$ rpki-client -vvf rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft File: 91XB4Q_ErmiS0krLh4LX5cAEGLA.mft (raw, json) Hash identifier: 3Q4frWir4Qonazg1MnP/vbYRZoxseMpdfmV6D6ZWy3o= Subject key identifier: 8F:8D:FB:6F:6D:73:6F:4B:9B:D4:22:06:3F:C4:74:2C:0D:8F:F2:27 Authority key identifier: F7:55:C1:E1:0F:C4:AE:68:92:D2:4A:CB:87:82:D7:E5:C0:04:18:B0 Certificate issuer: /CN=A9136F59/serialNumber=F755C1E10FC4AE6892D24ACB8782D7E5C00418B0 Certificate serial: 01EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91XB4Q_ErmiS0krLh4LX5cAEGLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft Manifest number: 01E7 Signing time: Fri 03 May 2024 04:22:00 +0000 Manifest this update: Fri 03 May 2024 04:21:59 +0000 Manifest next update: Fri 10 May 2024 04:21:59 +0000 Files and hashes: 1: 91XB4Q_ErmiS0krLh4LX5cAEGLA.crl (hash: MKj4K77wlwyTr1KpndAr9+75+5pNQ+kJGBoljtPwKyY=) 2: ED0C111CF8F611ECB6DF8835C4F9AE02.roa (hash: wYUBzooVrEbT6ZXl38oQZE+9xL3AYMS5g0m/JK1vkiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.crl rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91XB4Q_ErmiS0krLh4LX5cAEGLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 490 (0x1ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136F59/serialNumber=F755C1E10FC4AE6892D24ACB8782D7E5C00418B0 Validity Not Before: May 3 04:21:59 2024 GMT Not After : May 10 04:21:59 2024 GMT Subject: CN=66346668-c297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:85:38:79:db:06:1b:d8:b9:da:14:29:65:dd: 46:94:8c:35:9e:26:2d:09:54:54:69:26:e6:f0:3b: 70:4d:a1:2a:63:0f:e6:95:50:d9:30:ef:9b:a3:c6: 70:dc:01:da:b4:6a:6e:f2:cb:2c:30:ee:d0:e9:4b: c8:ce:4e:db:8d:a7:69:33:1e:1c:0b:ac:15:6f:43: db:7d:86:3c:25:df:83:65:38:7b:7b:a4:e8:e8:1e: c9:70:a5:25:fa:63:8b:60:11:2d:0b:7b:e3:e5:59: 6e:79:cb:d6:61:35:05:27:83:c5:95:d5:5d:f1:18: 41:d7:94:bf:9f:e8:7c:b2:70:f5:c5:1c:36:b3:74: 58:99:6c:c7:50:85:92:8b:40:8a:3f:39:51:f8:a8: cc:04:00:ac:64:56:b8:59:7e:88:2f:01:3d:95:3a: 10:b9:6c:64:f1:49:47:19:83:87:cc:30:70:a3:68: 9a:6f:18:ba:43:73:c0:08:a1:ad:2d:1a:ed:be:91: 02:eb:ab:28:e9:d6:77:f3:ab:3d:05:7d:20:86:79: bf:26:3a:fa:bc:5d:98:5d:40:67:27:2b:a4:c3:47: 6c:c1:34:75:87:b3:2e:e1:3f:6c:3d:69:ac:44:7f: 9c:0e:74:63:97:60:f3:1d:8b:c8:2f:6b:7d:c3:22: b9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:8D:FB:6F:6D:73:6F:4B:9B:D4:22:06:3F:C4:74:2C:0D:8F:F2:27 X509v3 Authority Key Identifier: keyid:F7:55:C1:E1:0F:C4:AE:68:92:D2:4A:CB:87:82:D7:E5:C0:04:18:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91XB4Q_ErmiS0krLh4LX5cAEGLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:64:14:90:d5:e6:ab:72:71:c5:e6:e3:47:21:e6:f6:3b:90: 3e:ff:a5:1c:4c:88:b7:eb:f7:af:c1:46:48:a9:b6:69:6e:b0: 49:59:72:36:f3:c2:bb:c4:2c:f1:4f:92:97:3f:1a:42:f9:86: 91:37:0e:7b:32:c2:85:90:f5:7f:40:03:92:53:64:ed:ad:7c: 4d:b9:84:25:f8:0e:0d:9b:eb:af:79:c4:c3:15:2f:05:ef:ac: 03:8b:3e:e7:01:8b:53:54:f8:5a:93:3e:38:18:d4:bc:10:13: 48:c0:a6:62:7f:b8:b3:5f:e6:97:71:7b:9b:6e:a4:17:b8:be: d2:7b:4c:80:e9:9a:b6:a7:09:91:b0:ac:60:c9:0d:23:82:b1: 2b:42:c4:55:92:c5:d6:dd:72:5c:18:41:0a:1f:9b:cf:76:ac: 45:b6:68:e6:65:ec:2c:f8:dc:d0:36:79:f0:b8:38:d2:99:15: d9:ca:e7:14:41:22:9a:df:7d:05:22:a1:62:ac:5a:e1:45:45: e3:c1:b8:35:40:12:bc:95:42:f6:93:d6:c5:c2:eb:0f:65:06: d2:ce:4b:b2:4e:d9:10:1c:d2:6b:00:f1:80:6e:fe:56:ee:89: 3b:ab:9e:d9:5c:4f:c3:d8:b6:1e:32:f3:e7:48:67:7c:6e:94: 85:3e:64:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZGNTkxMTAvBgNVBAUTKEY3NTVDMUUxMEZDNEFFNjg5MkQyNEFDQjg3ODJEN0U1 QzAwNDE4QjAwHhcNMjQwNTAzMDQyMTU5WhcNMjQwNTEwMDQyMTU5WjAYMRYwFAYD VQQDEw02NjM0NjY2OC1jMjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnYU4edsGG9i52hQpZd1GlIw1niYtCVRUaSbm8DtwTaEqYw/mlVDZMO+bo8Zw 3AHatGpu8sssMO7Q6UvIzk7bjadpMx4cC6wVb0PbfYY8Jd+DZTh7e6To6B7JcKUl +mOLYBEtC3vj5VluecvWYTUFJ4PFldVd8RhB15S/n+h8snD1xRw2s3RYmWzHUIWS i0CKPzlR+KjMBACsZFa4WX6ILwE9lToQuWxk8UlHGYOHzDBwo2iabxi6Q3PACKGt LRrtvpEC66so6dZ386s9BX0ghnm/Jjr6vF2YXUBnJyukw0dswTR1h7Mu4T9sPWms RH+cDnRjl2DzHYvIL2t9wyK5pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI+N+29t c29Lm9QiBj/EdCwNj/InMB8GA1UdIwQYMBaAFPdVweEPxK5oktJKy4eC1+XABBiw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkY1OS81NzcyQUZCRUY4 NEYxMUVDQTI5MjM5NTJDNEY5QUUwMi85MVhCNFFfRXJtaVMwa3JMaDRMWDVjQUVH TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkxWEI0UV9Fcm1pUzBrckxoNExYNWNBRUdMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkY1OS81NzcyQUZCRUY4NEYxMUVDQTI5MjM5NTJDNEY5QUUwMi85MVhCNFFfRXJt aVMwa3JMaDRMWDVjQUVHTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFZBSQ1earcnHF5uNHIeb2O5A+/6UcTIi36/evwUZIqbZpbrBJWXI2 88K7xCzxT5KXPxpC+YaRNw57MsKFkPV/QAOSU2TtrXxNuYQl+A4Nm+uvecTDFS8F 76wDiz7nAYtTVPhakz44GNS8EBNIwKZif7izX+aXcXubbqQXuL7Se0yA6Zq2pwmR sKxgyQ0jgrErQsRVksXW3XJcGEEKH5vPdqxFtmjmZews+NzQNnnwuDjSmRXZyucU QSKa330FIqFirFrhRUXjwbg1QBK8lUL2k9bFwusPZQbSzkuyTtkQHNJrAPGAbv5W 7ok7q57ZXE/D2LYeMvPnSGd8bpSFPmSU -----END CERTIFICATE-----Generated at Fri May 3 05:32:32 2024 by rpki-client on console-ams.rpki-client.org