$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft File: ShiOMYfOxdNsNowk6U9DHQQlO3s.mft (raw, json) Hash identifier: MeEGOPdU4erHnkulBpOWo7NHIq+ha0wegEKgSFklbp4= Subject key identifier: 19:7D:95:F3:CB:0C:E2:D8:88:E6:D9:58:CC:3F:1C:C6:67:48:36:0E Authority key identifier: 4A:18:8E:31:87:CE:C5:D3:6C:36:8C:24:E9:4F:43:1D:04:25:3B:7B Certificate issuer: /CN=A91F5246/serialNumber=4A188E3187CEC5D36C368C24E94F431D04253B7B Certificate serial: F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft Manifest number: E9 Signing time: Tue 07 May 2024 05:53:34 +0000 Manifest this update: Tue 07 May 2024 05:53:33 +0000 Manifest next update: Tue 14 May 2024 05:53:33 +0000 Files and hashes: 1: ShiOMYfOxdNsNowk6U9DHQQlO3s.crl (hash: rXPlHdfVRqh+vRTfak49yYa4UzDXbtMFAuSQ3Ag24wA=) 2: 87EEC61CCB4111ED8A4D796BC4F9AE02.roa (hash: qnHZ9BxY7BARIYnoZIbLGut+Ka0httnoVJLS138cfew=) 3: E284A4F8B10F11ED8AEF223CC4F9AE02.roa (hash: 0HC9dUgb0SpTQdvZR37mKp4h4NUxak02aO/l7tsG/44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.crl rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 05:49:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5246/serialNumber=4A188E3187CEC5D36C368C24E94F431D04253B7B Validity Not Before: May 7 05:53:33 2024 GMT Not After : May 14 05:53:33 2024 GMT Subject: CN=6639c1dd-88d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:68:1e:88:98:35:56:d7:22:82:49:69:9f:aa: 9f:e4:1b:58:d2:1f:b6:6b:b1:a5:75:f9:99:6b:6d: 37:12:b5:74:99:0c:a4:b3:06:03:8b:53:e1:cf:0f: 18:11:fe:5e:cd:f7:5b:d5:6c:b7:3c:8f:e5:8a:40: 6d:b4:58:e3:fd:e5:65:c0:e3:0e:d7:98:cd:3e:31: a7:6f:a6:14:d9:2d:f1:8c:7c:72:22:2f:3f:8f:b4: 6e:9c:c5:8b:3e:e8:1b:05:21:24:57:5f:ab:42:6f: ba:7c:03:24:f3:d4:b3:a1:d2:55:2c:57:91:d2:3d: 88:fa:32:60:42:45:48:59:6a:02:6a:53:c5:31:00: 62:dd:c0:92:e5:7f:0b:85:84:61:60:51:b4:11:a2: 56:8b:63:b6:8a:44:d9:82:17:46:2c:81:6e:ee:9f: 03:7f:55:52:63:25:33:03:77:01:c8:02:2d:be:ab: 09:f3:35:44:8b:e7:0a:b9:f1:3c:87:73:d2:fc:1b: bf:83:87:0b:d7:1d:45:81:df:13:6e:6f:0c:39:4e: 8e:ba:09:a4:83:69:1c:9e:56:aa:98:33:01:f8:a2: 46:ab:ae:0c:5b:63:ce:59:ff:7b:d2:2f:1e:a0:81: 23:36:1f:31:a4:57:be:fa:ec:e0:ef:67:e4:01:7d: 15:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:7D:95:F3:CB:0C:E2:D8:88:E6:D9:58:CC:3F:1C:C6:67:48:36:0E X509v3 Authority Key Identifier: keyid:4A:18:8E:31:87:CE:C5:D3:6C:36:8C:24:E9:4F:43:1D:04:25:3B:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:a4:0e:1b:1d:ff:21:e7:05:88:72:9e:a9:64:b6:0b:71:b9: 0e:00:44:c1:29:6c:90:05:97:fb:19:eb:23:6c:6c:12:45:6d: 31:5b:e9:3d:ca:de:96:6b:39:e4:99:b9:25:70:e5:80:8f:55: ae:29:4c:52:a8:55:c4:b8:a4:88:9e:41:f9:75:57:38:64:26: 4a:dd:70:ac:a5:cb:b7:df:ba:4e:cc:37:49:bb:d5:b7:2c:c9: e0:0a:a0:d2:c6:58:e0:c3:8c:4f:36:b2:61:61:a1:bf:74:bb: 00:a8:0b:6d:45:ed:6f:b1:8b:ef:82:6a:86:0a:15:a6:ea:3e: 69:54:f5:de:52:ec:a3:37:e7:c9:a0:d9:f9:c0:37:f1:ca:ca: e5:f1:78:ef:f5:1c:a0:68:5e:c2:cf:c8:87:78:6c:6d:4a:f3: 65:61:0d:11:75:7d:09:d4:f3:19:c0:d3:b9:c5:3f:f0:cd:f4: 8e:72:83:bd:ab:2c:a1:ff:e0:ad:47:e3:6b:41:2d:47:fd:20: 41:d8:3e:01:f8:91:fe:42:31:8a:90:b7:4f:5b:17:b1:8f:f8: 94:92:81:3a:27:f7:cd:31:30:e6:fd:15:15:1f:86:fa:27:4a: 95:b2:64:97:7f:88:25:b2:33:8d:80:17:31:ed:0e:d4:cb:ff: f8:12:a9:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyNDYxMTAvBgNVBAUTKDRBMTg4RTMxODdDRUM1RDM2QzM2OEMyNEU5NEY0MzFE MDQyNTNCN0IwHhcNMjQwNTA3MDU1MzMzWhcNMjQwNTE0MDU1MzMzWjAYMRYwFAYD VQQDEw02NjM5YzFkZC04OGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAomgeiJg1Vtcigklpn6qf5BtY0h+2a7GldfmZa203ErV0mQykswYDi1Phzw8Y Ef5ezfdb1Wy3PI/likBttFjj/eVlwOMO15jNPjGnb6YU2S3xjHxyIi8/j7RunMWL PugbBSEkV1+rQm+6fAMk89SzodJVLFeR0j2I+jJgQkVIWWoCalPFMQBi3cCS5X8L hYRhYFG0EaJWi2O2ikTZghdGLIFu7p8Df1VSYyUzA3cByAItvqsJ8zVEi+cKufE8 h3PS/Bu/g4cL1x1Fgd8Tbm8MOU6Ougmkg2kcnlaqmDMB+KJGq64MW2POWf970i8e oIEjNh8xpFe++uzg72fkAX0VfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBl9lfPL DOLYiObZWMw/HMZnSDYOMB8GA1UdIwQYMBaAFEoYjjGHzsXTbDaMJOlPQx0EJTt7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTI0Ni8zOEM5NzA4QUIx MDgxMUVEQTg4NTQyMTdDNEY5QUUwMi9TaGlPTVlmT3hkTnNOb3drNlU5REhRUWxP M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoaU9NWWZPeGROc05vd2s2VTlESFFRbE8zcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTI0Ni8zOEM5NzA4QUIxMDgxMUVEQTg4NTQyMTdDNEY5QUUwMi9TaGlPTVlmT3hk TnNOb3drNlU5REhRUWxPM3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRpA4bHf8h5wWIcp6pZLYLcbkOAETBKWyQBZf7GesjbGwSRW0xW+k9 yt6WaznkmbklcOWAj1WuKUxSqFXEuKSInkH5dVc4ZCZK3XCspcu337pOzDdJu9W3 LMngCqDSxljgw4xPNrJhYaG/dLsAqAttRe1vsYvvgmqGChWm6j5pVPXeUuyjN+fJ oNn5wDfxysrl8Xjv9RygaF7Cz8iHeGxtSvNlYQ0RdX0J1PMZwNO5xT/wzfSOcoO9 qyyh/+CtR+NrQS1H/SBB2D4B+JH+QjGKkLdPWxexj/iUkoE6J/fNMTDm/RUVH4b6 J0qVsmSXf4glsjONgBcx7Q7Uy//4Eqm4 -----END CERTIFICATE-----Generated at Tue May 7 06:30:15 2024 by rpki-client on console-ams.rpki-client.org