$ rpki-client -vvf rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft File: ejg10bvhsbJcMWkZLSvc1xk6i8I.mft (raw, json) Hash identifier: 7SkeysdxmU/hFYqW2IOoiY7vPwwDOZf+3q+fc19GOGI= Subject key identifier: DF:C7:A3:95:5D:7F:FF:42:55:C6:22:F4:18:0A:61:26:63:85:AD:28 Authority key identifier: 7A:38:35:D1:BB:E1:B1:B2:5C:31:69:19:2D:2B:DC:D7:19:3A:8B:C2 Certificate issuer: /CN=A91D03EE/serialNumber=7A3835D1BBE1B1B25C3169192D2BDCD7193A8BC2 Certificate serial: 0A2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft Manifest number: 0A20 Signing time: Tue 30 Apr 2024 20:56:48 +0000 Manifest this update: Tue 30 Apr 2024 20:56:47 +0000 Manifest next update: Tue 07 May 2024 20:56:47 +0000 Files and hashes: 1: ejg10bvhsbJcMWkZLSvc1xk6i8I.crl (hash: S3L+cBMYVX4pNtD0y5N32jXln9RBi1rAiVrDcF1s9+w=) 2: 186A84C83A1811EBAF24B12EC4F9AE02.roa (hash: Aiioa6HROkA0Wu9hWdqlc2P5ZsuUkz08muRFBZ4+o1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.crl rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 20:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2606 (0xa2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D03EE/serialNumber=7A3835D1BBE1B1B25C3169192D2BDCD7193A8BC2 Validity Not Before: Apr 30 20:56:47 2024 GMT Not After : May 7 20:56:47 2024 GMT Subject: CN=66315b0f-432d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:84:d7:31:7b:e6:12:86:a0:d6:98:a0:65:1d: c6:3a:3c:55:d2:67:83:10:ee:20:b5:2d:54:a9:45: 8b:1c:b1:38:a4:b8:1e:52:8d:a8:d9:d9:89:cf:01: 8b:db:3f:4a:25:09:81:e5:db:74:08:ea:09:18:96: 0a:e0:08:a0:35:a8:5f:77:7b:50:1b:b9:31:c1:c8: d7:10:41:9a:1a:0d:05:46:a1:91:f7:53:f9:b4:60: 86:da:f6:35:b1:3c:cf:3a:c4:8f:8b:a8:ae:55:f1: 24:98:95:95:3a:e3:44:b2:f1:2c:96:24:69:e0:81: f3:3e:ab:16:b2:20:d9:0c:38:cd:85:de:40:82:05: 3e:67:41:51:8d:77:0f:64:6d:dd:30:3f:bb:42:f9: 61:91:ea:10:de:2f:09:81:14:b7:aa:86:aa:75:60: 63:33:bc:d8:1f:44:21:c4:43:03:39:db:f5:96:8a: fe:d8:f2:13:33:de:ae:2f:b4:81:76:b0:da:b6:82: ff:bf:1a:5d:2e:d8:38:a2:d7:60:15:ca:3d:e4:3b: 37:61:20:8c:3b:75:2d:25:2a:d6:48:79:c2:cd:e5: ef:75:18:c4:b8:8c:cc:e9:ad:34:34:ac:24:e8:db: 6a:50:61:91:71:71:bf:3d:0f:1c:c6:58:04:78:e0: 02:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C7:A3:95:5D:7F:FF:42:55:C6:22:F4:18:0A:61:26:63:85:AD:28 X509v3 Authority Key Identifier: keyid:7A:38:35:D1:BB:E1:B1:B2:5C:31:69:19:2D:2B:DC:D7:19:3A:8B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c2:c7:83:4f:47:5f:89:c9:5c:a8:56:14:f9:77:3b:ce:f1: d4:65:e4:06:43:b5:d6:d8:0d:04:09:ea:3d:7d:27:1f:4e:45: 07:0e:eb:48:05:36:09:55:07:45:3b:af:f0:d1:05:30:34:2d: cb:07:d6:a9:51:ca:13:6c:03:fb:07:1f:ed:b8:d7:51:d8:0a: 4d:28:57:84:08:4e:a9:07:11:e5:43:d2:88:a6:ff:4a:38:ca: f6:34:c3:9c:9b:4c:4f:1c:83:03:95:9c:d7:71:92:9e:54:c7: ba:2e:90:7f:f1:67:43:ff:e9:80:b7:f5:a9:67:76:5a:ae:ba: c9:90:a9:e8:36:3a:89:fc:89:72:1d:b8:9a:52:6b:dc:90:34: b2:95:b3:12:8c:56:f4:20:69:cb:dc:c1:70:4a:1f:9f:68:79: 38:07:1b:6e:b2:df:ac:a4:0b:79:81:d0:83:9e:37:a5:e6:c4: 13:0a:33:83:ea:7d:ac:94:95:3d:5d:9b:b4:36:07:6c:4a:fb: 2c:71:2e:b1:18:8c:ce:94:55:eb:49:36:ef:89:27:f5:59:fe: 3e:7b:43:5c:dd:c7:05:53:a8:b9:73:1e:79:1d:2e:76:e5:06: 76:20:2e:cb:17:d1:3d:16:1e:c7:8e:05:c8:7e:b9:36:8d:dc: 07:6c:50:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDAzRUUxMTAvBgNVBAUTKDdBMzgzNUQxQkJFMUIxQjI1QzMxNjkxOTJEMkJEQ0Q3 MTkzQThCQzIwHhcNMjQwNDMwMjA1NjQ3WhcNMjQwNTA3MjA1NjQ3WjAYMRYwFAYD VQQDEw02NjMxNWIwZi00MzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxYTXMXvmEoag1pigZR3GOjxV0meDEO4gtS1UqUWLHLE4pLgeUo2o2dmJzwGL 2z9KJQmB5dt0COoJGJYK4AigNahfd3tQG7kxwcjXEEGaGg0FRqGR91P5tGCG2vY1 sTzPOsSPi6iuVfEkmJWVOuNEsvEsliRp4IHzPqsWsiDZDDjNhd5AggU+Z0FRjXcP ZG3dMD+7QvlhkeoQ3i8JgRS3qoaqdWBjM7zYH0QhxEMDOdv1lor+2PITM96uL7SB drDatoL/vxpdLtg4otdgFco95Ds3YSCMO3UtJSrWSHnCzeXvdRjEuIzM6a00NKwk 6NtqUGGRcXG/PQ8cxlgEeOACwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/Ho5Vd f/9CVcYi9BgKYSZjha0oMB8GA1UdIwQYMBaAFHo4NdG74bGyXDFpGS0r3NcZOovC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDNFRS82NzI4MUNGNDQ5 N0YxMUVBOTY3QTJFMEJDNEY5QUUwMi9lamcxMGJ2aHNiSmNNV2taTFN2YzF4azZp OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VqZzEwYnZoc2JKY01Xa1pMU3ZjMXhrNmk4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDNFRS82NzI4MUNGNDQ5N0YxMUVBOTY3QTJFMEJDNEY5QUUwMi9lamcxMGJ2aHNi SmNNV2taTFN2YzF4azZpOEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNwseDT0dficlcqFYU+Xc7zvHUZeQGQ7XW2A0ECeo9fScfTkUHDutI BTYJVQdFO6/w0QUwNC3LB9apUcoTbAP7Bx/tuNdR2ApNKFeECE6pBxHlQ9KIpv9K OMr2NMOcm0xPHIMDlZzXcZKeVMe6LpB/8WdD/+mAt/WpZ3ZarrrJkKnoNjqJ/Ily HbiaUmvckDSylbMSjFb0IGnL3MFwSh+faHk4Bxtust+spAt5gdCDnjel5sQTCjOD 6n2slJU9XZu0NgdsSvsscS6xGIzOlFXrSTbviSf1Wf4+e0Nc3ccFU6i5cx55HS52 5QZ2IC7LF9E9Fh7HjgXIfrk2jdwHbFCU -----END CERTIFICATE-----Generated at Tue Apr 30 21:59:07 2024 by rpki-client on console-ams.rpki-client.org