$ rpki-client -vvf rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft File: 7HnRemDtVw7Ge1EWFitgi2C5zUE.mft (raw, json) Hash identifier: XnztzbWSL8kGN4+Zye2Jrth54mgxfppb0RAFG8mxv2k= Subject key identifier: 66:5C:85:28:3C:1A:23:8B:66:A1:BF:B8:EA:C9:74:37:88:16:4D:A6 Authority key identifier: EC:79:D1:7A:60:ED:57:0E:C6:7B:51:16:16:2B:60:8B:60:B9:CD:41 Certificate issuer: /CN=A91C309F/serialNumber=EC79D17A60ED570EC67B5116162B608B60B9CD41 Certificate serial: 05ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HnRemDtVw7Ge1EWFitgi2C5zUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft Manifest number: 05E7 Signing time: Sat 01 Jun 2024 00:53:13 +0000 Manifest this update: Sat 01 Jun 2024 00:53:13 +0000 Manifest next update: Sat 08 Jun 2024 00:53:13 +0000 Files and hashes: 1: 7HnRemDtVw7Ge1EWFitgi2C5zUE.crl (hash: JzS90nrFme5J01oPttMZTto31OE64QJf54mTa9DXjzM=) 2: C144C89ADCF311EC80AD955EC4F9AE02.roa (hash: ekWMI9lKI80qdKLgYltLVxIp5iJZ3aucbrILlremPho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.crl rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HnRemDtVw7Ge1EWFitgi2C5zUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 00:53:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1517 (0x5ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C309F/serialNumber=EC79D17A60ED570EC67B5116162B608B60B9CD41 Validity Not Before: Jun 1 00:53:13 2024 GMT Not After : Jun 8 00:53:13 2024 GMT Subject: CN=665a70f9-4077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:68:c2:ef:b9:e8:3f:4d:81:82:7a:78:f0:57: 02:88:89:5e:45:80:21:03:86:e2:4b:08:10:5b:1c: 96:d9:7d:e3:bc:45:ce:b1:95:a9:27:0e:2c:7e:c0: 92:98:9a:b6:3a:ad:78:2f:65:74:f6:35:e6:6d:cf: 69:b0:4f:5d:22:a5:5e:7e:62:e6:e4:ce:81:68:b0: ee:d2:b4:fe:9d:d6:4e:dc:5a:82:59:81:32:f8:47: bb:0d:d2:e8:2f:2c:42:d7:c2:6c:58:78:18:1b:a6: f8:ee:ff:7a:f0:13:31:f6:18:49:78:20:e9:2e:09: a7:ba:4c:73:9e:db:63:bf:b1:82:0a:b9:1a:46:d6: 3a:a2:76:9f:c5:74:49:1c:97:54:7c:ff:bb:f0:96: 7d:ee:cb:8e:e3:71:2e:2e:5f:35:15:52:ce:d1:c2: 4d:24:2c:22:41:b8:67:28:d5:37:40:16:a1:6b:2f: 2c:e8:1d:9e:a9:0e:b6:fc:83:3f:57:07:55:f8:9a: 04:b0:66:f2:6b:7c:87:9e:13:af:33:8b:e2:0b:34: 37:87:c6:64:2f:39:28:d7:e9:2b:ca:3a:1f:31:59: 2c:cf:47:d9:71:df:90:a1:c7:0d:d3:fb:38:90:56: 4b:27:bf:6a:f2:a7:0b:39:62:9d:9f:27:e8:92:bf: 4b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:5C:85:28:3C:1A:23:8B:66:A1:BF:B8:EA:C9:74:37:88:16:4D:A6 X509v3 Authority Key Identifier: keyid:EC:79:D1:7A:60:ED:57:0E:C6:7B:51:16:16:2B:60:8B:60:B9:CD:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HnRemDtVw7Ge1EWFitgi2C5zUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:db:43:1c:a8:60:43:7c:2d:ec:5b:c6:89:75:c4:a1:6a:54: 89:82:2e:cd:92:64:9e:7b:60:ab:5b:bc:d0:b8:1a:95:98:cb: b1:46:69:d1:a9:3a:00:77:9e:d2:ab:5c:c7:21:67:e5:13:32: ff:c1:36:4b:20:3b:5d:cf:7b:bf:05:ea:57:de:0f:b3:bc:76: 2b:4f:e2:9a:6f:2e:e4:83:d1:a7:6b:7f:ad:e7:4c:b1:f9:80: b0:4c:2a:07:31:23:6a:d5:d1:20:2b:07:bd:6f:bc:96:eb:97: 20:91:18:95:42:63:87:78:74:6f:a5:75:c6:2a:1e:f2:02:2d: 86:66:6f:d0:af:c7:15:7c:09:af:2c:7d:ef:82:5e:08:91:d7: e4:10:d5:c8:e3:33:82:cc:f0:00:85:3b:cc:29:3c:90:49:53: 86:7e:4f:3e:99:93:13:69:2c:8a:d1:a8:11:b6:70:e6:a6:ea: 6e:48:6e:59:e5:a6:60:13:dd:50:f8:00:0e:0c:eb:d1:2e:13: 69:10:d4:20:44:12:18:2b:6f:71:4a:6e:dd:97:1c:01:5b:65: 36:7a:77:a6:6f:c8:cc:e2:d8:ec:60:09:c3:4a:fb:e1:7e:7a: 03:b4:f7:a9:f0:67:5b:09:5b:64:2a:ee:92:83:ec:e1:af:77: 3a:b1:db:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMwOUYxMTAvBgNVBAUTKEVDNzlEMTdBNjBFRDU3MEVDNjdCNTExNjE2MkI2MDhC NjBCOUNENDEwHhcNMjQwNjAxMDA1MzEzWhcNMjQwNjA4MDA1MzEzWjAYMRYwFAYD VQQDEw02NjVhNzBmOS00MDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2jC77noP02Bgnp48FcCiIleRYAhA4biSwgQWxyW2X3jvEXOsZWpJw4sfsCS mJq2Oq14L2V09jXmbc9psE9dIqVefmLm5M6BaLDu0rT+ndZO3FqCWYEy+Ee7DdLo LyxC18JsWHgYG6b47v968BMx9hhJeCDpLgmnukxznttjv7GCCrkaRtY6onafxXRJ HJdUfP+78JZ97suO43EuLl81FVLO0cJNJCwiQbhnKNU3QBahay8s6B2eqQ62/IM/ VwdV+JoEsGbya3yHnhOvM4viCzQ3h8ZkLzko1+kryjofMVksz0fZcd+QoccN0/s4 kFZLJ79q8qcLOWKdnyfokr9LxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGZchSg8 GiOLZqG/uOrJdDeIFk2mMB8GA1UdIwQYMBaAFOx50Xpg7VcOxntRFhYrYItguc1B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzA5Ri8xREI0ODNBNDY5 REMxMUVCOUUxNjA5MUFDNEY5QUUwMi83SG5SZW1EdFZ3N0dlMUVXRml0Z2kyQzV6 VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdIblJlbUR0Vnc3R2UxRVdGaXRnaTJDNXpVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzA5Ri8xREI0ODNBNDY5REMxMUVCOUUxNjA5MUFDNEY5QUUwMi83SG5SZW1EdFZ3 N0dlMUVXRml0Z2kyQzV6VUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA620McqGBDfC3sW8aJdcShalSJgi7NkmSee2CrW7zQuBqVmMuxRmnR qToAd57Sq1zHIWflEzL/wTZLIDtdz3u/BepX3g+zvHYrT+Kaby7kg9Gna3+t50yx +YCwTCoHMSNq1dEgKwe9b7yW65cgkRiVQmOHeHRvpXXGKh7yAi2GZm/Qr8cVfAmv LH3vgl4IkdfkENXI4zOCzPAAhTvMKTyQSVOGfk8+mZMTaSyK0agRtnDmpupuSG5Z 5aZgE91Q+AAODOvRLhNpENQgRBIYK29xSm7dlxwBW2U2enemb8jM4tjsYAnDSvvh fnoDtPep8GdbCVtkKu6Sg+zhr3c6sdvz -----END CERTIFICATE-----Generated at Sat Jun 1 02:01:21 2024 by rpki-client on console-ams.rpki-client.org