$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft File: ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft (raw, json) Hash identifier: TGKbDYL5jhKKFzlId+LkmZPkXFvok/54udLgwtKVccU= Subject key identifier: 30:81:E1:78:24:D7:A8:31:45:74:83:E4:D9:55:F5:ED:B2:85:58:68 Authority key identifier: 7A:9D:A4:61:EB:EB:D1:53:16:42:07:39:C8:9E:C4:CC:EE:99:C1:60 Certificate issuer: /CN=A91A5DC1/serialNumber=7A9DA461EBEBD15316420739C89EC4CCEE99C160 Certificate serial: 063E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft Manifest number: 063E Signing time: Sat 04 May 2024 22:19:31 +0000 Manifest this update: Sat 04 May 2024 22:19:31 +0000 Manifest next update: Sat 11 May 2024 22:19:31 +0000 Files and hashes: 1: ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl (hash: kfX0OMmrHOKMBs874fSH3+ZFC4UJex9vvdFjlJmPW8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1598 (0x63e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5DC1/serialNumber=7A9DA461EBEBD15316420739C89EC4CCEE99C160 Validity Not Before: May 4 22:19:31 2024 GMT Not After : May 11 22:19:31 2024 GMT Subject: CN=6636b473-a541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:dd:dc:de:89:4b:6f:c9:20:01:ca:2c:25:9d: 7e:4b:76:45:f9:33:4c:30:a6:29:6c:b6:f3:d4:9c: f5:dc:a5:97:ad:e2:8b:d1:ed:a1:cf:c4:8c:32:86: 72:59:fd:f8:1b:f7:15:73:e4:b8:af:86:a7:a0:d5: e8:cf:b5:25:62:9f:98:97:92:2a:36:0c:c7:ed:f0: f3:99:d2:e9:87:a6:b6:8e:1a:30:07:05:d8:e5:c0: 06:13:a5:ff:17:46:22:c4:d7:12:bc:85:ac:ee:c8: 58:38:25:9b:06:53:c5:5a:07:e8:c7:a5:39:b3:07: 54:26:09:07:90:02:44:5b:cf:80:be:54:a7:8a:d8: d4:69:08:88:65:90:15:4b:dc:d8:38:0a:9a:24:80: 8d:12:c0:f0:1d:65:2c:e2:06:4a:15:78:ec:93:51: 39:d3:bb:ae:16:3e:66:36:e5:ac:4c:d9:bf:f3:b3: 28:ef:51:c4:5b:08:84:88:6e:07:3c:65:e0:10:5d: 7f:38:98:28:62:1d:8e:b7:96:7d:99:3f:0c:bd:07: a5:df:62:89:af:5b:e0:9f:ff:fc:2e:c8:48:9b:bc: 6e:f3:ec:f8:74:5d:08:21:5f:38:99:02:ef:d5:1e: e0:65:00:9b:97:69:a9:1c:5b:b1:a7:2e:96:7f:34: 85:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:81:E1:78:24:D7:A8:31:45:74:83:E4:D9:55:F5:ED:B2:85:58:68 X509v3 Authority Key Identifier: keyid:7A:9D:A4:61:EB:EB:D1:53:16:42:07:39:C8:9E:C4:CC:EE:99:C1:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:7e:7d:b5:a0:37:c8:ee:fc:61:72:5b:62:7d:8e:34:67:af: a3:24:f2:cf:68:75:ab:c9:03:ee:22:67:7d:05:64:6b:19:11: 1b:57:18:e9:ae:60:72:fb:94:0f:98:8f:09:68:21:17:1c:9b: bb:6e:12:68:67:5c:e6:ee:4b:2b:fa:a0:d0:d5:0f:8d:16:d5: 61:64:66:df:d1:df:eb:9e:dd:29:3c:5e:c3:6b:39:62:4a:20: dd:54:51:99:d6:90:a0:92:8e:0d:58:13:fc:fc:85:c2:7f:f6: 38:2b:61:0c:88:a7:af:65:09:5c:68:d0:bf:ec:56:43:53:4a: 2d:72:5d:fa:22:4e:af:5a:68:f9:3d:fc:f3:8f:9a:00:1e:84: b6:92:7a:86:d0:c0:4b:5d:29:08:c0:1e:3d:c3:1a:36:71:38: e8:7a:70:63:4e:6b:c2:1b:45:3f:68:87:cf:07:e4:a8:6c:78: 0e:69:0c:c4:c5:d0:94:40:76:78:14:c5:f9:73:6b:b7:ee:da: f7:61:7b:b3:23:fc:99:62:d2:2c:3b:b9:49:c9:12:de:dd:9c: 94:50:48:cc:98:94:1f:16:a4:2f:85:05:56:e3:08:3a:ed:91: 37:f0:c3:10:0e:bc:12:c4:5b:67:0b:03:b4:20:89:08:00:11: eb:4c:9c:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVEQzExMTAvBgNVBAUTKDdBOURBNDYxRUJFQkQxNTMxNjQyMDczOUM4OUVDNEND RUU5OUMxNjAwHhcNMjQwNTA0MjIxOTMxWhcNMjQwNTExMjIxOTMxWjAYMRYwFAYD VQQDEw02NjM2YjQ3My1hNTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyN3c3olLb8kgAcosJZ1+S3ZF+TNMMKYpbLbz1Jz13KWXreKL0e2hz8SMMoZy Wf34G/cVc+S4r4anoNXoz7UlYp+Yl5IqNgzH7fDzmdLph6a2jhowBwXY5cAGE6X/ F0YixNcSvIWs7shYOCWbBlPFWgfox6U5swdUJgkHkAJEW8+AvlSnitjUaQiIZZAV S9zYOAqaJICNEsDwHWUs4gZKFXjsk1E507uuFj5mNuWsTNm/87Mo71HEWwiEiG4H PGXgEF1/OJgoYh2Ot5Z9mT8MvQel32KJr1vgn//8LshIm7xu8+z4dF0IIV84mQLv 1R7gZQCbl2mpHFuxpy6WfzSFcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDCB4Xgk 16gxRXSD5NlV9e2yhVhoMB8GA1UdIwQYMBaAFHqdpGHr69FTFkIHOciexMzumcFg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNURDMS80MTNBODkyNDQ1 ODExMUVCOEUwRTc0MkNDNEY5QUUwMi9lcDJrWWV2cjBWTVdRZ2M1eUo3RXpPNlp3 V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwMmtZZXZyMFZNV1FnYzV5SjdFek82WndXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NURDMS80MTNBODkyNDQ1ODExMUVCOEUwRTc0MkNDNEY5QUUwMi9lcDJrWWV2cjBW TVdRZ2M1eUo3RXpPNlp3V0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0fn21oDfI7vxhcltifY40Z6+jJPLPaHWryQPuImd9BWRrGREbVxjp rmBy+5QPmI8JaCEXHJu7bhJoZ1zm7ksr+qDQ1Q+NFtVhZGbf0d/rnt0pPF7Dazli SiDdVFGZ1pCgko4NWBP8/IXCf/Y4K2EMiKevZQlcaNC/7FZDU0otcl36Ik6vWmj5 Pfzzj5oAHoS2knqG0MBLXSkIwB49wxo2cTjoenBjTmvCG0U/aIfPB+SobHgOaQzE xdCUQHZ4FMX5c2u37tr3YXuzI/yZYtIsO7lJyRLe3ZyUUEjMmJQfFqQvhQVW4wg6 7ZE38MMQDrwSxFtnCwO0IIkIABHrTJxe -----END CERTIFICATE-----Generated at Sun May 5 00:12:27 2024 by rpki-client on console-fra.rpki-client.org