$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft File: e5n41rlBPOKiluscfX7-bUfQy6Q.mft (raw, json) Hash identifier: yrmCYI8snYHAeC5qWGmViWGrLYiW8PmGRdcZQ7s+XF0= Subject key identifier: F0:84:C2:87:2E:32:5C:74:DA:B5:01:85:31:65:2E:8C:CB:B4:EE:80 Authority key identifier: 7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4 Certificate issuer: /CN=A91C4F1B/serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4 Certificate serial: 07D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft Manifest number: 07D1 Signing time: Thu 02 May 2024 22:08:55 +0000 Manifest this update: Thu 02 May 2024 22:08:55 +0000 Manifest next update: Thu 09 May 2024 22:08:55 +0000 Files and hashes: 1: e5n41rlBPOKiluscfX7-bUfQy6Q.crl (hash: MlsSnOQ0pf/0h1CKR8n+bg9eESQTvYLQLc6Gb5lROgI=) 2: 059261A8BC5111EABE07AE32C4F9AE02.roa (hash: GMzjXTtzVauDwypVhHPwgP11aqtJKysxV0/a8VxbSKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2007 (0x7d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F1B/serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4 Validity Not Before: May 2 22:08:55 2024 GMT Not After : May 9 22:08:55 2024 GMT Subject: CN=66340ef7-d7d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cc:df:5f:ab:27:7d:23:fe:8b:13:63:0f:f9: 5b:8d:30:3b:cb:ef:70:47:d2:5a:6c:71:7b:51:95: 42:39:30:d2:a0:21:bc:3a:f4:09:69:3c:11:f2:87: f9:81:a2:1b:fa:13:a4:36:2e:72:89:7c:79:ba:8f: 43:da:b6:d0:6f:6b:00:db:3a:41:af:43:d9:23:ff: 77:88:ca:d6:aa:19:f4:c5:a2:e3:86:33:25:e1:25: 97:57:3b:56:28:3a:37:a6:e1:1d:44:16:84:36:6c: de:95:b0:1e:8b:7d:75:ce:56:e0:66:8a:73:9c:21: e9:f3:9f:01:e1:7f:44:08:c9:fd:aa:d0:4f:3a:f8: 8b:14:ea:55:7b:2f:f7:a0:76:86:a9:74:a1:c4:c4: e1:d8:18:68:5c:f9:01:14:01:78:d0:94:a0:6f:6d: d3:eb:b0:22:9b:24:2b:2e:09:c8:9b:be:89:aa:d8: 43:a5:96:1d:3e:48:42:04:ed:9a:67:7a:23:b8:18: 21:b6:23:81:68:48:6d:7d:3c:aa:10:7b:cf:2f:49: 68:13:e9:00:e1:c7:ad:aa:aa:b8:6b:15:db:37:3e: 9d:dd:e9:01:cc:42:5c:ce:58:6a:b9:3d:36:01:1a: 18:ad:eb:67:fd:76:c8:e4:38:e1:23:5e:2e:ed:32: 8f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:84:C2:87:2E:32:5C:74:DA:B5:01:85:31:65:2E:8C:CB:B4:EE:80 X509v3 Authority Key Identifier: keyid:7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:87:71:04:dd:ee:b4:6c:96:e3:ad:8a:13:51:bb:0b:91:6f: b3:56:80:f3:e7:5f:fe:3c:6c:78:dc:d5:ec:c5:02:75:03:c2: 27:a2:ff:53:e2:15:ee:cf:45:61:2c:ab:0e:50:e9:c1:45:6a: 63:fe:24:26:e7:f7:2b:f3:61:49:7b:17:d5:e9:91:34:db:16: 31:61:0a:5b:88:fd:e9:1b:cd:d6:d4:27:a3:28:9b:4a:22:a0: 9e:4b:54:e6:f5:cc:8e:73:b1:98:85:73:16:ca:18:1b:bb:cf: b6:be:35:dd:64:bf:d4:87:a6:6c:01:2f:42:ef:a1:f0:03:55: 8b:a0:3d:c6:6a:48:a9:23:fd:9b:cc:28:55:30:f4:69:9b:7b: c6:06:ca:9e:71:d9:22:69:6a:c1:15:e2:71:31:03:93:16:bb: 84:39:46:21:f4:5e:4e:4a:2b:5e:c3:81:d8:77:f2:30:87:f2: 04:78:1c:b7:e2:b2:38:c9:f2:6a:8b:17:7a:f8:6f:6c:35:34: c0:44:0a:77:c2:1e:34:cd:16:fa:95:b8:a5:38:a4:df:f0:fb: ad:13:d4:25:10:d5:41:aa:c0:a1:fe:83:04:38:c7:7a:d6:a2: c3:ff:d9:94:cb:a0:3f:3d:3d:e3:db:bc:57:55:70:b3:4e:26: 6b:e5:99:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGMUIxMTAvBgNVBAUTKDdCOTlGOEQ2Qjk0MTNDRTJBMjk2RUIxQzdEN0VGRTZE NDdEMENCQTQwHhcNMjQwNTAyMjIwODU1WhcNMjQwNTA5MjIwODU1WjAYMRYwFAYD VQQDEw02NjM0MGVmNy1kN2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8zfX6snfSP+ixNjD/lbjTA7y+9wR9JabHF7UZVCOTDSoCG8OvQJaTwR8of5 gaIb+hOkNi5yiXx5uo9D2rbQb2sA2zpBr0PZI/93iMrWqhn0xaLjhjMl4SWXVztW KDo3puEdRBaENmzelbAei311zlbgZopznCHp858B4X9ECMn9qtBPOviLFOpVey/3 oHaGqXShxMTh2BhoXPkBFAF40JSgb23T67AimyQrLgnIm76JqthDpZYdPkhCBO2a Z3ojuBghtiOBaEhtfTyqEHvPL0loE+kA4cetqqq4axXbNz6d3ekBzEJczlhquT02 ARoYretn/XbI5DjhI14u7TKPwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPCEwocu Mlx02rUBhTFlLozLtO6AMB8GA1UdIwQYMBaAFHuZ+Na5QTziopbrHH1+/m1H0Muk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYxQi8yM0YzMDU1MEJD NEYxMUVBQkE4Qzk2MkZDNEY5QUUwMi9lNW40MXJsQlBPS2lsdXNjZlg3LWJVZlF5 NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2U1bjQxcmxCUE9LaWx1c2NmWDctYlVmUXk2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEYxQi8yM0YzMDU1MEJDNEYxMUVBQkE4Qzk2MkZDNEY5QUUwMi9lNW40MXJsQlBP S2lsdXNjZlg3LWJVZlF5NlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChh3EE3e60bJbjrYoTUbsLkW+zVoDz51/+PGx43NXsxQJ1A8Inov9T 4hXuz0VhLKsOUOnBRWpj/iQm5/cr82FJexfV6ZE02xYxYQpbiP3pG83W1CejKJtK IqCeS1Tm9cyOc7GYhXMWyhgbu8+2vjXdZL/Uh6ZsAS9C76HwA1WLoD3GakipI/2b zChVMPRpm3vGBsqecdkiaWrBFeJxMQOTFruEOUYh9F5OSitew4HYd/Iwh/IEeBy3 4rI4yfJqixd6+G9sNTTARAp3wh40zRb6lbilOKTf8PutE9QlENVBqsCh/oMEOMd6 1qLD/9mUy6A/PT3j27xXVXCzTiZr5Zla -----END CERTIFICATE-----Generated at Thu May 2 23:19:02 2024 by rpki-client on console-ams.rpki-client.org