$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft File: cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft (raw, json) Hash identifier: m7VSgBgukigFTftTEsCP6GUYvpCHA9HcypjidUBrC9M= Subject key identifier: 9E:6E:C1:B4:1D:21:2E:87:7E:5B:A5:AA:AD:C5:50:84:A1:0F:71:5A Authority key identifier: 70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82 Certificate issuer: /CN=A91B1DCF/serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482 Certificate serial: 03F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft Manifest number: 03EA Signing time: Sun 19 May 2024 02:16:33 +0000 Manifest this update: Sun 19 May 2024 02:16:32 +0000 Manifest next update: Sun 26 May 2024 02:16:32 +0000 Files and hashes: 1: cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl (hash: lQMxxxmUQaGf0tGcqeFVIacgVigwug0+AbCPvbs4z60=) 2: 40565FA23C8311ECA86D031EC4F9AE02.roa (hash: zriFpCsHdh2I5tM6aWjfdnwlbsfdwzbyi5Vru41Apds=) 3: 3F3532743C8311ECA86D031EC4F9AE02.roa (hash: yAusRqM8Pm3gIYqcrjgpIoUQlhk8L9sB+UEYK3W8lGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1010 (0x3f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1DCF/serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482 Validity Not Before: May 19 02:16:32 2024 GMT Not After : May 26 02:16:32 2024 GMT Subject: CN=66496101-ce92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a0:66:9a:8e:40:49:27:a6:e2:99:d3:69:7e: ec:36:0a:03:b1:25:e4:b7:d5:d4:f5:1f:1f:4e:68: 6e:5d:b2:05:c2:7a:79:ec:d4:2c:18:4a:2e:02:ac: 1a:03:6b:84:10:a5:88:e7:63:71:52:7c:e4:d1:fb: 5d:f8:84:a0:e7:7d:c5:8d:b0:1c:ff:21:ed:45:2b: ac:e9:95:ec:51:b1:51:12:2f:f5:e6:16:dd:3f:79: 44:a0:a9:d5:73:bb:17:dd:43:e4:53:49:95:0e:11: f3:4d:00:b0:4e:92:38:82:23:c3:d1:54:cb:03:87: 3e:32:fb:ad:44:75:8c:86:02:2c:29:80:4c:73:5b: b9:49:01:42:ba:3e:1a:40:d8:ef:1e:d5:f1:aa:3a: 86:52:7f:3f:d4:0e:71:a7:b7:9e:5b:2f:6b:a2:56: 2a:38:13:e0:41:f5:34:9b:a5:86:cc:79:9d:27:e8: fc:1f:ff:c0:49:87:fc:7b:ec:71:14:a4:aa:b2:88: 0c:dd:06:46:29:f1:11:45:da:3e:5f:92:04:08:56: fd:1c:91:df:ed:40:6e:3c:98:a3:81:43:2c:de:e9: 65:6d:07:1d:9c:a7:1d:e7:c2:ff:6c:3f:ef:1a:c8: 8b:23:6d:4f:d2:73:6b:78:1e:8f:5a:4f:f6:13:62: f4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:6E:C1:B4:1D:21:2E:87:7E:5B:A5:AA:AD:C5:50:84:A1:0F:71:5A X509v3 Authority Key Identifier: keyid:70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:9a:7a:e0:af:9d:e5:7d:fe:74:fb:0f:18:f2:47:0f:9b:82: ea:49:c5:50:50:6e:cd:cb:47:88:44:78:86:b1:48:21:a4:22: a1:9a:fb:3b:6f:35:0f:91:12:db:3b:0a:0a:91:33:e5:c1:28: 94:39:d8:f3:f8:f5:7a:85:03:b2:f7:ac:6b:be:18:59:67:96: 60:44:b6:8e:a0:ef:78:29:7b:52:5c:69:f8:05:ec:15:aa:6e: ef:9c:23:2a:16:4c:07:c3:3a:e5:28:9a:5e:ad:d6:f4:e7:bf: c4:7d:e5:7f:27:ca:aa:1d:1c:de:d8:84:24:bf:ca:35:4f:97: 93:c3:d0:4c:eb:28:f2:a1:65:2a:ff:bc:8c:88:68:2f:36:48: f2:7e:bf:1b:8d:33:6e:f8:89:71:52:90:fe:f0:68:8c:37:db: c3:63:3c:8f:94:9e:2a:34:55:3c:6f:c4:26:78:35:72:5c:00: 50:ac:7c:e7:92:63:d3:8e:4e:dc:4f:24:8e:03:37:4a:dd:7d: d5:1c:7f:1c:e8:8e:8f:72:94:31:52:4c:d0:88:b1:be:2f:be: 8b:54:2d:6f:1c:bf:79:5d:32:b9:19:ad:d8:76:53:c9:ae:45: ec:e5:da:73:89:bf:84:1c:8f:11:50:5d:f4:7a:d6:af:31:bd: 54:81:ca:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFEQ0YxMTAvBgNVBAUTKDcwNEJGRjRFQ0FBOURDOEE4QjcyMDkyNjRDNjA3REI1 RjIyRjI0ODIwHhcNMjQwNTE5MDIxNjMyWhcNMjQwNTI2MDIxNjMyWjAYMRYwFAYD VQQDEw02NjQ5NjEwMS1jZTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1qBmmo5ASSem4pnTaX7sNgoDsSXkt9XU9R8fTmhuXbIFwnp57NQsGEouAqwa A2uEEKWI52NxUnzk0ftd+ISg533FjbAc/yHtRSus6ZXsUbFREi/15hbdP3lEoKnV c7sX3UPkU0mVDhHzTQCwTpI4giPD0VTLA4c+MvutRHWMhgIsKYBMc1u5SQFCuj4a QNjvHtXxqjqGUn8/1A5xp7eeWy9rolYqOBPgQfU0m6WGzHmdJ+j8H//ASYf8e+xx FKSqsogM3QZGKfERRdo+X5IECFb9HJHf7UBuPJijgUMs3ullbQcdnKcd58L/bD/v GsiLI21P0nNreB6PWk/2E2L0mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ5uwbQd IS6Hflulqq3FUIShD3FaMB8GA1UdIwQYMBaAFHBL/07KqdyKi3IJJkxgfbXyLySC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMURDRi8zNjk3OEE3QzMw QkMxMUVDQTMwM0VGODZDNEY5QUUwMi9jRXZfVHNxcDNJcUxjZ2ttVEdCOXRmSXZK SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NFdl9Uc3FwM0lxTGNna21UR0I5dGZJdkpJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MURDRi8zNjk3OEE3QzMwQkMxMUVDQTMwM0VGODZDNEY5QUUwMi9jRXZfVHNxcDNJ cUxjZ2ttVEdCOXRmSXZKSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAomnrgr53lff50+w8Y8kcPm4LqScVQUG7Ny0eIRHiGsUghpCKhmvs7 bzUPkRLbOwoKkTPlwSiUOdjz+PV6hQOy96xrvhhZZ5ZgRLaOoO94KXtSXGn4BewV qm7vnCMqFkwHwzrlKJperdb057/EfeV/J8qqHRze2IQkv8o1T5eTw9BM6yjyoWUq /7yMiGgvNkjyfr8bjTNu+IlxUpD+8GiMN9vDYzyPlJ4qNFU8b8QmeDVyXABQrHzn kmPTjk7cTySOAzdK3X3VHH8c6I6PcpQxUkzQiLG+L76LVC1vHL95XTK5Ga3YdlPJ rkXs5dpzib+EHI8RUF30etavMb1Ugcpy -----END CERTIFICATE-----Generated at Sun May 19 02:59:13 2024 by rpki-client on console-ams.rpki-client.org