$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft File: E7lMrVWeIPuzDgiXoUBmaydArx4.mft (raw, json) Hash identifier: 3WK/apO+nNnICyxWFmAlVRVpzuqf7xC0j162bSdfnHk= Subject key identifier: C6:B2:D6:B2:2C:AF:B6:EB:E0:C5:F2:05:56:32:60:6E:B9:1A:40:EC Authority key identifier: 13:B9:4C:AD:55:9E:20:FB:B3:0E:08:97:A1:40:66:6B:27:40:AF:1E Certificate issuer: /CN=A91A7CA3/serialNumber=13B94CAD559E20FBB30E0897A140666B2740AF1E Certificate serial: 03BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft Manifest number: 03B6 Signing time: Fri 31 May 2024 03:04:58 +0000 Manifest this update: Fri 31 May 2024 03:04:57 +0000 Manifest next update: Fri 07 Jun 2024 03:04:57 +0000 Files and hashes: 1: E7lMrVWeIPuzDgiXoUBmaydArx4.crl (hash: 032RQJThgB6McgOZy5EAbdlC6qrwLXraFLWYQnVvrYg=) 2: B092FF78479111ECA77ED34DC4F9AE02.roa (hash: jUpCb0mQHOG0ltDgFx04SQoa0TGy5bxUOCMm+bVxS+I=) 3: AFFF3716479111ECA77ED34DC4F9AE02.roa (hash: aEfkNQAraIIeVid17flClg7yaumXxVkWcC1rJqFt2VE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.crl rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 03:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 956 (0x3bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7CA3/serialNumber=13B94CAD559E20FBB30E0897A140666B2740AF1E Validity Not Before: May 31 03:04:57 2024 GMT Not After : Jun 7 03:04:57 2024 GMT Subject: CN=66593e59-a1ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8c:18:53:20:f1:39:3b:ee:fe:2e:33:46:a6: f6:e0:7c:d9:eb:d1:fd:b1:fd:c5:cb:52:2c:34:4d: a6:71:90:21:64:5e:2d:33:93:2d:0f:40:f9:6c:07: 97:df:13:8b:a1:70:f9:0d:7b:2b:30:81:e6:a9:e3: 73:95:84:b1:75:b1:2b:c9:5d:a8:0c:34:13:8e:d8: e9:1a:34:89:96:a5:0e:b2:f8:e1:cd:1b:6d:b3:92: de:70:09:f0:e9:23:e1:0f:80:44:f0:9c:06:df:c4: f1:88:da:02:3d:56:79:42:53:b1:1b:d8:86:3e:93: 6c:47:cf:bc:87:ae:f6:1d:2c:4a:75:cb:dc:71:84: ea:2d:2c:d1:cc:46:c6:69:9a:d9:39:57:17:36:f6: 72:6e:01:b1:87:58:14:ac:cc:43:7f:80:27:54:95: d5:af:f8:da:6d:4f:7b:29:bb:d9:e7:61:52:bb:21: d2:39:4a:90:9f:88:ad:c3:45:25:74:bf:b7:4e:7e: 19:1f:9b:31:bd:89:78:de:9c:51:00:52:8f:01:01: cc:d2:b6:69:50:a1:1b:66:99:c9:03:a6:32:a1:60: 2b:65:ac:55:a3:34:54:e4:9e:ce:f2:52:4c:68:56: 74:97:3f:55:e6:8d:9d:6e:96:03:4b:48:84:67:52: dc:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:B2:D6:B2:2C:AF:B6:EB:E0:C5:F2:05:56:32:60:6E:B9:1A:40:EC X509v3 Authority Key Identifier: keyid:13:B9:4C:AD:55:9E:20:FB:B3:0E:08:97:A1:40:66:6B:27:40:AF:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ac:bf:2e:67:35:94:ff:8f:5f:58:2c:ff:f8:4c:99:df:40: 4f:73:ce:df:c1:98:26:84:64:c5:b1:6f:1e:37:99:c9:08:3b: 3d:1e:14:39:cc:0f:84:de:3f:9e:d5:4c:62:0e:ac:c1:dc:9a: 69:68:bf:ac:68:40:4d:5f:a2:fe:cb:13:7e:ca:87:41:6d:b6: 7f:d5:4d:17:40:c7:18:4b:70:bb:b1:0b:80:e5:40:40:14:13: 32:03:79:57:fb:bd:87:0e:2d:0c:2e:6e:32:a4:56:e2:2e:95: 14:dc:14:2b:f0:29:4a:97:82:c5:e9:61:64:5a:a3:81:9f:47: 57:17:15:4c:cb:35:e6:1d:2c:b7:7f:5c:f3:e0:5a:ad:48:0c: af:60:bf:c8:b5:e3:7c:21:37:5e:e1:9c:f8:2d:af:23:c3:1f: 71:d6:f5:13:c7:8c:45:fb:58:30:e8:a7:14:e0:58:9b:50:21: 06:ff:d4:18:15:35:ce:aa:22:4e:ad:e6:fe:ef:78:58:d7:d8: c4:da:ba:b3:7f:2c:87:10:9f:71:e4:06:82:a9:89:7c:f5:60: 28:55:64:7c:36:74:4d:ca:e2:c0:1a:1c:d9:92:11:3c:dd:c6: f2:75:f5:dc:bf:bd:08:dd:d9:5a:03:6d:3c:f1:f0:5c:0e:88: 58:2c:f8:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdDQTMxMTAvBgNVBAUTKDEzQjk0Q0FENTU5RTIwRkJCMzBFMDg5N0ExNDA2NjZC Mjc0MEFGMUUwHhcNMjQwNTMxMDMwNDU3WhcNMjQwNjA3MDMwNDU3WjAYMRYwFAYD VQQDEw02NjU5M2U1OS1hMWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYwYUyDxOTvu/i4zRqb24HzZ69H9sf3Fy1IsNE2mcZAhZF4tM5MtD0D5bAeX 3xOLoXD5DXsrMIHmqeNzlYSxdbEryV2oDDQTjtjpGjSJlqUOsvjhzRtts5LecAnw 6SPhD4BE8JwG38TxiNoCPVZ5QlOxG9iGPpNsR8+8h672HSxKdcvccYTqLSzRzEbG aZrZOVcXNvZybgGxh1gUrMxDf4AnVJXVr/jabU97KbvZ52FSuyHSOUqQn4itw0Ul dL+3Tn4ZH5sxvYl43pxRAFKPAQHM0rZpUKEbZpnJA6YyoWArZaxVozRU5J7O8lJM aFZ0lz9V5o2dbpYDS0iEZ1LcJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMay1rIs r7br4MXyBVYyYG65GkDsMB8GA1UdIwQYMBaAFBO5TK1VniD7sw4Il6FAZmsnQK8e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0NBMy80MUI5MTBBODQ3 OEYxMUVDOUI1NjIyMkFDNEY5QUUwMi9FN2xNclZXZUlQdXpEZ2lYb1VCbWF5ZEFy eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U3bE1yVldlSVB1ekRnaVhvVUJtYXlkQXJ4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0NBMy80MUI5MTBBODQ3OEYxMUVDOUI1NjIyMkFDNEY5QUUwMi9FN2xNclZXZUlQ dXpEZ2lYb1VCbWF5ZEFyeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMrL8uZzWU/49fWCz/+EyZ30BPc87fwZgmhGTFsW8eN5nJCDs9HhQ5 zA+E3j+e1UxiDqzB3JppaL+saEBNX6L+yxN+yodBbbZ/1U0XQMcYS3C7sQuA5UBA FBMyA3lX+72HDi0MLm4ypFbiLpUU3BQr8ClKl4LF6WFkWqOBn0dXFxVMyzXmHSy3 f1zz4FqtSAyvYL/IteN8ITde4Zz4La8jwx9x1vUTx4xF+1gw6KcU4FibUCEG/9QY FTXOqiJOreb+73hY19jE2rqzfyyHEJ9x5AaCqYl89WAoVWR8NnRNyuLAGhzZkhE8 3cbydfXcv70I3dlaA2088fBcDohYLPgi -----END CERTIFICATE-----Generated at Fri May 31 04:54:01 2024 by rpki-client on console-fra.rpki-client.org