$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft File: E1XVGH0uY9fm1JB42OcfoFHEVuM.mft (raw, json) Hash identifier: H3dMlLzyzTIy5PTCLCVFtT0yzjMS96L2Sv5QfOLXfsY= Subject key identifier: DF:9F:E2:C1:DF:C8:08:83:7F:CE:E7:26:82:39:51:E6:87:A3:BA:4D Authority key identifier: 13:55:D5:18:7D:2E:63:D7:E6:D4:90:78:D8:E7:1F:A0:51:C4:56:E3 Certificate issuer: /CN=A91B3CB5/serialNumber=1355D5187D2E63D7E6D49078D8E71FA051C456E3 Certificate serial: 0B98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft Manifest number: 0B88 Signing time: Sat 04 May 2024 19:34:16 +0000 Manifest this update: Sat 04 May 2024 19:34:16 +0000 Manifest next update: Sat 11 May 2024 19:34:16 +0000 Files and hashes: 1: E1XVGH0uY9fm1JB42OcfoFHEVuM.crl (hash: aXb0JMMQlpXYzbWoG4x31f35tT72sIHCpAMapCHEgos=) 2: E26173CE050611EAA0470B49C4F9AE02.roa (hash: 1JHi7jZ5qpgOg15JIGHRNFUwT1UJIp532N130K7N+zc=) 3: 257E3B94E37B11EA84A20810C4F9AE02.roa (hash: G1DkCuz7ZiVzBDV+JjzF5acJ6ODawTKt59lFfaFc5go=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.crl rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:34:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2968 (0xb98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3CB5/serialNumber=1355D5187D2E63D7E6D49078D8E71FA051C456E3 Validity Not Before: May 4 19:34:16 2024 GMT Not After : May 11 19:34:16 2024 GMT Subject: CN=66368db8-77a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:50:78:af:fc:e4:ca:a0:53:70:c7:8c:cf:96: b1:fd:71:2c:11:96:e0:18:b0:75:f4:3c:e3:9e:09: 12:f7:a8:61:71:de:87:8d:51:17:91:19:71:2c:ec: 4b:8a:22:78:ca:00:d0:15:9f:3c:33:b7:02:7e:f3: b1:44:1f:1f:e2:91:39:3e:3c:e9:d4:a1:ff:f9:5b: a5:82:17:e5:ce:74:7f:87:70:cc:06:3d:90:f1:a3: ca:65:62:76:09:d8:26:a9:7a:bd:35:35:00:2d:bb: f2:6c:8b:23:de:c8:5e:fb:7d:fe:df:db:9a:22:d4: 19:e6:7c:ee:2e:1d:d1:fc:c9:7d:8a:aa:bf:8f:a7: 26:b6:45:ea:03:65:e1:a0:ba:09:e5:a7:28:65:a1: 91:5d:42:0a:31:f4:30:8c:5f:d4:89:35:23:1a:a8: 60:8e:07:bd:bc:e2:ba:1e:22:98:4d:97:d2:55:0a: c7:8f:51:f2:7b:af:7d:45:0d:bb:2d:1b:87:52:d7: b5:14:81:d4:15:6e:06:0c:9d:e0:82:fa:c2:f6:21: 4f:1a:14:da:65:e5:53:0a:71:f4:13:13:2b:85:5e: 9d:17:73:c2:4c:99:38:4a:99:81:4c:c3:59:ba:e6: b7:5e:9a:2d:0d:f8:13:08:20:10:40:43:27:ee:ff: c4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:9F:E2:C1:DF:C8:08:83:7F:CE:E7:26:82:39:51:E6:87:A3:BA:4D X509v3 Authority Key Identifier: keyid:13:55:D5:18:7D:2E:63:D7:E6:D4:90:78:D8:E7:1F:A0:51:C4:56:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ac:e5:b0:4b:f8:a3:19:a4:dc:5b:2d:52:42:b2:9c:9d:0b: 9a:3c:1b:7c:de:a7:76:a2:e9:84:0f:db:c2:6a:0d:41:95:5a: 53:64:f0:50:1c:14:ad:fd:66:9c:15:49:e1:22:c2:05:bb:1f: c2:c7:88:03:b7:98:28:ce:bc:3f:20:d8:e6:04:d7:47:5b:fd: 70:00:65:ae:ac:20:25:b8:3c:73:49:dc:07:ca:2d:1e:d0:f6: d7:c3:a7:33:97:91:ca:28:a5:8a:a4:f5:cf:02:2d:3a:3f:14: eb:f1:da:1a:73:87:bf:ac:f8:41:6c:64:98:e0:81:2d:ef:c2: d2:59:3a:0b:6b:29:dd:9e:e6:58:af:d0:0f:ec:25:2d:bb:e2: 2e:ae:4b:26:f1:a3:2d:1d:54:89:0a:5b:47:ce:a6:1a:df:46: b8:82:29:74:55:6a:10:a8:ad:ac:11:91:3f:be:14:07:c8:b1: eb:cd:55:b9:0a:cb:0b:d5:62:93:aa:5c:6d:9d:f4:0a:1d:a8: 14:85:44:97:0a:34:97:7c:b0:58:62:4d:a1:92:00:53:2c:01: 1f:01:b3:d2:4b:9b:f7:15:8c:78:da:f8:1b:7b:bd:c5:a3:d2: 33:87:54:ec:49:f7:53:82:48:ef:2f:07:d4:6e:9d:a0:0d:78: 88:54:e4:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNDQjUxMTAvBgNVBAUTKDEzNTVENTE4N0QyRTYzRDdFNkQ0OTA3OEQ4RTcxRkEw NTFDNDU2RTMwHhcNMjQwNTA0MTkzNDE2WhcNMjQwNTExMTkzNDE2WjAYMRYwFAYD VQQDEw02NjM2OGRiOC03N2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0FB4r/zkyqBTcMeMz5ax/XEsEZbgGLB19DzjngkS96hhcd6HjVEXkRlxLOxL iiJ4ygDQFZ88M7cCfvOxRB8f4pE5Pjzp1KH/+VulghflznR/h3DMBj2Q8aPKZWJ2 CdgmqXq9NTUALbvybIsj3she+33+39uaItQZ5nzuLh3R/Ml9iqq/j6cmtkXqA2Xh oLoJ5acoZaGRXUIKMfQwjF/UiTUjGqhgjge9vOK6HiKYTZfSVQrHj1Hye699RQ27 LRuHUte1FIHUFW4GDJ3ggvrC9iFPGhTaZeVTCnH0ExMrhV6dF3PCTJk4SpmBTMNZ uua3XpotDfgTCCAQQEMn7v/E8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN+f4sHf yAiDf87nJoI5UeaHo7pNMB8GA1UdIwQYMBaAFBNV1Rh9LmPX5tSQeNjnH6BRxFbj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0NCNS82MzI2NTBGODA1 MDUxMUVBQUE5MzRDNDNDNEY5QUUwMi9FMVhWR0gwdVk5Zm0xSkI0Mk9jZm9GSEVW dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UxWFZHSDB1WTlmbTFKQjQyT2Nmb0ZIRVZ1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0NCNS82MzI2NTBGODA1MDUxMUVBQUE5MzRDNDNDNEY5QUUwMi9FMVhWR0gwdVk5 Zm0xSkI0Mk9jZm9GSEVWdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAarOWwS/ijGaTcWy1SQrKcnQuaPBt83qd2oumED9vCag1BlVpTZPBQ HBSt/WacFUnhIsIFux/Cx4gDt5gozrw/INjmBNdHW/1wAGWurCAluDxzSdwHyi0e 0PbXw6czl5HKKKWKpPXPAi06PxTr8doac4e/rPhBbGSY4IEt78LSWToLayndnuZY r9AP7CUtu+Iurksm8aMtHVSJCltHzqYa30a4gil0VWoQqK2sEZE/vhQHyLHrzVW5 CssL1WKTqlxtnfQKHagUhUSXCjSXfLBYYk2hkgBTLAEfAbPSS5v3FYx42vgbe73F o9Izh1TsSfdTgkjvLwfUbp2gDXiIVORE -----END CERTIFICATE-----Generated at Sat May 4 20:37:15 2024 by rpki-client on console-fra.rpki-client.org