$ rpki-client -vvf rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft File: R2wrlqUY81f22XaCqHHD5Iu54SM.mft (raw, json) Hash identifier: OyfAEtWu5/hEGjuQ9TWSYWatmUooWmCnJ/vvpBSSeVw= Subject key identifier: 07:2D:3A:59:C9:1D:3F:56:47:72:F5:65:CF:06:B7:2E:E1:E9:C0:EB Authority key identifier: 47:6C:2B:96:A5:18:F3:57:F6:D9:76:82:A8:71:C3:E4:8B:B9:E1:23 Certificate issuer: /CN=A917A442/serialNumber=476C2B96A518F357F6D97682A871C3E48BB9E123 Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft Manifest number: E7 Signing time: Fri 31 May 2024 06:43:28 +0000 Manifest this update: Fri 31 May 2024 06:43:27 +0000 Manifest next update: Fri 07 Jun 2024 06:43:27 +0000 Files and hashes: 1: R2wrlqUY81f22XaCqHHD5Iu54SM.crl (hash: RZZFDEF+95cdVx5KswunJA+NHBniAhoDYA6XQRtMO24=) 2: 65E02670C83E11ED9FAAFA22C4F9AE02.roa (hash: mECk45lJRrGYCsUl0s33tZDlg+g3kdID1LTdBe9R6+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.crl rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 06:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A442/serialNumber=476C2B96A518F357F6D97682A871C3E48BB9E123 Validity Not Before: May 31 06:43:27 2024 GMT Not After : Jun 7 06:43:27 2024 GMT Subject: CN=6659718f-0925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bc:21:82:78:e2:26:f3:d4:a9:c4:34:d1:c5: f0:41:38:0e:e3:63:76:21:08:0a:a1:c7:2f:d3:27: b8:d1:f8:b8:88:13:e0:03:dd:bc:13:07:63:91:56: f1:b7:a1:45:d8:ac:f7:c1:d2:ef:e3:84:f2:4c:d8: 52:16:4e:15:6c:fa:30:1a:17:e2:e3:19:69:71:93: dd:09:c7:70:5b:38:ad:8d:8d:d1:0a:57:05:83:73: 3f:48:a3:6f:4f:bd:65:95:98:1d:84:cd:1e:48:a4: 58:3b:38:97:b0:44:68:4d:77:7d:75:36:e3:2e:78: bb:71:77:0b:29:bf:19:3e:cd:15:29:bb:19:15:ee: 85:0b:0c:d3:94:28:02:31:ea:3a:f0:1b:70:8b:30: 55:36:44:90:ee:f9:13:81:bc:8d:3b:2b:1e:96:d2: 8f:a1:41:c3:f3:fb:6b:74:61:fd:80:4a:59:45:fc: 48:b2:cd:a4:68:fe:ca:7b:54:20:81:43:a3:f2:b3: 6b:4b:41:48:e4:7a:88:7a:4f:9b:59:b4:18:01:7b: 6f:b4:1c:a6:ae:4e:cd:c9:9a:19:1a:3d:90:84:1b: d5:b3:bb:5e:54:5d:7e:9e:72:48:a0:dc:81:09:77: dd:d3:76:ca:09:4f:9c:f6:6b:bd:7b:f5:e5:4b:5f: ea:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:2D:3A:59:C9:1D:3F:56:47:72:F5:65:CF:06:B7:2E:E1:E9:C0:EB X509v3 Authority Key Identifier: keyid:47:6C:2B:96:A5:18:F3:57:F6:D9:76:82:A8:71:C3:E4:8B:B9:E1:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:85:dd:8a:00:5a:e6:35:99:4d:0e:fb:5f:22:6a:73:3a:e9: e6:be:fa:d5:43:91:2b:3d:9d:17:92:ef:33:75:0b:b8:72:8d: c3:9a:ce:88:e5:60:90:c6:4b:76:98:9d:ec:27:e6:f7:11:92: 8c:4b:41:06:c5:1c:65:2a:1e:10:24:c0:bc:a5:b5:26:ac:12: 7c:7a:d2:88:bf:b8:87:cc:db:f1:c8:e7:6f:bb:5b:33:53:3f: 46:25:64:42:28:1c:9e:34:68:b4:6b:ea:c4:b3:33:fb:8f:27: 60:b6:e5:0e:cf:7e:44:a5:8e:94:c1:3e:ab:8f:1a:44:1a:5f: 0b:72:6c:b5:16:2d:07:58:3a:49:37:53:ae:87:2e:60:ea:9a: 69:bb:69:ea:ad:3e:65:33:01:ce:e9:21:03:35:37:97:03:b2: 84:3e:3f:be:a2:65:d2:9d:08:51:21:ff:2a:5f:20:f5:75:a4: ad:49:e7:c5:bf:f7:6f:d4:90:da:90:4b:9e:bd:c4:23:cc:5e: 7d:4b:fd:94:7a:18:fc:91:94:bf:4e:ef:45:5d:7f:6c:76:54: 84:09:d6:db:ab:c1:60:d4:5e:a4:3a:6e:ce:97:56:63:65:6b: 61:6e:20:83:da:3c:70:7e:9a:7a:8b:6a:21:5c:cb:5b:c6:72: 4f:24:06:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0NDIxMTAvBgNVBAUTKDQ3NkMyQjk2QTUxOEYzNTdGNkQ5NzY4MkE4NzFDM0U0 OEJCOUUxMjMwHhcNMjQwNTMxMDY0MzI3WhcNMjQwNjA3MDY0MzI3WjAYMRYwFAYD VQQDEw02NjU5NzE4Zi0wOTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqbwhgnjiJvPUqcQ00cXwQTgO42N2IQgKoccv0ye40fi4iBPgA928EwdjkVbx t6FF2Kz3wdLv44TyTNhSFk4VbPowGhfi4xlpcZPdCcdwWzitjY3RClcFg3M/SKNv T71llZgdhM0eSKRYOziXsERoTXd9dTbjLni7cXcLKb8ZPs0VKbsZFe6FCwzTlCgC Meo68BtwizBVNkSQ7vkTgbyNOyseltKPoUHD8/trdGH9gEpZRfxIss2kaP7Ke1Qg gUOj8rNrS0FI5HqIek+bWbQYAXtvtBymrk7NyZoZGj2QhBvVs7teVF1+nnJIoNyB CXfd03bKCU+c9mu9e/XlS1/qEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFActOlnJ HT9WR3L1Zc8Gty7h6cDrMB8GA1UdIwQYMBaAFEdsK5alGPNX9tl2gqhxw+SLueEj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ0Mi9FMEU3REI1NkM4 MzkxMUVEQUM3MkIxMUNDNEY5QUUwMi9SMndybHFVWTgxZjIyWGFDcUhIRDVJdTU0 U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Iyd3JscVVZODFmMjJYYUNxSEhENUl1NTRTTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTQ0Mi9FMEU3REI1NkM4MzkxMUVEQUM3MkIxMUNDNEY5QUUwMi9SMndybHFVWTgx ZjIyWGFDcUhIRDVJdTU0U00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9hd2KAFrmNZlNDvtfImpzOunmvvrVQ5ErPZ0Xku8zdQu4co3Dms6I 5WCQxkt2mJ3sJ+b3EZKMS0EGxRxlKh4QJMC8pbUmrBJ8etKIv7iHzNvxyOdvu1sz Uz9GJWRCKByeNGi0a+rEszP7jydgtuUOz35EpY6UwT6rjxpEGl8Lcmy1Fi0HWDpJ N1Ouhy5g6pppu2nqrT5lMwHO6SEDNTeXA7KEPj++omXSnQhRIf8qXyD1daStSefF v/dv1JDakEuevcQjzF59S/2Uehj8kZS/Tu9FXX9sdlSECdbbq8Fg1F6kOm7Ol1Zj ZWthbiCD2jxwfpp6i2ohXMtbxnJPJAau -----END CERTIFICATE-----Generated at Fri May 31 10:01:47 2024 by rpki-client on console-ams.rpki-client.org