$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft File: e5n41rlBPOKiluscfX7-bUfQy6Q.mft (raw, json) Hash identifier: XpU1HJp3+egIFXE9f+LDWeIeUGwEST0fiqWQBVAhfyQ= Subject key identifier: BF:A9:6E:EC:8A:93:4D:EC:42:72:25:EA:8A:8B:76:03:97:54:D4:9A Authority key identifier: 7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4 Certificate issuer: /CN=A91C4F1B/serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4 Certificate serial: 07DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft Manifest number: 07D8 Signing time: Sat 18 May 2024 21:59:52 +0000 Manifest this update: Sat 18 May 2024 21:59:52 +0000 Manifest next update: Sat 25 May 2024 21:59:52 +0000 Files and hashes: 1: e5n41rlBPOKiluscfX7-bUfQy6Q.crl (hash: RCfH+tYl9JXdJWXSUu0xXYmxFbeLZzQIXKbcxReRflU=) 2: 059261A8BC5111EABE07AE32C4F9AE02.roa (hash: GMzjXTtzVauDwypVhHPwgP11aqtJKysxV0/a8VxbSKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2014 (0x7de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F1B/serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4 Validity Not Before: May 18 21:59:52 2024 GMT Not After : May 25 21:59:52 2024 GMT Subject: CN=664924d8-e045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:10:3a:49:13:6b:38:94:ba:19:1f:e1:39:99: f6:37:19:b5:f3:ea:4d:e8:ab:d6:37:f1:f4:9c:29: 05:bf:09:28:f2:36:69:be:f6:eb:e3:be:82:09:ba: b8:88:1c:09:37:d9:b3:ec:0e:7d:da:75:6d:bd:64: 3c:60:1f:65:4b:9f:60:64:d5:28:63:e8:cc:5e:87: 90:56:c5:33:92:89:aa:da:6a:a9:dd:2f:60:c0:7c: 1d:ca:2f:f3:4b:c7:9e:c0:06:59:12:1d:1b:e9:ec: 46:df:49:33:a1:a3:e9:22:b1:0f:93:6e:5d:a8:e6: d3:43:fd:66:9f:5a:c1:b2:ba:b6:19:e7:e3:ac:77: b9:3f:54:0a:e8:de:a0:9f:8e:a5:d8:3e:8b:cc:35: f1:1d:25:e4:da:f2:fc:b5:e6:4a:fe:d9:d0:6d:34: c4:8e:dd:56:72:91:ec:46:42:16:f0:c6:f0:3e:26: aa:b0:55:99:03:dd:25:60:dc:b3:59:a8:22:a2:aa: 5b:47:99:aa:87:a4:22:6e:e0:cf:5b:06:c2:6c:82: d6:58:d0:51:8e:cc:18:3e:23:07:88:30:76:11:7e: 8e:f0:62:ff:4f:51:0f:ae:42:a5:7c:95:e9:1c:14: 83:d8:5e:71:24:9d:a7:23:5d:7f:84:b7:98:15:de: 16:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A9:6E:EC:8A:93:4D:EC:42:72:25:EA:8A:8B:76:03:97:54:D4:9A X509v3 Authority Key Identifier: keyid:7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:0c:d7:32:f2:a0:84:4b:5d:9b:64:96:0f:79:ca:f2:29:33: 61:36:d7:3e:cb:79:3d:40:99:d8:80:5a:af:69:bc:46:a4:0b: 3b:cc:81:0d:4f:8b:a6:44:bc:ed:09:8d:eb:ab:af:f6:c3:ad: 94:8d:a1:37:6f:c1:a7:36:97:1e:fc:8c:9b:2c:e9:1b:b9:c7: f2:80:26:67:98:5c:64:e3:25:e3:27:16:4c:d1:2d:72:85:e8: dd:90:bb:2a:c3:a1:96:1e:b3:95:bc:03:71:e2:20:a3:d4:b8: 4b:95:bd:03:fb:28:fe:df:79:5d:9a:8c:d8:82:7e:6e:7f:24: 73:f5:fa:13:4e:d6:36:42:49:67:61:f8:54:d6:01:56:7a:cd: 97:2c:8d:7a:2e:a1:9b:1f:56:ae:32:48:e8:b3:62:d4:42:9b: 52:50:7f:cc:5a:73:73:5c:16:59:de:7a:d2:c6:20:77:70:ea: 88:29:13:89:81:1f:c9:3f:4f:38:8d:b8:06:70:26:d2:ab:05: 05:f5:b7:d8:3c:e6:6e:08:1a:2d:fc:76:98:4c:6e:c8:01:2f: 75:55:6c:cb:69:d3:34:13:fc:30:af:92:71:41:b7:2f:8b:ce: 91:79:b4:65:7d:5f:07:e3:d7:cd:6a:a2:35:83:12:7d:6c:fe: 18:8e:2d:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGMUIxMTAvBgNVBAUTKDdCOTlGOEQ2Qjk0MTNDRTJBMjk2RUIxQzdEN0VGRTZE NDdEMENCQTQwHhcNMjQwNTE4MjE1OTUyWhcNMjQwNTI1MjE1OTUyWjAYMRYwFAYD VQQDEw02NjQ5MjRkOC1lMDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnBA6SRNrOJS6GR/hOZn2Nxm18+pN6KvWN/H0nCkFvwko8jZpvvbr476CCbq4 iBwJN9mz7A592nVtvWQ8YB9lS59gZNUoY+jMXoeQVsUzkomq2mqp3S9gwHwdyi/z S8eewAZZEh0b6exG30kzoaPpIrEPk25dqObTQ/1mn1rBsrq2GefjrHe5P1QK6N6g n46l2D6LzDXxHSXk2vL8teZK/tnQbTTEjt1WcpHsRkIW8MbwPiaqsFWZA90lYNyz WagioqpbR5mqh6QibuDPWwbCbILWWNBRjswYPiMHiDB2EX6O8GL/T1EPrkKlfJXp HBSD2F5xJJ2nI11/hLeYFd4WlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+pbuyK k03sQnIl6oqLdgOXVNSaMB8GA1UdIwQYMBaAFHuZ+Na5QTziopbrHH1+/m1H0Muk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYxQi8yM0YzMDU1MEJD NEYxMUVBQkE4Qzk2MkZDNEY5QUUwMi9lNW40MXJsQlBPS2lsdXNjZlg3LWJVZlF5 NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2U1bjQxcmxCUE9LaWx1c2NmWDctYlVmUXk2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEYxQi8yM0YzMDU1MEJDNEYxMUVBQkE4Qzk2MkZDNEY5QUUwMi9lNW40MXJsQlBP S2lsdXNjZlg3LWJVZlF5NlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXDNcy8qCES12bZJYPecryKTNhNtc+y3k9QJnYgFqvabxGpAs7zIEN T4umRLztCY3rq6/2w62UjaE3b8GnNpce/IybLOkbucfygCZnmFxk4yXjJxZM0S1y hejdkLsqw6GWHrOVvANx4iCj1LhLlb0D+yj+33ldmozYgn5ufyRz9foTTtY2Qkln YfhU1gFWes2XLI16LqGbH1auMkjos2LUQptSUH/MWnNzXBZZ3nrSxiB3cOqIKROJ gR/JP084jbgGcCbSqwUF9bfYPOZuCBot/HaYTG7IAS91VWzLadM0E/wwr5JxQbcv i86RebRlfV8H49fNaqI1gxJ9bP4Yji0p -----END CERTIFICATE-----Generated at Sun May 19 00:30:20 2024 by rpki-client on console-ams.rpki-client.org