$ rpki-client -vvf rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft File: AEu7wBxXH6cPIOpEBQBX2dyeutI.mft (raw, json) Hash identifier: wm5dL2HjA5ZJNmyOIIZ7hNVidFjIeOsKSsk7nRB+Nzk= Subject key identifier: CF:47:88:C6:05:F1:0F:03:69:18:81:3D:39:88:57:FD:8E:90:AA:29 Authority key identifier: 00:4B:BB:C0:1C:57:1F:A7:0F:20:EA:44:05:00:57:D9:DC:9E:BA:D2 Certificate issuer: /CN=A91326B3/serialNumber=004BBBC01C571FA70F20EA44050057D9DC9EBAD2 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEu7wBxXH6cPIOpEBQBX2dyeutI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft Manifest number: 1E Signing time: Wed 15 May 2024 08:48:21 +0000 Manifest this update: Wed 15 May 2024 08:48:20 +0000 Manifest next update: Wed 22 May 2024 08:48:20 +0000 Files and hashes: 1: AEu7wBxXH6cPIOpEBQBX2dyeutI.crl (hash: nKgV/eQ5H/bhXChzr9bsqFLbBL2K8nXCynmZsZR+Ljs=) 2: C4BA1CE6E69211EE99E71B6AC4F9AE02.roa (hash: IY8DaCEG1YRTotH1n6mpqd+3bhzVn9WvsX3TpMpoT3M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.crl rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEu7wBxXH6cPIOpEBQBX2dyeutI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91326B3/serialNumber=004BBBC01C571FA70F20EA44050057D9DC9EBAD2 Validity Not Before: May 15 08:48:20 2024 GMT Not After : May 22 08:48:20 2024 GMT Subject: CN=664476d5-e90a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:49:e9:70:e1:96:12:49:fe:73:f0:06:d0:de: 06:1f:55:0f:1c:c3:e8:72:50:62:61:04:b2:61:e9: ce:f6:9e:60:f7:04:24:d1:d7:dc:8a:33:54:0e:ed: d3:c1:9c:32:97:4c:01:b8:3c:05:47:97:dd:73:78: 8c:01:62:5a:33:aa:76:54:64:b0:f8:f2:8f:4a:2a: 23:27:5a:22:0f:07:66:7c:e8:f4:b4:33:df:0d:69: 41:8c:89:2e:77:8a:fa:03:90:63:71:1f:bb:a7:d9: a7:af:7c:1c:ea:cd:3a:ad:13:29:5c:35:44:4f:ef: b8:73:81:e1:36:55:59:ac:a9:0f:86:2c:f5:55:f2: 7d:62:cc:88:01:5f:26:65:bd:ec:92:4b:f5:99:8b: be:e0:52:6f:9a:a4:0a:bf:07:4b:0b:53:f7:ea:7e: c7:12:24:2d:38:36:9f:3e:87:64:3b:93:54:84:d8: 22:8e:a7:84:6e:53:78:5f:75:40:f5:ee:3d:01:2d: 63:bc:62:55:29:bf:aa:a2:ab:41:cb:5d:50:ca:d8: 86:e8:b5:6b:2f:be:47:15:28:b7:61:91:19:3f:3e: cb:3e:2d:39:9e:3c:a1:ae:63:ca:75:8a:fa:5d:d3: 0b:2e:6b:90:f2:ea:1a:b1:f3:cb:e9:79:0a:1e:e1: 36:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:47:88:C6:05:F1:0F:03:69:18:81:3D:39:88:57:FD:8E:90:AA:29 X509v3 Authority Key Identifier: keyid:00:4B:BB:C0:1C:57:1F:A7:0F:20:EA:44:05:00:57:D9:DC:9E:BA:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEu7wBxXH6cPIOpEBQBX2dyeutI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:52:98:36:69:34:8c:d4:68:54:1f:58:a0:5c:90:e9:80:84: a4:c5:21:35:86:be:88:e2:7e:94:af:78:30:39:80:66:88:5b: 4c:92:7e:4d:11:c3:a8:7b:13:52:72:5f:4b:dc:86:c7:28:11: 81:c7:0f:11:5b:db:0d:eb:2b:16:ef:31:98:ee:ef:60:38:d6: fb:23:92:97:14:63:b1:3a:1a:b4:5c:16:d6:81:4d:31:1c:5e: 4b:75:aa:7d:43:88:66:fd:c9:a6:27:c6:d2:91:35:f0:b6:fa: bb:ef:4c:4f:bf:35:65:da:ab:f3:11:12:2c:f2:59:e2:39:7b: 7a:63:ef:13:28:92:d2:5a:dc:f4:d8:a0:5c:b1:83:69:42:3d: ea:78:31:b4:34:4c:86:b3:44:b4:ac:1d:56:1a:44:b7:f5:18: 5a:68:66:64:5c:da:a7:85:0d:c0:25:a5:42:ff:29:0e:71:49: fe:9a:63:92:f7:04:3a:6e:59:18:70:01:19:15:2d:f2:50:3c: 71:7b:59:72:02:91:df:85:dd:57:9e:63:0a:c7:dc:b6:70:30: 60:29:0f:db:77:fc:a5:1b:41:4c:44:d2:2d:9d:ff:67:54:f6: 5c:89:23:30:04:5b:c3:90:7e:c1:72:79:83:9e:b3:d8:8d:a1: c6:49:db:79 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MjZCMzExMC8GA1UEBRMoMDA0QkJCQzAxQzU3MUZBNzBGMjBFQTQ0MDUwMDU3RDlE QzlFQkFEMjAeFw0yNDA1MTUwODQ4MjBaFw0yNDA1MjIwODQ4MjBaMBgxFjAUBgNV BAMTDTY2NDQ3NmQ1LWU5MGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoSelw4ZYSSf5z8AbQ3gYfVQ8cw+hyUGJhBLJh6c72nmD3BCTR19yKM1QO7dPB nDKXTAG4PAVHl91zeIwBYlozqnZUZLD48o9KKiMnWiIPB2Z86PS0M98NaUGMiS53 ivoDkGNxH7un2aevfBzqzTqtEylcNURP77hzgeE2VVmsqQ+GLPVV8n1izIgBXyZl veySS/WZi77gUm+apAq/B0sLU/fqfscSJC04Np8+h2Q7k1SE2CKOp4RuU3hfdUD1 7j0BLWO8YlUpv6qiq0HLXVDK2IbotWsvvkcVKLdhkRk/Pss+LTmePKGuY8p1ivpd 0wsua5Dy6hqx88vpeQoe4TbFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUz0eIxgXx DwNpGIE9OYhX/Y6QqikwHwYDVR0jBBgwFoAUAEu7wBxXH6cPIOpEBQBX2dyeutIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMyNkIzL0NFOUYxNkZFRTY5 MTExRUVCRjA1ODkzMkM0RjlBRTAyL0FFdTd3QnhYSDZjUElPcEVCUUJYMmR5ZXV0 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQUV1N3dCeFhINmNQSU9wRUJRQlgyZHlldXRJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMy NkIzL0NFOUYxNkZFRTY5MTExRUVCRjA1ODkzMkM0RjlBRTAyL0FFdTd3QnhYSDZj UElPcEVCUUJYMmR5ZXV0SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA5SmDZpNIzUaFQfWKBckOmAhKTFITWGvojifpSveDA5gGaIW0ySfk0R w6h7E1JyX0vchscoEYHHDxFb2w3rKxbvMZju72A41vsjkpcUY7E6GrRcFtaBTTEc Xkt1qn1DiGb9yaYnxtKRNfC2+rvvTE+/NWXaq/MREizyWeI5e3pj7xMoktJa3PTY oFyxg2lCPep4MbQ0TIazRLSsHVYaRLf1GFpoZmRc2qeFDcAlpUL/KQ5xSf6aY5L3 BDpuWRhwARkVLfJQPHF7WXICkd+F3VeeYwrH3LZwMGApD9t3/KUbQUxE0i2d/2dU 9lyJIzAEW8OQfsFyeYOes9iNocZJ23k= -----END CERTIFICATE-----Generated at Wed May 15 09:27:29 2024 by rpki-client on console-fra.rpki-client.org