$ rpki-client -vvf rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft File: eHDyQLxFFuOanCWVjPl7GUvnZWc.mft (raw, json) Hash identifier: LN9fOJIVwXomcy6J0PxvnJJHxgHsOTy8D4T1pN2CvY8= Subject key identifier: 00:9D:E9:35:55:4E:E2:D3:52:12:42:E1:1D:68:79:CE:AD:0E:86:8B Authority key identifier: 78:70:F2:40:BC:45:16:E3:9A:9C:25:95:8C:F9:7B:19:4B:E7:65:67 Certificate issuer: /CN=A91A09BF/serialNumber=7870F240BC4516E39A9C25958CF97B194BE76567 Certificate serial: 0AC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft Manifest number: 0AB1 Signing time: Tue 30 Apr 2024 20:29:19 +0000 Manifest this update: Tue 30 Apr 2024 20:29:18 +0000 Manifest next update: Tue 07 May 2024 20:29:18 +0000 Files and hashes: 1: eHDyQLxFFuOanCWVjPl7GUvnZWc.crl (hash: +mejzub6BSi4f9dvjvA3p5QNcdwLGjvUoBMnKP2W+vI=) 2: EC4AB04AAA5511EABCEBDE19C4F9AE02.roa (hash: ZoZ0a7M+kraJmZ/mLJEnhPou8KIgfV84FyKgedDACQA=) 3: A38D9084E6F811EC87D3034DC4F9AE02.roa (hash: NrHlDNYRD80vHxFaZ0UXCzPNUZBqGvHUlriii3uWvk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.crl rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 20:29:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2755 (0xac3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A09BF/serialNumber=7870F240BC4516E39A9C25958CF97B194BE76567 Validity Not Before: Apr 30 20:29:18 2024 GMT Not After : May 7 20:29:18 2024 GMT Subject: CN=6631549f-18fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:36:26:9d:8b:a0:d9:53:97:a2:6a:6d:8b:51: 22:45:b1:98:8c:a3:7f:e2:f8:dc:1c:05:fe:3c:d2: 4a:ac:17:1d:66:73:d1:2e:c9:62:30:6a:db:36:c0: d1:ce:c7:d6:26:89:62:f5:df:e6:36:a4:a5:b7:a3: e3:49:7f:42:38:8e:9b:c7:92:a4:74:f2:ed:d9:c3: b4:0e:0f:ba:01:7a:8a:1a:a3:ea:3f:e2:14:24:36: 10:1e:21:2a:e2:0c:6e:f2:ee:f5:f4:06:2d:61:8c: 57:44:2d:a4:89:83:24:a2:94:1f:0e:06:03:b7:9d: 1d:93:48:0e:39:c7:f2:ac:e4:13:f0:11:38:06:0b: 7c:0a:02:6a:cb:96:24:f8:89:2a:c9:ea:3f:2f:ee: 0f:08:c3:2f:2e:a4:ef:df:6c:e0:cd:45:a9:f1:55: ad:78:31:08:93:16:ed:3b:5e:df:98:19:86:cb:92: 71:48:78:60:da:9d:f1:aa:ea:3d:73:11:16:4a:af: 47:7e:65:32:db:9e:70:0e:e9:48:08:55:0a:b6:90: be:9b:43:05:e6:d8:5b:9e:4b:8f:ef:da:b6:2f:1e: ba:fe:12:5c:da:96:54:3c:40:40:e5:c3:02:12:60: 77:02:f1:fe:62:03:02:f3:45:bc:ed:fc:49:2c:4f: 6c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:9D:E9:35:55:4E:E2:D3:52:12:42:E1:1D:68:79:CE:AD:0E:86:8B X509v3 Authority Key Identifier: keyid:78:70:F2:40:BC:45:16:E3:9A:9C:25:95:8C:F9:7B:19:4B:E7:65:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:41:43:60:c3:27:42:e6:78:b6:31:bd:99:3f:f4:de:43:33: 10:b2:4c:9f:66:97:07:1e:ac:62:90:a6:70:c0:10:9f:dc:2f: b3:41:21:18:14:fe:77:ef:de:78:b7:a3:fb:46:c4:f7:38:58: 20:9a:cb:09:0a:20:de:32:5c:f3:10:9c:7e:f7:2d:da:d0:7b: 43:af:85:4e:b8:ec:16:86:e7:75:b7:1b:f4:58:22:db:29:8b: 3d:8d:7c:c7:2c:df:f5:9b:53:f8:f8:d6:f2:ec:10:c4:18:b4: ea:38:af:bb:3f:21:1b:6d:f9:f6:7a:fc:9d:0c:65:0d:cc:94: b4:ff:79:d6:7b:c0:fe:7b:5b:f2:00:2d:e5:b4:c6:bf:92:9a: ed:f6:7d:9d:08:46:25:a8:8d:c1:ae:ce:a0:c5:4f:ff:61:29: 0d:32:ad:80:bf:73:94:fc:2d:c4:af:d8:b9:5d:bd:be:2c:86: aa:ec:c4:6b:b3:96:27:5b:6d:41:ec:25:5f:3f:33:d7:10:97: 70:e1:78:cf:de:65:0c:d9:b6:53:0a:d4:45:22:ac:d1:95:22: 20:2a:b0:a4:47:53:07:ec:c8:8a:9d:20:fd:37:3d:20:7b:b4: 7b:78:b1:d6:0e:41:db:0b:02:ba:1e:b4:85:f4:43:7f:c1:e1: e6:61:72:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA5QkYxMTAvBgNVBAUTKDc4NzBGMjQwQkM0NTE2RTM5QTlDMjU5NThDRjk3QjE5 NEJFNzY1NjcwHhcNMjQwNDMwMjAyOTE4WhcNMjQwNTA3MjAyOTE4WjAYMRYwFAYD VQQDEw02NjMxNTQ5Zi0xOGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7TYmnYug2VOXompti1EiRbGYjKN/4vjcHAX+PNJKrBcdZnPRLsliMGrbNsDR zsfWJoli9d/mNqSlt6PjSX9COI6bx5KkdPLt2cO0Dg+6AXqKGqPqP+IUJDYQHiEq 4gxu8u719AYtYYxXRC2kiYMkopQfDgYDt50dk0gOOcfyrOQT8BE4Bgt8CgJqy5Yk +Ikqyeo/L+4PCMMvLqTv32zgzUWp8VWteDEIkxbtO17fmBmGy5JxSHhg2p3xquo9 cxEWSq9HfmUy255wDulICFUKtpC+m0MF5thbnkuP79q2Lx66/hJc2pZUPEBA5cMC EmB3AvH+YgMC80W87fxJLE9sgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFACd6TVV TuLTUhJC4R1oec6tDoaLMB8GA1UdIwQYMBaAFHhw8kC8RRbjmpwllYz5exlL52Vn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDlCRi9EMTNEQTFENDJE RkMxMUVBQkMxQjZCODJDNEY5QUUwMi9lSER5UUx4RkZ1T2FuQ1dWalBsN0dVdm5a V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VIRHlRTHhGRnVPYW5DV1ZqUGw3R1V2blpXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDlCRi9EMTNEQTFENDJERkMxMUVBQkMxQjZCODJDNEY5QUUwMi9lSER5UUx4RkZ1 T2FuQ1dWalBsN0dVdm5aV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhQUNgwydC5ni2Mb2ZP/TeQzMQskyfZpcHHqxikKZwwBCf3C+zQSEY FP537954t6P7RsT3OFggmssJCiDeMlzzEJx+9y3a0HtDr4VOuOwWhud1txv0WCLb KYs9jXzHLN/1m1P4+Nby7BDEGLTqOK+7PyEbbfn2evydDGUNzJS0/3nWe8D+e1vy AC3ltMa/kprt9n2dCEYlqI3Brs6gxU//YSkNMq2Av3OU/C3Er9i5Xb2+LIaq7MRr s5YnW21B7CVfPzPXEJdw4XjP3mUM2bZTCtRFIqzRlSIgKrCkR1MH7MiKnSD9Nz0g e7R7eLHWDkHbCwK6HrSF9EN/weHmYXJd -----END CERTIFICATE-----Generated at Tue Apr 30 21:59:03 2024 by rpki-client on console-ams.rpki-client.org