$ rpki-client -vvf rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft File: 7HnRemDtVw7Ge1EWFitgi2C5zUE.mft (raw, json) Hash identifier: 42mbJh6iFB4lmbHEK7iCHY5hn1+8i9ZqAnRTUlm/lEs= Subject key identifier: 5B:7C:A3:86:F8:64:65:D9:5F:62:C8:AE:32:22:74:FE:E7:6E:73:D5 Authority key identifier: EC:79:D1:7A:60:ED:57:0E:C6:7B:51:16:16:2B:60:8B:60:B9:CD:41 Certificate issuer: /CN=A91C309F/serialNumber=EC79D17A60ED570EC67B5116162B608B60B9CD41 Certificate serial: 05DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HnRemDtVw7Ge1EWFitgi2C5zUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft Manifest number: 05D6 Signing time: Sat 27 Apr 2024 00:13:21 +0000 Manifest this update: Sat 27 Apr 2024 00:13:21 +0000 Manifest next update: Sat 04 May 2024 00:13:21 +0000 Files and hashes: 1: 7HnRemDtVw7Ge1EWFitgi2C5zUE.crl (hash: dWoXPiX8uYeF2+4IFvzxC3fm72OgiKd6vJjztLgvjHc=) 2: C144C89ADCF311EC80AD955EC4F9AE02.roa (hash: ekWMI9lKI80qdKLgYltLVxIp5iJZ3aucbrILlremPho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.crl rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HnRemDtVw7Ge1EWFitgi2C5zUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 00:13:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1500 (0x5dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C309F/serialNumber=EC79D17A60ED570EC67B5116162B608B60B9CD41 Validity Not Before: Apr 27 00:13:21 2024 GMT Not After : May 4 00:13:21 2024 GMT Subject: CN=662c4321-3535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:29:ce:82:aa:9d:0d:e6:36:cf:1c:8b:2f:88: f5:f5:ee:68:51:6d:a7:f9:08:0e:28:81:21:82:5f: c7:7a:a0:5b:d4:1c:b3:87:a8:dd:7d:c1:3f:9f:5e: 8b:e7:d3:5b:25:b3:d3:66:ec:37:5e:fc:b9:62:f1: 98:a5:2a:ae:6e:6b:d7:87:20:5e:67:17:0e:88:89: 0e:ec:af:cf:5d:87:ba:e6:56:ba:cf:1f:a2:80:7d: ae:03:32:8f:f4:ca:33:b2:cb:78:88:e4:b5:08:a7: a5:c3:8c:c6:a3:2e:d4:65:b8:f9:08:a5:b5:f2:ca: 00:e4:4f:c0:44:6b:6e:16:f8:8f:d9:12:97:a5:5b: f0:ae:6d:51:89:d1:c3:00:0c:11:1f:8e:b6:f0:cd: 22:61:43:3a:86:79:00:6c:48:d9:98:64:67:74:00: 2d:10:7c:86:03:7b:3f:d1:4e:b4:94:ff:c3:41:c9: cb:8e:a5:03:3a:d9:34:39:63:64:8b:90:db:36:6c: f3:d6:0e:5c:5b:c2:86:de:0e:8c:8d:e3:25:5f:10: 22:fe:6d:d5:ec:3d:26:53:cf:60:76:14:87:c0:2c: 4d:80:28:a0:c3:9b:14:57:68:45:c6:a0:23:0b:0d: 6c:9c:53:d9:9b:89:65:1b:d1:e1:6c:ef:ca:36:9f: 82:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7C:A3:86:F8:64:65:D9:5F:62:C8:AE:32:22:74:FE:E7:6E:73:D5 X509v3 Authority Key Identifier: keyid:EC:79:D1:7A:60:ED:57:0E:C6:7B:51:16:16:2B:60:8B:60:B9:CD:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HnRemDtVw7Ge1EWFitgi2C5zUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:2e:c0:1a:64:0c:8e:49:3b:28:30:00:ef:0f:4a:c0:f4:76: f2:11:1b:d2:36:d4:d0:f9:c4:69:a5:64:6d:c0:2b:65:77:67: 2d:07:0e:d7:81:7b:d0:79:11:cd:77:1b:80:e6:e5:a0:84:e8: f7:25:0e:d3:ce:b8:2f:d3:e5:1c:b1:97:b1:8b:df:39:51:6f: 8b:20:73:5a:8d:92:5e:2b:f8:d2:fc:63:4b:0d:0d:ae:5e:44: 4b:84:83:98:5a:66:57:99:47:d1:a3:ee:72:08:66:37:62:ea: b8:ca:77:71:5f:b4:4e:a4:df:a4:78:f5:63:3c:9d:6d:0a:96: c5:be:95:62:e0:b5:c6:ff:9f:fb:d9:77:7e:46:10:0f:22:5c: a0:74:e7:13:06:e4:b6:77:7d:21:1e:4c:1a:a8:a9:c9:75:ec: f5:3b:d6:0c:27:6f:84:ab:b9:02:c0:d0:c7:a0:72:8b:e1:f0: eb:5c:53:25:cb:84:f3:f9:60:97:d4:8f:50:74:c8:dd:60:69: f7:3b:0a:06:b7:cd:74:56:20:fa:f7:e8:0b:09:1c:fa:05:ae: 35:f0:2f:35:ee:35:36:2a:a1:e4:ac:22:94:79:fa:f7:a6:69: b6:8d:60:29:8f:74:46:6c:f6:3c:0a:ca:c8:ba:ea:d8:42:6b: 02:12:34:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMwOUYxMTAvBgNVBAUTKEVDNzlEMTdBNjBFRDU3MEVDNjdCNTExNjE2MkI2MDhC NjBCOUNENDEwHhcNMjQwNDI3MDAxMzIxWhcNMjQwNTA0MDAxMzIxWjAYMRYwFAYD VQQDEw02NjJjNDMyMS0zNTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuynOgqqdDeY2zxyLL4j19e5oUW2n+QgOKIEhgl/HeqBb1Byzh6jdfcE/n16L 59NbJbPTZuw3Xvy5YvGYpSqubmvXhyBeZxcOiIkO7K/PXYe65la6zx+igH2uAzKP 9Mozsst4iOS1CKelw4zGoy7UZbj5CKW18soA5E/ARGtuFviP2RKXpVvwrm1RidHD AAwRH4628M0iYUM6hnkAbEjZmGRndAAtEHyGA3s/0U60lP/DQcnLjqUDOtk0OWNk i5DbNmzz1g5cW8KG3g6MjeMlXxAi/m3V7D0mU89gdhSHwCxNgCigw5sUV2hFxqAj Cw1snFPZm4llG9HhbO/KNp+CdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFt8o4b4 ZGXZX2LIrjIidP7nbnPVMB8GA1UdIwQYMBaAFOx50Xpg7VcOxntRFhYrYItguc1B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzA5Ri8xREI0ODNBNDY5 REMxMUVCOUUxNjA5MUFDNEY5QUUwMi83SG5SZW1EdFZ3N0dlMUVXRml0Z2kyQzV6 VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdIblJlbUR0Vnc3R2UxRVdGaXRnaTJDNXpVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzA5Ri8xREI0ODNBNDY5REMxMUVCOUUxNjA5MUFDNEY5QUUwMi83SG5SZW1EdFZ3 N0dlMUVXRml0Z2kyQzV6VUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWLsAaZAyOSTsoMADvD0rA9HbyERvSNtTQ+cRppWRtwCtld2ctBw7X gXvQeRHNdxuA5uWghOj3JQ7Tzrgv0+UcsZexi985UW+LIHNajZJeK/jS/GNLDQ2u XkRLhIOYWmZXmUfRo+5yCGY3Yuq4yndxX7ROpN+kePVjPJ1tCpbFvpVi4LXG/5/7 2Xd+RhAPIlygdOcTBuS2d30hHkwaqKnJdez1O9YMJ2+Eq7kCwNDHoHKL4fDrXFMl y4Tz+WCX1I9QdMjdYGn3OwoGt810ViD69+gLCRz6Ba418C817jU2KqHkrCKUefr3 pmm2jWApj3RGbPY8CsrIuurYQmsCEjRl -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:25 2024 by rpki-client on console-ams.rpki-client.org