$ rpki-client -vvf rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft File: 7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft (raw, json) Hash identifier: UEhBvr7I/+0WnRd0zJcSSVyk1/LlSAFPldcqdOONZh4= Subject key identifier: A3:7B:1B:9B:EF:2B:A5:28:E0:C7:80:77:3F:A6:FC:5E:97:AF:AB:0D Authority key identifier: ED:A2:AA:BB:40:21:2E:B3:C0:92:AA:EA:F1:51:42:A7:69:EF:59:07 Certificate issuer: /CN=A91E04ED/serialNumber=EDA2AABB40212EB3C092AAEAF15142A769EF5907 Certificate serial: 0592 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aKqu0AhLrPAkqrq8VFCp2nvWQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft Manifest number: 058C Signing time: Sun 19 May 2024 00:32:36 +0000 Manifest this update: Sun 19 May 2024 00:32:35 +0000 Manifest next update: Sun 26 May 2024 00:32:35 +0000 Files and hashes: 1: 7aKqu0AhLrPAkqrq8VFCp2nvWQc.crl (hash: NKSynpz4DzKabmyGZ5u/pjoKouuHhglFzOOrw9AiyII=) 2: 0665D2328D1A11EB80593760C4F9AE02.roa (hash: BjkJHXkj5+mPaQvI75MMMBdyFJW01ysY4zBzxe7EtMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.crl rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aKqu0AhLrPAkqrq8VFCp2nvWQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1426 (0x592) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E04ED/serialNumber=EDA2AABB40212EB3C092AAEAF15142A769EF5907 Validity Not Before: May 19 00:32:35 2024 GMT Not After : May 26 00:32:35 2024 GMT Subject: CN=664948a3-2465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:38:b2:88:dc:a6:33:38:3c:77:68:62:06:69: 4a:58:2f:47:5c:2e:b1:8c:76:ad:22:ac:61:ac:dc: 2e:45:0f:0d:ca:37:54:57:3a:24:57:a4:ee:ae:b4: 25:a0:7e:8a:02:40:3e:85:e0:9e:9f:16:92:cc:76: f9:ff:6b:cb:2c:03:e7:10:12:2e:33:4a:3f:fa:38: ae:21:2f:30:3a:c4:23:90:95:c5:04:98:f5:e5:b6: 91:d2:60:b7:6f:7e:c7:9f:16:bc:f4:5b:08:d0:b5: 39:c4:b4:82:e1:fa:af:3c:8d:c7:f4:cf:bb:8e:76: 04:d1:de:0c:c0:65:6f:05:c9:c5:b0:ef:b7:9e:3a: 6f:88:f7:2d:26:2b:e5:f2:cb:f1:0c:7f:ac:47:c7: 88:c4:e3:7a:b2:79:d9:73:4c:1f:93:65:21:ae:d5: a3:13:7f:3e:c3:e1:ea:44:5a:6e:47:07:1a:47:92: 55:f9:1e:d9:bc:49:88:30:48:6e:45:1a:78:95:ca: 3a:d7:6c:ed:e9:10:61:0b:13:b8:26:a4:bf:8c:38: 2a:0b:5b:cb:2c:77:48:02:48:e7:0e:cc:94:21:44: 0f:d9:fd:4c:cb:36:d6:b1:3b:db:16:17:13:d1:64: 99:f4:36:82:09:09:be:42:e1:25:b8:bc:44:da:06: fd:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:7B:1B:9B:EF:2B:A5:28:E0:C7:80:77:3F:A6:FC:5E:97:AF:AB:0D X509v3 Authority Key Identifier: keyid:ED:A2:AA:BB:40:21:2E:B3:C0:92:AA:EA:F1:51:42:A7:69:EF:59:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aKqu0AhLrPAkqrq8VFCp2nvWQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:05:4d:0b:a7:9c:d3:3c:79:18:b4:b7:d0:5e:e7:49:8f:e9: 2c:04:2c:a9:66:b2:aa:e0:04:70:b1:9a:ab:23:80:f0:c1:0b: e6:dd:ba:f3:0f:84:2c:a8:0b:5f:63:64:b9:4a:8d:82:48:1e: 2e:53:92:54:7c:68:91:11:67:b2:28:5c:2c:79:03:19:af:28: 13:24:ea:63:68:c1:c8:15:a6:ab:d7:92:56:b5:fb:9a:ec:bd: bf:88:cf:26:5c:b2:56:0c:9b:8e:5a:ac:22:18:96:49:43:5b: 0c:df:bc:fc:99:ff:31:b2:1a:58:e1:a3:bb:b4:65:2e:3f:cc: 2d:04:a3:b2:6a:20:a3:3a:58:08:2a:4f:f4:c7:4d:dc:45:cb: 9d:91:96:40:05:1c:9e:4c:0c:32:c8:4c:1a:8f:56:6d:7a:1e: b6:f3:39:b3:02:45:43:e0:c2:6b:5d:ea:56:c7:1b:9e:4e:90: 22:0a:51:f8:53:42:59:ec:58:b6:04:23:8b:1a:88:78:9c:86: 14:fa:80:9e:28:bb:60:1f:e3:f0:71:1c:b7:b8:0a:b7:23:46: 58:95:a7:db:59:49:88:f4:c3:de:e9:ea:cc:2f:37:a9:58:ab: e3:5f:05:26:20:04:ae:ee:2e:aa:21:29:cc:54:64:18:8d:df: 60:e4:fc:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA0RUQxMTAvBgNVBAUTKEVEQTJBQUJCNDAyMTJFQjNDMDkyQUFFQUYxNTE0MkE3 NjlFRjU5MDcwHhcNMjQwNTE5MDAzMjM1WhcNMjQwNTI2MDAzMjM1WjAYMRYwFAYD VQQDEw02NjQ5NDhhMy0yNDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyziyiNymMzg8d2hiBmlKWC9HXC6xjHatIqxhrNwuRQ8NyjdUVzokV6TurrQl oH6KAkA+heCenxaSzHb5/2vLLAPnEBIuM0o/+jiuIS8wOsQjkJXFBJj15baR0mC3 b37Hnxa89FsI0LU5xLSC4fqvPI3H9M+7jnYE0d4MwGVvBcnFsO+3njpviPctJivl 8svxDH+sR8eIxON6snnZc0wfk2UhrtWjE38+w+HqRFpuRwcaR5JV+R7ZvEmIMEhu RRp4lco612zt6RBhCxO4JqS/jDgqC1vLLHdIAkjnDsyUIUQP2f1MyzbWsTvbFhcT 0WSZ9DaCCQm+QuEluLxE2gb9qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKN7G5vv K6Uo4MeAdz+m/F6Xr6sNMB8GA1UdIwQYMBaAFO2iqrtAIS6zwJKq6vFRQqdp71kH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDRFRC9EQkU5MEJBQzhE MTcxMUVCOTM2ODg1NUNDNEY5QUUwMi83YUtxdTBBaExyUEFrcXJxOFZGQ3AybnZX UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdhS3F1MEFoTHJQQWtxcnE4VkZDcDJudldRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDRFRC9EQkU5MEJBQzhEMTcxMUVCOTM2ODg1NUNDNEY5QUUwMi83YUtxdTBBaExy UEFrcXJxOFZGQ3AybnZXUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJBU0Lp5zTPHkYtLfQXudJj+ksBCypZrKq4ARwsZqrI4DwwQvm3brz D4QsqAtfY2S5So2CSB4uU5JUfGiREWeyKFwseQMZrygTJOpjaMHIFaar15JWtfua 7L2/iM8mXLJWDJuOWqwiGJZJQ1sM37z8mf8xshpY4aO7tGUuP8wtBKOyaiCjOlgI Kk/0x03cRcudkZZABRyeTAwyyEwaj1Zteh628zmzAkVD4MJrXepWxxueTpAiClH4 U0JZ7Fi2BCOLGoh4nIYU+oCeKLtgH+PwcRy3uAq3I0ZYlafbWUmI9MPe6erMLzep WKvjXwUmIASu7i6qISnMVGQYjd9g5Pyi -----END CERTIFICATE-----Generated at Sun May 19 01:47:16 2024 by rpki-client on console-ams.rpki-client.org