$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft File: E1XVGH0uY9fm1JB42OcfoFHEVuM.mft (raw, json) Hash identifier: dot3da/rFd7m2LqRxWaCgqLo+puXOR6D+pdMXvnhUmo= Subject key identifier: B8:23:8A:03:AD:94:26:82:9F:10:C6:2B:03:24:EA:AE:28:8B:85:66 Authority key identifier: 13:55:D5:18:7D:2E:63:D7:E6:D4:90:78:D8:E7:1F:A0:51:C4:56:E3 Certificate issuer: /CN=A91B3CB5/serialNumber=1355D5187D2E63D7E6D49078D8E71FA051C456E3 Certificate serial: 0B9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft Manifest number: 0B8F Signing time: Sat 18 May 2024 19:22:34 +0000 Manifest this update: Sat 18 May 2024 19:22:33 +0000 Manifest next update: Sat 25 May 2024 19:22:33 +0000 Files and hashes: 1: E1XVGH0uY9fm1JB42OcfoFHEVuM.crl (hash: e+zl1z6W2EK7JxHkeCnDDaPq02mnXU0ZH4AIKkH25Wc=) 2: E26173CE050611EAA0470B49C4F9AE02.roa (hash: 1JHi7jZ5qpgOg15JIGHRNFUwT1UJIp532N130K7N+zc=) 3: 257E3B94E37B11EA84A20810C4F9AE02.roa (hash: G1DkCuz7ZiVzBDV+JjzF5acJ6ODawTKt59lFfaFc5go=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.crl rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2975 (0xb9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3CB5/serialNumber=1355D5187D2E63D7E6D49078D8E71FA051C456E3 Validity Not Before: May 18 19:22:33 2024 GMT Not After : May 25 19:22:33 2024 GMT Subject: CN=6648fffa-1e50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b0:40:9f:1c:7e:22:86:4a:29:d8:49:41:9a: e2:af:4c:04:c3:35:80:e2:fc:32:60:8d:2a:11:54: 31:62:18:d0:96:8b:04:01:54:88:7c:7a:c0:3d:7e: e8:46:f5:38:37:6b:bb:85:e1:5c:f8:42:c1:0c:a6: fd:96:ae:af:18:f7:a6:1e:95:7b:69:b0:ab:cc:64: f9:d1:12:f0:e2:6a:f9:47:df:b5:8c:72:dc:09:5f: 5f:1d:42:7a:5d:be:13:8d:ce:75:31:31:03:b2:db: 03:1a:8b:9c:aa:56:b0:3a:24:fb:3c:09:a6:16:98: f7:d6:69:88:ca:e2:dc:eb:25:97:78:76:46:24:a4: a2:1a:d3:e6:e0:14:62:33:f2:d1:85:7a:d8:54:a4: cd:ff:46:17:67:29:63:d4:5a:8d:04:09:a9:17:2b: d5:a0:cd:29:8f:0a:53:09:f8:87:17:e7:b4:61:c5: 21:56:9d:a2:af:10:cf:59:71:f9:cc:0b:68:4a:a6: ff:43:eb:24:1e:14:fd:08:5f:c8:c0:6d:0e:91:ea: 4d:6b:47:98:8d:d7:13:8d:2b:70:c4:0e:94:eb:83: 83:f9:5b:bb:34:7d:ec:74:d5:43:04:a3:e1:83:01: 22:08:1d:10:fc:7a:b8:c4:bd:2d:7d:f7:58:f9:d2: 77:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:23:8A:03:AD:94:26:82:9F:10:C6:2B:03:24:EA:AE:28:8B:85:66 X509v3 Authority Key Identifier: keyid:13:55:D5:18:7D:2E:63:D7:E6:D4:90:78:D8:E7:1F:A0:51:C4:56:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:e0:da:7b:1c:87:f4:a4:13:82:69:be:ee:ba:1b:04:a2:91: 40:48:e5:60:e6:c1:58:73:fe:5c:68:c0:a4:5f:25:ef:81:57: 99:f6:a2:d5:d7:d6:7e:85:d2:64:5b:7c:1e:8d:4d:a5:66:76: 05:a2:36:61:6a:ec:7b:b7:d3:d6:0e:55:12:61:e8:ed:c4:1f: 0a:01:53:30:60:1d:ff:69:7a:6d:cb:3b:30:d2:4e:94:c9:d8: f8:15:2c:1e:ad:dd:96:b7:ba:02:8c:96:a9:32:dc:87:78:a4: 8d:1c:09:e2:d1:69:c0:5b:c8:cf:52:fb:46:a9:f2:f2:9d:6b: fd:42:b1:25:7d:00:bf:05:22:f6:4c:a0:c8:1f:40:1e:a9:ca: 9c:4f:e7:56:ac:8e:14:6a:d7:b7:e7:13:34:a8:db:07:6e:b2: 4a:af:7f:14:b6:47:01:0e:55:16:1e:79:bd:e4:96:ac:82:57: 7b:0f:0c:b6:1b:4b:0d:ad:74:1a:d4:53:42:47:fc:e1:02:04: 00:59:2d:2b:ff:7a:76:b8:53:ed:bc:81:b9:91:5c:24:d5:bd: 3f:c6:4d:9e:8c:d3:e9:53:3f:87:30:56:51:4a:9b:49:0d:82: 80:3d:b7:03:36:4a:9c:be:59:80:28:c2:cc:5d:d4:f7:8c:42: 60:fb:4c:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNDQjUxMTAvBgNVBAUTKDEzNTVENTE4N0QyRTYzRDdFNkQ0OTA3OEQ4RTcxRkEw NTFDNDU2RTMwHhcNMjQwNTE4MTkyMjMzWhcNMjQwNTI1MTkyMjMzWjAYMRYwFAYD VQQDEw02NjQ4ZmZmYS0xZTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA67BAnxx+IoZKKdhJQZrir0wEwzWA4vwyYI0qEVQxYhjQlosEAVSIfHrAPX7o RvU4N2u7heFc+ELBDKb9lq6vGPemHpV7abCrzGT50RLw4mr5R9+1jHLcCV9fHUJ6 Xb4Tjc51MTEDstsDGoucqlawOiT7PAmmFpj31mmIyuLc6yWXeHZGJKSiGtPm4BRi M/LRhXrYVKTN/0YXZylj1FqNBAmpFyvVoM0pjwpTCfiHF+e0YcUhVp2irxDPWXH5 zAtoSqb/Q+skHhT9CF/IwG0OkepNa0eYjdcTjStwxA6U64OD+Vu7NH3sdNVDBKPh gwEiCB0Q/Hq4xL0tffdY+dJ3vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLgjigOt lCaCnxDGKwMk6q4oi4VmMB8GA1UdIwQYMBaAFBNV1Rh9LmPX5tSQeNjnH6BRxFbj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0NCNS82MzI2NTBGODA1 MDUxMUVBQUE5MzRDNDNDNEY5QUUwMi9FMVhWR0gwdVk5Zm0xSkI0Mk9jZm9GSEVW dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UxWFZHSDB1WTlmbTFKQjQyT2Nmb0ZIRVZ1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0NCNS82MzI2NTBGODA1MDUxMUVBQUE5MzRDNDNDNEY5QUUwMi9FMVhWR0gwdVk5 Zm0xSkI0Mk9jZm9GSEVWdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq4Np7HIf0pBOCab7uuhsEopFASOVg5sFYc/5caMCkXyXvgVeZ9qLV 19Z+hdJkW3wejU2lZnYFojZhaux7t9PWDlUSYejtxB8KAVMwYB3/aXptyzsw0k6U ydj4FSwerd2Wt7oCjJapMtyHeKSNHAni0WnAW8jPUvtGqfLynWv9QrElfQC/BSL2 TKDIH0AeqcqcT+dWrI4Uate35xM0qNsHbrJKr38UtkcBDlUWHnm95Jasgld7Dwy2 G0sNrXQa1FNCR/zhAgQAWS0r/3p2uFPtvIG5kVwk1b0/xk2ejNPpUz+HMFZRSptJ DYKAPbcDNkqcvlmAKMLMXdT3jEJg+0z7 -----END CERTIFICATE-----Generated at Sat May 18 19:56:07 2024 by rpki-client on console-fra.rpki-client.org