$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft File: V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft (raw, json) Hash identifier: lrQMw56Mnnmqa3wmDHtX/T0ryQqoHrBlnUm+Ry+5Y4A= Subject key identifier: 1F:8B:D7:71:D8:DA:B2:B6:DF:0A:4C:8D:07:10:BE:28:D5:D8:B3:7F Authority key identifier: 57:6C:54:47:C0:9B:59:71:07:B7:70:C1:01:C8:93:27:F1:05:BD:33 Certificate issuer: /CN=A91B7A3F/serialNumber=576C5447C09B597107B770C101C89327F105BD33 Certificate serial: 02F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2xUR8CbWXEHt3DBAciTJ_EFvTM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft Manifest number: 02EB Signing time: Wed 01 May 2024 03:35:18 +0000 Manifest this update: Wed 01 May 2024 03:35:18 +0000 Manifest next update: Wed 08 May 2024 03:35:17 +0000 Files and hashes: 1: V2xUR8CbWXEHt3DBAciTJ_EFvTM.crl (hash: y7Qn8oXSC7Sw9V4jG1jIjK3ipLBA5lFpf8IHNyBXJQ8=) 2: 821CAFEE923811EC955B7A3AC4F9AE02.roa (hash: HQbxIpWcedK5+bgfWJhbfwDuzgKpxhexN3JOo2oh/fw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.crl rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2xUR8CbWXEHt3DBAciTJ_EFvTM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:35:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 752 (0x2f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7A3F/serialNumber=576C5447C09B597107B770C101C89327F105BD33 Validity Not Before: May 1 03:35:18 2024 GMT Not After : May 8 03:35:17 2024 GMT Subject: CN=6631b876-7efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0e:f8:ff:37:d1:15:d6:95:5f:99:1a:57:a9: 74:d2:68:fb:ff:54:63:cc:51:95:e7:7d:d5:7f:5c: 6e:42:44:b0:17:8a:e4:21:3a:31:aa:bd:81:ab:9c: ec:dd:ca:fc:b3:cf:c1:0c:d1:0b:d2:01:94:b4:c0: a4:9e:55:2d:53:83:f3:aa:43:81:e4:ce:ca:c9:34: 92:e1:fc:a2:be:a1:b8:01:81:ee:06:ed:07:28:27: cb:f2:a4:fa:7b:42:a2:bd:47:2f:06:12:5c:08:a1: 66:d0:b2:b9:c2:9d:fc:3e:b8:03:20:1b:ed:df:89: 23:a8:29:4d:4a:cb:a4:af:05:f8:79:db:d8:ee:73: 45:e5:5a:84:8a:44:58:bc:6e:f1:31:a9:7f:3f:51: c7:39:68:58:a7:61:10:6d:9f:8d:f8:49:0a:f4:f6: 54:03:02:eb:1e:50:c9:3d:20:85:97:f9:2b:c1:34: 7a:b6:3b:88:1e:6b:08:3f:7f:98:d5:d4:9b:c3:6d: 22:35:27:e2:63:1f:07:8d:5d:1b:67:1e:24:03:c3: 1c:df:f6:60:77:de:d6:1c:e1:87:b0:d8:b6:8f:cd: 85:7d:c2:98:dc:0f:7a:f9:0f:12:d4:52:0c:7b:f7: c7:df:ae:ed:f0:08:41:b6:24:7a:89:3b:c8:33:2e: e9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:8B:D7:71:D8:DA:B2:B6:DF:0A:4C:8D:07:10:BE:28:D5:D8:B3:7F X509v3 Authority Key Identifier: keyid:57:6C:54:47:C0:9B:59:71:07:B7:70:C1:01:C8:93:27:F1:05:BD:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2xUR8CbWXEHt3DBAciTJ_EFvTM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:37:8e:4e:76:58:23:7e:05:af:36:e9:10:60:41:43:5b:f9: 4e:e0:b1:0e:2c:53:ff:dc:d5:55:ea:5e:b7:d7:0d:e0:93:15: 5a:98:e7:26:ea:2c:37:ca:77:79:e2:82:5e:1e:68:1d:11:11: 63:28:c4:5b:dc:85:e1:c7:f2:ed:be:00:b5:eb:f2:72:ac:44: 16:cc:8d:ba:5a:b2:84:31:53:ca:c6:62:e5:e5:a6:ed:c5:63: 3a:1f:39:05:5c:1d:a2:b0:9f:97:9c:3c:40:6d:e5:41:f3:ce: fb:3f:6d:2e:d5:31:5b:2d:69:b6:d6:fa:b3:91:6e:8c:75:8d: ff:af:2c:ed:35:fb:a5:15:37:d1:19:7c:dd:58:89:32:dc:fa: c8:f6:1b:80:ac:8b:68:eb:5a:d4:8e:04:56:15:4a:e3:b7:35: 10:a1:10:13:46:cc:6d:85:b1:ad:57:c7:24:16:ad:56:88:44: ef:e5:0d:b1:c8:00:9b:41:6c:c9:90:db:3d:eb:59:87:4d:75: 07:77:26:2f:48:44:37:08:8b:82:30:17:c3:29:eb:ee:60:76: b9:95:c0:ca:ac:7d:86:17:08:d3:a2:4e:19:d6:54:ef:0d:0b: 75:77:8a:91:b0:dd:6e:a2:c2:1c:d6:1f:95:ca:4a:ba:f7:11: 4b:7e:f7:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdBM0YxMTAvBgNVBAUTKDU3NkM1NDQ3QzA5QjU5NzEwN0I3NzBDMTAxQzg5MzI3 RjEwNUJEMzMwHhcNMjQwNTAxMDMzNTE4WhcNMjQwNTA4MDMzNTE3WjAYMRYwFAYD VQQDEw02NjMxYjg3Ni03ZWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqQ74/zfRFdaVX5kaV6l00mj7/1RjzFGV533Vf1xuQkSwF4rkIToxqr2Bq5zs 3cr8s8/BDNEL0gGUtMCknlUtU4PzqkOB5M7KyTSS4fyivqG4AYHuBu0HKCfL8qT6 e0KivUcvBhJcCKFm0LK5wp38PrgDIBvt34kjqClNSsukrwX4edvY7nNF5VqEikRY vG7xMal/P1HHOWhYp2EQbZ+N+EkK9PZUAwLrHlDJPSCFl/krwTR6tjuIHmsIP3+Y 1dSbw20iNSfiYx8HjV0bZx4kA8Mc3/Zgd97WHOGHsNi2j82FfcKY3A96+Q8S1FIM e/fH367t8AhBtiR6iTvIMy7pewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+L13HY 2rK23wpMjQcQvijV2LN/MB8GA1UdIwQYMBaAFFdsVEfAm1lxB7dwwQHIkyfxBb0z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0EzRi82NEMzMzk0ODky MzUxMUVDOTYwNDc1MTFDNEY5QUUwMi9WMnhVUjhDYldYRUh0M0RCQWNpVEpfRUZ2 VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1YyeFVSOENiV1hFSHQzREJBY2lUSl9FRnZUTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0EzRi82NEMzMzk0ODkyMzUxMUVDOTYwNDc1MTFDNEY5QUUwMi9WMnhVUjhDYldY RUh0M0RCQWNpVEpfRUZ2VE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQN45OdlgjfgWvNukQYEFDW/lO4LEOLFP/3NVV6l631w3gkxVamOcm 6iw3ynd54oJeHmgdERFjKMRb3IXhx/LtvgC16/JyrEQWzI26WrKEMVPKxmLl5abt xWM6HzkFXB2isJ+XnDxAbeVB8877P20u1TFbLWm21vqzkW6MdY3/ryztNfulFTfR GXzdWIky3PrI9huArIto61rUjgRWFUrjtzUQoRATRsxthbGtV8ckFq1WiETv5Q2x yACbQWzJkNs961mHTXUHdyYvSEQ3CIuCMBfDKevuYHa5lcDKrH2GFwjTok4Z1lTv DQt1d4qRsN1uosIc1h+Vykq69xFLfvcM -----END CERTIFICATE-----Generated at Wed May 1 05:59:10 2024 by rpki-client on console-fra.rpki-client.org