$ rpki-client -vvf rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft File: fKdQzAmQd9S0MpCnYoOre_C2Smg.mft (raw, json) Hash identifier: ltKsMq9+kyCVN3m19qajG7cFAF0ugyJ2LbKrBJZaaQc= Subject key identifier: 1B:5E:9C:DF:AB:A0:B9:31:B5:17:C8:60:B9:98:7D:82:90:6D:02:20 Authority key identifier: 7C:A7:50:CC:09:90:77:D4:B4:32:90:A7:62:83:AB:7B:F0:B6:4A:68 Certificate issuer: /CN=A91300ED/serialNumber=7CA750CC099077D4B43290A76283AB7BF0B64A68 Certificate serial: 05EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fKdQzAmQd9S0MpCnYoOre_C2Smg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft Manifest number: 05E7 Signing time: Fri 26 Apr 2024 23:58:42 +0000 Manifest this update: Fri 26 Apr 2024 23:58:42 +0000 Manifest next update: Fri 03 May 2024 23:58:42 +0000 Files and hashes: 1: fKdQzAmQd9S0MpCnYoOre_C2Smg.crl (hash: ypIMV+fV1llaF4RVzMXWPB/ytPOYErbkbXBDUYwFEW4=) 2: 74897CC0622A11EBA8BA0B7EC4F9AE02.roa (hash: LHDbj/hV/cUaeJllia6zIhntNzxDgCaw+1JA8dG5siY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.crl rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fKdQzAmQd9S0MpCnYoOre_C2Smg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 23:58:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1515 (0x5eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91300ED/serialNumber=7CA750CC099077D4B43290A76283AB7BF0B64A68 Validity Not Before: Apr 26 23:58:42 2024 GMT Not After : May 3 23:58:42 2024 GMT Subject: CN=662c3fb2-cef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:69:7d:79:36:92:4c:d5:db:2d:28:b4:7c:1e: 78:41:55:a0:89:32:cb:d5:2f:dd:6b:88:98:5a:86: ec:2b:51:69:97:75:58:a5:08:f8:f1:b5:05:77:85: 81:7e:22:5d:f7:1e:93:e8:45:a9:b7:85:16:fe:b1: 06:4c:0a:5d:d3:7a:f8:1e:d1:83:ec:6d:0a:aa:75: e6:4a:05:a4:cd:d5:3e:85:6b:da:3d:e1:12:fc:34: 40:06:d6:e8:cb:80:cc:65:ce:c1:f3:87:5e:4e:f1: 16:1f:6c:16:a9:53:d0:ad:6a:5a:1d:57:a0:ce:aa: 29:3a:9e:cd:9f:b6:1d:fb:69:02:6a:db:82:29:58: de:ed:3f:49:3e:a4:c8:6b:60:4f:d4:06:2b:63:c8: cf:88:97:8e:3d:4e:6b:53:16:1c:aa:36:d6:04:55: 82:ac:4f:03:ab:3f:1c:25:95:1e:ab:08:0b:1d:fe: 37:89:95:a4:84:b3:e0:cd:e4:2d:08:d0:d0:4b:7a: 88:17:a2:b4:89:d3:dd:12:b6:80:a5:e3:fb:27:e1: 64:4c:63:a9:83:e6:d6:fb:b1:95:72:76:bf:7e:0b: 85:f0:ae:12:88:47:ea:b1:0b:ab:76:f3:8b:ca:cf: 55:47:90:ca:8c:c5:27:e5:0d:9b:37:c8:b7:c3:69: 10:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:5E:9C:DF:AB:A0:B9:31:B5:17:C8:60:B9:98:7D:82:90:6D:02:20 X509v3 Authority Key Identifier: keyid:7C:A7:50:CC:09:90:77:D4:B4:32:90:A7:62:83:AB:7B:F0:B6:4A:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fKdQzAmQd9S0MpCnYoOre_C2Smg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:4c:02:61:97:a7:dd:e6:e5:27:9c:bb:86:b9:78:63:b9:61: be:a2:3f:fb:94:15:b6:0e:b4:5e:3e:85:45:f4:a6:be:3b:32: 43:d7:49:45:93:ce:ed:a8:8d:69:ed:62:06:cc:77:1b:0e:5c: 28:fd:12:dd:b2:0e:8c:ce:30:06:30:3f:c4:c2:22:3d:d3:b4: 3e:fd:5b:93:76:b7:41:b3:d8:f1:02:90:55:9c:97:9e:a6:18: 95:82:08:6e:a7:a4:e0:d0:ba:e1:de:3c:24:e3:9b:15:50:82: d5:e3:d5:46:a9:ef:5c:3d:c4:4f:6c:ae:85:8c:eb:6c:e3:60: d3:3a:04:c6:b7:a4:ed:59:07:f9:e3:2e:d9:cf:cd:59:3d:3e: 12:79:80:02:65:c7:d1:c6:72:cb:bc:7e:f2:f1:6e:68:18:11: 36:64:91:29:9d:28:3b:d2:66:2a:5d:36:97:07:4d:7d:61:84: e4:c9:16:9f:21:43:45:cf:53:78:1e:48:c4:a1:4c:86:23:60: 72:08:47:aa:d1:0c:1e:f3:67:e7:6c:bd:a5:a2:51:67:a8:8f: 16:bd:0f:90:6f:38:01:15:41:17:db:e8:c3:bc:d6:f4:a9:28: 23:b0:3a:6a:cc:cc:a7:c2:fa:a9:e8:ab:d9:97:17:46:6c:36: cd:80:bc:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAwRUQxMTAvBgNVBAUTKDdDQTc1MENDMDk5MDc3RDRCNDMyOTBBNzYyODNBQjdC RjBCNjRBNjgwHhcNMjQwNDI2MjM1ODQyWhcNMjQwNTAzMjM1ODQyWjAYMRYwFAYD VQQDEw02NjJjM2ZiMi1jZWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApml9eTaSTNXbLSi0fB54QVWgiTLL1S/da4iYWobsK1Fpl3VYpQj48bUFd4WB fiJd9x6T6EWpt4UW/rEGTApd03r4HtGD7G0KqnXmSgWkzdU+hWvaPeES/DRABtbo y4DMZc7B84deTvEWH2wWqVPQrWpaHVegzqopOp7Nn7Yd+2kCatuCKVje7T9JPqTI a2BP1AYrY8jPiJeOPU5rUxYcqjbWBFWCrE8Dqz8cJZUeqwgLHf43iZWkhLPgzeQt CNDQS3qIF6K0idPdEraApeP7J+FkTGOpg+bW+7GVcna/fguF8K4SiEfqsQurdvOL ys9VR5DKjMUn5Q2bN8i3w2kQ0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBtenN+r oLkxtRfIYLmYfYKQbQIgMB8GA1UdIwQYMBaAFHynUMwJkHfUtDKQp2KDq3vwtkpo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDBFRC8wRUM5NEE4ODYy MjkxMUVCOEUxQkMyN0NDNEY5QUUwMi9mS2RRekFtUWQ5UzBNcENuWW9PcmVfQzJT bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZLZFF6QW1RZDlTME1wQ25Zb09yZV9DMlNtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDBFRC8wRUM5NEE4ODYyMjkxMUVCOEUxQkMyN0NDNEY5QUUwMi9mS2RRekFtUWQ5 UzBNcENuWW9PcmVfQzJTbWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnTAJhl6fd5uUnnLuGuXhjuWG+oj/7lBW2DrRePoVF9Ka+OzJD10lF k87tqI1p7WIGzHcbDlwo/RLdsg6MzjAGMD/EwiI907Q+/VuTdrdBs9jxApBVnJee phiVgghup6Tg0Lrh3jwk45sVUILV49VGqe9cPcRPbK6FjOts42DTOgTGt6TtWQf5 4y7Zz81ZPT4SeYACZcfRxnLLvH7y8W5oGBE2ZJEpnSg70mYqXTaXB019YYTkyRaf IUNFz1N4HkjEoUyGI2ByCEeq0Qwe82fnbL2lolFnqI8WvQ+QbzgBFUEX2+jDvNb0 qSgjsDpqzMynwvqp6KvZlxdGbDbNgLxe -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:37 2024 by rpki-client on console-ams.rpki-client.org