$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft File: exEvnr7DQt_Kx3TrXCaBElxl4M8.mft (raw, json) Hash identifier: UdWymVyon2tCwRJqlNTKdOr2nBWWFIx1mQr41bLoAY0= Subject key identifier: 51:26:60:2C:A8:09:EA:91:2C:A2:3B:FD:51:85:26:29:68:C4:1E:3B Authority key identifier: 7B:11:2F:9E:BE:C3:42:DF:CA:C7:74:EB:5C:26:81:12:5C:65:E0:CF Certificate issuer: /CN=A91BFCB1/serialNumber=7B112F9EBEC342DFCAC774EB5C2681125C65E0CF Certificate serial: 0EAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft Manifest number: 0EA4 Signing time: Sat 04 May 2024 18:29:59 +0000 Manifest this update: Sat 04 May 2024 18:29:58 +0000 Manifest next update: Sat 11 May 2024 18:29:58 +0000 Files and hashes: 1: exEvnr7DQt_Kx3TrXCaBElxl4M8.crl (hash: uJ9KN5JmdA2EIELrADk5wj4tFnpkGJg7pT4YrEhzBOQ=) 2: FD58613E7B7B11E99CCAAF73C4F9AE02.roa (hash: 1zH3grg0ceGpDk/dZf7X9+Paneb19S8sTUxBY3dwpvE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.crl rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:29:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3754 (0xeaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFCB1/serialNumber=7B112F9EBEC342DFCAC774EB5C2681125C65E0CF Validity Not Before: May 4 18:29:58 2024 GMT Not After : May 11 18:29:58 2024 GMT Subject: CN=66367ea7-c44f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:90:10:a3:8e:e9:84:7b:f7:16:d9:59:c7:6d: 8f:f9:c3:65:17:d5:a9:37:db:a8:81:d6:d6:31:96: fb:d7:4d:3c:2c:27:f6:84:ee:15:99:46:a9:47:20: 31:3e:bf:5e:d1:40:66:8b:9f:6e:f3:ca:37:08:e4: b9:0e:aa:b8:82:30:41:79:5b:b9:d3:25:9e:6b:68: 4c:48:5f:c6:35:ad:3e:12:0d:9a:56:8a:e0:e9:70: 1f:80:66:d0:fb:d4:e5:d7:95:cf:fc:1e:e5:1e:03: ce:f8:5c:67:02:39:b7:24:bd:41:7b:c5:54:fc:2f: d0:cc:1c:c7:a1:d2:e2:da:9b:b6:16:76:ac:76:a0: b9:38:92:f3:af:79:54:fd:77:6d:53:a7:1c:46:e1: 13:92:2d:74:2c:7d:eb:b3:75:77:4a:d7:75:e4:74: 0d:1e:ea:c4:66:9a:a3:1d:e3:fe:20:24:f0:09:64: e0:a0:28:79:3b:da:a9:f3:c5:bb:60:1b:e4:70:3b: 67:06:2e:bc:eb:b7:59:fe:77:83:f3:c3:49:2f:c7: f6:25:b1:95:6e:af:80:ef:36:af:72:34:89:53:92: 4f:7e:f1:ef:8d:99:e7:f3:55:20:ae:c2:42:7f:64: c3:ad:2b:ae:f4:8e:68:38:ec:c6:2d:8a:b5:4c:90: 43:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:26:60:2C:A8:09:EA:91:2C:A2:3B:FD:51:85:26:29:68:C4:1E:3B X509v3 Authority Key Identifier: keyid:7B:11:2F:9E:BE:C3:42:DF:CA:C7:74:EB:5C:26:81:12:5C:65:E0:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:23:fb:d1:d0:8e:5f:31:ed:5c:43:89:28:3d:40:26:f3:bf: 12:ff:06:36:ff:8f:ba:85:fe:ac:e4:42:c0:25:9d:c2:d6:bb: b3:fa:a6:a3:65:0a:f8:86:6b:ac:5a:e6:26:96:86:bf:1d:e8: 6f:1f:fd:1a:c4:c7:93:a5:ed:0a:3f:86:7e:36:d8:37:22:de: f3:19:37:9b:ad:80:bd:80:07:4d:7a:5b:9b:c6:8a:94:ce:99: 9f:fc:a9:bb:78:e5:68:97:fe:4b:58:e9:8f:65:68:0d:2e:00: 0c:1f:1a:75:c8:e4:48:80:c1:f8:2a:52:e4:70:7e:ef:0b:f2: 99:66:2a:c3:c9:f1:38:61:6b:1f:7c:7b:a0:58:1f:96:51:97: 16:1b:d0:67:bc:24:cd:4f:d9:6b:b6:31:59:9f:d1:4a:7b:f0: 59:44:da:e7:4e:f8:5b:e1:d3:ad:13:90:cd:7e:52:32:04:6a: f8:bd:93:e2:70:71:8f:c6:2a:13:f5:f5:62:35:f1:d2:d2:32: e7:e4:5a:3c:e3:0f:34:97:05:a3:b2:df:f5:a6:81:53:42:0e: ea:07:46:cd:f7:df:9c:03:e7:9b:31:25:b2:62:83:70:41:08: ff:ec:16:9b:bc:a8:97:5e:9f:e9:27:61:50:fd:ed:6b:c0:3c: 4a:ca:a2:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZDQjExMTAvBgNVBAUTKDdCMTEyRjlFQkVDMzQyREZDQUM3NzRFQjVDMjY4MTEy NUM2NUUwQ0YwHhcNMjQwNTA0MTgyOTU4WhcNMjQwNTExMTgyOTU4WjAYMRYwFAYD VQQDEw02NjM2N2VhNy1jNDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZAQo47phHv3FtlZx22P+cNlF9WpN9uogdbWMZb71008LCf2hO4VmUapRyAx Pr9e0UBmi59u88o3COS5Dqq4gjBBeVu50yWea2hMSF/GNa0+Eg2aVorg6XAfgGbQ +9Tl15XP/B7lHgPO+FxnAjm3JL1Be8VU/C/QzBzHodLi2pu2FnasdqC5OJLzr3lU /XdtU6ccRuETki10LH3rs3V3Std15HQNHurEZpqjHeP+ICTwCWTgoCh5O9qp88W7 YBvkcDtnBi6867dZ/neD88NJL8f2JbGVbq+A7zavcjSJU5JPfvHvjZnn81UgrsJC f2TDrSuu9I5oOOzGLYq1TJBD9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFEmYCyo CeqRLKI7/VGFJiloxB47MB8GA1UdIwQYMBaAFHsRL56+w0Lfysd061wmgRJcZeDP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkNCMS82RTg3MkQ1RTY1 NkYxMUU5QkJFOEY3MjRDNEY5QUUwMi9leEV2bnI3RFF0X0t4M1RyWENhQkVseGw0 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4RXZucjdEUXRfS3gzVHJYQ2FCRWx4bDRNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkNCMS82RTg3MkQ1RTY1NkYxMUU5QkJFOEY3MjRDNEY5QUUwMi9leEV2bnI3RFF0 X0t4M1RyWENhQkVseGw0TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsI/vR0I5fMe1cQ4koPUAm878S/wY2/4+6hf6s5ELAJZ3C1ruz+qaj ZQr4hmusWuYmloa/HehvH/0axMeTpe0KP4Z+Ntg3It7zGTebrYC9gAdNelubxoqU zpmf/Km7eOVol/5LWOmPZWgNLgAMHxp1yORIgMH4KlLkcH7vC/KZZirDyfE4YWsf fHugWB+WUZcWG9BnvCTNT9lrtjFZn9FKe/BZRNrnTvhb4dOtE5DNflIyBGr4vZPi cHGPxioT9fViNfHS0jLn5Fo84w80lwWjst/1poFTQg7qB0bN99+cA+ebMSWyYoNw QQj/7BabvKiXXp/pJ2FQ/e1rwDxKyqIR -----END CERTIFICATE-----Generated at Sat May 4 19:58:43 2024 by rpki-client on console-ams.rpki-client.org