$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft File: -E-7QV2aRUM2Lt9yZfU34s_5-CA.mft (raw, json) Hash identifier: WYFEXOg8EJNAMRRjLM0cCxEf+Shxb/QPmiIIMwx073M= Subject key identifier: 4A:AC:20:43:FA:B8:C2:CE:B9:10:DA:B9:FF:C8:9F:D4:C8:AF:31:BC Authority key identifier: F8:4F:BB:41:5D:9A:45:43:36:2E:DF:72:65:F5:37:E2:CF:F9:F8:20 Certificate issuer: /CN=A91BCDC6/serialNumber=F84FBB415D9A4543362EDF7265F537E2CFF9F820 Certificate serial: 66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-E-7QV2aRUM2Lt9yZfU34s_5-CA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft Manifest number: 64 Signing time: Fri 17 May 2024 07:43:49 +0000 Manifest this update: Fri 17 May 2024 07:43:49 +0000 Manifest next update: Fri 24 May 2024 07:43:49 +0000 Files and hashes: 1: -E-7QV2aRUM2Lt9yZfU34s_5-CA.crl (hash: jwl3NyIgZqbQx5yQ0sdDdkCu8W3AoHy9Axv3eEIhIwA=) 2: 254E9F807D4A11EEABBD1328C4F9AE02.roa (hash: FTkZFnPGHr58+WOSv1PVdzgNoyhtH6CZda9d2LLuglw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.crl rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-E-7QV2aRUM2Lt9yZfU34s_5-CA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:43:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCDC6/serialNumber=F84FBB415D9A4543362EDF7265F537E2CFF9F820 Validity Not Before: May 17 07:43:49 2024 GMT Not After : May 24 07:43:49 2024 GMT Subject: CN=66470ab5-2b76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5e:3e:a3:a3:92:bf:6d:96:8b:e8:2a:91:1d: a3:ac:d0:b9:7b:7b:eb:bd:c5:5d:63:f9:dd:b6:77: a0:cb:78:c7:24:d3:cd:18:72:7b:e6:c3:5c:8c:7a: b4:15:94:2f:b1:5c:ba:63:5f:29:5f:47:68:76:7c: 86:4a:1f:6b:72:3f:9a:dc:66:ca:d0:a3:c9:f6:9e: 49:51:11:4a:53:17:86:6a:79:5b:2f:89:0e:63:96: 68:ff:9d:58:46:21:0c:3a:7b:95:fd:84:a2:3d:51: cd:15:db:8f:56:ae:d9:75:25:7f:55:26:c1:7a:1a: 46:f7:cf:90:af:14:08:b7:de:9c:f1:57:ad:1a:a2: 83:75:6d:89:d7:3f:71:0d:fe:1f:47:a1:d6:a2:64: b8:fc:74:44:43:85:3a:4d:0b:9c:41:d0:4d:e9:13: 99:d0:22:ad:c3:38:63:9e:66:fe:6a:aa:76:ee:35: 1e:95:35:22:9e:1b:65:92:20:bf:04:00:6a:e2:b9: 78:c1:86:69:bf:6b:c3:b6:d7:99:a8:ab:8e:fe:4b: 73:2a:15:a9:d3:2b:50:14:61:45:3e:9a:0f:bb:4c: ca:f7:33:a6:06:f2:e6:5a:dd:0c:1e:57:bd:db:ac: 63:c1:17:a2:cc:8e:cd:96:30:2b:4f:f3:ab:05:65: 74:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:AC:20:43:FA:B8:C2:CE:B9:10:DA:B9:FF:C8:9F:D4:C8:AF:31:BC X509v3 Authority Key Identifier: keyid:F8:4F:BB:41:5D:9A:45:43:36:2E:DF:72:65:F5:37:E2:CF:F9:F8:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-E-7QV2aRUM2Lt9yZfU34s_5-CA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:3b:63:66:e3:38:dc:3f:11:d9:5a:72:d5:8d:55:a9:a7:12: 15:f5:f6:b9:4e:d4:26:71:54:1a:1b:f8:11:6a:87:e3:85:ee: 53:48:92:8b:91:e3:0f:61:f1:8a:80:51:64:c1:f2:49:63:3a: d8:5e:8c:36:9c:10:89:f0:27:03:86:32:3f:62:17:62:03:71: dc:2e:70:09:3a:1e:e3:bb:91:3e:c8:83:8f:f9:12:6a:76:e6: e8:e8:37:87:f9:5e:3c:22:96:ad:72:3f:48:f3:f7:89:db:0c: 2b:a2:69:07:44:10:11:a7:de:19:a7:c6:35:a9:85:bb:ff:36: a3:be:f9:23:24:9d:83:72:eb:1c:a9:6b:bf:8c:d0:62:30:50: fd:13:12:77:9b:36:b8:54:83:8b:52:a4:05:80:b2:be:64:5b: 40:4f:de:38:c4:91:91:fe:b5:e4:66:b9:27:64:38:00:1e:20: c5:2c:68:cd:2d:0e:bc:34:7d:0c:a3:c6:62:19:b4:95:f4:87: e9:97:82:2c:36:19:34:bc:d9:c4:f6:9e:da:ef:61:8d:55:e6: 7e:57:b9:2f:87:25:04:a4:54:b0:f0:48:69:1b:9a:b2:72:ce: 77:ba:a4:09:4a:65:4b:9b:66:59:94:fb:d3:a6:05:2a:bb:ad: 45:bd:ab:74 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC Q0RDNjExMC8GA1UEBRMoRjg0RkJCNDE1RDlBNDU0MzM2MkVERjcyNjVGNTM3RTJD RkY5RjgyMDAeFw0yNDA1MTcwNzQzNDlaFw0yNDA1MjQwNzQzNDlaMBgxFjAUBgNV BAMTDTY2NDcwYWI1LTJiNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfXj6jo5K/bZaL6CqRHaOs0Ll7e+u9xV1j+d22d6DLeMck080Ycnvmw1yMerQV lC+xXLpjXylfR2h2fIZKH2tyP5rcZsrQo8n2nklREUpTF4ZqeVsviQ5jlmj/nVhG IQw6e5X9hKI9Uc0V249Wrtl1JX9VJsF6Gkb3z5CvFAi33pzxV60aooN1bYnXP3EN /h9HodaiZLj8dERDhTpNC5xB0E3pE5nQIq3DOGOeZv5qqnbuNR6VNSKeG2WSIL8E AGriuXjBhmm/a8O215moq47+S3MqFanTK1AUYUU+mg+7TMr3M6YG8uZa3QweV73b rGPBF6LMjs2WMCtP86sFZXQjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSqwgQ/q4 ws65ENq5/8if1MivMbwwHwYDVR0jBBgwFoAU+E+7QV2aRUM2Lt9yZfU34s/5+CAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDREM2LzgwMTI4RUM4N0Q0 OTExRUVCOUM2REMyNkM0RjlBRTAyLy1FLTdRVjJhUlVNMkx0OXlaZlUzNHNfNS1D QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLUUtN1FWMmFSVU0yTHQ5eVpmVTM0c181LUNBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJD REM2LzgwMTI4RUM4N0Q0OTExRUVCOUM2REMyNkM0RjlBRTAyLy1FLTdRVjJhUlVN Mkx0OXlaZlUzNHNfNS1DQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACk7Y2bjONw/EdlactWNVamnEhX19rlO1CZxVBob+BFqh+OF7lNIkouR 4w9h8YqAUWTB8kljOthejDacEInwJwOGMj9iF2IDcdwucAk6HuO7kT7Ig4/5Emp2 5ujoN4f5Xjwilq1yP0jz94nbDCuiaQdEEBGn3hmnxjWphbv/NqO++SMknYNy6xyp a7+M0GIwUP0TEnebNrhUg4tSpAWAsr5kW0BP3jjEkZH+teRmuSdkOAAeIMUsaM0t Drw0fQyjxmIZtJX0h+mXgiw2GTS82cT2ntrvYY1V5n5XuS+HJQSkVLDwSGkbmrJy zne6pAlKZUubZlmU+9OmBSq7rUW9q3Q= -----END CERTIFICATE-----Generated at Fri May 17 08:52:53 2024 by rpki-client on console-ams.rpki-client.org