$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft File: J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft (raw, json) Hash identifier: hB9jO9O5QKXhdhjR+Be334+hv6ON1CHaIyQV/NaiXFo= Subject key identifier: 4E:29:7C:96:C9:38:2B:8A:3F:BB:15:35:10:58:55:95:2A:D4:DF:A4 Authority key identifier: 27:B8:72:2C:85:9C:A4:F6:F0:3E:C1:E0:61:FD:D4:C3:B9:B4:97:E5 Certificate issuer: /CN=A91E4696/serialNumber=27B8722C859CA4F6F03EC1E061FDD4C3B9B497E5 Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft Manifest number: 0103 Signing time: Sun 19 May 2024 05:38:21 +0000 Manifest this update: Sun 19 May 2024 05:38:21 +0000 Manifest next update: Sun 26 May 2024 05:38:21 +0000 Files and hashes: 1: J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl (hash: JVnOjEs3Lnjf49FhWwIJQdY39AfBa9eLmlUqNkK6w5E=) 2: F04A74EC90C511EDA07C3025C4F9AE02.roa (hash: n1lk7Ae2lpG4eeg9glzQ6d6VJKDCN1LAXDHkqocIaKE=) 3: 63CC2AA80FEE11EEBCC6AE50C4F9AE02.roa (hash: s3hBS6UQ2cBV/bb7m3a4lu7ZgfW+bm/L8bCBT/t07BI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4696/serialNumber=27B8722C859CA4F6F03EC1E061FDD4C3B9B497E5 Validity Not Before: May 19 05:38:21 2024 GMT Not After : May 26 05:38:21 2024 GMT Subject: CN=6649904d-c073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a4:c7:4d:9e:87:83:32:49:9f:e4:7c:e9:45: f9:27:d3:f9:6d:25:1a:f7:ad:2c:92:f8:f3:91:ef: cd:28:19:93:81:9d:e3:23:e0:3b:84:44:fc:43:17: a8:50:eb:12:13:ed:0a:3f:e0:c2:2e:b9:be:81:4a: 4f:bb:1f:5b:d9:d1:1c:5b:b6:d1:33:b6:bf:97:6f: 91:d3:52:6e:bd:c3:a6:87:2b:dd:71:f4:fa:fa:8e: b8:06:a9:1c:f8:34:15:78:c5:84:e4:ad:8b:97:8e: d0:50:c3:0b:84:2a:4d:fa:39:4c:b8:dc:45:b1:a0: 3c:aa:81:4d:95:3d:29:dd:11:82:18:fa:3c:a9:85: 7c:bd:48:02:5c:96:93:50:0d:d6:1b:5f:6f:21:d1: 58:4d:03:a6:25:3c:16:ed:63:43:f8:9a:d5:69:55: ff:ad:b6:06:c9:fa:2b:ba:d3:41:8c:6c:df:62:20: 46:95:b6:ac:f8:24:e0:a0:7b:48:a0:25:b6:20:f5: c5:ba:7e:c6:95:85:03:69:b5:b6:59:09:d8:28:4a: 7f:11:c1:d4:85:2c:ec:25:5a:ed:95:0e:a4:07:f7: c9:42:91:7d:51:83:52:b4:81:7f:73:68:4c:7b:9e: 71:22:57:7a:ff:f8:e5:46:09:af:bc:41:94:70:4a: c3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:29:7C:96:C9:38:2B:8A:3F:BB:15:35:10:58:55:95:2A:D4:DF:A4 X509v3 Authority Key Identifier: keyid:27:B8:72:2C:85:9C:A4:F6:F0:3E:C1:E0:61:FD:D4:C3:B9:B4:97:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:ed:fe:b0:e5:73:24:f6:d9:f8:47:97:d7:dd:07:e5:12:8c: 0d:14:8a:b0:ef:42:ec:d5:2a:5d:18:12:ef:3d:fa:22:15:47: 94:27:e6:1b:4a:2f:ac:8d:3c:33:ed:87:40:af:83:4a:5b:b3: fc:92:cf:30:70:bd:e9:5a:e9:84:55:ed:a0:5d:5c:8d:1a:91: 9e:c0:05:eb:90:f5:e5:9c:2d:51:67:97:89:4a:31:a3:bc:a6: 2e:42:32:3c:35:ce:87:5f:38:90:29:ee:d1:5a:bd:5c:d9:95: 22:e8:03:84:25:e8:5d:61:dd:ed:95:34:72:92:a8:bf:5d:bb: 94:a0:96:1d:88:10:59:44:24:54:fc:58:c7:64:4c:19:50:e2: 28:10:e6:35:2b:26:31:05:c5:d9:69:5a:8c:0d:2e:51:7b:4c: d4:7f:6e:1e:a8:0f:94:df:76:04:2d:c1:4f:1a:31:87:e4:6c: 12:0b:fd:f8:f3:02:31:87:cb:8e:3f:e8:b0:65:68:ef:02:c6: 59:7e:e0:37:a2:25:e1:92:4a:72:b9:66:ff:8f:37:97:6c:1c: 2b:1c:18:91:8e:29:4f:7a:87:5c:1c:17:b7:59:9f:a3:5f:6b: 27:68:68:1f:c9:5d:18:98:f2:fe:cc:18:9c:9d:0e:c5:4b:8e: e4:c4:17:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2OTYxMTAvBgNVBAUTKDI3Qjg3MjJDODU5Q0E0RjZGMDNFQzFFMDYxRkRENEMz QjlCNDk3RTUwHhcNMjQwNTE5MDUzODIxWhcNMjQwNTI2MDUzODIxWjAYMRYwFAYD VQQDEw02NjQ5OTA0ZC1jMDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn6THTZ6HgzJJn+R86UX5J9P5bSUa960skvjzke/NKBmTgZ3jI+A7hET8Qxeo UOsSE+0KP+DCLrm+gUpPux9b2dEcW7bRM7a/l2+R01JuvcOmhyvdcfT6+o64Bqkc +DQVeMWE5K2Ll47QUMMLhCpN+jlMuNxFsaA8qoFNlT0p3RGCGPo8qYV8vUgCXJaT UA3WG19vIdFYTQOmJTwW7WND+JrVaVX/rbYGyforutNBjGzfYiBGlbas+CTgoHtI oCW2IPXFun7GlYUDabW2WQnYKEp/EcHUhSzsJVrtlQ6kB/fJQpF9UYNStIF/c2hM e55xIld6//jlRgmvvEGUcErDOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE4pfJbJ OCuKP7sVNRBYVZUq1N+kMB8GA1UdIwQYMBaAFCe4ciyFnKT28D7B4GH91MO5tJfl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDY5Ni9ENkExMUM0QTkw QkYxMUVEOENDMUU3ODNDNEY5QUUwMi9KN2h5TElXY3BQYndQc0hnWWYzVXc3bTBs LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o3aHlMSVdjcFBid1BzSGdZZjNVdzdtMGwtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDY5Ni9ENkExMUM0QTkwQkYxMUVEOENDMUU3ODNDNEY5QUUwMi9KN2h5TElXY3BQ YndQc0hnWWYzVXc3bTBsLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB7f6w5XMk9tn4R5fX3QflEowNFIqw70Ls1SpdGBLvPfoiFUeUJ+Yb Si+sjTwz7YdAr4NKW7P8ks8wcL3pWumEVe2gXVyNGpGewAXrkPXlnC1RZ5eJSjGj vKYuQjI8Nc6HXziQKe7RWr1c2ZUi6AOEJehdYd3tlTRykqi/XbuUoJYdiBBZRCRU /FjHZEwZUOIoEOY1KyYxBcXZaVqMDS5Re0zUf24eqA+U33YELcFPGjGH5GwSC/34 8wIxh8uOP+iwZWjvAsZZfuA3oiXhkkpyuWb/jzeXbBwrHBiRjilPeodcHBe3WZ+j X2snaGgfyV0YmPL+zBicnQ7FS47kxBfT -----END CERTIFICATE-----Generated at Sun May 19 07:40:46 2024 by rpki-client on console-fra.rpki-client.org