$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft File: 7DavWXkJHGv6WA6juiJXeTV1cNc.mft (raw, json) Hash identifier: +QteINOjGX4jn1JolYKqKdJX4m5n3DCBkWkcT1AZY/4= Subject key identifier: 20:02:E8:02:87:AF:2F:C1:DA:EB:10:A9:FA:B1:B4:65:10:77:6D:1F Authority key identifier: EC:36:AF:59:79:09:1C:6B:FA:58:0E:A3:BA:22:57:79:35:75:70:D7 Certificate issuer: /CN=A91D7578/serialNumber=EC36AF5979091C6BFA580EA3BA225779357570D7 Certificate serial: 052A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft Manifest number: 0520 Signing time: Fri 31 May 2024 01:38:57 +0000 Manifest this update: Fri 31 May 2024 01:38:57 +0000 Manifest next update: Fri 07 Jun 2024 01:38:57 +0000 Files and hashes: 1: 7DavWXkJHGv6WA6juiJXeTV1cNc.crl (hash: pBGwdS1hhF5C7Hh6IH/8LnnE+l6SAa2rKc1IToLks9Q=) 2: E8542DEA6B8811ECAC731B4EC4F9AE02.roa (hash: YKQmhWF4LdfCr3ZVAnFb8qB7B8eNPyHLEWquRARIzpo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.crl rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:38:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1322 (0x52a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7578/serialNumber=EC36AF5979091C6BFA580EA3BA225779357570D7 Validity Not Before: May 31 01:38:57 2024 GMT Not After : Jun 7 01:38:57 2024 GMT Subject: CN=66592a31-f443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:83:e2:40:0e:16:a8:4d:da:06:66:6c:5d:18: 5e:5e:d5:6f:87:e5:df:87:1f:95:9e:1c:8a:80:4f: 26:22:e6:36:4c:78:2c:65:8a:d3:92:04:dd:cc:56: 68:29:23:62:a4:89:e3:9f:c6:b2:ca:d2:58:d2:ee: 89:c3:ab:b7:a3:e8:5f:24:79:5c:e9:ae:5b:36:55: 76:d9:ef:76:11:e2:12:77:af:41:c3:9c:c2:0b:2c: 27:34:06:be:33:a4:80:2e:ed:da:d3:0d:87:c4:78: 51:9f:3a:3f:fc:c6:e6:d1:c3:01:bf:aa:2a:6f:d0: 7e:e0:25:1e:f2:c5:99:d5:1e:75:5c:b9:4a:62:be: 16:6b:7e:30:e5:26:d2:4a:34:8e:e9:cf:70:5c:a8: b3:b2:3e:c1:42:1a:05:c6:77:3c:3d:b2:18:b3:50: 8e:89:56:04:ad:e3:12:f2:da:db:db:fa:c1:91:f7: 6e:43:a5:1a:3e:b8:f2:59:1c:09:e2:f4:68:d7:2b: e9:0e:cf:30:db:60:18:9c:05:49:1c:81:69:b1:f9: 1d:2d:e1:95:51:a0:1f:dc:8c:89:41:bf:27:86:37: e1:14:8e:4f:7a:ca:5c:e8:12:c5:81:71:e4:69:f3: 1f:2f:c1:0e:95:c7:fb:80:d6:cb:36:c7:f7:7f:74: 8a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:02:E8:02:87:AF:2F:C1:DA:EB:10:A9:FA:B1:B4:65:10:77:6D:1F X509v3 Authority Key Identifier: keyid:EC:36:AF:59:79:09:1C:6B:FA:58:0E:A3:BA:22:57:79:35:75:70:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:ae:54:52:7c:3a:f1:ee:7b:31:86:d7:5d:56:5c:7e:ec:aa: 71:de:b3:89:4a:f4:ff:1a:e4:2c:8e:05:85:a2:15:68:d4:e4: 50:38:b6:a6:8b:56:09:b1:ba:50:21:7e:cf:31:f1:be:ca:0e: ed:15:60:ad:76:14:56:20:17:01:91:8b:30:87:1e:2b:c7:32: 3b:67:65:03:b1:69:93:42:4e:a9:16:db:57:31:85:3d:57:1c: 44:f3:8c:8d:58:86:fd:47:02:26:dc:81:a6:b5:9a:ec:11:19: f5:4a:80:19:de:1c:59:2a:cb:6f:20:87:ab:78:bd:07:1d:69: 36:62:46:21:0c:13:1d:03:20:c3:9c:4f:d1:25:c5:33:89:c1: 08:50:eb:de:87:bd:94:2b:bb:93:39:b8:2b:7d:82:61:08:65: 42:0d:e5:fe:3f:bf:8f:99:ee:c1:7e:bd:85:19:1d:d6:c3:06: 1f:ff:40:42:07:b7:cd:6d:7e:a8:e3:0d:7d:d2:86:07:48:b2: fe:08:d9:ff:1d:2e:3b:0e:79:ff:69:a8:ee:c3:38:07:69:01: 9b:0a:a4:62:cc:17:99:e3:db:ae:58:d7:f6:0e:76:3b:05:ea: 89:e8:8b:4e:6c:7a:39:35:c5:40:ce:c4:12:e4:0e:01:9a:90: 58:9c:d4:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc1NzgxMTAvBgNVBAUTKEVDMzZBRjU5NzkwOTFDNkJGQTU4MEVBM0JBMjI1Nzc5 MzU3NTcwRDcwHhcNMjQwNTMxMDEzODU3WhcNMjQwNjA3MDEzODU3WjAYMRYwFAYD VQQDEw02NjU5MmEzMS1mNDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4PiQA4WqE3aBmZsXRheXtVvh+Xfhx+VnhyKgE8mIuY2THgsZYrTkgTdzFZo KSNipInjn8ayytJY0u6Jw6u3o+hfJHlc6a5bNlV22e92EeISd69Bw5zCCywnNAa+ M6SALu3a0w2HxHhRnzo//Mbm0cMBv6oqb9B+4CUe8sWZ1R51XLlKYr4Wa34w5SbS SjSO6c9wXKizsj7BQhoFxnc8PbIYs1COiVYEreMS8trb2/rBkfduQ6UaPrjyWRwJ 4vRo1yvpDs8w22AYnAVJHIFpsfkdLeGVUaAf3IyJQb8nhjfhFI5Pespc6BLFgXHk afMfL8EOlcf7gNbLNsf3f3SKAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCAC6AKH ry/B2usQqfqxtGUQd20fMB8GA1UdIwQYMBaAFOw2r1l5CRxr+lgOo7oiV3k1dXDX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzU3OC9EM0MwMTkwQ0JC OUQxMUVCODRGNzNCM0FDNEY5QUUwMi83RGF2V1hrSkhHdjZXQTZqdWlKWGVUVjFj TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdEYXZXWGtKSEd2NldBNmp1aUpYZVRWMWNOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzU3OC9EM0MwMTkwQ0JCOUQxMUVCODRGNzNCM0FDNEY5QUUwMi83RGF2V1hrSkhH djZXQTZqdWlKWGVUVjFjTmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtrlRSfDrx7nsxhtddVlx+7Kpx3rOJSvT/GuQsjgWFohVo1ORQOLam i1YJsbpQIX7PMfG+yg7tFWCtdhRWIBcBkYswhx4rxzI7Z2UDsWmTQk6pFttXMYU9 VxxE84yNWIb9RwIm3IGmtZrsERn1SoAZ3hxZKstvIIereL0HHWk2YkYhDBMdAyDD nE/RJcUzicEIUOveh72UK7uTObgrfYJhCGVCDeX+P7+Pme7Bfr2FGR3WwwYf/0BC B7fNbX6o4w190oYHSLL+CNn/HS47Dnn/aajuwzgHaQGbCqRizBeZ49uuWNf2DnY7 BeqJ6ItObHo5NcVAzsQS5A4BmpBYnNRp -----END CERTIFICATE-----Generated at Fri May 31 03:15:04 2024 by rpki-client on console-ams.rpki-client.org