$ rpki-client -vvf rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft File: 7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft (raw, json) Hash identifier: zbexbYBL+kr5ZRXmYKsF8zlxwKSqufAVMx7k9CXU6aA= Subject key identifier: DC:1D:F6:AB:64:21:A7:F3:88:68:A6:B1:C0:0B:2D:A3:51:89:2F:B6 Authority key identifier: EC:58:B4:37:8F:CB:FF:4C:B1:24:1F:82:F3:BC:C0:E8:72:E4:B3:96 Certificate issuer: /CN=A91B04E3/serialNumber=EC58B4378FCBFF4CB1241F82F3BCC0E872E4B396 Certificate serial: 09BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft Manifest number: 09B9 Signing time: Fri 26 Apr 2024 20:48:49 +0000 Manifest this update: Fri 26 Apr 2024 20:48:49 +0000 Manifest next update: Fri 03 May 2024 20:48:49 +0000 Files and hashes: 1: 7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl (hash: 6CyPcG6u4U6qJO/zzlx/PuUprx4E+7xL8P/Tz6VxCck=) 2: A7D265605BB411EAB5B9A73BC4F9AE02.roa (hash: 1yNV4IlFTDqCdXIN8GAYKZjI05HGr3RV6cvcTz8go7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 20:48:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2494 (0x9be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B04E3/serialNumber=EC58B4378FCBFF4CB1241F82F3BCC0E872E4B396 Validity Not Before: Apr 26 20:48:49 2024 GMT Not After : May 3 20:48:49 2024 GMT Subject: CN=662c1331-70a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:61:3e:fa:e7:b5:75:fc:87:f9:09:3a:a5:66: 53:ed:a5:b8:19:e5:8a:7d:29:ba:21:bc:4a:c7:26: ef:82:65:51:84:d7:1f:43:1c:b4:07:99:18:66:99: a4:37:c3:6e:8f:4f:b4:4f:9b:f9:bc:6e:2d:e4:ba: 4d:6f:4e:60:5f:ab:e6:ae:78:99:55:e8:03:3f:fd: 48:c1:d6:f7:89:70:65:7c:f0:27:88:d3:f5:d0:0b: cc:8d:27:f1:71:4d:05:95:80:c1:36:47:2e:5c:3d: 2f:10:42:ea:93:c8:b6:73:38:0c:d4:5c:b0:29:b8: 6e:6b:4c:02:2d:c7:98:64:79:e3:1e:02:5c:d4:40: 3d:d4:c0:51:86:f0:1c:88:d2:af:2d:39:f3:a8:5f: 04:ea:58:6f:ab:48:2e:70:79:30:6f:54:df:4c:23: 4d:fd:a0:f1:4d:78:99:f5:04:39:90:2d:ce:0b:01: b5:97:c9:46:a5:c9:ef:89:94:02:5c:c9:b9:9e:69: 8b:37:63:73:b2:29:7d:f4:55:7f:e9:94:95:57:fe: 6b:f2:8b:7a:58:32:21:e4:b4:8b:9c:8e:58:ad:12: 03:b6:e2:8a:69:cb:b4:2a:00:03:c1:4e:74:4e:a0: 61:2f:00:a8:a9:09:da:0e:d9:ad:6e:ac:38:38:e7: a4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:1D:F6:AB:64:21:A7:F3:88:68:A6:B1:C0:0B:2D:A3:51:89:2F:B6 X509v3 Authority Key Identifier: keyid:EC:58:B4:37:8F:CB:FF:4C:B1:24:1F:82:F3:BC:C0:E8:72:E4:B3:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:92:4f:bb:79:03:34:86:98:81:ba:29:a5:4c:83:64:b5:9a: 43:1a:a9:4a:fb:3c:4c:00:80:03:65:10:a4:36:18:bf:c0:10: 1e:5b:25:f3:b0:3a:8b:6d:f0:8a:e1:0c:5b:b9:ef:65:a0:20: ac:05:af:e5:9a:82:3b:d1:c9:49:ea:0c:b2:3c:dd:4d:dd:8e: 6c:71:b4:69:40:f9:d3:22:b2:5f:8a:d4:a5:73:26:6a:a0:d7: 82:33:0f:79:70:32:7d:54:07:f6:f7:64:02:17:71:ac:0d:7a: 23:2b:39:c7:aa:35:a6:1d:19:4c:63:38:9e:04:3a:a2:4f:28: 69:dc:d4:d1:8c:e4:cc:49:22:9f:b2:6d:9e:98:65:e8:91:c2: 37:4f:cb:2d:e5:ef:4d:25:3d:d8:f6:02:76:d7:8c:ba:93:f9: 6a:a8:b8:f7:e4:ea:0e:e8:de:07:4e:79:05:e3:f9:d0:a4:1b: fd:fa:5c:66:93:c6:2c:14:74:a2:02:b5:57:3f:5e:5f:0f:1c: 45:d3:39:68:24:f3:e3:12:c3:e2:39:85:a7:b8:c2:8e:84:f8: 0a:99:60:84:19:d9:22:46:97:58:f0:c0:c2:5a:e5:33:da:bf: 75:16:4a:7e:f1:3e:24:c1:71:9f:c1:85:4f:d1:3b:1d:3b:09: db:1c:11:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA0RTMxMTAvBgNVBAUTKEVDNThCNDM3OEZDQkZGNENCMTI0MUY4MkYzQkNDMEU4 NzJFNEIzOTYwHhcNMjQwNDI2MjA0ODQ5WhcNMjQwNTAzMjA0ODQ5WjAYMRYwFAYD VQQDEw02NjJjMTMzMS03MGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1GE++ue1dfyH+Qk6pWZT7aW4GeWKfSm6IbxKxybvgmVRhNcfQxy0B5kYZpmk N8Nuj0+0T5v5vG4t5LpNb05gX6vmrniZVegDP/1Iwdb3iXBlfPAniNP10AvMjSfx cU0FlYDBNkcuXD0vEELqk8i2czgM1FywKbhua0wCLceYZHnjHgJc1EA91MBRhvAc iNKvLTnzqF8E6lhvq0gucHkwb1TfTCNN/aDxTXiZ9QQ5kC3OCwG1l8lGpcnviZQC XMm5nmmLN2Nzsil99FV/6ZSVV/5r8ot6WDIh5LSLnI5YrRIDtuKKacu0KgADwU50 TqBhLwCoqQnaDtmtbqw4OOekjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNwd9qtk IafziGimscALLaNRiS+2MB8GA1UdIwQYMBaAFOxYtDePy/9MsSQfgvO8wOhy5LOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDRFMy8xNDgzQkQzNjVC QjQxMUVBODhENTY3M0JDNEY5QUUwMi83RmkwTjRfTF8weXhKQi1DODd6QTZITGtz NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGaTBONF9MXzB5eEpCLUM4N3pBNkhMa3M1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDRFMy8xNDgzQkQzNjVCQjQxMUVBODhENTY3M0JDNEY5QUUwMi83RmkwTjRfTF8w eXhKQi1DODd6QTZITGtzNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBokk+7eQM0hpiBuimlTINktZpDGqlK+zxMAIADZRCkNhi/wBAeWyXz sDqLbfCK4Qxbue9loCCsBa/lmoI70clJ6gyyPN1N3Y5scbRpQPnTIrJfitSlcyZq oNeCMw95cDJ9VAf292QCF3GsDXojKznHqjWmHRlMYzieBDqiTyhp3NTRjOTMSSKf sm2emGXokcI3T8st5e9NJT3Y9gJ214y6k/lqqLj35OoO6N4HTnkF4/nQpBv9+lxm k8YsFHSiArVXP15fDxxF0zloJPPjEsPiOYWnuMKOhPgKmWCEGdkiRpdY8MDCWuUz 2r91Fkp+8T4kwXGfwYVP0TsdOwnbHBHp -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:15 2024 by rpki-client on console-ams.rpki-client.org