$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.mft File: _2p8LLPdLXe95os2uoNseVip1No.mft (raw, json) Hash identifier: SUkm9Djj7GofPi/PMwKJPKX3GejU54Hp0Z/AktuMH6o= Subject key identifier: 76:FC:20:27:73:D5:FA:05:B1:8E:B1:98:D3:DC:D5:26:4D:01:CC:D6 Authority key identifier: FF:6A:7C:2C:B3:DD:2D:77:BD:E6:8B:36:BA:83:6C:79:58:A9:D4:DA Certificate issuer: /CN=A91F7506/serialNumber=FF6A7C2CB3DD2D77BDE68B36BA836C7958A9D4DA Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2p8LLPdLXe95os2uoNseVip1No.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.mft Manifest number: E7 Signing time: Sun 19 May 2024 05:53:27 +0000 Manifest this update: Sun 19 May 2024 05:53:26 +0000 Manifest next update: Sun 26 May 2024 05:53:26 +0000 Files and hashes: 1: _2p8LLPdLXe95os2uoNseVip1No.crl (hash: OdIwhbV+qPuXn7zMYu+yT3tAUYp2mjHhfiPiB3TvnWE=) 2: 6903848C20A911EEBEC77485C4F9AE02.roa (hash: S9PKLGYirkzPYGzK9HsINhPnRnovSUZ4iSV2gi5DUCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.crl rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2p8LLPdLXe95os2uoNseVip1No.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7506/serialNumber=FF6A7C2CB3DD2D77BDE68B36BA836C7958A9D4DA Validity Not Before: May 19 05:53:26 2024 GMT Not After : May 26 05:53:26 2024 GMT Subject: CN=664993d6-9e40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ef:09:fa:60:2a:ca:50:6b:21:88:5f:f9:ef: 97:c2:27:68:1d:c5:3f:b0:de:16:c4:31:56:54:92: 8a:b1:02:3a:20:e0:68:a1:73:1d:eb:91:e7:01:ca: 74:e5:49:82:9c:a1:cb:4c:68:a5:d6:5c:5d:9e:bd: 42:84:be:2a:ca:c0:39:f6:a7:d7:4a:34:fd:6e:b7: 70:fb:78:cd:25:fc:23:76:5a:3b:3f:a9:be:68:9c: 27:76:c5:dc:dc:e6:91:87:bb:5b:09:af:b4:d2:b1: b1:e8:53:b2:70:43:b8:c1:7a:93:69:39:db:a0:82: a2:8a:a2:31:b4:13:d5:07:97:f0:01:61:56:92:48: 24:0e:70:1e:2a:31:55:3a:e7:c7:54:a1:4e:c9:a3: bc:45:dd:30:80:af:7a:87:55:18:c5:8d:f7:de:4e: aa:9d:08:19:ae:eb:b8:09:1c:8f:ba:15:57:6c:a5: 62:9c:95:c2:8e:66:b2:a5:fc:3d:eb:cd:fd:27:47: b9:2e:43:e4:94:e2:06:ae:8e:0f:c6:32:e3:6c:b4: 53:3f:ee:f7:96:a5:36:9a:a1:b4:f6:4c:be:c6:b4: f2:59:c1:d8:d8:32:6a:95:98:40:36:f3:07:34:5e: 4d:60:84:27:19:4e:df:80:dc:a4:81:2f:87:d2:bd: 84:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:FC:20:27:73:D5:FA:05:B1:8E:B1:98:D3:DC:D5:26:4D:01:CC:D6 X509v3 Authority Key Identifier: keyid:FF:6A:7C:2C:B3:DD:2D:77:BD:E6:8B:36:BA:83:6C:79:58:A9:D4:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2p8LLPdLXe95os2uoNseVip1No.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e2:81:97:0a:6c:3f:88:51:0d:60:13:60:ce:c1:34:2c:78:09: ca:a4:e7:d5:b8:dc:f5:d0:b8:5a:69:28:b6:d1:2f:d3:35:a1: 57:04:0b:fe:78:48:67:3e:5f:86:4f:a5:80:60:8a:a9:ea:b7: 25:81:ed:96:c4:ae:8d:c6:13:a7:b3:d6:16:08:2f:a8:2f:74: da:3b:ac:59:25:c3:90:2c:d7:93:b4:3b:51:d3:67:d8:e4:f1: a4:26:fa:e9:a4:9c:fc:d2:5f:0e:b8:f3:08:b3:15:23:e1:5e: ba:63:e0:c2:e2:36:00:66:37:74:93:2a:78:c7:71:e3:be:ef: 2f:50:fe:2a:29:91:5e:67:4c:a1:24:74:24:38:e0:ea:0f:c7: 17:c2:a0:36:7c:dd:05:59:b8:08:81:ab:4f:d0:c7:fa:97:32: c2:a8:1f:b0:00:1e:4c:1d:27:6e:b3:ed:a7:ad:95:80:a3:58: a4:14:97:f7:f4:4d:b1:a1:70:bf:60:e7:97:fa:50:7d:4b:dc: c8:7c:ec:13:86:ea:15:b8:fc:83:37:33:91:8c:50:25:2a:b0: d9:97:87:44:cf:14:f8:a5:53:43:5c:cd:dd:f2:41:cb:7e:03: 68:ee:ae:81:d1:8b:35:59:bd:5d:40:fc:49:e5:d3:4a:4c:11: 40:b2:50:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc1MDYxMTAvBgNVBAUTKEZGNkE3QzJDQjNERDJENzdCREU2OEIzNkJBODM2Qzc5 NThBOUQ0REEwHhcNMjQwNTE5MDU1MzI2WhcNMjQwNTI2MDU1MzI2WjAYMRYwFAYD VQQDEw02NjQ5OTNkNi05ZTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0e8J+mAqylBrIYhf+e+XwidoHcU/sN4WxDFWVJKKsQI6IOBooXMd65HnAcp0 5UmCnKHLTGil1lxdnr1ChL4qysA59qfXSjT9brdw+3jNJfwjdlo7P6m+aJwndsXc 3OaRh7tbCa+00rGx6FOycEO4wXqTaTnboIKiiqIxtBPVB5fwAWFWkkgkDnAeKjFV OufHVKFOyaO8Rd0wgK96h1UYxY333k6qnQgZruu4CRyPuhVXbKVinJXCjmaypfw9 6839J0e5LkPklOIGro4PxjLjbLRTP+73lqU2mqG09ky+xrTyWcHY2DJqlZhANvMH NF5NYIQnGU7fgNykgS+H0r2EuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHb8ICdz 1foFsY6xmNPc1SZNAczWMB8GA1UdIwQYMBaAFP9qfCyz3S13veaLNrqDbHlYqdTa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzUwNi85NTU0MjY2MkI2 ODMxMUVEOEExODVDMURDNEY5QUUwMi9fMnA4TExQZExYZTk1b3MydW9Oc2VWaXAx Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18ycDhMTFBkTFhlOTVvczJ1b05zZVZpcDFOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzUwNi85NTU0MjY2MkI2ODMxMUVEOEExODVDMURDNEY5QUUwMi9fMnA4TExQZExY ZTk1b3MydW9Oc2VWaXAxTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDigZcKbD+IUQ1gE2DOwTQseAnKpOfVuNz10LhaaSi20S/TNaFXBAv+ eEhnPl+GT6WAYIqp6rclge2WxK6NxhOns9YWCC+oL3TaO6xZJcOQLNeTtDtR02fY 5PGkJvrppJz80l8OuPMIsxUj4V66Y+DC4jYAZjd0kyp4x3Hjvu8vUP4qKZFeZ0yh JHQkOODqD8cXwqA2fN0FWbgIgatP0Mf6lzLCqB+wAB5MHSdus+2nrZWAo1ikFJf3 9E2xoXC/YOeX+lB9S9zIfOwThuoVuPyDNzORjFAlKrDZl4dEzxT4pVNDXM3d8kHL fgNo7q6B0Ys1Wb1dQPxJ5dNKTBFAslCD -----END CERTIFICATE-----Generated at Sun May 19 08:25:12 2024 by rpki-client on console-ams.rpki-client.org