$ rpki-client -vvf rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft File: e-hwMVM9L_QxwRpYeani2dyFJ_I.mft (raw, json) Hash identifier: QbM2H1Jg4TeH5+kNNXTBSKOBU2ZEzu/EeTXNLJ7x8WQ= Subject key identifier: 9F:EA:80:5D:2D:4D:91:68:53:98:67:E6:C0:75:1A:49:EE:1B:35:98 Authority key identifier: 7B:E8:70:31:53:3D:2F:F4:31:C1:1A:58:79:A9:E2:D9:DC:85:27:F2 Certificate issuer: /CN=A91C35C9/serialNumber=7BE87031533D2FF431C11A5879A9E2D9DC8527F2 Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-hwMVM9L_QxwRpYeani2dyFJ_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft Manifest number: AB Signing time: Sun 19 May 2024 06:37:05 +0000 Manifest this update: Sun 19 May 2024 06:37:05 +0000 Manifest next update: Sun 26 May 2024 06:37:05 +0000 Files and hashes: 1: e-hwMVM9L_QxwRpYeani2dyFJ_I.crl (hash: Wpvnyg9mpX06dMe3bcGSiaNL1vdKsVB8E89jnsTABIg=) 2: D1315D7C0FDD11EEB007DA41C4F9AE02.roa (hash: Dc15FontYVB/1W30cGbTo8Ew6J9U3RNpX+ozWlmaRl0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.crl rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-hwMVM9L_QxwRpYeani2dyFJ_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C35C9/serialNumber=7BE87031533D2FF431C11A5879A9E2D9DC8527F2 Validity Not Before: May 19 06:37:05 2024 GMT Not After : May 26 06:37:05 2024 GMT Subject: CN=66499e11-063e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:95:ed:e1:ad:26:c0:89:de:48:32:45:42:6e: 7f:fb:fb:35:18:e2:07:0d:ca:4f:ed:f6:43:a7:0d: c0:9a:1a:81:8e:94:ba:cb:3d:8e:c9:9e:4e:d8:0d: fa:f3:69:58:87:ae:93:0f:72:41:f7:46:4f:36:f8: 33:0f:8d:ba:2e:ce:6e:b0:f6:79:ef:a0:30:bd:6d: 27:44:80:5b:32:1a:e4:71:31:c1:14:50:de:d3:bb: e4:1a:72:f2:b9:03:59:99:c6:90:d7:0f:c4:50:3f: f2:a7:1a:cd:a7:9e:c6:18:92:f9:a4:a2:f6:46:83: b2:7a:da:9f:f3:60:bb:fc:cc:d5:cd:2d:ff:73:6b: 64:72:a2:05:c8:d1:a0:db:d6:4d:8e:d8:9c:b1:6c: 94:da:af:3f:83:c8:99:37:8e:4d:c4:55:ba:65:36: 80:6d:95:27:cf:44:57:78:14:fe:2d:d2:7b:8f:84: 2e:c8:d1:a0:36:31:f8:e3:ed:0b:10:e5:ca:f1:fd: da:d3:3a:81:57:9f:9e:bc:98:f6:db:1d:90:93:00: e3:9a:7f:8f:b6:ea:8c:3a:46:fc:7f:3b:d5:42:db: 7e:b0:33:74:5e:9e:46:b0:27:0e:51:14:ac:23:8a: 88:a7:af:22:ed:28:9c:71:e5:b1:2e:51:74:6b:88: e9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:EA:80:5D:2D:4D:91:68:53:98:67:E6:C0:75:1A:49:EE:1B:35:98 X509v3 Authority Key Identifier: keyid:7B:E8:70:31:53:3D:2F:F4:31:C1:1A:58:79:A9:E2:D9:DC:85:27:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-hwMVM9L_QxwRpYeani2dyFJ_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:5c:b5:b5:30:3a:72:85:92:cf:c6:59:65:dd:7a:9f:67:ca: 82:45:46:40:ad:7d:ba:04:07:03:80:11:f0:fe:b1:16:64:fc: 75:bc:7f:e8:01:75:a5:43:fb:b4:f0:a6:4c:fe:98:17:fa:30: ad:28:cd:c7:61:1c:19:fe:ce:2b:5b:bd:0e:18:b5:d2:e5:56: 2e:2a:d7:68:c8:0c:98:0f:c4:e9:1f:be:81:59:29:5c:b9:20: f5:14:92:98:dc:4d:01:ef:b9:d7:68:c7:d4:39:4c:cb:df:6c: b5:69:c7:3c:ab:61:8e:8a:ce:dd:81:15:db:3f:97:71:ec:0e: 15:eb:98:4c:ae:6e:f3:7a:3f:9f:bc:09:99:c6:1b:5e:35:c7: bb:51:a9:db:94:eb:8c:b6:b6:c0:b6:2f:8c:54:7e:a3:a0:8a: e5:e1:03:55:99:f5:28:a9:b2:ab:67:0e:71:38:cb:59:25:02: 0a:4f:2a:8e:d2:20:92:2c:ae:aa:0d:74:d6:ca:0d:a4:4f:aa: 43:69:7c:01:ba:03:7a:a6:48:53:5a:c8:a8:ba:57:2a:0c:af: d3:bc:93:a9:09:70:a7:07:67:a1:4d:ca:a5:25:95:b9:8d:2f: 21:7f:91:0b:ff:9a:f9:8c:02:36:9a:12:44:ec:50:ae:41:fe: 9b:94:bb:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM1QzkxMTAvBgNVBAUTKDdCRTg3MDMxNTMzRDJGRjQzMUMxMUE1ODc5QTlFMkQ5 REM4NTI3RjIwHhcNMjQwNTE5MDYzNzA1WhcNMjQwNTI2MDYzNzA1WjAYMRYwFAYD VQQDEw02NjQ5OWUxMS0wNjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5Xt4a0mwIneSDJFQm5/+/s1GOIHDcpP7fZDpw3AmhqBjpS6yz2OyZ5O2A36 82lYh66TD3JB90ZPNvgzD426Ls5usPZ576AwvW0nRIBbMhrkcTHBFFDe07vkGnLy uQNZmcaQ1w/EUD/ypxrNp57GGJL5pKL2RoOyetqf82C7/MzVzS3/c2tkcqIFyNGg 29ZNjticsWyU2q8/g8iZN45NxFW6ZTaAbZUnz0RXeBT+LdJ7j4QuyNGgNjH44+0L EOXK8f3a0zqBV5+evJj22x2QkwDjmn+PtuqMOkb8fzvVQtt+sDN0Xp5GsCcOURSs I4qIp68i7SicceWxLlF0a4jp+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/qgF0t TZFoU5hn5sB1GknuGzWYMB8GA1UdIwQYMBaAFHvocDFTPS/0McEaWHmp4tnchSfy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzVDOS83MEY4NEM2MjBG MjUxMUVFOEQyOUUyNkNDNEY5QUUwMi9lLWh3TVZNOUxfUXh3UnBZZWFuaTJkeUZK X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UtaHdNVk05TF9ReHdScFllYW5pMmR5RkpfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzVDOS83MEY4NEM2MjBGMjUxMUVFOEQyOUUyNkNDNEY5QUUwMi9lLWh3TVZNOUxf UXh3UnBZZWFuaTJkeUZKX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASXLW1MDpyhZLPxlll3XqfZ8qCRUZArX26BAcDgBHw/rEWZPx1vH/o AXWlQ/u08KZM/pgX+jCtKM3HYRwZ/s4rW70OGLXS5VYuKtdoyAyYD8TpH76BWSlc uSD1FJKY3E0B77nXaMfUOUzL32y1acc8q2GOis7dgRXbP5dx7A4V65hMrm7zej+f vAmZxhteNce7UanblOuMtrbAti+MVH6joIrl4QNVmfUoqbKrZw5xOMtZJQIKTyqO 0iCSLK6qDXTWyg2kT6pDaXwBugN6pkhTWsioulcqDK/TvJOpCXCnB2ehTcqlJZW5 jS8hf5EL/5r5jAI2mhJE7FCuQf6blLtJ -----END CERTIFICATE-----Generated at Sun May 19 08:25:07 2024 by rpki-client on console-ams.rpki-client.org