$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft File: 7vvGU2P1cW1yTBF81UIh5BLZI8w.mft (raw, json) Hash identifier: X0TdLiI1lXe1i+O9uEThx1P0KigZD5Lqhad+iZRz2/o= Subject key identifier: 80:97:C8:78:2D:1B:CA:CD:95:79:B7:E4:68:6F:5C:B2:CF:E9:37:F7 Authority key identifier: EE:FB:C6:53:63:F5:71:6D:72:4C:11:7C:D5:42:21:E4:12:D9:23:CC Certificate issuer: /CN=A91F2A41/serialNumber=EEFBC65363F5716D724C117CD54221E412D923CC Certificate serial: 021B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft Manifest number: 0213 Signing time: Sun 19 May 2024 04:05:46 +0000 Manifest this update: Sun 19 May 2024 04:05:46 +0000 Manifest next update: Sun 26 May 2024 04:05:46 +0000 Files and hashes: 1: 7vvGU2P1cW1yTBF81UIh5BLZI8w.crl (hash: k+Af1hq1vCHhTjnW/H0JXjCNt8gzNArgPCXV07Cjz6Y=) 2: ABF61020E93C11ECA5406975C4F9AE02.roa (hash: A43fZ3ErSSvgBon/b+BTyTGknXFl11u+4y/f3VrkOLA=) 3: ADBF1F6EE93C11ECA5406975C4F9AE02.roa (hash: xon3Q3MSMcHk4UO2J/Ub7xBm3HW0cCOejYo5zbFPJzw=) 4: 01C04C52FB8D11ECABCA1D0AC4F9AE02.roa (hash: Jy8dJE9jTJzFAsdw8VR/lx8oiKYZFdZ2IPhdcCmHBA8=) 5: AD08F946E93C11ECA5406975C4F9AE02.roa (hash: REgAOMKfUH6/TJc4tEcVrub2uMJ5jJdCne2pL5UBSX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.crl rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 539 (0x21b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2A41/serialNumber=EEFBC65363F5716D724C117CD54221E412D923CC Validity Not Before: May 19 04:05:46 2024 GMT Not After : May 26 04:05:46 2024 GMT Subject: CN=66497a9a-aa7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2f:7c:30:09:1c:80:37:9e:98:9b:6f:15:76: 45:9c:27:6f:f5:f8:e3:63:78:84:f7:80:80:23:c4: 9b:ae:a1:c0:25:e9:10:81:3e:d7:90:40:c8:70:68: 17:2e:86:9c:b0:e3:06:6e:51:f2:5d:2c:ff:00:f6: df:84:1f:53:88:f6:0a:8f:d5:be:ab:a4:bf:1e:d7: dd:f9:79:be:2c:e7:5a:d4:68:4b:5c:4a:b7:63:08: ff:f5:11:c4:8e:59:7b:8d:5b:43:88:b2:9e:18:1b: 80:ee:3f:13:85:93:48:81:a4:98:f2:8d:ee:8d:e8: ef:49:0a:d4:19:6b:9c:97:cf:1d:3a:f7:43:41:3b: 8b:ce:64:ac:98:e8:e4:a7:5d:27:85:9e:c3:16:1b: 9f:42:3a:ff:d3:30:d6:80:c7:92:4e:c7:0c:37:78: 3c:e9:33:89:15:64:3c:54:d7:86:3e:08:0c:6f:50: 33:10:67:52:47:e2:dd:4d:37:84:95:66:8c:aa:5e: a3:a1:c5:47:ab:23:79:a9:7f:d3:7e:16:0b:e3:3a: 2e:a7:77:77:f7:66:26:a9:07:ff:09:56:3f:79:ce: 20:71:29:70:89:a7:73:0c:e5:2e:fd:8f:ec:92:7e: 06:72:8f:40:71:1c:80:1b:24:47:c7:87:81:87:1d: 8e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:97:C8:78:2D:1B:CA:CD:95:79:B7:E4:68:6F:5C:B2:CF:E9:37:F7 X509v3 Authority Key Identifier: keyid:EE:FB:C6:53:63:F5:71:6D:72:4C:11:7C:D5:42:21:E4:12:D9:23:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:5a:ee:5e:cd:ef:c8:df:9c:27:29:f8:ee:53:10:a5:1a:b2: 2a:d4:8a:e4:30:dc:56:c0:aa:5f:65:53:82:4a:66:73:02:05: eb:e9:b9:fb:a6:b8:6d:f7:26:56:17:30:21:9a:03:cd:85:ff: 0f:2d:b6:80:4b:ae:b2:f5:84:6c:c0:44:c3:1c:a1:22:80:e2: 88:cd:d5:0b:b0:67:fd:53:fd:43:f8:59:cd:6f:1a:81:30:e3: a2:d7:15:4c:d9:66:4b:99:c2:3d:30:5f:c8:a5:3b:42:52:c5: d9:ef:dd:94:07:ef:32:f0:a5:b2:a1:bc:ae:4f:21:1f:ac:31: 1b:7a:70:a7:e8:5d:61:19:7b:8f:75:bd:d1:11:9a:9f:4f:d9: 50:be:42:87:79:64:3a:61:33:46:33:1d:a0:d7:3d:1c:76:98: 59:a6:09:3c:b5:9a:e7:9c:47:58:67:3b:f7:70:00:05:11:81: e3:da:cc:b2:8b:46:d3:15:4b:be:4d:67:29:a3:af:b7:91:a5: 3e:9a:b3:98:73:34:40:22:c6:14:47:b1:f2:86:f8:ec:b6:e7: 17:c1:cc:7c:ab:a4:79:c6:ee:13:41:d5:af:e1:7e:e2:c7:a2: 93:b2:c5:2f:af:36:af:87:f6:c0:48:7f:d1:59:61:ee:26:33: 01:3d:a7:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJBNDExMTAvBgNVBAUTKEVFRkJDNjUzNjNGNTcxNkQ3MjRDMTE3Q0Q1NDIyMUU0 MTJEOTIzQ0MwHhcNMjQwNTE5MDQwNTQ2WhcNMjQwNTI2MDQwNTQ2WjAYMRYwFAYD VQQDEw02NjQ5N2E5YS1hYTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0C98MAkcgDeemJtvFXZFnCdv9fjjY3iE94CAI8SbrqHAJekQgT7XkEDIcGgX LoacsOMGblHyXSz/APbfhB9TiPYKj9W+q6S/Htfd+Xm+LOda1GhLXEq3Ywj/9RHE jll7jVtDiLKeGBuA7j8ThZNIgaSY8o3ujejvSQrUGWucl88dOvdDQTuLzmSsmOjk p10nhZ7DFhufQjr/0zDWgMeSTscMN3g86TOJFWQ8VNeGPggMb1AzEGdSR+LdTTeE lWaMql6jocVHqyN5qX/TfhYL4zoup3d392YmqQf/CVY/ec4gcSlwiadzDOUu/Y/s kn4Gco9AcRyAGyRHx4eBhx2OTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFICXyHgt G8rNlXm35GhvXLLP6Tf3MB8GA1UdIwQYMBaAFO77xlNj9XFtckwRfNVCIeQS2SPM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkE0MS9CRDQxNDZEQUU5 MzUxMUVDQUM2NjU0NTJDNEY5QUUwMi83dnZHVTJQMWNXMXlUQkY4MVVJaDVCTFpJ OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd2dkdVMlAxY1cxeVRCRjgxVUloNUJMWkk4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkE0MS9CRDQxNDZEQUU5MzUxMUVDQUM2NjU0NTJDNEY5QUUwMi83dnZHVTJQMWNX MXlUQkY4MVVJaDVCTFpJOHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGWu5eze/I35wnKfjuUxClGrIq1IrkMNxWwKpfZVOCSmZzAgXr6bn7 prht9yZWFzAhmgPNhf8PLbaAS66y9YRswETDHKEigOKIzdULsGf9U/1D+FnNbxqB MOOi1xVM2WZLmcI9MF/IpTtCUsXZ792UB+8y8KWyobyuTyEfrDEbenCn6F1hGXuP db3REZqfT9lQvkKHeWQ6YTNGMx2g1z0cdphZpgk8tZrnnEdYZzv3cAAFEYHj2syy i0bTFUu+TWcpo6+3kaU+mrOYczRAIsYUR7HyhvjstucXwcx8q6R5xu4TQdWv4X7i x6KTssUvrzavh/bASH/RWWHuJjMBPadC -----END CERTIFICATE-----Generated at Sun May 19 04:56:56 2024 by rpki-client on console-fra.rpki-client.org