$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.mft File: _2p8LLPdLXe95os2uoNseVip1No.mft (raw, json) Hash identifier: aVRdkYpw+DGAjtnCFEBVaRG9p18A/Zr9q+t5opRioO8= Subject key identifier: EF:A8:C5:9E:D2:CD:90:D4:15:24:FF:11:7F:57:FD:93:4C:E9:FB:50 Authority key identifier: FF:6A:7C:2C:B3:DD:2D:77:BD:E6:8B:36:BA:83:6C:79:58:A9:D4:DA Certificate issuer: /CN=A91F7506/serialNumber=FF6A7C2CB3DD2D77BDE68B36BA836C7958A9D4DA Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2p8LLPdLXe95os2uoNseVip1No.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.mft Manifest number: DF Signing time: Wed 01 May 2024 06:15:07 +0000 Manifest this update: Wed 01 May 2024 06:15:07 +0000 Manifest next update: Wed 08 May 2024 06:15:07 +0000 Files and hashes: 1: _2p8LLPdLXe95os2uoNseVip1No.crl (hash: uPJRAREElVGQ78hvWk67oDMCGOkCWhgt4CJOYTqn0Ak=) 2: 6903848C20A911EEBEC77485C4F9AE02.roa (hash: S9PKLGYirkzPYGzK9HsINhPnRnovSUZ4iSV2gi5DUCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.crl rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2p8LLPdLXe95os2uoNseVip1No.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 06:15:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7506/serialNumber=FF6A7C2CB3DD2D77BDE68B36BA836C7958A9D4DA Validity Not Before: May 1 06:15:07 2024 GMT Not After : May 8 06:15:07 2024 GMT Subject: CN=6631ddeb-688e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cd:20:fc:10:92:92:6b:9c:3b:8c:eb:44:75: fc:91:63:df:60:75:6b:f6:58:37:14:ba:d1:93:29: 4b:41:27:70:bf:dd:87:19:8b:c6:ff:7c:cb:42:15: 6c:a8:10:b2:55:fb:ed:12:90:12:1d:57:6b:e4:a7: ec:d5:99:83:04:31:18:f4:bd:36:55:8d:a8:df:f1: de:37:7d:ed:74:d6:ef:1a:35:33:f5:79:1f:c3:db: f4:3d:77:6f:34:37:53:63:06:bd:fc:1a:13:4c:dd: 9f:39:48:ab:7a:14:99:36:86:eb:f1:0c:c7:c0:3c: cc:57:eb:94:0f:c6:b7:6d:6c:1e:66:80:7d:c3:3a: f9:16:ff:42:37:43:83:da:83:48:fa:90:10:81:96: f4:62:e2:e8:c1:8d:92:13:26:d4:9c:8b:33:fe:9c: 4b:48:cf:e1:12:57:37:e5:7a:2e:b1:0e:ce:21:d4: ab:32:f1:d8:8e:bc:c2:5a:52:8d:2f:ad:e7:7e:92: c6:1d:26:04:a4:22:8b:50:c8:9d:f4:86:c6:fb:cb: 3c:95:fc:44:e5:fe:85:4a:62:8f:66:3f:8e:60:4e: 50:7a:84:06:50:da:b6:9d:65:68:87:31:2e:55:94: 02:8b:1b:a2:83:72:6c:8d:02:14:22:02:88:b9:c0: b7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A8:C5:9E:D2:CD:90:D4:15:24:FF:11:7F:57:FD:93:4C:E9:FB:50 X509v3 Authority Key Identifier: keyid:FF:6A:7C:2C:B3:DD:2D:77:BD:E6:8B:36:BA:83:6C:79:58:A9:D4:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2p8LLPdLXe95os2uoNseVip1No.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:66:4a:29:52:0b:02:98:5f:21:cd:39:c0:29:ae:b9:bf:c3: 5f:f4:89:79:d8:b3:87:46:c1:75:30:ca:a5:44:27:88:5b:94: ae:38:b9:0e:22:15:6d:fd:f4:86:12:9c:ee:37:86:28:fb:14: 2f:fc:33:52:e1:25:e6:3e:3e:3a:54:f7:6c:f5:3b:7b:a2:4e: 53:db:c1:7f:af:8f:ef:33:91:41:17:7b:55:02:13:57:20:ba: 60:9d:97:d6:65:99:63:a5:2a:43:9b:7e:08:9a:c5:ac:ea:7e: c5:a7:3f:ee:b0:d9:e3:9e:4c:55:63:0f:b6:5d:58:25:07:5b: f1:5e:dd:90:2b:5d:3e:aa:67:45:bf:8d:b8:7c:ef:76:04:45: 52:64:3b:ee:dc:d8:84:25:52:23:a4:67:19:15:e1:84:2c:89: 18:cd:71:69:34:af:59:bc:b6:58:5b:2d:1c:58:15:81:72:7d: 24:20:ad:af:3e:8e:1b:7d:7a:30:94:89:b6:ac:6d:5d:71:86: bd:6c:a2:58:a2:6a:c3:3c:36:39:bc:db:a4:e8:47:04:75:4e: af:65:ad:2d:25:64:d7:4e:be:fb:fe:50:43:72:a4:c0:2e:93: 3f:2f:d7:69:19:cf:26:47:a7:7f:bf:de:47:8a:2a:b8:65:19: 89:37:12:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc1MDYxMTAvBgNVBAUTKEZGNkE3QzJDQjNERDJENzdCREU2OEIzNkJBODM2Qzc5 NThBOUQ0REEwHhcNMjQwNTAxMDYxNTA3WhcNMjQwNTA4MDYxNTA3WjAYMRYwFAYD VQQDEw02NjMxZGRlYi02ODhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu80g/BCSkmucO4zrRHX8kWPfYHVr9lg3FLrRkylLQSdwv92HGYvG/3zLQhVs qBCyVfvtEpASHVdr5Kfs1ZmDBDEY9L02VY2o3/HeN33tdNbvGjUz9Xkfw9v0PXdv NDdTYwa9/BoTTN2fOUirehSZNobr8QzHwDzMV+uUD8a3bWweZoB9wzr5Fv9CN0OD 2oNI+pAQgZb0YuLowY2SEybUnIsz/pxLSM/hElc35XousQ7OIdSrMvHYjrzCWlKN L63nfpLGHSYEpCKLUMid9IbG+8s8lfxE5f6FSmKPZj+OYE5QeoQGUNq2nWVohzEu VZQCixuig3JsjQIUIgKIucC3oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+oxZ7S zZDUFST/EX9X/ZNM6ftQMB8GA1UdIwQYMBaAFP9qfCyz3S13veaLNrqDbHlYqdTa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzUwNi85NTU0MjY2MkI2 ODMxMUVEOEExODVDMURDNEY5QUUwMi9fMnA4TExQZExYZTk1b3MydW9Oc2VWaXAx Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18ycDhMTFBkTFhlOTVvczJ1b05zZVZpcDFOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzUwNi85NTU0MjY2MkI2ODMxMUVEOEExODVDMURDNEY5QUUwMi9fMnA4TExQZExY ZTk1b3MydW9Oc2VWaXAxTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5ZkopUgsCmF8hzTnAKa65v8Nf9Il52LOHRsF1MMqlRCeIW5SuOLkO IhVt/fSGEpzuN4Yo+xQv/DNS4SXmPj46VPds9Tt7ok5T28F/r4/vM5FBF3tVAhNX ILpgnZfWZZljpSpDm34ImsWs6n7Fpz/usNnjnkxVYw+2XVglB1vxXt2QK10+qmdF v424fO92BEVSZDvu3NiEJVIjpGcZFeGELIkYzXFpNK9ZvLZYWy0cWBWBcn0kIK2v Po4bfXowlIm2rG1dcYa9bKJYomrDPDY5vNuk6EcEdU6vZa0tJWTXTr77/lBDcqTA LpM/L9dpGc8mR6d/v95Hiiq4ZRmJNxKp -----END CERTIFICATE-----Generated at Wed May 1 07:23:57 2024 by rpki-client on console-ams.rpki-client.org