$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft File: 7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft (raw, json) Hash identifier: hpH359kVA1U8bUpt58S50Uhsb9u4wazs9bvBAYG4jCU= Subject key identifier: FB:D3:7E:51:33:19:95:E1:0A:BB:D9:19:5A:EA:FA:6B:6E:48:96:90 Authority key identifier: EE:39:6A:01:E2:4A:91:0D:6E:8B:8B:F4:62:9D:A8:C2:AE:5B:C0:EF Certificate issuer: /CN=A91E7083/serialNumber=EE396A01E24A910D6E8B8BF4629DA8C2AE5BC0EF Certificate serial: 059B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft Manifest number: 0597 Signing time: Sun 19 May 2024 00:24:24 +0000 Manifest this update: Sun 19 May 2024 00:24:24 +0000 Manifest next update: Sun 26 May 2024 00:24:24 +0000 Files and hashes: 1: 7jlqAeJKkQ1ui4v0Yp2owq5bwO8.crl (hash: x5Nf3WlGqylcKF3tHKmWNwnTyyKxhAez/LG8jksD4mY=) 2: 22009BF2854111EBA0658B42C4F9AE02.roa (hash: zJ949rufnLFID0cwetzbQGq+TEMQGAkMfoAKT2rdSYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.crl rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1435 (0x59b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7083/serialNumber=EE396A01E24A910D6E8B8BF4629DA8C2AE5BC0EF Validity Not Before: May 19 00:24:24 2024 GMT Not After : May 26 00:24:24 2024 GMT Subject: CN=664946b8-82ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1b:2e:1e:97:a8:c2:20:c1:09:a8:34:e5:19: 33:0f:e0:b6:e3:1e:82:57:20:fa:92:69:5d:d9:6a: 35:ac:81:c0:91:2d:d2:65:6c:45:8e:18:42:d3:2b: c3:40:4e:b0:49:c0:6f:f5:de:03:b0:3b:bc:0c:62: 62:14:ec:eb:9b:be:37:9a:bd:a0:fa:49:7a:b2:93: 11:b8:39:0d:29:22:56:4d:ec:c8:bc:6e:64:54:a4: 63:46:f0:40:e5:c7:6e:0a:89:07:f6:5f:42:b3:41: ef:6b:a6:5f:52:32:fe:3b:d0:8e:67:0a:fd:c4:6c: ac:22:4d:52:a4:09:1e:a7:8f:94:56:0e:1a:e5:75: f5:71:4c:f9:75:3c:40:e3:ac:9e:84:86:a7:93:89: f7:d1:6e:36:f1:a2:6a:ff:a7:4b:96:80:64:7b:78: 8d:7b:35:dd:3d:0c:38:57:39:f5:fa:4f:9a:49:1f: f6:71:e1:0c:16:a2:bf:ef:ac:5f:bc:78:28:69:57: f9:38:e1:4a:d4:84:22:4d:3b:e2:c8:89:57:3a:2e: d1:67:7a:de:48:ba:af:56:9a:1d:95:92:e9:ef:b4: 7f:33:d0:4f:2b:35:e6:0c:6e:85:ce:dc:2d:47:5d: dc:af:2a:d4:57:d1:b1:46:9f:03:5b:b9:e3:98:3d: bb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D3:7E:51:33:19:95:E1:0A:BB:D9:19:5A:EA:FA:6B:6E:48:96:90 X509v3 Authority Key Identifier: keyid:EE:39:6A:01:E2:4A:91:0D:6E:8B:8B:F4:62:9D:A8:C2:AE:5B:C0:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:c4:21:d2:98:bf:9c:f9:5b:5b:cb:2c:9f:7c:04:3c:91:ca: d5:cd:d3:b9:a6:0f:7c:23:c9:76:00:20:ad:ea:f9:4d:8a:54: 86:0f:d9:fb:ea:7b:72:6b:8d:ea:a2:f2:d9:f0:32:26:b6:c7: 31:bc:f4:95:27:45:5a:27:49:58:7e:51:68:e3:1e:0b:e1:1e: 7a:35:c2:dc:cf:69:12:a3:70:ae:76:3f:59:1f:1c:05:55:d0: 75:12:b2:17:bd:d9:4f:a8:13:b5:ae:f3:cf:1c:65:9d:b6:78: 19:b5:9d:1f:05:ab:7a:76:ac:d3:8c:11:94:0d:4e:d3:22:cf: 22:00:cd:61:24:9d:64:bd:91:d1:9d:ad:ce:4d:3f:d8:94:73: d0:48:15:c5:2e:88:00:18:b1:b7:af:58:8b:d4:4b:1a:e5:55: 8e:03:4e:f0:65:92:05:e3:df:e5:42:fb:9f:2b:e4:78:c1:77: 8e:b5:37:44:e7:ed:01:ad:7d:33:9f:14:f3:b8:20:dd:12:3c: d7:95:4d:f8:31:1e:d0:a5:0c:41:dc:db:7f:ba:b5:f7:e0:2e: 65:b7:af:01:2a:73:2c:3c:a0:5f:2b:d6:27:75:5e:99:88:92: 39:71:52:0e:d5:30:38:9a:86:2b:9e:96:59:f4:87:c6:73:13: a3:70:a2:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcwODMxMTAvBgNVBAUTKEVFMzk2QTAxRTI0QTkxMEQ2RThCOEJGNDYyOURBOEMy QUU1QkMwRUYwHhcNMjQwNTE5MDAyNDI0WhcNMjQwNTI2MDAyNDI0WjAYMRYwFAYD VQQDEw02NjQ5NDZiOC04MmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApRsuHpeowiDBCag05RkzD+C24x6CVyD6kmld2Wo1rIHAkS3SZWxFjhhC0yvD QE6wScBv9d4DsDu8DGJiFOzrm743mr2g+kl6spMRuDkNKSJWTezIvG5kVKRjRvBA 5cduCokH9l9Cs0Hva6ZfUjL+O9COZwr9xGysIk1SpAkep4+UVg4a5XX1cUz5dTxA 46yehIank4n30W428aJq/6dLloBke3iNezXdPQw4Vzn1+k+aSR/2ceEMFqK/76xf vHgoaVf5OOFK1IQiTTviyIlXOi7RZ3reSLqvVpodlZLp77R/M9BPKzXmDG6Fztwt R13cryrUV9GxRp8DW7njmD270wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPvTflEz GZXhCrvZGVrq+mtuSJaQMB8GA1UdIwQYMBaAFO45agHiSpENbouL9GKdqMKuW8Dv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzA4My9FMjY2MjQwRTg1 M0YxMUVCOEMyRUZFNDFDNEY5QUUwMi83amxxQWVKS2tRMXVpNHYwWXAyb3dxNWJ3 TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdqbHFBZUpLa1ExdWk0djBZcDJvd3E1YndPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzA4My9FMjY2MjQwRTg1M0YxMUVCOEMyRUZFNDFDNEY5QUUwMi83amxxQWVKS2tR MXVpNHYwWXAyb3dxNWJ3TzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAxCHSmL+c+VtbyyyffAQ8kcrVzdO5pg98I8l2ACCt6vlNilSGD9n7 6ntya43qovLZ8DImtscxvPSVJ0VaJ0lYflFo4x4L4R56NcLcz2kSo3Cudj9ZHxwF VdB1ErIXvdlPqBO1rvPPHGWdtngZtZ0fBat6dqzTjBGUDU7TIs8iAM1hJJ1kvZHR na3OTT/YlHPQSBXFLogAGLG3r1iL1Esa5VWOA07wZZIF49/lQvufK+R4wXeOtTdE 5+0BrX0znxTzuCDdEjzXlU34MR7QpQxB3Nt/urX34C5lt68BKnMsPKBfK9YndV6Z iJI5cVIO1TA4moYrnpZZ9IfGcxOjcKKB -----END CERTIFICATE-----Generated at Sun May 19 00:59:43 2024 by rpki-client on console-fra.rpki-client.org