$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft File: e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft (raw, json) Hash identifier: 8DBQiBISKC1QkQc9iuwhnRrhHTBSW1bzyyYNZCftR9k= Subject key identifier: 52:17:FD:A3:B4:86:68:66:1B:D9:86:26:B5:70:DE:B2:A6:D2:FE:DA Authority key identifier: 7B:E9:8C:7A:AA:D8:7C:9F:25:92:96:30:16:43:A3:61:0A:7B:51:88 Certificate issuer: /CN=A91CDB75/serialNumber=7BE98C7AAAD87C9F259296301643A3610A7B5188 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft Manifest number: 3C Signing time: Sun 19 May 2024 08:13:44 +0000 Manifest this update: Sun 19 May 2024 08:13:43 +0000 Manifest next update: Sun 26 May 2024 08:13:43 +0000 Files and hashes: 1: e-mMeqrYfJ8lkpYwFkOjYQp7UYg.crl (hash: 3DtHBdmUp2LW+vO48jr39yNq+aLti2RWLqh7N6h4t0I=) 2: 4CC50DB2BB7811EE9416DD42C4F9AE02.roa (hash: 6tdKeRRJNQp3+06ZA3uoftMwACFXYVeU4vtZzC1cRtQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.crl rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDB75/serialNumber=7BE98C7AAAD87C9F259296301643A3610A7B5188 Validity Not Before: May 19 08:13:43 2024 GMT Not After : May 26 08:13:43 2024 GMT Subject: CN=6649b4b8-8be1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ea:f6:76:e3:0a:16:c0:19:a8:db:e1:b7:d7: 45:4b:96:7f:87:50:b8:9d:fe:fd:0f:f9:7f:3c:c4: ab:3b:dd:a4:4b:a2:9e:21:98:be:98:67:64:98:2e: 9b:eb:26:91:05:0c:24:a0:9c:45:48:3d:80:0a:05: f7:57:a8:a8:c8:c4:5e:d4:84:ae:22:ca:dd:d0:68: d9:22:78:d7:03:38:ce:a1:22:a8:4d:ac:01:bf:2b: 8c:21:e4:cf:ba:a1:b3:d8:e8:34:e0:0b:98:a6:53: 6c:38:35:97:fe:f3:ce:58:b0:e0:d7:89:4f:5a:9e: 1d:41:2b:32:04:62:e9:34:f0:3b:63:4f:f8:99:c0: 22:f6:41:dd:b9:6d:4b:9a:58:a2:69:76:93:8e:50: fd:4c:33:ea:7d:cd:07:78:b8:a6:c9:d3:16:94:5d: 57:82:e0:85:f9:f9:8c:87:c3:80:13:fd:6f:12:4e: d1:35:8e:78:45:49:4a:67:31:0d:c6:b1:53:67:93: f4:4c:4b:68:88:cc:e1:82:f8:4f:e0:53:06:28:8b: 68:c4:43:f2:7e:37:51:b5:90:ac:f0:ec:f9:b1:d3: 76:b6:8e:cd:a0:3e:6c:28:e6:0a:a7:6a:ec:b7:ad: d3:67:11:99:89:34:d6:33:69:44:93:0f:bd:51:f0: 35:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:17:FD:A3:B4:86:68:66:1B:D9:86:26:B5:70:DE:B2:A6:D2:FE:DA X509v3 Authority Key Identifier: keyid:7B:E9:8C:7A:AA:D8:7C:9F:25:92:96:30:16:43:A3:61:0A:7B:51:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:5c:76:37:2e:5e:75:7d:82:f6:08:53:1b:27:a7:dc:d1:d9: f3:fe:d3:35:dc:a3:79:9a:eb:29:6e:e4:83:a4:97:8e:d3:56: b3:a9:64:61:34:67:f2:2d:d3:78:5b:40:19:69:c7:14:52:7f: 8a:41:1b:c0:45:9d:35:97:13:fb:54:e5:7f:bd:24:b9:82:7b: 00:f2:26:46:1d:de:dd:c8:a0:e3:5a:ae:99:f6:34:e3:e6:98: 2e:3d:4a:d7:33:2d:19:9e:13:24:d7:4b:c4:6e:0d:1b:8a:3c: a8:3e:73:37:a9:72:5c:8b:a9:80:0e:7a:62:4e:0d:6d:9d:fb: 91:f7:78:3d:6c:d4:32:bf:b4:71:8b:6a:7a:ca:bc:4a:bd:0d: 38:5a:1b:26:3b:47:7e:f1:80:50:42:80:6e:2a:d2:56:be:93: ed:a7:2f:78:7e:17:da:94:db:dc:19:cf:dc:d6:96:95:b7:32: fe:38:d5:27:a3:c1:39:b9:4c:4b:15:4c:e5:42:1d:2c:b0:f2: ba:20:f9:be:ab:08:3c:09:01:17:bd:55:09:20:a4:79:89:93: 0b:db:60:42:af:12:0f:ea:d8:ab:46:36:73:09:49:09:7c:3d: 62:cc:2f:cd:a4:4c:9e:db:dc:e2:be:4c:d0:f7:34:ea:5e:ea: 6c:2d:da:f7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD REI3NTExMC8GA1UEBRMoN0JFOThDN0FBQUQ4N0M5RjI1OTI5NjMwMTY0M0EzNjEw QTdCNTE4ODAeFw0yNDA1MTkwODEzNDNaFw0yNDA1MjYwODEzNDNaMBgxFjAUBgNV BAMTDTY2NDliNGI4LThiZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDf6vZ24woWwBmo2+G310VLln+HULid/v0P+X88xKs73aRLop4hmL6YZ2SYLpvr JpEFDCSgnEVIPYAKBfdXqKjIxF7UhK4iyt3QaNkieNcDOM6hIqhNrAG/K4wh5M+6 obPY6DTgC5imU2w4NZf+885YsODXiU9anh1BKzIEYuk08DtjT/iZwCL2Qd25bUua WKJpdpOOUP1MM+p9zQd4uKbJ0xaUXVeC4IX5+YyHw4AT/W8STtE1jnhFSUpnMQ3G sVNnk/RMS2iIzOGC+E/gUwYoi2jEQ/J+N1G1kKzw7Pmx03a2js2gPmwo5gqnauy3 rdNnEZmJNNYzaUSTD71R8DUbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUhf9o7SG aGYb2YYmtXDesqbS/towHwYDVR0jBBgwFoAUe+mMeqrYfJ8lkpYwFkOjYQp7UYgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEQjc1L0U2NTE5QTE0QkI3 NzExRUVBQUQ3QjI0MUM0RjlBRTAyL2UtbU1lcXJZZko4bGtwWXdGa09qWVFwN1VZ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZS1tTWVxcllmSjhsa3BZd0ZrT2pZUXA3VVlnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE Qjc1L0U2NTE5QTE0QkI3NzExRUVBQUQ3QjI0MUM0RjlBRTAyL2UtbU1lcXJZZko4 bGtwWXdGa09qWVFwN1VZZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACFcdjcuXnV9gvYIUxsnp9zR2fP+0zXco3ma6ylu5IOkl47TVrOpZGE0 Z/It03hbQBlpxxRSf4pBG8BFnTWXE/tU5X+9JLmCewDyJkYd3t3IoONarpn2NOPm mC49StczLRmeEyTXS8RuDRuKPKg+czepclyLqYAOemJODW2d+5H3eD1s1DK/tHGL anrKvEq9DThaGyY7R37xgFBCgG4q0la+k+2nL3h+F9qU29wZz9zWlpW3Mv441Sej wTm5TEsVTOVCHSyw8rog+b6rCDwJARe9VQkgpHmJkwvbYEKvEg/q2KtGNnMJSQl8 PWLML82kTJ7b3OK+TND3NOpe6mwt2vc= -----END CERTIFICATE-----Generated at Sun May 19 09:04:14 2024 by rpki-client on console-fra.rpki-client.org