$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft File: E72mTG8bWiwzOUc2NU6ejmvK4lY.mft (raw, json) Hash identifier: nqdJ0kHYDSwkTM+Ho814VqalFUNuxR/7O+z19jTgdI8= Subject key identifier: 0C:A8:E3:BD:C4:F2:42:0E:F3:40:87:C9:B4:A5:07:4B:9F:E2:C5:E7 Authority key identifier: 13:BD:A6:4C:6F:1B:5A:2C:33:39:47:36:35:4E:9E:8E:6B:CA:E2:56 Certificate issuer: /CN=A91F1C8C/serialNumber=13BDA64C6F1B5A2C33394736354E9E8E6BCAE256 Certificate serial: 0747 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft Manifest number: 0740 Signing time: Sat 18 May 2024 22:24:19 +0000 Manifest this update: Sat 18 May 2024 22:24:18 +0000 Manifest next update: Sat 25 May 2024 22:24:18 +0000 Files and hashes: 1: E72mTG8bWiwzOUc2NU6ejmvK4lY.crl (hash: bQfCO+P4u9fsmARVhqAY7mPKAT3jyK/MBCyQWmsRTy4=) 2: FA870AFA94E011EDB701A974C4F9AE02.roa (hash: mqCx8M/RHuZYj43fBbP/BXD8QsL91PAOj7j3fAkLTIA=) 3: F8C3E4EA94E011EDB701A974C4F9AE02.roa (hash: DJlon1wpYevv0Gt/wwHCAXbi/zN+/rfFa315l1OWXL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.crl rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1863 (0x747) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1C8C/serialNumber=13BDA64C6F1B5A2C33394736354E9E8E6BCAE256 Validity Not Before: May 18 22:24:18 2024 GMT Not After : May 25 22:24:18 2024 GMT Subject: CN=66492a93-5af2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:12:c4:2d:af:67:04:33:8c:8c:e7:e8:c3:d3: d6:0d:02:21:29:75:ba:8f:dd:c1:80:f9:37:25:32: 58:fb:de:1f:eb:8c:e3:12:3e:c2:c8:c1:01:73:9d: 6f:9e:b0:0f:17:3f:34:98:ad:45:fe:b9:a6:4d:9b: a4:a5:0f:a2:18:44:c6:01:fc:f8:26:f0:14:86:d4: 3b:5c:e7:12:69:61:48:8f:45:62:18:35:2e:75:b8: 26:29:b3:a3:ba:1f:2d:ee:d2:96:77:2c:40:99:52: 91:9d:9b:86:25:01:8c:97:8f:c9:4c:16:dd:d9:04: 4c:ef:ce:e9:28:7d:f6:8c:b0:38:a1:c6:06:ef:fe: f7:67:72:ba:ce:99:a8:95:82:2e:81:40:f3:de:74: d5:79:a6:f7:59:e2:b8:8b:60:a6:1d:82:d4:88:60: 04:bd:c2:86:77:96:18:6b:82:3e:6b:32:ad:8b:b7: fc:88:e1:0c:85:61:ea:29:79:2b:21:b1:b2:88:ae: 02:37:07:0e:66:de:f7:b0:81:b7:0c:a5:b6:eb:7d: 16:7e:27:50:c0:8b:a6:ae:c9:13:f7:82:05:36:54: 62:7d:bb:99:50:b3:1d:b1:9f:b9:a4:ce:27:51:ad: 5f:11:21:71:91:96:c6:e6:c3:b5:7c:51:7d:ae:57: ad:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A8:E3:BD:C4:F2:42:0E:F3:40:87:C9:B4:A5:07:4B:9F:E2:C5:E7 X509v3 Authority Key Identifier: keyid:13:BD:A6:4C:6F:1B:5A:2C:33:39:47:36:35:4E:9E:8E:6B:CA:E2:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:9d:0c:9b:bd:6b:28:ff:9e:42:c7:01:2a:5a:a5:3b:92:8e: f9:d8:3d:8f:b8:a6:34:c8:57:31:bf:cb:6b:f5:1f:5a:bc:2e: 43:48:74:6b:4a:fc:e1:8f:eb:c5:2c:57:28:5a:99:e8:aa:3b: 00:49:d2:02:62:36:98:ae:5a:a8:32:e5:92:08:8a:e3:50:30: 49:0d:ac:11:b9:00:2f:0b:f4:64:d9:88:bd:50:3b:60:68:c8: 14:1a:ac:75:e6:b8:bb:23:f3:1e:3c:60:d9:ff:3b:a3:30:99: 91:ff:69:62:45:14:78:98:e2:7b:91:e1:ab:35:ae:16:6b:ea: b4:15:ec:ad:7c:d6:8b:0b:4d:5d:71:58:2e:e7:da:a5:90:d9: 49:17:98:d3:bc:97:e6:3f:82:62:f7:3b:58:43:14:32:e3:4c: f0:fd:af:f7:0a:e0:5c:cb:8d:52:7a:6c:df:a6:50:ff:b6:1e: d8:3b:b9:69:a3:15:5f:38:a6:5d:10:dd:da:84:15:26:c5:98: 29:8d:a0:3e:76:7e:2d:89:39:c2:22:a6:b4:4d:cc:62:87:af: c4:4f:61:bd:9b:c1:4d:55:af:97:35:4b:84:d8:da:17:87:98: 93:f0:50:4a:47:27:b7:84:7f:e6:ab:8e:d8:4d:cf:6d:1d:3d: af:de:65:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFDOEMxMTAvBgNVBAUTKDEzQkRBNjRDNkYxQjVBMkMzMzM5NDczNjM1NEU5RThF NkJDQUUyNTYwHhcNMjQwNTE4MjIyNDE4WhcNMjQwNTI1MjIyNDE4WjAYMRYwFAYD VQQDEw02NjQ5MmE5My01YWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAshLELa9nBDOMjOfow9PWDQIhKXW6j93BgPk3JTJY+94f64zjEj7CyMEBc51v nrAPFz80mK1F/rmmTZukpQ+iGETGAfz4JvAUhtQ7XOcSaWFIj0ViGDUudbgmKbOj uh8t7tKWdyxAmVKRnZuGJQGMl4/JTBbd2QRM787pKH32jLA4ocYG7/73Z3K6zpmo lYIugUDz3nTVeab3WeK4i2CmHYLUiGAEvcKGd5YYa4I+azKti7f8iOEMhWHqKXkr IbGyiK4CNwcOZt73sIG3DKW2630WfidQwIumrskT94IFNlRifbuZULMdsZ+5pM4n Ua1fESFxkZbG5sO1fFF9rlet6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAyo473E 8kIO80CHybSlB0uf4sXnMB8GA1UdIwQYMBaAFBO9pkxvG1osMzlHNjVOno5ryuJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUM4Qy8yM0U1RDVERURG OTkxMUVBOUY4NUQ5ODJDNEY5QUUwMi9FNzJtVEc4Yldpd3pPVWMyTlU2ZWptdks0 bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U3Mm1URzhiV2l3ek9VYzJOVTZlam12SzRsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUM4Qy8yM0U1RDVERURGOTkxMUVBOUY4NUQ5ODJDNEY5QUUwMi9FNzJtVEc4Yldp d3pPVWMyTlU2ZWptdks0bFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYnQybvWso/55CxwEqWqU7ko752D2PuKY0yFcxv8tr9R9avC5DSHRr Svzhj+vFLFcoWpnoqjsASdICYjaYrlqoMuWSCIrjUDBJDawRuQAvC/Rk2Yi9UDtg aMgUGqx15ri7I/MePGDZ/zujMJmR/2liRRR4mOJ7keGrNa4Wa+q0FeytfNaLC01d cVgu59qlkNlJF5jTvJfmP4Ji9ztYQxQy40zw/a/3CuBcy41SemzfplD/th7YO7lp oxVfOKZdEN3ahBUmxZgpjaA+dn4tiTnCIqa0Tcxih6/ET2G9m8FNVa+XNUuE2NoX h5iT8FBKRye3hH/mq47YTc9tHT2v3mUf -----END CERTIFICATE-----Generated at Sun May 19 00:30:23 2024 by rpki-client on console-ams.rpki-client.org