$ rpki-client -vvf rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft File: 7ErjVswCMimNPNn9IEE1Z9u3_CU.mft (raw, json) Hash identifier: IUKH+sxFHm8M7UULZDmKxXjTu67fjFaUQvl8YF1LcqM= Subject key identifier: C5:AA:1D:83:DD:F1:7A:52:62:09:D7:4A:1B:63:BE:74:7B:5C:51:D1 Authority key identifier: EC:4A:E3:56:CC:02:32:29:8D:3C:D9:FD:20:41:35:67:DB:B7:FC:25 Certificate issuer: /CN=A91830A5/serialNumber=EC4AE356CC0232298D3CD9FD20413567DBB7FC25 Certificate serial: 03A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft Manifest number: 039B Signing time: Wed 01 May 2024 02:56:07 +0000 Manifest this update: Wed 01 May 2024 02:56:07 +0000 Manifest next update: Wed 08 May 2024 02:56:07 +0000 Files and hashes: 1: 7ErjVswCMimNPNn9IEE1Z9u3_CU.crl (hash: 64m+shVZVBAdlNEFu2mWWISVRNTycQpPN7fKPasd73I=) 2: 10854F3E516B11EC86C3243EC4F9AE02.roa (hash: NYcbhJMX2HUH5RpIZxAT0CFCtB2vsxf0S9nsYsAX39I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.crl rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 02:56:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 931 (0x3a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91830A5/serialNumber=EC4AE356CC0232298D3CD9FD20413567DBB7FC25 Validity Not Before: May 1 02:56:07 2024 GMT Not After : May 8 02:56:07 2024 GMT Subject: CN=6631af47-f22d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:66:97:b4:f5:47:10:96:c0:be:23:55:77:6c: 8c:f4:d3:a0:5d:f5:5e:d2:c9:3a:fe:a0:7d:65:de: f7:5b:d3:86:a7:fb:26:a3:21:f4:c9:05:f9:ca:18: 4b:2d:78:10:01:b0:c1:df:4f:85:89:2a:6d:41:c3: 69:7c:bd:b6:2d:62:1a:fd:17:f0:c0:06:14:2b:90: e3:c7:84:fc:a2:69:a8:f7:13:b6:92:2c:5e:ef:2b: bd:f3:a8:d9:b9:55:0e:49:36:63:ed:43:0d:c6:38: 3e:62:bf:3b:98:e7:a9:f5:20:87:d2:9a:6e:45:71: 87:27:ea:75:dd:29:14:55:b8:1a:85:a7:68:a5:e4: c1:84:fd:1d:22:5d:4b:0b:de:48:4c:f7:e6:f3:a4: fd:2d:a3:8b:be:9d:b0:86:e0:2b:1f:9c:74:f5:9a: c7:e9:b6:f5:42:75:20:e2:11:e4:8e:93:be:29:b0: b9:ec:73:17:63:72:bd:73:e2:cd:d0:88:ee:bc:db: 50:a2:f1:7a:b7:c3:f4:37:16:b5:24:09:28:d8:9f: 82:88:fe:9b:70:3e:41:fe:94:2c:48:9d:49:58:59: 99:1f:11:2f:ab:2a:4d:2a:21:7a:c2:f5:f0:c9:c0: 35:72:29:3f:9e:d5:ae:1c:2a:f8:fd:2f:d1:4b:94: 67:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:AA:1D:83:DD:F1:7A:52:62:09:D7:4A:1B:63:BE:74:7B:5C:51:D1 X509v3 Authority Key Identifier: keyid:EC:4A:E3:56:CC:02:32:29:8D:3C:D9:FD:20:41:35:67:DB:B7:FC:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:21:23:cd:28:18:b5:b3:c1:88:70:1d:18:d1:b2:44:cc:16: 97:94:b4:0d:54:d1:e9:d2:ad:07:89:24:e8:76:44:ee:c4:9c: 80:83:d1:ba:ed:8e:a9:1b:b7:bf:22:dc:01:69:f2:25:3f:45: 20:f1:c6:93:2e:43:3a:10:e3:99:e8:33:96:c3:89:f0:f6:7d: 6f:ca:56:83:cd:af:81:0e:e0:79:42:51:47:77:43:d8:c1:c1: 6c:bb:37:35:9f:64:ec:57:4d:3d:39:a0:11:87:0b:45:a0:ea: 3e:1d:5c:27:d8:47:f1:71:c2:69:13:24:7a:07:2f:53:8b:07: 52:7c:4e:bf:45:cf:48:11:44:6c:1b:53:a3:76:fd:18:51:87: 5a:60:02:6e:b0:ae:02:a6:d6:0d:7f:f1:a3:17:ee:60:76:1e: 32:37:d4:7e:78:2a:02:93:b7:40:e8:55:25:15:4f:08:07:fc: 43:26:1c:01:e0:74:30:d5:dc:2a:b8:a1:39:bf:71:c7:53:a4: ae:64:a7:5e:07:0b:9c:dc:c8:3e:7f:f0:98:9d:70:29:7e:35: 42:40:6d:4d:5e:92:bf:16:4c:64:99:19:82:76:e5:e7:1a:7a: 54:2d:f5:16:29:4b:7c:42:61:fd:e0:dd:71:30:59:c8:a1:05: 5c:97:41:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODMwQTUxMTAvBgNVBAUTKEVDNEFFMzU2Q0MwMjMyMjk4RDNDRDlGRDIwNDEzNTY3 REJCN0ZDMjUwHhcNMjQwNTAxMDI1NjA3WhcNMjQwNTA4MDI1NjA3WjAYMRYwFAYD VQQDEw02NjMxYWY0Ny1mMjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumaXtPVHEJbAviNVd2yM9NOgXfVe0sk6/qB9Zd73W9OGp/smoyH0yQX5yhhL LXgQAbDB30+FiSptQcNpfL22LWIa/RfwwAYUK5Djx4T8ommo9xO2kixe7yu986jZ uVUOSTZj7UMNxjg+Yr87mOep9SCH0ppuRXGHJ+p13SkUVbgahadopeTBhP0dIl1L C95ITPfm86T9LaOLvp2whuArH5x09ZrH6bb1QnUg4hHkjpO+KbC57HMXY3K9c+LN 0IjuvNtQovF6t8P0Nxa1JAko2J+CiP6bcD5B/pQsSJ1JWFmZHxEvqypNKiF6wvXw ycA1cik/ntWuHCr4/S/RS5RnMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMWqHYPd 8XpSYgnXShtjvnR7XFHRMB8GA1UdIwQYMBaAFOxK41bMAjIpjTzZ/SBBNWfbt/wl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzBBNS9EODI0MThGRTUx NjYxMUVDQUQ1NjU4NjdDNEY5QUUwMi83RXJqVnN3Q01pbU5QTm45SUVFMVo5dTNf Q1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFcmpWc3dDTWltTlBObjlJRUUxWjl1M19DVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzBBNS9EODI0MThGRTUxNjYxMUVDQUQ1NjU4NjdDNEY5QUUwMi83RXJqVnN3Q01p bU5QTm45SUVFMVo5dTNfQ1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWISPNKBi1s8GIcB0Y0bJEzBaXlLQNVNHp0q0HiSTodkTuxJyAg9G6 7Y6pG7e/ItwBafIlP0Ug8caTLkM6EOOZ6DOWw4nw9n1vylaDza+BDuB5QlFHd0PY wcFsuzc1n2TsV009OaARhwtFoOo+HVwn2EfxccJpEyR6By9TiwdSfE6/Rc9IEURs G1Ojdv0YUYdaYAJusK4CptYNf/GjF+5gdh4yN9R+eCoCk7dA6FUlFU8IB/xDJhwB 4HQw1dwquKE5v3HHU6SuZKdeBwuc3Mg+f/CYnXApfjVCQG1NXpK/FkxkmRmCduXn GnpULfUWKUt8QmH94N1xMFnIoQVcl0GR -----END CERTIFICATE-----Generated at Wed May 1 05:59:07 2024 by rpki-client on console-fra.rpki-client.org