$ rpki-client -vvf rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft File: 98erVUq_Hcr4wXnBS8h6vPi3dg4.mft (raw, json) Hash identifier: O5pc8msfeKNnBpo5QnRqIK5+KnMnnZEOiPrlMRE/qWo= Subject key identifier: D0:20:DC:9D:74:68:1A:C6:37:BF:55:57:9C:AC:86:FE:7E:B2:16:4C Authority key identifier: F7:C7:AB:55:4A:BF:1D:CA:F8:C1:79:C1:4B:C8:7A:BC:F8:B7:76:0E Certificate issuer: /CN=A91E15EA/serialNumber=F7C7AB554ABF1DCAF8C179C14BC87ABCF8B7760E Certificate serial: 01EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/98erVUq_Hcr4wXnBS8h6vPi3dg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft Manifest number: 01E8 Signing time: Sun 19 May 2024 04:16:45 +0000 Manifest this update: Sun 19 May 2024 04:16:44 +0000 Manifest next update: Sun 26 May 2024 04:16:44 +0000 Files and hashes: 1: 98erVUq_Hcr4wXnBS8h6vPi3dg4.crl (hash: wNK1bWOH0RV2D0XRjgOQAL9thTwu3qVhKv791FyG+tM=) 2: A60C101AFB8411ECB7FF456FC4F9AE02.roa (hash: jbD0nDUEXU918yCvoo72C501r2aGR4x1KotgYzoJrAk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.crl rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/98erVUq_Hcr4wXnBS8h6vPi3dg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 492 (0x1ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E15EA/serialNumber=F7C7AB554ABF1DCAF8C179C14BC87ABCF8B7760E Validity Not Before: May 19 04:16:44 2024 GMT Not After : May 26 04:16:44 2024 GMT Subject: CN=66497d2d-5105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a8:75:b1:cd:83:e9:b3:2a:c4:36:42:2d:42: 75:df:03:30:39:17:da:a4:90:d2:95:5e:99:3a:71: 34:be:a8:2a:ca:98:3e:c3:0c:6e:f5:3e:15:2f:8f: 8a:c2:b9:f3:2f:67:86:10:7d:48:51:20:30:9e:33: a0:c8:ba:d3:88:1f:c2:99:22:e5:a1:44:c0:b9:db: f6:62:ae:9c:e9:64:61:1e:e2:86:ac:e7:0a:a9:39: 3b:b3:d4:f7:bc:68:c1:7f:68:9a:0c:e9:13:ce:23: 29:6f:25:48:5b:5a:8a:a4:9e:45:b9:8a:34:e2:25: 2a:df:4d:35:a8:41:95:d2:ab:11:5b:1d:1f:bc:65: bb:87:89:09:00:cb:73:94:4e:ae:a4:da:bd:b5:30: a0:eb:a8:3e:56:25:55:d7:e6:79:e3:c9:e8:7e:9f: 50:70:e3:d5:ef:47:a9:a2:9a:7a:ac:7f:8e:84:78: ce:06:f5:45:ee:9c:30:cc:c1:63:65:fd:1c:9d:ba: 8e:ab:2e:da:fb:5b:d6:96:15:44:fb:c9:50:a6:6b: 6e:2f:d9:66:9b:48:04:bb:b1:cd:aa:1c:89:65:39: 27:73:c4:38:b8:08:ad:e0:b5:7c:94:c6:9f:1b:23: 98:f1:9f:e2:fe:1e:4d:4f:41:14:60:8d:ed:9d:fc: ca:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:20:DC:9D:74:68:1A:C6:37:BF:55:57:9C:AC:86:FE:7E:B2:16:4C X509v3 Authority Key Identifier: keyid:F7:C7:AB:55:4A:BF:1D:CA:F8:C1:79:C1:4B:C8:7A:BC:F8:B7:76:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/98erVUq_Hcr4wXnBS8h6vPi3dg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:d4:78:c0:52:59:fd:be:7c:40:df:61:5d:a8:43:8c:27:da: 67:0d:6f:ec:fa:7e:b3:b7:00:c9:42:04:e8:f0:a2:e7:e8:8b: 46:f1:b5:ba:29:10:39:01:0a:1a:bb:54:fa:be:28:ca:a2:22: ae:c5:53:24:6c:f6:f5:8c:2c:e2:8d:e2:38:38:a6:00:92:21: 08:9c:c4:1e:79:10:f8:df:1b:12:b4:3a:45:12:63:cf:a2:31: 97:65:1f:50:e6:54:70:d0:8f:92:c0:ab:96:26:ef:85:58:d0: 74:51:98:7c:ae:07:c6:5c:2a:d4:ef:d6:45:74:db:25:f6:aa: ac:1b:16:8e:f2:b6:a9:5f:b0:ee:cb:31:ea:e1:a1:e8:b9:4e: e9:db:64:d8:23:5d:9d:0b:f8:10:2c:8a:87:0e:d0:5b:4d:6c: 35:fc:12:56:ab:1f:d2:40:97:6d:52:ce:a4:21:f4:2f:d5:29: ab:31:73:6d:2c:98:5e:73:10:21:70:1e:90:78:aa:c6:c9:f5: 10:a4:f6:50:8f:e2:c2:b2:aa:01:85:01:90:46:b1:e4:2c:1e: c1:fa:2b:63:79:d6:08:f6:4d:12:7b:bc:09:63:d3:f7:e4:45: 85:0d:68:56:60:36:0f:82:6b:f2:b6:e0:8c:e5:01:9c:67:b0: af:02:f7:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE1RUExMTAvBgNVBAUTKEY3QzdBQjU1NEFCRjFEQ0FGOEMxNzlDMTRCQzg3QUJD RjhCNzc2MEUwHhcNMjQwNTE5MDQxNjQ0WhcNMjQwNTI2MDQxNjQ0WjAYMRYwFAYD VQQDEw02NjQ5N2QyZC01MTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Kh1sc2D6bMqxDZCLUJ13wMwORfapJDSlV6ZOnE0vqgqypg+wwxu9T4VL4+K wrnzL2eGEH1IUSAwnjOgyLrTiB/CmSLloUTAudv2Yq6c6WRhHuKGrOcKqTk7s9T3 vGjBf2iaDOkTziMpbyVIW1qKpJ5FuYo04iUq3001qEGV0qsRWx0fvGW7h4kJAMtz lE6upNq9tTCg66g+ViVV1+Z548nofp9QcOPV70epopp6rH+OhHjOBvVF7pwwzMFj Zf0cnbqOqy7a+1vWlhVE+8lQpmtuL9lmm0gEu7HNqhyJZTknc8Q4uAit4LV8lMaf GyOY8Z/i/h5NT0EUYI3tnfzKQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNAg3J10 aBrGN79VV5yshv5+shZMMB8GA1UdIwQYMBaAFPfHq1VKvx3K+MF5wUvIerz4t3YO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTVFQS9GMUE3RTJGNEZC ODExMUVDOUM0MTI2NDRDNEY5QUUwMi85OGVyVlVxX0hjcjR3WG5CUzhoNnZQaTNk ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk4ZXJWVXFfSGNyNHdYbkJTOGg2dlBpM2RnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTVFQS9GMUE3RTJGNEZCODExMUVDOUM0MTI2NDRDNEY5QUUwMi85OGVyVlVxX0hj cjR3WG5CUzhoNnZQaTNkZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi1HjAUln9vnxA32FdqEOMJ9pnDW/s+n6ztwDJQgTo8KLn6ItG8bW6 KRA5AQoau1T6vijKoiKuxVMkbPb1jCzijeI4OKYAkiEInMQeeRD43xsStDpFEmPP ojGXZR9Q5lRw0I+SwKuWJu+FWNB0UZh8rgfGXCrU79ZFdNsl9qqsGxaO8rapX7Du yzHq4aHouU7p22TYI12dC/gQLIqHDtBbTWw1/BJWqx/SQJdtUs6kIfQv1SmrMXNt LJhecxAhcB6QeKrGyfUQpPZQj+LCsqoBhQGQRrHkLB7B+itjedYI9k0Se7wJY9P3 5EWFDWhWYDYPgmvytuCM5QGcZ7CvAvcb -----END CERTIFICATE-----Generated at Sun May 19 04:56:56 2024 by rpki-client on console-fra.rpki-client.org