$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft File: e1ZuSGesy4G3S6nWZiJObARfDCc.mft (raw, json) Hash identifier: 72o0CvD8WD85JVD1tY/MHpFaP31bkLiX4llTOe7y8r8= Subject key identifier: 1B:6D:FD:F4:0A:C3:54:0B:DD:A4:05:D6:C7:FA:A9:E7:3B:7E:9C:AC Authority key identifier: 7B:56:6E:48:67:AC:CB:81:B7:4B:A9:D6:66:22:4E:6C:04:5F:0C:27 Certificate issuer: /CN=A91F2DFB/serialNumber=7B566E4867ACCB81B74BA9D666224E6C045F0C27 Certificate serial: 02D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft Manifest number: 02CE Signing time: Sun 19 May 2024 03:27:36 +0000 Manifest this update: Sun 19 May 2024 03:27:35 +0000 Manifest next update: Sun 26 May 2024 03:27:35 +0000 Files and hashes: 1: e1ZuSGesy4G3S6nWZiJObARfDCc.crl (hash: PFxDpkzfoIb/QiyRDiNozK5XIvnBQ0+QFtdJ7kuK2zE=) 2: 478248BEA05511ECABAEA234C4F9AE02.roa (hash: cArt6YUTsbYSvd5ig9TOlKQHhkid32MBiY+8srmpgT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.crl rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 721 (0x2d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2DFB/serialNumber=7B566E4867ACCB81B74BA9D666224E6C045F0C27 Validity Not Before: May 19 03:27:35 2024 GMT Not After : May 26 03:27:35 2024 GMT Subject: CN=664971a7-6818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6d:e3:6f:5f:27:7f:9b:0a:67:86:77:c6:19: e0:35:49:ff:0b:d3:03:24:8d:c0:2c:ae:96:00:93: 0e:d7:fc:e2:d4:ef:98:4e:1f:9c:77:15:f6:4a:25: 58:02:cd:ee:14:50:43:2c:46:84:5f:73:af:8f:46: 11:a2:62:3d:4b:37:ca:0c:40:46:c7:f0:d6:d2:69: ad:f7:1f:6d:0b:f0:75:1c:9b:20:b4:3d:76:83:20: df:08:2d:0d:56:ec:48:ff:0e:df:1c:fc:28:b3:02: 90:c8:49:ad:ef:6d:e3:dd:ac:8d:4b:e6:0b:6b:63: b0:76:4e:23:86:8c:e7:aa:db:e2:db:1d:51:95:68: 51:30:a5:b3:5d:b1:af:c0:f5:cc:4a:c0:ca:b1:1a: b1:cb:cc:10:e5:0c:31:01:07:7d:ee:49:ac:6a:7d: b9:19:af:e5:72:d0:bf:55:ef:de:31:66:e9:3a:45: 93:72:74:2d:b6:25:5d:e1:2d:d6:db:c1:48:5a:ad: 99:6a:67:35:e5:f3:cb:0e:c7:f7:5c:55:98:2c:2b: 67:90:09:85:92:3d:c8:e2:c8:23:19:5c:be:ba:3c: 30:2a:9a:10:96:23:76:f2:de:59:da:6e:1f:2e:dc: 1f:22:80:2f:da:07:4c:ea:3e:a6:2b:d1:82:62:ee: 56:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:6D:FD:F4:0A:C3:54:0B:DD:A4:05:D6:C7:FA:A9:E7:3B:7E:9C:AC X509v3 Authority Key Identifier: keyid:7B:56:6E:48:67:AC:CB:81:B7:4B:A9:D6:66:22:4E:6C:04:5F:0C:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:14:9f:3f:50:ae:0a:5e:44:2e:29:4a:03:96:8d:1a:d9:f0: 30:a3:9e:67:2e:9f:42:4c:fd:d0:fd:22:de:18:4e:56:33:1d: e3:df:b3:65:79:4b:84:c5:a4:9d:71:1e:93:d1:79:33:54:87: ec:e9:11:bd:81:06:eb:2b:66:98:13:bb:b5:58:8d:0a:a3:6c: 2e:39:7d:f0:8b:48:96:aa:84:25:8e:eb:76:4f:0f:f8:b9:c7: cb:d6:79:b9:46:5a:6a:5b:3e:3b:29:7e:6b:9c:1f:e1:43:cf: 91:d9:be:04:ae:d5:9a:22:2c:73:f9:b0:d9:86:a2:e6:f9:5b: 34:26:3a:a9:3d:bd:75:13:3b:28:cb:9e:98:d2:49:41:de:fb: 07:2c:c9:fc:c6:18:67:f8:3b:48:2d:ff:96:25:5b:54:16:00: 10:07:b4:69:90:60:d1:ce:07:f3:34:2e:2f:58:49:ee:7b:a8: 0d:45:d7:79:5a:8b:0a:1c:c8:d1:5b:dd:a3:39:2c:04:bb:d8: 56:3e:38:ae:83:9d:41:d3:c1:e5:ab:69:1d:cc:0f:fa:ca:24: f9:d1:b1:4f:fd:7c:98:26:76:40:b4:59:ce:f3:73:fe:1f:28: 3b:7e:a8:29:9a:0b:bd:68:3c:0f:c2:69:47:77:f1:f4:46:d3: ba:e6:92:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJERkIxMTAvBgNVBAUTKDdCNTY2RTQ4NjdBQ0NCODFCNzRCQTlENjY2MjI0RTZD MDQ1RjBDMjcwHhcNMjQwNTE5MDMyNzM1WhcNMjQwNTI2MDMyNzM1WjAYMRYwFAYD VQQDEw02NjQ5NzFhNy02ODE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo23jb18nf5sKZ4Z3xhngNUn/C9MDJI3ALK6WAJMO1/zi1O+YTh+cdxX2SiVY As3uFFBDLEaEX3Ovj0YRomI9SzfKDEBGx/DW0mmt9x9tC/B1HJsgtD12gyDfCC0N VuxI/w7fHPwoswKQyEmt723j3ayNS+YLa2Owdk4jhoznqtvi2x1RlWhRMKWzXbGv wPXMSsDKsRqxy8wQ5QwxAQd97kmsan25Ga/lctC/Ve/eMWbpOkWTcnQttiVd4S3W 28FIWq2Zamc15fPLDsf3XFWYLCtnkAmFkj3I4sgjGVy+ujwwKpoQliN28t5Z2m4f LtwfIoAv2gdM6j6mK9GCYu5WvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBtt/fQK w1QL3aQF1sf6qec7fpysMB8GA1UdIwQYMBaAFHtWbkhnrMuBt0up1mYiTmwEXwwn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkRGQi85RkNBQURGRUEw NTAxMUVDOTdCRjhENzJDNEY5QUUwMi9lMVp1U0dlc3k0RzNTNm5XWmlKT2JBUmZE Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UxWnVTR2VzeTRHM1M2bldaaUpPYkFSZkRDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkRGQi85RkNBQURGRUEwNTAxMUVDOTdCRjhENzJDNEY5QUUwMi9lMVp1U0dlc3k0 RzNTNm5XWmlKT2JBUmZEQ2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNFJ8/UK4KXkQuKUoDlo0a2fAwo55nLp9CTP3Q/SLeGE5WMx3j37Nl eUuExaSdcR6T0XkzVIfs6RG9gQbrK2aYE7u1WI0Ko2wuOX3wi0iWqoQljut2Tw/4 ucfL1nm5RlpqWz47KX5rnB/hQ8+R2b4ErtWaIixz+bDZhqLm+Vs0JjqpPb11Ezso y56Y0klB3vsHLMn8xhhn+DtILf+WJVtUFgAQB7RpkGDRzgfzNC4vWEnue6gNRdd5 WosKHMjRW92jOSwEu9hWPjiug51B08Hlq2kdzA/6yiT50bFP/XyYJnZAtFnO83P+ Hyg7fqgpmgu9aDwPwmlHd/H0RtO65pJm -----END CERTIFICATE-----Generated at Sun May 19 04:20:44 2024 by rpki-client on console-ams.rpki-client.org