JSlisWhMB8GA1UdIwQYMBaAFKx8nnGCLAVhhRhkU/lgssHoypTj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEJCMy9BRUE4NzNFQzVC QzcxMUVDQUQ1OEIwNUZDNEY5QUUwMi9ySHllY1lJc0JXR0ZHR1JULVdDeXdlakts T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JIeWVjWUlzQldHRkdHUlQtV0N5d2VqS2xPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEJCMy9BRUE4NzNFQzVCQzcxMUVDQUQ1OEIwNUZDNEY5QUUwMi9ySHllY1lJc0JX R0ZHR1JULVdDeXdlaktsT00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcFoL/TGKizPeGVOzsgZcvn8BHJf0HPXbqfZbyDxYX/dPVz9Y8Ih1i f2HLIp/NWPXdDFcgYP+6j501ZaqJhZY/nza3Uh42DU20VtvXFaLz0MqGhVLPpmQH Tmasbe2p//OKFP0T0o15sNhcR8QitpBZOqLBwxeP/ENde7nkdkqx2FK6LrZRcxvD UUsjrLq+JMvRYLGANdbDwbOE3kEcD9YCRS+vXZ1Yu/KJKz3jCLw1R4klRrk1Yhcy 6nWlHXs7WOv6URKhqPlYr2xE1KoFKRqliWXW9bgWTpP3wz7rx//vrFdrm35P2ksj 4zy2h4gkabc2Kw0MdnrvoJIYd4gdlVXk -----END CERTIFICATE-----Generated at Tue May 7 03:50:01 2024 by rpki-client on console-ams.rpki-client.org