$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft File: cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft (raw, json) Hash identifier: ASwZvePQeXesj4+9EPvU5djjOIy425kE9zMeGCwJazw= Subject key identifier: A7:29:49:C9:00:37:CF:13:FE:FC:5C:A4:C8:62:01:85:D3:D8:A1:EA Authority key identifier: 71:54:60:73:BD:09:27:EB:EB:85:0F:06:DA:76:A7:27:69:E7:13:6B Certificate issuer: /CN=A91EA6C6/serialNumber=71546073BD0927EBEB850F06DA76A72769E7136B Certificate serial: ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft Manifest number: EA Signing time: Sun 19 May 2024 05:52:14 +0000 Manifest this update: Sun 19 May 2024 05:52:13 +0000 Manifest next update: Sun 26 May 2024 05:52:13 +0000 Files and hashes: 1: cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl (hash: 42O264Ia3sl2K74dePAQ8tQRWGkVxWWJRyJxevGfwCw=) 2: BC69DF32B33E11EDAA6D117BC4F9AE02.roa (hash: tWiV1Cxri+u6b46hgm3niMgNT1c5YYbGYRo4BMmv1zQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 237 (0xed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA6C6/serialNumber=71546073BD0927EBEB850F06DA76A72769E7136B Validity Not Before: May 19 05:52:13 2024 GMT Not After : May 26 05:52:13 2024 GMT Subject: CN=6649938e-0d8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:53:7a:81:f3:c2:c8:36:04:31:92:d6:d2:9a: 79:7e:3e:96:15:cc:8a:3c:f2:6f:da:10:cf:a2:ce: f5:a3:bb:4c:f4:13:92:fb:2f:7f:49:d0:88:09:1b: 38:80:db:c2:1f:5f:91:e6:13:87:d0:df:01:a5:8e: 9e:e3:7f:11:5a:2d:50:9c:ee:50:f0:bf:6b:ac:a3: 50:94:db:0b:05:38:97:4a:13:65:e5:ae:13:dc:8a: 0c:d5:22:a6:0c:46:a0:0c:35:94:ad:f5:65:b9:91: a5:2a:3b:c5:e2:51:7a:78:33:59:7c:36:42:21:77: 38:29:d1:00:eb:df:dc:a5:ae:9c:2d:72:0f:12:f5: 17:13:3b:5f:e3:91:a6:ff:90:d9:dc:6d:3c:99:95: f7:16:bd:50:26:a0:19:42:2a:58:40:cf:83:fe:8c: 61:fa:69:ed:92:68:e9:d3:b6:90:49:14:52:07:10: 38:e5:5a:95:73:e1:2c:db:db:45:05:46:cf:e3:c9: 08:39:8b:0e:ff:76:26:ff:e2:15:e6:4e:65:a1:f2: f0:f9:8f:20:95:ec:fb:6f:fb:00:35:fa:85:c9:45: 1b:0a:4c:42:b5:55:d7:03:2f:ff:46:68:73:36:76: 14:f3:c6:18:9d:88:f6:05:d5:63:b7:60:e6:c1:d1: 78:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:29:49:C9:00:37:CF:13:FE:FC:5C:A4:C8:62:01:85:D3:D8:A1:EA X509v3 Authority Key Identifier: keyid:71:54:60:73:BD:09:27:EB:EB:85:0F:06:DA:76:A7:27:69:E7:13:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:8f:89:51:89:78:75:93:7e:32:e3:2a:91:45:1f:0d:cd:36: 2c:e7:4d:4a:5a:a4:40:ff:cd:f7:30:fd:d1:ce:de:eb:bf:da: 2d:af:8d:ce:a6:d7:4a:d7:c9:ca:d8:f9:79:7c:7f:c9:09:10: 1b:3d:bf:15:04:2c:6c:03:e1:f7:66:5d:60:05:4d:c8:b2:f0: bf:ed:f3:48:29:24:f7:67:f8:1b:2b:c7:0d:9e:78:16:de:9e: db:05:75:1b:d4:6a:11:5e:cc:11:e8:9e:09:4e:97:76:9b:72: 02:2b:01:80:ca:35:53:67:af:f7:9a:69:03:6f:ab:c0:bb:1b: cd:2d:4d:45:c5:0e:97:9b:0f:96:4d:83:fc:da:88:21:c1:96: 4f:ee:b4:2b:56:dc:66:45:68:fc:f2:b5:cf:f6:bb:72:a5:bc: 9d:5d:d8:fb:13:20:17:d1:e8:9f:62:9c:dd:2a:e8:5c:2b:d1: c5:1d:18:13:a2:00:4d:d8:1c:82:87:5e:5f:b6:f6:4d:4c:3f: c4:22:55:9d:f9:f2:45:1d:fd:3b:a2:5b:da:d0:5c:c2:27:1a: 37:5c:d7:d7:91:6a:eb:d8:7e:10:07:05:ed:26:20:fc:f2:f4: c5:3c:e7:65:7c:61:e2:df:fb:c7:58:6a:04:be:53:d9:6c:80: 1b:6b:cf:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE2QzYxMTAvBgNVBAUTKDcxNTQ2MDczQkQwOTI3RUJFQjg1MEYwNkRBNzZBNzI3 NjlFNzEzNkIwHhcNMjQwNTE5MDU1MjEzWhcNMjQwNTI2MDU1MjEzWjAYMRYwFAYD VQQDEw02NjQ5OTM4ZS0wZDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVN6gfPCyDYEMZLW0pp5fj6WFcyKPPJv2hDPos71o7tM9BOS+y9/SdCICRs4 gNvCH1+R5hOH0N8BpY6e438RWi1QnO5Q8L9rrKNQlNsLBTiXShNl5a4T3IoM1SKm DEagDDWUrfVluZGlKjvF4lF6eDNZfDZCIXc4KdEA69/cpa6cLXIPEvUXEztf45Gm /5DZ3G08mZX3Fr1QJqAZQipYQM+D/oxh+mntkmjp07aQSRRSBxA45VqVc+Es29tF BUbP48kIOYsO/3Ym/+IV5k5lofLw+Y8glez7b/sANfqFyUUbCkxCtVXXAy//Rmhz NnYU88YYnYj2BdVjt2DmwdF4QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKcpSckA N88T/vxcpMhiAYXT2KHqMB8GA1UdIwQYMBaAFHFUYHO9CSfr64UPBtp2pydp5xNr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTZDNi8yQ0FFQUQwNEIz M0ExMUVEOUZCRDBFNUNDNEY5QUUwMi9jVlJnYzcwSkotdnJoUThHMm5hbkoybm5F MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NWUmdjNzBKSi12cmhROEcybmFuSjJubkUycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTZDNi8yQ0FFQUQwNEIzM0ExMUVEOUZCRDBFNUNDNEY5QUUwMi9jVlJnYzcwSkot dnJoUThHMm5hbkoybm5FMnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsj4lRiXh1k34y4yqRRR8NzTYs501KWqRA/833MP3Rzt7rv9otr43O ptdK18nK2Pl5fH/JCRAbPb8VBCxsA+H3Zl1gBU3IsvC/7fNIKST3Z/gbK8cNnngW 3p7bBXUb1GoRXswR6J4JTpd2m3ICKwGAyjVTZ6/3mmkDb6vAuxvNLU1FxQ6Xmw+W TYP82oghwZZP7rQrVtxmRWj88rXP9rtypbydXdj7EyAX0eifYpzdKuhcK9HFHRgT ogBN2ByCh15ftvZNTD/EIlWd+fJFHf07olva0FzCJxo3XNfXkWrr2H4QBwXtJiD8 8vTFPOdlfGHi3/vHWGoEvlPZbIAba88J -----END CERTIFICATE-----Generated at Sun May 19 08:25:11 2024 by rpki-client on console-ams.rpki-client.org