$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft File: 7NpzBwy2x3kNxguGn7sEMdln3k4.mft (raw, json) Hash identifier: iOJB6TwQAOMyzwz0OC45c6m4KC4sBmcVsdq+7OZk0J4= Subject key identifier: 90:E8:72:C9:74:4B:C1:D7:B0:4E:5C:32:D8:68:76:86:75:4F:DA:A8 Authority key identifier: EC:DA:73:07:0C:B6:C7:79:0D:C6:0B:86:9F:BB:04:31:D9:67:DE:4E Certificate issuer: /CN=A91A5C43/serialNumber=ECDA73070CB6C7790DC60B869FBB0431D967DE4E Certificate serial: 063D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft Manifest number: 0632 Signing time: Sat 18 May 2024 23:44:56 +0000 Manifest this update: Sat 18 May 2024 23:44:56 +0000 Manifest next update: Sat 25 May 2024 23:44:56 +0000 Files and hashes: 1: 7NpzBwy2x3kNxguGn7sEMdln3k4.crl (hash: 1TiRRq7dUndBZxV0/F2LNeh3LynuGDXQykeRLhXeV/w=) 2: 69482E56075411EFB23BE380C4F9AE02.roa (hash: jBIVB1uQV9xRYpmMdx7kJ0JoGyy1Cb4cGzQKSwYMaH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.crl rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1597 (0x63d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5C43/serialNumber=ECDA73070CB6C7790DC60B869FBB0431D967DE4E Validity Not Before: May 18 23:44:56 2024 GMT Not After : May 25 23:44:56 2024 GMT Subject: CN=66493d78-f263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e9:43:f6:39:bc:27:7b:4d:54:8c:40:25:95: ee:a3:f6:ba:96:56:dd:be:2b:8e:7b:0a:b2:54:dd: 7f:eb:bd:12:df:e7:9f:14:ba:32:75:d8:07:60:ef: 2f:bb:a7:7a:a1:11:8b:70:ca:f9:6b:5d:ef:2c:b7: 79:c4:e5:03:5a:a2:11:45:7d:a9:51:aa:56:ec:42: b3:ce:d0:72:1d:d7:a0:ea:95:85:23:04:0c:5c:54: 94:41:55:1a:8f:45:e3:c6:19:4e:10:48:df:3d:49: ae:83:a4:da:4d:cc:33:2c:34:b0:20:87:e1:0b:96: f8:9f:40:31:53:c2:88:4a:28:68:33:a6:bc:35:94: 9d:54:0b:33:91:54:69:70:6f:eb:ac:56:41:e2:65: 9b:f6:d2:f0:c2:4e:f2:15:9d:f5:14:4c:be:cf:fd: 45:74:c2:df:55:f0:84:22:2b:bc:5b:5e:47:02:1e: c3:80:3d:80:92:1c:4d:5d:6c:a6:53:e2:70:a0:0a: 4c:27:dd:74:0d:1b:6f:69:3a:cd:f7:bc:47:11:ef: 34:6f:70:74:f6:5e:f3:fe:ed:df:a7:f4:93:8a:8c: dd:1e:75:4f:08:de:9d:35:6e:5e:34:2b:96:60:b6: 12:2e:3a:c8:ee:38:db:ee:84:1c:be:dd:d3:71:9d: 64:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E8:72:C9:74:4B:C1:D7:B0:4E:5C:32:D8:68:76:86:75:4F:DA:A8 X509v3 Authority Key Identifier: keyid:EC:DA:73:07:0C:B6:C7:79:0D:C6:0B:86:9F:BB:04:31:D9:67:DE:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:18:9d:bf:8a:93:6c:c2:bd:55:18:4a:2d:f8:b7:33:49:18: 37:01:1b:12:fd:97:f9:56:6b:46:ea:12:aa:44:a6:c6:32:a6: d8:a2:80:26:24:5f:6e:e5:e3:e4:93:17:67:2d:2d:57:a5:a8: d1:fb:6f:79:1f:9e:9a:ce:ad:23:df:d5:d8:d5:8f:94:8c:c8: c8:fc:42:0e:2c:e2:f4:80:73:03:33:72:21:43:74:6c:19:ca: 6a:35:36:4d:7d:90:b6:fd:dc:44:5f:e3:e2:48:28:9c:08:0c: 54:90:ae:fb:af:68:cb:49:cd:f2:32:44:bb:b0:ff:a7:f4:67: bb:ed:45:91:45:95:b5:3b:43:fa:27:9b:ad:a3:25:ec:e7:ea: ab:30:3f:35:10:60:4b:07:69:5c:2f:83:46:a8:7f:da:65:09: 59:1c:c3:60:9a:3f:e9:07:fc:18:08:59:2d:1a:44:6a:4e:7c: d2:b8:3a:93:ba:b3:49:99:51:56:96:39:d0:5e:ea:52:88:29: b6:e9:bf:e1:96:2d:7e:2f:3b:e8:ad:06:54:f0:e8:6c:28:8e: 49:f5:65:d7:0b:58:0b:2f:a3:42:e9:74:c6:7d:86:b4:d1:fd: b7:c4:50:93:7e:30:f9:dd:b7:9c:78:79:05:29:53:24:e5:0b: b2:e3:78:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDNDMxMTAvBgNVBAUTKEVDREE3MzA3MENCNkM3NzkwREM2MEI4NjlGQkIwNDMx RDk2N0RFNEUwHhcNMjQwNTE4MjM0NDU2WhcNMjQwNTI1MjM0NDU2WjAYMRYwFAYD VQQDEw02NjQ5M2Q3OC1mMjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3+lD9jm8J3tNVIxAJZXuo/a6llbdviuOewqyVN1/670S3+efFLoyddgHYO8v u6d6oRGLcMr5a13vLLd5xOUDWqIRRX2pUapW7EKzztByHdeg6pWFIwQMXFSUQVUa j0XjxhlOEEjfPUmug6TaTcwzLDSwIIfhC5b4n0AxU8KISihoM6a8NZSdVAszkVRp cG/rrFZB4mWb9tLwwk7yFZ31FEy+z/1FdMLfVfCEIiu8W15HAh7DgD2AkhxNXWym U+JwoApMJ910DRtvaTrN97xHEe80b3B09l7z/u3fp/STiozdHnVPCN6dNW5eNCuW YLYSLjrI7jjb7oQcvt3TcZ1kWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJDocsl0 S8HXsE5cMthodoZ1T9qoMB8GA1UdIwQYMBaAFOzacwcMtsd5DcYLhp+7BDHZZ95O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUM0My84OUUzNkU2QTRC MkMxMUVCOTExQkFENzBDNEY5QUUwMi83TnB6Qnd5Mngza054Z3VHbjdzRU1kbG4z azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdOcHpCd3kyeDNrTnhndUduN3NFTWRsbjNrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUM0My84OUUzNkU2QTRCMkMxMUVCOTExQkFENzBDNEY5QUUwMi83TnB6Qnd5Mngz a054Z3VHbjdzRU1kbG4zazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNGJ2/ipNswr1VGEot+LczSRg3ARsS/Zf5VmtG6hKqRKbGMqbYooAm JF9u5ePkkxdnLS1XpajR+295H56azq0j39XY1Y+UjMjI/EIOLOL0gHMDM3IhQ3Rs GcpqNTZNfZC2/dxEX+PiSCicCAxUkK77r2jLSc3yMkS7sP+n9Ge77UWRRZW1O0P6 J5utoyXs5+qrMD81EGBLB2lcL4NGqH/aZQlZHMNgmj/pB/wYCFktGkRqTnzSuDqT urNJmVFWljnQXupSiCm26b/hli1+LzvorQZU8OhsKI5J9WXXC1gLL6NC6XTGfYa0 0f23xFCTfjD53beceHkFKVMk5Quy43gv -----END CERTIFICATE-----Generated at Sun May 19 00:30:20 2024 by rpki-client on console-ams.rpki-client.org