$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft File: ech9xZWwwn0jMpvJkoSiPIv9oOc.mft (raw, json) Hash identifier: zxiCdWgnWHBq/OEuAtl5b8NgBQFlhQ44AoR9eULnZqs= Subject key identifier: C0:88:90:2A:A8:53:46:D3:31:AA:D9:75:C1:EF:83:9B:13:D1:BE:8B Authority key identifier: 79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7 Certificate issuer: /CN=A91B2D4F/serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7 Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft Manifest number: 98 Signing time: Sun 19 May 2024 06:52:44 +0000 Manifest this update: Sun 19 May 2024 06:52:43 +0000 Manifest next update: Sun 26 May 2024 06:52:43 +0000 Files and hashes: 1: ech9xZWwwn0jMpvJkoSiPIv9oOc.crl (hash: 5sFhoGog9V8MpCYGqUkfte3epJThTzRjjNH8opO6JVs=) 2: 416EB4022F6111EE8C156634C4F9AE02.roa (hash: lQaHTpxmZmskyWYtJeokoPkASG3xJ0/muDOoYEK+BYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D4F/serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7 Validity Not Before: May 19 06:52:43 2024 GMT Not After : May 26 06:52:43 2024 GMT Subject: CN=6649a1bb-96be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c9:c0:02:59:f8:ca:bb:8c:a6:c1:35:28:b6: 30:ff:95:f0:4c:33:14:3f:f2:ea:aa:e7:fd:b4:2b: f2:58:53:24:36:49:b6:11:b9:6e:c2:1d:9c:99:0d: 7f:09:2c:e1:44:d6:87:40:67:24:38:43:bf:76:f7: e0:cf:c4:c9:0a:02:5f:4e:87:e8:b5:e4:1a:b1:3a: 12:96:71:ab:f3:eb:f1:8b:f0:37:e7:99:62:f5:6e: 68:27:30:d2:d2:37:11:b4:cf:c2:ae:b5:88:b4:73: fc:87:02:ed:23:6e:e1:82:2f:52:21:ab:49:f3:82: 22:cb:e7:16:17:a1:9c:9e:2e:06:fd:bd:25:38:a7: 2a:10:27:d9:2f:57:18:78:68:ef:3d:da:d0:c9:63: 37:7a:69:ac:3c:56:0f:dc:91:91:5c:f5:8c:7c:5d: 93:6e:3d:70:0f:fe:04:ac:33:51:35:3b:1f:0b:af: 76:32:d2:7a:db:ee:05:a6:b7:94:dd:55:75:e6:49: 0f:6b:54:f1:8a:ef:21:4d:90:ba:d4:55:78:5c:fe: 45:93:46:cc:23:8c:d0:3e:41:63:d2:47:05:64:64: 3f:99:77:10:96:ea:1b:22:13:d6:80:fa:1c:5c:12: fe:92:28:b2:7c:69:87:21:bb:a4:de:dc:e8:e4:c1: bf:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:88:90:2A:A8:53:46:D3:31:AA:D9:75:C1:EF:83:9B:13:D1:BE:8B X509v3 Authority Key Identifier: keyid:79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:1d:3e:c9:23:4d:a6:30:7f:6a:36:d8:fe:77:04:e8:1d:9c: b0:35:23:a7:49:43:b4:12:b1:cd:79:a6:a3:e6:7f:49:48:ca: f4:2b:33:f3:70:db:36:79:cd:87:9f:8c:63:31:a6:0a:99:ff: 35:f4:ea:aa:8c:e1:0c:97:5c:d2:50:da:2a:ae:f1:ce:32:55: 38:e8:81:3e:5a:ae:a0:d5:8e:53:83:b1:6b:1f:80:5f:35:51: 07:a9:36:84:79:12:04:34:77:52:47:b9:8c:5a:ee:37:9c:fc: c7:78:b4:3b:50:aa:fc:d3:5f:9f:91:c4:e9:cf:78:03:41:f6: 94:95:32:b8:80:51:6e:a1:b0:f0:1b:73:22:51:a9:bb:f6:d5: ff:6d:1a:22:79:b8:6a:e2:92:c1:90:a8:95:c6:b8:06:b1:24: 66:66:e3:f3:73:2e:3e:5f:92:95:b2:4c:20:82:2a:89:86:2e: d8:3a:3c:43:df:d5:80:aa:c8:0c:c6:85:d1:49:5c:18:b0:a9: a2:bf:13:2b:c2:b8:79:5e:99:7f:ce:b0:7e:e8:16:14:cf:83: 90:d6:41:15:9d:98:86:b6:87:4f:38:ac:9b:19:b3:2e:d7:88: 12:8b:50:48:43:09:74:78:34:df:07:d5:b8:e5:a8:df:39:c7: 5b:34:18:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJENEYxMTAvBgNVBAUTKDc5Qzg3REM1OTVCMEMyN0QyMzMyOUJDOTkyODRBMjND OEJGREEwRTcwHhcNMjQwNTE5MDY1MjQzWhcNMjQwNTI2MDY1MjQzWjAYMRYwFAYD VQQDEw02NjQ5YTFiYi05NmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5MnAAln4yruMpsE1KLYw/5XwTDMUP/Lqquf9tCvyWFMkNkm2Ebluwh2cmQ1/ CSzhRNaHQGckOEO/dvfgz8TJCgJfTofoteQasToSlnGr8+vxi/A355li9W5oJzDS 0jcRtM/CrrWItHP8hwLtI27hgi9SIatJ84Iiy+cWF6Gcni4G/b0lOKcqECfZL1cY eGjvPdrQyWM3emmsPFYP3JGRXPWMfF2Tbj1wD/4ErDNRNTsfC692MtJ62+4FpreU 3VV15kkPa1Txiu8hTZC61FV4XP5Fk0bMI4zQPkFj0kcFZGQ/mXcQluobIhPWgPoc XBL+kiiyfGmHIbuk3tzo5MG/tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMCIkCqo U0bTMarZdcHvg5sT0b6LMB8GA1UdIwQYMBaAFHnIfcWVsMJ9IzKbyZKEojyL/aDn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQ0Ri9FRjg3NTUxODJG NjAxMUVFQkY3Rjc3MzNDNEY5QUUwMi9lY2g5eFpXd3duMGpNcHZKa29TaVBJdjlv T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VjaDl4Wld3d24wak1wdkprb1NpUEl2OW9PYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQ0Ri9FRjg3NTUxODJGNjAxMUVFQkY3Rjc3MzNDNEY5QUUwMi9lY2g5eFpXd3du MGpNcHZKa29TaVBJdjlvT2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1HT7JI02mMH9qNtj+dwToHZywNSOnSUO0ErHNeaaj5n9JSMr0KzPz cNs2ec2Hn4xjMaYKmf819OqqjOEMl1zSUNoqrvHOMlU46IE+Wq6g1Y5Tg7FrH4Bf NVEHqTaEeRIENHdSR7mMWu43nPzHeLQ7UKr801+fkcTpz3gDQfaUlTK4gFFuobDw G3MiUam79tX/bRoiebhq4pLBkKiVxrgGsSRmZuPzcy4+X5KVskwggiqJhi7YOjxD 39WAqsgMxoXRSVwYsKmivxMrwrh5Xpl/zrB+6BYUz4OQ1kEVnZiGtodPOKybGbMu 14gSi1BIQwl0eDTfB9W45ajfOcdbNBgD -----END CERTIFICATE-----Generated at Sun May 19 07:40:44 2024 by rpki-client on console-fra.rpki-client.org