$ rpki-client -vvf rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft File: 7qM-huKBrRPcYp8y2NU3YK4dAEc.mft (raw, json) Hash identifier: prP+ib7PBimzPv6en734SP6mliVl1Fo/3TDT+kVTnQk= Subject key identifier: 0E:9F:BD:4D:FA:2D:79:BF:19:7E:EA:A5:B7:45:E2:66:3C:5A:18:BA Authority key identifier: EE:A3:3E:86:E2:81:AD:13:DC:62:9F:32:D8:D5:37:60:AE:1D:00:47 Certificate issuer: /CN=A91F30AE/serialNumber=EEA33E86E281AD13DC629F32D8D53760AE1D0047 Certificate serial: 03DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qM-huKBrRPcYp8y2NU3YK4dAEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft Manifest number: 03D8 Signing time: Sun 19 May 2024 02:20:24 +0000 Manifest this update: Sun 19 May 2024 02:20:23 +0000 Manifest next update: Sun 26 May 2024 02:20:23 +0000 Files and hashes: 1: 7qM-huKBrRPcYp8y2NU3YK4dAEc.crl (hash: 3HuV9OK7CmisXJJTYDeSaPaxVWFBa6Za0bcJMshS9lw=) 2: 84CEFB0E379111EC92DB9A48C4F9AE02.roa (hash: drOb2EJRB1UWo+UmyEQp1OoQljtiTBEpDTyYU8KXaMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.crl rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qM-huKBrRPcYp8y2NU3YK4dAEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 988 (0x3dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F30AE/serialNumber=EEA33E86E281AD13DC629F32D8D53760AE1D0047 Validity Not Before: May 19 02:20:23 2024 GMT Not After : May 26 02:20:23 2024 GMT Subject: CN=664961e7-b11e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:3f:a6:96:24:ea:a0:6b:15:1b:ed:1a:89:2b: e7:82:c3:20:27:89:07:b8:5a:47:c8:18:32:62:69: da:32:e9:1f:8d:5b:17:99:1f:43:3e:d6:60:b6:8b: bd:68:de:f6:99:64:07:9e:48:7f:07:61:82:d4:28: 08:eb:70:e5:bf:eb:0e:f5:6e:68:5f:25:18:05:a1: d1:20:a5:73:bd:fc:50:af:5e:f3:39:69:15:ec:85: c6:a6:30:f3:a7:e5:89:7b:fd:81:4b:53:b3:64:89: 8a:2e:54:df:38:e8:ca:ca:57:2a:52:d2:93:99:f7: 46:96:ba:35:7b:dc:97:67:6d:b5:b1:7e:b4:62:26: 56:d9:ce:e7:ba:ef:20:7d:10:32:49:ba:85:88:a4: e8:97:49:ec:d4:ac:51:b8:7a:32:81:9a:36:9a:95: dc:5c:a1:1f:10:84:7f:8b:3c:47:46:89:c0:b9:5d: 4b:45:59:69:75:7d:2c:03:11:e1:04:40:e9:37:46: 13:a7:e9:87:5f:91:7c:72:ea:62:94:ad:94:82:34: e1:6e:d8:02:8b:f6:16:88:bd:a2:5a:fb:c3:03:7f: a4:da:02:ac:e8:e3:75:9b:30:35:54:c9:29:3a:2d: 32:35:e9:27:c7:02:38:30:5f:5c:48:5d:6d:ad:ba: f3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:9F:BD:4D:FA:2D:79:BF:19:7E:EA:A5:B7:45:E2:66:3C:5A:18:BA X509v3 Authority Key Identifier: keyid:EE:A3:3E:86:E2:81:AD:13:DC:62:9F:32:D8:D5:37:60:AE:1D:00:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qM-huKBrRPcYp8y2NU3YK4dAEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:32:4c:56:db:d2:12:c3:13:08:98:62:8c:7b:c3:45:e3:82: c2:22:bc:6c:05:eb:7a:21:1f:80:fe:95:0b:22:2b:34:cd:de: c8:d4:7a:b9:4e:13:8a:8a:3e:6f:49:3d:cf:8a:90:46:f1:9e: 4c:bc:96:8d:87:9d:8e:36:b1:fc:95:c1:a1:b3:6d:6b:b2:fb: e3:1e:c7:31:7f:17:e1:d0:47:4f:8e:9d:d5:36:1c:07:30:b6: 7b:16:c6:72:56:a6:70:db:d8:46:e3:14:68:6a:6d:cb:bf:70: c3:30:80:b0:9e:a6:3c:b5:27:87:ff:35:f0:96:6d:69:03:ed: 77:57:b7:98:e1:c5:f4:99:a3:67:39:60:24:fc:12:57:c8:64: 2f:5f:a5:af:6b:35:b8:51:68:23:30:c6:a7:dc:a1:99:0b:0a: fc:3b:67:cc:2a:32:9a:56:da:67:fb:90:08:ba:da:59:18:c4: a2:5c:38:d0:ef:67:04:5a:0a:a5:14:ea:7b:2e:8a:99:af:20: fc:2d:3b:dd:b0:2f:88:14:40:c6:92:17:c9:5d:2d:ab:02:5a: af:f5:e9:8b:df:f3:3c:9b:16:c9:e2:c3:d4:aa:48:6b:e1:0b: 9c:32:a0:05:7d:8e:be:3a:d3:85:44:af:41:ca:0d:33:c1:7d: be:f3:d0:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwQUUxMTAvBgNVBAUTKEVFQTMzRTg2RTI4MUFEMTNEQzYyOUYzMkQ4RDUzNzYw QUUxRDAwNDcwHhcNMjQwNTE5MDIyMDIzWhcNMjQwNTI2MDIyMDIzWjAYMRYwFAYD VQQDEw02NjQ5NjFlNy1iMTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9T+mliTqoGsVG+0aiSvngsMgJ4kHuFpHyBgyYmnaMukfjVsXmR9DPtZgtou9 aN72mWQHnkh/B2GC1CgI63Dlv+sO9W5oXyUYBaHRIKVzvfxQr17zOWkV7IXGpjDz p+WJe/2BS1OzZImKLlTfOOjKylcqUtKTmfdGlro1e9yXZ221sX60YiZW2c7nuu8g fRAySbqFiKTol0ns1KxRuHoygZo2mpXcXKEfEIR/izxHRonAuV1LRVlpdX0sAxHh BEDpN0YTp+mHX5F8cupilK2UgjThbtgCi/YWiL2iWvvDA3+k2gKs6ON1mzA1VMkp Oi0yNeknxwI4MF9cSF1trbrzWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA6fvU36 LXm/GX7qpbdF4mY8Whi6MB8GA1UdIwQYMBaAFO6jPobiga0T3GKfMtjVN2CuHQBH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzBBRS9FN0ZDMEQxNDM3 OEUxMUVDODQzQ0QyNDVDNEY5QUUwMi83cU0taHVLQnJSUGNZcDh5Mk5VM1lLNGRB RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdxTS1odUtCclJQY1lwOHkyTlUzWUs0ZEFFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzBBRS9FN0ZDMEQxNDM3OEUxMUVDODQzQ0QyNDVDNEY5QUUwMi83cU0taHVLQnJS UGNZcDh5Mk5VM1lLNGRBRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9MkxW29ISwxMImGKMe8NF44LCIrxsBet6IR+A/pULIis0zd7I1Hq5 ThOKij5vST3PipBG8Z5MvJaNh52ONrH8lcGhs21rsvvjHscxfxfh0EdPjp3VNhwH MLZ7FsZyVqZw29hG4xRoam3Lv3DDMICwnqY8tSeH/zXwlm1pA+13V7eY4cX0maNn OWAk/BJXyGQvX6WvazW4UWgjMMan3KGZCwr8O2fMKjKaVtpn+5AIutpZGMSiXDjQ 72cEWgqlFOp7LoqZryD8LTvdsC+IFEDGkhfJXS2rAlqv9emL3/M8mxbJ4sPUqkhr 4QucMqAFfY6+OtOFRK9Byg0zwX2+89Dq -----END CERTIFICATE-----Generated at Sun May 19 02:59:16 2024 by rpki-client on console-ams.rpki-client.org