$ rpki-client -vvf rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft File: 7ErjVswCMimNPNn9IEE1Z9u3_CU.mft (raw, json) Hash identifier: I+hezbShMz+AC2kBrZ0tK7NLDnGjoot4LzibQk07teQ= Subject key identifier: 94:15:20:BA:BB:02:8C:34:B1:B0:8F:95:39:F3:12:34:12:FE:C9:E5 Authority key identifier: EC:4A:E3:56:CC:02:32:29:8D:3C:D9:FD:20:41:35:67:DB:B7:FC:25 Certificate issuer: /CN=A91830A5/serialNumber=EC4AE356CC0232298D3CD9FD20413567DBB7FC25 Certificate serial: 03AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft Manifest number: 03A3 Signing time: Sun 19 May 2024 02:36:09 +0000 Manifest this update: Sun 19 May 2024 02:36:08 +0000 Manifest next update: Sun 26 May 2024 02:36:08 +0000 Files and hashes: 1: 7ErjVswCMimNPNn9IEE1Z9u3_CU.crl (hash: KeVHouL5sdoHUos8YPyKA59jW7XUVEYdbqA23huDUpY=) 2: 10854F3E516B11EC86C3243EC4F9AE02.roa (hash: NYcbhJMX2HUH5RpIZxAT0CFCtB2vsxf0S9nsYsAX39I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.crl rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 939 (0x3ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91830A5/serialNumber=EC4AE356CC0232298D3CD9FD20413567DBB7FC25 Validity Not Before: May 19 02:36:08 2024 GMT Not After : May 26 02:36:08 2024 GMT Subject: CN=66496598-2d8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:dd:46:7e:23:9f:b6:39:5e:c4:ab:19:ff:84: 62:37:ea:8b:79:95:12:e1:d0:39:7e:35:11:e6:f4: b7:e9:42:ab:02:e0:2f:50:36:e6:23:6e:1d:e0:b2: 31:b1:fa:5d:d1:76:b7:b7:3f:3e:b0:de:d5:0e:df: 96:10:5a:5b:c9:eb:0f:fd:3a:a2:fb:f5:4d:08:9d: 28:fe:67:6b:f8:10:f9:a6:89:df:c9:0a:bc:0f:c0: 2a:bb:ae:2a:21:24:4e:f7:97:f7:67:37:ed:fb:40: a2:f1:d5:fc:2c:74:96:2f:4e:ed:77:3e:89:53:7b: 93:3b:f5:e2:6b:1f:f5:71:9c:b6:b2:c6:ef:7d:03: e1:28:18:ba:fa:61:6d:03:b0:a1:ad:fc:d0:09:a9: 90:ec:82:9b:9c:ad:d2:60:c3:24:b8:b0:fc:1f:30: 40:0b:bb:80:a1:d2:be:ce:ba:76:f3:6f:75:49:03: 9a:c0:1f:7a:e3:28:71:92:73:08:37:5d:7f:8b:c7: b2:39:b0:01:1e:1a:8f:08:f8:66:ca:9a:60:42:c7: a9:b3:0a:ae:42:cd:d8:87:c3:04:74:42:64:7f:1b: e1:20:72:e9:19:4d:3a:a7:ba:32:84:fe:45:0e:de: 9b:fa:39:cc:50:77:e5:29:cc:ef:12:42:c9:61:ce: 15:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:15:20:BA:BB:02:8C:34:B1:B0:8F:95:39:F3:12:34:12:FE:C9:E5 X509v3 Authority Key Identifier: keyid:EC:4A:E3:56:CC:02:32:29:8D:3C:D9:FD:20:41:35:67:DB:B7:FC:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:79:d9:9e:06:7c:fa:18:75:17:91:7b:a0:57:72:d7:86:e3: 1a:13:52:8a:c9:bb:29:bb:a3:e0:7e:15:e6:d3:48:0d:d0:08: cf:92:ed:81:0c:e8:54:d1:ca:ba:9f:34:54:5f:04:7c:8f:51: 0a:50:fd:b4:af:d9:29:75:44:21:3b:77:fc:ba:a6:f6:3b:cd: b9:44:f0:0a:e6:a2:7b:c6:3d:02:f5:51:0c:be:04:b8:55:9b: 0e:9e:b4:47:64:c3:dd:94:71:b7:a5:db:36:2c:97:f9:e2:b7: 7f:9a:12:53:14:db:1d:7b:40:43:c6:90:47:47:20:bf:58:de: 02:2a:86:c5:af:c4:7e:4c:a0:4e:18:86:28:74:09:a7:ca:d1: 95:61:ff:0b:5a:eb:77:c2:e1:3f:83:aa:2e:bb:f5:55:bc:d7: 36:1d:32:17:08:29:4f:bc:13:c5:59:98:ea:a1:f1:70:3c:2f: 1f:53:03:a5:2c:0b:57:be:a7:01:81:ce:c3:7e:bb:ee:78:49: 91:c2:3d:8d:08:f6:45:c2:25:9a:d2:6d:28:ec:56:e1:2d:cd: 7d:6e:37:6c:04:d8:c4:9c:5c:cb:b0:77:01:ef:07:34:35:01: cf:7b:f9:99:d1:9c:84:73:cb:7c:2e:a8:78:25:92:b7:cf:d8: 2b:99:7d:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODMwQTUxMTAvBgNVBAUTKEVDNEFFMzU2Q0MwMjMyMjk4RDNDRDlGRDIwNDEzNTY3 REJCN0ZDMjUwHhcNMjQwNTE5MDIzNjA4WhcNMjQwNTI2MDIzNjA4WjAYMRYwFAYD VQQDEw02NjQ5NjU5OC0yZDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5d1GfiOftjlexKsZ/4RiN+qLeZUS4dA5fjUR5vS36UKrAuAvUDbmI24d4LIx sfpd0Xa3tz8+sN7VDt+WEFpbyesP/Tqi+/VNCJ0o/mdr+BD5ponfyQq8D8Aqu64q ISRO95f3Zzft+0Ci8dX8LHSWL07tdz6JU3uTO/Xiax/1cZy2ssbvfQPhKBi6+mFt A7ChrfzQCamQ7IKbnK3SYMMkuLD8HzBAC7uAodK+zrp28291SQOawB964yhxknMI N11/i8eyObABHhqPCPhmyppgQsepswquQs3Yh8MEdEJkfxvhIHLpGU06p7oyhP5F Dt6b+jnMUHflKczvEkLJYc4VWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQVILq7 Aow0sbCPlTnzEjQS/snlMB8GA1UdIwQYMBaAFOxK41bMAjIpjTzZ/SBBNWfbt/wl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzBBNS9EODI0MThGRTUx NjYxMUVDQUQ1NjU4NjdDNEY5QUUwMi83RXJqVnN3Q01pbU5QTm45SUVFMVo5dTNf Q1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFcmpWc3dDTWltTlBObjlJRUUxWjl1M19DVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzBBNS9EODI0MThGRTUxNjYxMUVDQUQ1NjU4NjdDNEY5QUUwMi83RXJqVnN3Q01p bU5QTm45SUVFMVo5dTNfQ1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfedmeBnz6GHUXkXugV3LXhuMaE1KKybspu6PgfhXm00gN0AjPku2B DOhU0cq6nzRUXwR8j1EKUP20r9kpdUQhO3f8uqb2O825RPAK5qJ7xj0C9VEMvgS4 VZsOnrRHZMPdlHG3pds2LJf54rd/mhJTFNsde0BDxpBHRyC/WN4CKobFr8R+TKBO GIYodAmnytGVYf8LWut3wuE/g6ouu/VVvNc2HTIXCClPvBPFWZjqofFwPC8fUwOl LAtXvqcBgc7DfrvueEmRwj2NCPZFwiWa0m0o7FbhLc19bjdsBNjEnFzLsHcB7wc0 NQHPe/mZ0ZyEc8t8Lqh4JZK3z9grmX0M -----END CERTIFICATE-----Generated at Sun May 19 03:38:14 2024 by rpki-client on console-ams.rpki-client.org