$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft File: ed1SqjF1MIEm0XSGpygF-w4bqlg.mft (raw, json) Hash identifier: vhUfZMNBKjQpNKZx05vt20G7Cqdv8WzakNOE44eD9vA= Subject key identifier: A0:F0:8D:3A:28:83:2F:F2:1E:F5:AB:22:EA:3E:89:88:A3:EA:AF:4F Authority key identifier: 79:DD:52:AA:31:75:30:81:26:D1:74:86:A7:28:05:FB:0E:1B:AA:58 Certificate issuer: /CN=A91CB0E2/serialNumber=79DD52AA3175308126D17486A72805FB0E1BAA58 Certificate serial: 0682 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed1SqjF1MIEm0XSGpygF-w4bqlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft Manifest number: 067C Signing time: Sat 18 May 2024 23:26:42 +0000 Manifest this update: Sat 18 May 2024 23:26:42 +0000 Manifest next update: Sat 25 May 2024 23:26:41 +0000 Files and hashes: 1: ed1SqjF1MIEm0XSGpygF-w4bqlg.crl (hash: +yvMsMGlWT58ASpIedRQ+uYajPAVv0i2w+78Yd1W03k=) 2: 6B5C86022D6811EB86D96027C4F9AE02.roa (hash: WWjCK6LOxquzr6GYNezfSpBrFEeAdWe95BEEbHt8Ewg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.crl rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed1SqjF1MIEm0XSGpygF-w4bqlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1666 (0x682) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB0E2/serialNumber=79DD52AA3175308126D17486A72805FB0E1BAA58 Validity Not Before: May 18 23:26:42 2024 GMT Not After : May 25 23:26:41 2024 GMT Subject: CN=66493932-5f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:20:b8:69:9d:ab:27:aa:0b:41:14:fa:06:09: 05:73:24:fd:25:35:c8:d4:31:be:a5:79:df:7d:8a: 56:4b:2c:8d:f7:8b:1a:de:5d:c5:1d:0e:b1:b3:c8: 14:ee:6b:2e:42:d4:26:0c:e3:f3:4a:22:bc:59:3a: 7f:97:f7:94:b9:5c:36:0d:4a:36:9b:25:18:0d:f9: 63:57:9c:3d:d8:70:ce:1c:10:29:7e:ad:06:0d:1a: 4e:63:87:c2:6b:f0:bd:d0:5a:bf:64:94:5e:b7:1e: de:9f:7b:06:bd:08:f4:8f:94:d1:d0:a9:39:88:6c: 1b:15:47:c8:7f:34:e0:36:87:e9:81:f1:c2:05:c5: 33:49:d4:63:05:bf:f5:e9:a3:bb:ef:73:db:bc:07: ae:bc:cc:64:67:5b:1d:34:8e:c0:bd:64:63:b5:b2: 8f:ac:96:4e:b6:ef:98:f5:f7:47:8d:aa:69:7c:00: 2a:4e:ef:96:59:99:59:a8:a8:92:39:c0:66:f5:fa: 24:08:a1:6f:c6:bb:c1:97:f9:70:b5:78:dd:49:ed: 9e:a8:10:02:b7:71:d1:72:1e:85:83:09:a8:91:d5: 40:6c:00:58:6f:ff:78:87:44:ac:42:42:7e:19:46: 2b:17:04:e5:bb:61:c2:66:5d:a4:d5:da:4e:2a:03: 17:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F0:8D:3A:28:83:2F:F2:1E:F5:AB:22:EA:3E:89:88:A3:EA:AF:4F X509v3 Authority Key Identifier: keyid:79:DD:52:AA:31:75:30:81:26:D1:74:86:A7:28:05:FB:0E:1B:AA:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed1SqjF1MIEm0XSGpygF-w4bqlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:d6:5d:1f:14:ca:cb:fe:42:6c:b4:e9:91:09:cc:c9:ea:a8: 4b:47:8d:7b:48:14:05:8a:87:b1:dc:4e:d3:10:8f:51:c5:42: fd:25:f0:ac:c5:75:e0:d0:a7:cb:48:1b:7d:8b:3b:e5:5b:1d: a5:5b:27:e2:c3:60:4f:e7:c3:c6:2f:3b:2e:1c:69:1c:9c:c2: 9f:04:48:6a:db:49:c5:29:59:0e:9b:b4:e0:50:c2:45:fc:bd: c1:22:1d:09:c2:cd:ed:7a:37:09:83:b6:a9:40:0c:f4:32:ce: 54:4f:6f:77:ea:26:96:80:e2:7b:70:1a:48:58:63:7b:85:f6: f3:0b:48:bf:4b:07:cf:9e:86:fd:19:c6:3b:37:a6:66:e3:24: e2:a4:6d:4c:95:55:7c:b7:f4:e1:4c:c7:6a:a9:24:67:9c:8f: 68:d3:9b:22:b1:b8:68:fb:94:ad:34:30:99:1c:4d:91:5f:06: 97:ba:f9:e1:b4:7d:e2:23:bc:46:f0:0d:ca:fb:d0:a2:2b:3d: 76:d5:79:4e:2e:14:c8:db:1d:44:cc:d1:59:39:c7:e8:a6:e4: 52:b2:b3:f7:ce:2c:8e:a1:47:80:f7:ac:ef:0b:c3:7f:32:f6: f7:a3:63:fb:80:f3:32:bb:1c:8e:58:16:91:5f:20:9a:ef:86: 07:ec:6a:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IwRTIxMTAvBgNVBAUTKDc5REQ1MkFBMzE3NTMwODEyNkQxNzQ4NkE3MjgwNUZC MEUxQkFBNTgwHhcNMjQwNTE4MjMyNjQyWhcNMjQwNTI1MjMyNjQxWjAYMRYwFAYD VQQDEw02NjQ5MzkzMi01ZjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoSC4aZ2rJ6oLQRT6BgkFcyT9JTXI1DG+pXnffYpWSyyN94sa3l3FHQ6xs8gU 7msuQtQmDOPzSiK8WTp/l/eUuVw2DUo2myUYDfljV5w92HDOHBApfq0GDRpOY4fC a/C90Fq/ZJRetx7en3sGvQj0j5TR0Kk5iGwbFUfIfzTgNofpgfHCBcUzSdRjBb/1 6aO773PbvAeuvMxkZ1sdNI7AvWRjtbKPrJZOtu+Y9fdHjappfAAqTu+WWZlZqKiS OcBm9fokCKFvxrvBl/lwtXjdSe2eqBACt3HRch6FgwmokdVAbABYb/94h0SsQkJ+ GUYrFwTlu2HCZl2k1dpOKgMXFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKDwjToo gy/yHvWrIuo+iYij6q9PMB8GA1UdIwQYMBaAFHndUqoxdTCBJtF0hqcoBfsOG6pY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjBFMi9CNjIzODUyQTJE NjYxMUVCQjQ0RjU3MjVDNEY5QUUwMi9lZDFTcWpGMU1JRW0wWFNHcHlnRi13NGJx bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VkMVNxakYxTUlFbTBYU0dweWdGLXc0YnFsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjBFMi9CNjIzODUyQTJENjYxMUVCQjQ0RjU3MjVDNEY5QUUwMi9lZDFTcWpGMU1J RW0wWFNHcHlnRi13NGJxbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz1l0fFMrL/kJstOmRCczJ6qhLR417SBQFioex3E7TEI9RxUL9JfCs xXXg0KfLSBt9izvlWx2lWyfiw2BP58PGLzsuHGkcnMKfBEhq20nFKVkOm7TgUMJF /L3BIh0Jws3tejcJg7apQAz0Ms5UT2936iaWgOJ7cBpIWGN7hfbzC0i/SwfPnob9 GcY7N6Zm4yTipG1MlVV8t/ThTMdqqSRnnI9o05sisbho+5StNDCZHE2RXwaXuvnh tH3iI7xG8A3K+9CiKz121XlOLhTI2x1EzNFZOcfopuRSsrP3ziyOoUeA96zvC8N/ Mvb3o2P7gPMyuxyOWBaRXyCa74YH7GqC -----END CERTIFICATE-----Generated at Sun May 19 00:16:19 2024 by rpki-client on console-fra.rpki-client.org