$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft File: E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft (raw, json) Hash identifier: a9tyXqfesVB0doTJvZnl1Q6Mt5KAq8hQQyQvdQqvtfA= Subject key identifier: 4F:47:24:94:C8:AC:C0:4B:5B:A6:53:51:BF:58:08:E8:B5:A7:88:27 Authority key identifier: 13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82 Certificate issuer: /CN=A91BA521/serialNumber=13CB99341E549792A0AC0A3662211DE17F349382 Certificate serial: 07A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft Manifest number: 07A5 Signing time: Sat 18 May 2024 22:07:38 +0000 Manifest this update: Sat 18 May 2024 22:07:37 +0000 Manifest next update: Sat 25 May 2024 22:07:37 +0000 Files and hashes: 1: E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl (hash: 8YPa5exjPMmeKvc+qgDmQk81nZxfV9shrVsN+QISBMY=) 2: 3046CBE2C4E811EAB607D255C4F9AE02.roa (hash: ZENIuC9ETk3oVi55Pu2Lt69JKVl7Ie6+Sxr+XymXlyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1961 (0x7a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA521/serialNumber=13CB99341E549792A0AC0A3662211DE17F349382 Validity Not Before: May 18 22:07:37 2024 GMT Not After : May 25 22:07:37 2024 GMT Subject: CN=664926aa-167a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4e:7e:c6:c9:61:1e:92:66:55:00:5a:09:ab: 57:1d:f9:86:19:82:7f:56:b7:83:7d:1b:27:6f:b7: 05:c0:9f:ae:15:17:2d:da:3e:bc:71:e3:0d:d2:48: 55:49:5f:6a:cf:2b:b1:4c:29:cc:44:b0:80:be:97: 22:c8:33:34:fb:5c:81:a0:ea:44:95:7f:76:9f:39: 1a:1b:ba:77:f9:7c:3b:31:7e:1a:d2:5c:2c:4e:1e: 95:fe:0f:87:8c:4a:4a:74:d8:b3:29:47:5a:b7:21: 6b:51:60:d4:7e:c2:8b:15:cf:92:fe:72:06:8d:44: 9f:1c:c9:42:49:d4:ac:58:d7:32:7a:a2:72:0a:1a: a6:f0:7a:79:54:b5:30:e7:b8:8a:77:49:0d:92:2e: 42:13:db:eb:62:3c:f9:74:96:ba:74:a7:b6:a9:e3: ca:39:ed:d0:ad:dc:11:38:81:e6:e1:29:39:6d:4b: 61:83:04:70:d6:61:6d:22:20:4e:f3:9c:06:d9:18: a2:61:9a:53:3c:05:09:16:28:16:dc:b5:ba:20:6a: 6c:2d:f6:05:93:3d:40:1b:f4:4f:99:2a:3e:c5:05: 9b:35:23:52:46:f1:d7:42:25:b1:17:42:81:48:34: fd:4d:9c:63:16:45:6f:5c:5f:da:9d:64:c1:fc:ac: 71:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:47:24:94:C8:AC:C0:4B:5B:A6:53:51:BF:58:08:E8:B5:A7:88:27 X509v3 Authority Key Identifier: keyid:13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:70:2c:b6:19:12:aa:72:98:13:58:dc:f7:f0:f7:f7:2e:86: 61:5a:e4:7e:d4:92:e7:84:08:48:eb:51:36:e8:ce:7c:44:1b: ad:c3:9b:84:19:2c:b2:9d:14:1d:e4:fb:fa:13:34:23:4e:a2: c6:68:15:13:70:32:2d:cd:3a:44:e4:7e:df:90:63:3b:5f:f8: dd:17:a4:1a:51:56:a0:19:d2:49:d5:e8:bb:3b:30:a2:ec:d8: c3:e3:21:e7:83:86:e5:93:39:fc:f7:34:70:3c:28:25:75:f4: e2:db:b7:3e:dc:24:5b:76:92:bf:a0:f6:17:c2:e8:f3:d4:80: 57:ef:5f:f1:ef:5d:77:90:02:b1:89:bd:f0:fa:40:90:70:68: 04:95:e9:5f:9d:6a:9e:0c:65:3a:ea:de:e3:0b:2a:d1:a6:25: f0:96:d0:67:2a:e3:a4:86:db:3b:0f:6d:2d:4c:6f:76:72:04: ef:a6:5d:33:0a:5b:f5:2e:d1:8d:0d:77:65:6e:02:1c:f6:b4: 0c:16:e4:07:ca:af:be:c7:58:5c:8c:ae:ec:d5:75:18:7f:6c: d1:0f:9e:b5:6a:52:17:ee:b9:a7:d6:44:e6:a0:c1:5a:71:4f: a5:09:c7:61:27:fa:cc:ca:46:1b:08:d2:a1:90:04:88:88:d2: c9:83:41:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE1MjExMTAvBgNVBAUTKDEzQ0I5OTM0MUU1NDk3OTJBMEFDMEEzNjYyMjExREUx N0YzNDkzODIwHhcNMjQwNTE4MjIwNzM3WhcNMjQwNTI1MjIwNzM3WjAYMRYwFAYD VQQDEw02NjQ5MjZhYS0xNjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArk5+xslhHpJmVQBaCatXHfmGGYJ/VreDfRsnb7cFwJ+uFRct2j68ceMN0khV SV9qzyuxTCnMRLCAvpciyDM0+1yBoOpElX92nzkaG7p3+Xw7MX4a0lwsTh6V/g+H jEpKdNizKUdatyFrUWDUfsKLFc+S/nIGjUSfHMlCSdSsWNcyeqJyChqm8Hp5VLUw 57iKd0kNki5CE9vrYjz5dJa6dKe2qePKOe3QrdwROIHm4Sk5bUthgwRw1mFtIiBO 85wG2RiiYZpTPAUJFigW3LW6IGpsLfYFkz1AG/RPmSo+xQWbNSNSRvHXQiWxF0KB SDT9TZxjFkVvXF/anWTB/KxxXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE9HJJTI rMBLW6ZTUb9YCOi1p4gnMB8GA1UdIwQYMBaAFBPLmTQeVJeSoKwKNmIhHeF/NJOC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTUyMS9DOUZBRTdDQUM0 RTYxMUVBQTY0NTRGNTRDNEY5QUUwMi9FOHVaTkI1VWw1S2dyQW8yWWlFZDRYODBr NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U4dVpOQjVVbDVLZ3JBbzJZaUVkNFg4MGs0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTUyMS9DOUZBRTdDQUM0RTYxMUVBQTY0NTRGNTRDNEY5QUUwMi9FOHVaTkI1VWw1 S2dyQW8yWWlFZDRYODBrNEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZcCy2GRKqcpgTWNz38Pf3LoZhWuR+1JLnhAhI61E26M58RButw5uE GSyynRQd5Pv6EzQjTqLGaBUTcDItzTpE5H7fkGM7X/jdF6QaUVagGdJJ1ei7OzCi 7NjD4yHng4blkzn89zRwPCgldfTi27c+3CRbdpK/oPYXwujz1IBX71/x7113kAKx ib3w+kCQcGgElelfnWqeDGU66t7jCyrRpiXwltBnKuOkhts7D20tTG92cgTvpl0z Clv1LtGNDXdlbgIc9rQMFuQHyq++x1hcjK7s1XUYf2zRD561alIX7rmn1kTmoMFa cU+lCcdhJ/rMykYbCNKhkASIiNLJg0Gk -----END CERTIFICATE-----Generated at Sun May 19 00:16:18 2024 by rpki-client on console-fra.rpki-client.org