$ rpki-client -vvf rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft File: AduB721jlOZtOzIxW0eevteZyTc.mft (raw, json) Hash identifier: PSnzi7NMRtKZiGLgCjvNM8OxpW73mY1mmEUPqCGYzF0= Subject key identifier: 9C:CC:0A:4C:93:1F:A4:FB:9C:6B:95:C9:76:63:3C:B5:FB:7D:E9:0F Authority key identifier: 01:DB:81:EF:6D:63:94:E6:6D:3B:32:31:5B:47:9E:BE:D7:99:C9:37 Certificate issuer: /CN=A91FECDA/serialNumber=01DB81EF6D6394E66D3B32315B479EBED799C937 Certificate serial: 0E7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft Manifest number: 0E79 Signing time: Sat 18 May 2024 18:21:59 +0000 Manifest this update: Sat 18 May 2024 18:21:59 +0000 Manifest next update: Sat 25 May 2024 18:21:59 +0000 Files and hashes: 1: AduB721jlOZtOzIxW0eevteZyTc.crl (hash: iDZgQqmPd50H9Hdjsp/YOOrzi/JGdCgdONf7NJP8o8k=) 2: E47A45626F9E11E9B98EF633C4F9AE02.roa (hash: usLm6ZKXkqgP4LipBRC+8rgtpbIBBfKXyGejQeUCVA0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.crl rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3711 (0xe7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FECDA/serialNumber=01DB81EF6D6394E66D3B32315B479EBED799C937 Validity Not Before: May 18 18:21:59 2024 GMT Not After : May 25 18:21:59 2024 GMT Subject: CN=6648f1c7-618b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:46:2d:39:f7:27:63:24:f5:48:3b:ad:2a:0f: 87:33:9c:f2:c9:4e:4c:bb:7b:03:b3:d2:66:2e:76: 19:e1:54:0d:88:82:0d:5f:f7:76:81:bb:aa:02:7c: 26:1b:cb:cd:13:0f:1f:3a:f2:a7:ab:21:06:61:69: 0e:29:c0:b6:f9:0c:5d:84:aa:95:7c:11:f2:84:05: 9a:cc:b8:7d:3a:12:8e:23:b6:a1:36:60:20:a7:73: 41:76:26:7d:91:e5:8b:76:a0:37:3d:79:93:88:3a: 04:b8:c3:6b:74:cb:29:ae:45:ac:61:fd:3d:1d:21: e6:02:e7:cf:62:d5:f8:7d:58:0d:73:2a:af:fe:9c: f0:fe:ff:21:30:f3:77:99:ed:e9:22:7b:8a:1a:4b: b9:da:41:8b:a5:03:18:ab:48:aa:1b:4b:9f:f0:53: 45:ee:bd:e6:d9:c9:07:3d:ad:44:fb:3a:65:12:c2: a5:2a:2d:16:f6:43:fd:01:67:54:66:d5:1a:c0:42: 10:27:cb:03:c9:fb:4f:f8:b1:30:b1:09:93:c7:cf: 26:f7:48:99:fb:81:12:cf:31:55:d9:9f:35:44:05: 27:05:a7:42:a2:94:27:7a:97:ce:63:46:82:40:81: ac:b6:71:8c:9b:42:15:4c:33:8f:bc:9e:79:52:b2: 23:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:CC:0A:4C:93:1F:A4:FB:9C:6B:95:C9:76:63:3C:B5:FB:7D:E9:0F X509v3 Authority Key Identifier: keyid:01:DB:81:EF:6D:63:94:E6:6D:3B:32:31:5B:47:9E:BE:D7:99:C9:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:3c:10:38:bf:82:5c:95:e4:67:52:fe:7c:56:4d:e1:a3:59: 46:56:1a:65:36:81:bf:cf:17:3d:11:48:66:4f:71:b2:3d:fa: 20:a7:b3:7e:e2:b7:2b:88:19:5f:2f:33:c9:0a:34:a6:f6:63: ec:89:10:12:ee:5b:f8:dd:82:a0:d4:c2:05:28:5e:e0:b7:d7: a1:6c:c4:4f:cc:5f:fe:ca:49:1c:28:81:6c:73:de:7d:2c:63: 90:ae:66:a1:7a:48:65:dc:e9:66:3c:a8:9f:c0:76:8d:3f:72: 5e:94:b9:88:dc:aa:dc:68:20:f3:8f:a7:46:d6:ad:44:99:94: eb:6b:75:3e:c1:c8:25:ef:bd:68:81:99:48:e5:13:6d:2d:e2: 9b:9d:85:37:b1:0a:f2:37:37:87:a3:0a:1e:cf:3e:15:10:e6: 1f:1a:f4:92:45:7d:c7:cc:26:d7:81:c1:86:a1:36:b4:6d:68: 39:c1:77:5d:9c:3e:09:24:56:a0:9c:9d:da:79:9b:62:0b:fe: 53:b4:28:39:72:a0:92:2a:c8:00:50:b6:16:e8:d8:ae:24:58: 90:6c:af:63:ff:b7:3d:57:b1:32:aa:19:aa:12:1c:bd:73:f8: 56:49:c9:7e:a9:88:2b:49:42:3d:67:89:e6:96:02:83:f1:4f: aa:06:fb:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVDREExMTAvBgNVBAUTKDAxREI4MUVGNkQ2Mzk0RTY2RDNCMzIzMTVCNDc5RUJF RDc5OUM5MzcwHhcNMjQwNTE4MTgyMTU5WhcNMjQwNTI1MTgyMTU5WjAYMRYwFAYD VQQDEw02NjQ4ZjFjNy02MThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArkYtOfcnYyT1SDutKg+HM5zyyU5Mu3sDs9JmLnYZ4VQNiIINX/d2gbuqAnwm G8vNEw8fOvKnqyEGYWkOKcC2+QxdhKqVfBHyhAWazLh9OhKOI7ahNmAgp3NBdiZ9 keWLdqA3PXmTiDoEuMNrdMsprkWsYf09HSHmAufPYtX4fVgNcyqv/pzw/v8hMPN3 me3pInuKGku52kGLpQMYq0iqG0uf8FNF7r3m2ckHPa1E+zplEsKlKi0W9kP9AWdU ZtUawEIQJ8sDyftP+LEwsQmTx88m90iZ+4ESzzFV2Z81RAUnBadCopQnepfOY0aC QIGstnGMm0IVTDOPvJ55UrIjSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJzMCkyT H6T7nGuVyXZjPLX7fekPMB8GA1UdIwQYMBaAFAHbge9tY5TmbTsyMVtHnr7Xmck3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUNEQS84QTg4RjEwNDZG OUMxMUU5QTUwNzRCMkZDNEY5QUUwMi9BZHVCNzIxamxPWnRPekl4VzBlZXZ0ZVp5 VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FkdUI3MjFqbE9adE96SXhXMGVldnRlWnlUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUNEQS84QTg4RjEwNDZGOUMxMUU5QTUwNzRCMkZDNEY5QUUwMi9BZHVCNzIxamxP WnRPekl4VzBlZXZ0ZVp5VGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtPBA4v4JcleRnUv58Vk3ho1lGVhplNoG/zxc9EUhmT3GyPfogp7N+ 4rcriBlfLzPJCjSm9mPsiRAS7lv43YKg1MIFKF7gt9ehbMRPzF/+ykkcKIFsc959 LGOQrmahekhl3OlmPKifwHaNP3JelLmI3KrcaCDzj6dG1q1EmZTra3U+wcgl771o gZlI5RNtLeKbnYU3sQryNzeHowoezz4VEOYfGvSSRX3HzCbXgcGGoTa0bWg5wXdd nD4JJFagnJ3aeZtiC/5TtCg5cqCSKsgAULYW6NiuJFiQbK9j/7c9V7EyqhmqEhy9 c/hWScl+qYgrSUI9Z4nmlgKD8U+qBvug -----END CERTIFICATE-----Generated at Sat May 18 19:15:27 2024 by rpki-client on console-ams.rpki-client.org