$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft File: 7IKxn5B5ht6zu4AtInPQNNFBSy0.mft (raw, json) Hash identifier: wDl8zSygqUhur0Y0T66p29jM4XzqWDX3vltYEFXKidY= Subject key identifier: 94:48:C9:EF:D0:BF:10:2B:23:CF:AB:68:F9:8B:0C:73:BE:1D:63:1E Authority key identifier: EC:82:B1:9F:90:79:86:DE:B3:BB:80:2D:22:73:D0:34:D1:41:4B:2D Certificate issuer: /CN=A91EC3CA/serialNumber=EC82B19F907986DEB3BB802D2273D034D1414B2D Certificate serial: 0AF8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IKxn5B5ht6zu4AtInPQNNFBSy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft Manifest number: 0AF3 Signing time: Fri 31 May 2024 20:39:08 +0000 Manifest this update: Fri 31 May 2024 20:39:08 +0000 Manifest next update: Fri 07 Jun 2024 20:39:08 +0000 Files and hashes: 1: 7IKxn5B5ht6zu4AtInPQNNFBSy0.crl (hash: l9Mwk6To3w5nHfSS9wpMES1fyzskYdvHgolmuhHLKsE=) 2: 8C76CF46218411EAA6A8DB38C4F9AE02.roa (hash: HXsMAwlgB+stY5+xQ42R6DsukdPkIbskDCow1gArnpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.crl rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IKxn5B5ht6zu4AtInPQNNFBSy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 20:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2808 (0xaf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3CA/serialNumber=EC82B19F907986DEB3BB802D2273D034D1414B2D Validity Not Before: May 31 20:39:08 2024 GMT Not After : Jun 7 20:39:08 2024 GMT Subject: CN=665a356c-84fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:74:67:2a:da:da:48:7b:1a:5d:3f:2e:be:19: f2:7d:35:f4:3d:a1:fb:3c:eb:15:e9:d0:a7:15:aa: 0b:cf:bd:7a:1e:4d:4e:54:36:f7:aa:c7:b3:b4:fb: 30:49:89:3d:44:b4:67:a6:61:ce:0d:16:de:e6:eb: 07:29:3b:bb:d9:85:a3:f7:d1:4d:fe:21:62:9c:94: da:24:24:5c:c2:83:d1:1f:a5:c6:fd:6a:e3:9e:95: c2:3c:6e:2d:f9:5d:c7:86:77:1b:3a:ab:87:29:1c: ee:3e:61:f2:87:49:b2:1c:af:21:36:15:d1:22:96: bb:07:f3:02:fb:8d:ac:16:13:9b:32:23:89:dc:58: 73:5f:9e:3f:46:70:45:73:c6:4a:ce:ab:15:b2:4f: 2c:9e:f2:00:f5:91:89:b0:88:dc:aa:98:58:3d:f3: d6:d4:1d:cd:9f:68:d9:a4:62:6f:52:58:ae:4b:59: f2:3b:e0:f7:1e:87:49:cf:91:76:ec:55:63:42:28: 30:a1:d4:d8:46:b0:f0:4c:1c:7f:58:05:bd:4a:f2: d2:da:a1:30:ad:a8:e3:bc:91:06:13:00:55:39:60: 78:14:75:eb:d1:b2:7e:3e:17:2d:23:c6:34:70:48: a9:cc:49:89:84:92:55:55:43:a0:42:ec:0e:4c:f2: a6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:48:C9:EF:D0:BF:10:2B:23:CF:AB:68:F9:8B:0C:73:BE:1D:63:1E X509v3 Authority Key Identifier: keyid:EC:82:B1:9F:90:79:86:DE:B3:BB:80:2D:22:73:D0:34:D1:41:4B:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IKxn5B5ht6zu4AtInPQNNFBSy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:b1:25:19:63:02:a7:a7:60:16:69:bf:db:1d:26:b0:8d:d1: 94:b5:a4:1d:b5:2b:19:1e:ad:86:1d:08:a1:1c:4f:0a:1d:98: 5d:a6:66:9e:c9:79:ca:7e:2d:7a:34:49:bb:ac:77:fc:db:45: 0d:cf:da:b0:13:c9:21:6d:bc:01:09:94:7b:f5:a3:d4:d7:f1: 9f:af:28:ac:9a:1a:21:6e:6a:88:13:7e:3f:53:db:67:4e:a5: c4:aa:25:ee:7c:1e:f1:4c:97:c3:85:80:6a:4a:83:6e:72:48: 5a:c7:85:44:2e:8c:12:73:e1:28:16:e9:3e:24:06:f3:cf:9a: cf:1a:bb:71:65:82:da:d5:59:6c:9a:75:42:49:e9:2e:e0:bb: 61:13:df:c2:09:0f:2f:40:09:1a:0a:66:75:72:a3:82:b0:02: 67:34:bc:29:b6:fe:8a:ab:c1:2a:ba:22:95:1d:44:3e:a7:80: 63:bf:e2:bf:9b:87:b7:1e:39:5a:25:6c:ac:89:cf:e8:cd:22: 93:68:f1:1a:a7:7c:53:c1:06:90:78:14:41:92:8e:9a:1f:44: e5:9c:5a:ed:ea:6d:b4:2c:38:d8:9c:df:17:8b:e7:96:23:ec: 87:02:e9:57:a9:38:1c:cf:a3:07:68:54:51:1c:f7:06:5b:c3: c1:10:84:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMzQ0ExMTAvBgNVBAUTKEVDODJCMTlGOTA3OTg2REVCM0JCODAyRDIyNzNEMDM0 RDE0MTRCMkQwHhcNMjQwNTMxMjAzOTA4WhcNMjQwNjA3MjAzOTA4WjAYMRYwFAYD VQQDEw02NjVhMzU2Yy04NGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlXRnKtraSHsaXT8uvhnyfTX0PaH7POsV6dCnFaoLz716Hk1OVDb3qseztPsw SYk9RLRnpmHODRbe5usHKTu72YWj99FN/iFinJTaJCRcwoPRH6XG/WrjnpXCPG4t +V3HhncbOquHKRzuPmHyh0myHK8hNhXRIpa7B/MC+42sFhObMiOJ3FhzX54/RnBF c8ZKzqsVsk8snvIA9ZGJsIjcqphYPfPW1B3Nn2jZpGJvUliuS1nyO+D3HodJz5F2 7FVjQigwodTYRrDwTBx/WAW9SvLS2qEwrajjvJEGEwBVOWB4FHXr0bJ+PhctI8Y0 cEipzEmJhJJVVUOgQuwOTPKmuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJRIye/Q vxArI8+raPmLDHO+HWMeMB8GA1UdIwQYMBaAFOyCsZ+QeYbes7uALSJz0DTRQUst MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzNDQS84MTM4NjA0NjIx ODMxMUVBOENCODQ3MzdDNEY5QUUwMi83SUt4bjVCNWh0Nnp1NEF0SW5QUU5ORkJT eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdJS3huNUI1aHQ2enU0QXRJblBRTk5GQlN5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzNDQS84MTM4NjA0NjIxODMxMUVBOENCODQ3MzdDNEY5QUUwMi83SUt4bjVCNWh0 Nnp1NEF0SW5QUU5ORkJTeTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3sSUZYwKnp2AWab/bHSawjdGUtaQdtSsZHq2GHQihHE8KHZhdpmae yXnKfi16NEm7rHf820UNz9qwE8khbbwBCZR79aPU1/GfryismhohbmqIE34/U9tn TqXEqiXufB7xTJfDhYBqSoNuckhax4VELowSc+EoFuk+JAbzz5rPGrtxZYLa1Vls mnVCSeku4LthE9/CCQ8vQAkaCmZ1cqOCsAJnNLwptv6Kq8EquiKVHUQ+p4Bjv+K/ m4e3HjlaJWysic/ozSKTaPEap3xTwQaQeBRBko6aH0TlnFrt6m20LDjYnN8Xi+eW I+yHAulXqTgcz6MHaFRRHPcGW8PBEITC -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:32 2024 by rpki-client on console-ams.rpki-client.org