$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft File: esDADw_KR57kZeT39UXoyUmT1hw.mft (raw, json) Hash identifier: dyGmdLou1MWelL3SCKW86JhqAytspXQ/g/OdYaIb7jE= Subject key identifier: 9B:BF:3C:A7:AF:8E:2D:2C:0B:DF:A7:D0:67:C8:14:18:A4:C2:58:0D Authority key identifier: 7A:C0:C0:0F:0F:CA:47:9E:E4:65:E4:F7:F5:45:E8:C9:49:93:D6:1C Certificate issuer: /CN=A91D1691/serialNumber=7AC0C00F0FCA479EE465E4F7F545E8C94993D61C Certificate serial: 236C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft Manifest number: 2347 Signing time: Sat 04 May 2024 16:11:55 +0000 Manifest this update: Sat 04 May 2024 16:11:54 +0000 Manifest next update: Sat 11 May 2024 16:11:54 +0000 Files and hashes: 1: esDADw_KR57kZeT39UXoyUmT1hw.crl (hash: NnvpAqIwyuy8CVuYEqMrFAzH6rRileFhmromxJ4lsek=) 2: BEB0F47E878211EEAE0BD437C4F9AE02.roa (hash: g7dH7dbdQ1lQq1sfWBZ5H+rmh8uDZsvwW4ydwCirp9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.crl rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 16:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9068 (0x236c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1691/serialNumber=7AC0C00F0FCA479EE465E4F7F545E8C94993D61C Validity Not Before: May 4 16:11:54 2024 GMT Not After : May 11 16:11:54 2024 GMT Subject: CN=66365e4a-f279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:95:a0:10:b5:5a:9e:73:15:c9:58:f9:94:ac: c0:bc:57:24:54:9b:23:45:90:2a:18:0f:43:87:b5: 39:d7:43:4b:f1:3b:c5:75:ee:34:b0:69:05:58:d7: f2:bb:a0:3d:30:02:f8:ca:41:b9:17:73:b5:09:94: e7:a7:21:75:81:42:11:33:e1:eb:c0:96:87:ba:fc: 2e:7a:ad:b8:1d:e1:1a:b4:da:dd:be:3c:5c:04:a7: 0e:07:df:26:29:30:2e:f1:7e:0c:ab:fe:77:fb:f5: 4b:24:f4:ab:8d:b9:95:1d:4d:ef:e1:9d:21:95:97: 7f:08:fd:44:50:5f:6a:b6:a9:6a:57:4e:1c:92:15: 11:fa:10:33:06:98:62:2a:e4:95:3c:60:72:84:4d: 1a:47:6b:b0:3b:87:60:4d:14:2a:d7:c5:3b:cf:f3: 2e:5c:02:df:08:08:e3:d5:e9:b8:fd:78:38:ff:e6: c2:c6:d9:02:e0:15:73:6f:e5:ac:0b:77:1e:f0:0e: c0:ed:39:75:ec:3b:a4:6e:23:bf:2d:82:ad:8b:9a: 17:19:49:25:18:09:a7:99:79:49:ff:d0:28:33:02: 3b:59:c8:45:3b:3f:83:7e:5f:14:f6:60:20:ba:7d: c0:34:38:03:11:9c:af:6c:10:99:d7:45:49:8a:d2: db:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:BF:3C:A7:AF:8E:2D:2C:0B:DF:A7:D0:67:C8:14:18:A4:C2:58:0D X509v3 Authority Key Identifier: keyid:7A:C0:C0:0F:0F:CA:47:9E:E4:65:E4:F7:F5:45:E8:C9:49:93:D6:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:7d:e6:cf:86:c9:28:9f:fd:fd:cc:04:0b:2c:98:e4:b7:bb: dd:da:08:96:34:6a:d1:fe:61:7c:8c:aa:1c:2f:50:84:59:2e: ee:78:06:1a:df:34:35:22:2f:ee:c7:fc:63:cf:1e:38:ec:a4: 3d:0e:36:88:39:91:3b:c5:e9:d5:bc:d2:e2:ff:f2:e9:8c:bd: 5e:3a:46:c4:e8:e2:14:33:1c:13:a1:e3:00:3d:49:35:49:fd: 2f:0d:e9:23:fe:d0:92:fc:9c:d8:35:2f:ad:c8:94:49:51:58: cf:f1:e1:35:d4:88:6c:6e:6e:53:30:35:93:4f:02:9d:49:23: 01:1f:f7:00:6b:b9:96:79:10:30:e3:1d:00:d3:4f:8f:33:75: 63:40:c6:0c:31:28:c3:ea:89:ba:a1:55:c8:65:8f:46:5d:5b: b1:8c:d7:b2:3e:be:94:35:70:99:c9:fc:f7:ce:9f:ac:9b:b4: 62:26:dd:26:56:46:44:49:ac:c9:8b:25:66:86:73:b8:e1:05: 4d:e4:cd:60:cc:4b:7a:19:7a:a0:4e:e0:92:19:0b:69:11:2f: 8d:d2:6c:81:d9:36:aa:99:12:8b:f7:9c:40:1c:6b:a1:3a:93: 7a:b9:b5:2b:af:89:9a:2a:cb:53:a9:1f:ee:b4:0f:da:0e:d6: dd:5a:bb:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2OTExMTAvBgNVBAUTKDdBQzBDMDBGMEZDQTQ3OUVFNDY1RTRGN0Y1NDVFOEM5 NDk5M0Q2MUMwHhcNMjQwNTA0MTYxMTU0WhcNMjQwNTExMTYxMTU0WjAYMRYwFAYD VQQDEw02NjM2NWU0YS1mMjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZWgELVannMVyVj5lKzAvFckVJsjRZAqGA9Dh7U510NL8TvFde40sGkFWNfy u6A9MAL4ykG5F3O1CZTnpyF1gUIRM+HrwJaHuvwueq24HeEatNrdvjxcBKcOB98m KTAu8X4Mq/53+/VLJPSrjbmVHU3v4Z0hlZd/CP1EUF9qtqlqV04ckhUR+hAzBphi KuSVPGByhE0aR2uwO4dgTRQq18U7z/MuXALfCAjj1em4/Xg4/+bCxtkC4BVzb+Ws C3ce8A7A7Tl17DukbiO/LYKti5oXGUklGAmnmXlJ/9AoMwI7WchFOz+Dfl8U9mAg un3ANDgDEZyvbBCZ10VJitLbwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJu/PKev ji0sC9+n0GfIFBikwlgNMB8GA1UdIwQYMBaAFHrAwA8Pykee5GXk9/VF6MlJk9Yc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTY5MS81QUZDMjY5MjY1 MkIxMUU1OTdBODY4ODFDNEY5QUUwMi9lc0RBRHdfS1I1N2taZVQzOVVYb3lVbVQx aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VzREFEd19LUjU3a1plVDM5VVhveVVtVDFody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTY5MS81QUZDMjY5MjY1MkIxMUU1OTdBODY4ODFDNEY5QUUwMi9lc0RBRHdfS1I1 N2taZVQzOVVYb3lVbVQxaHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtfebPhskon/39zAQLLJjkt7vd2giWNGrR/mF8jKocL1CEWS7ueAYa 3zQ1Ii/ux/xjzx447KQ9DjaIOZE7xenVvNLi//LpjL1eOkbE6OIUMxwToeMAPUk1 Sf0vDekj/tCS/JzYNS+tyJRJUVjP8eE11Ihsbm5TMDWTTwKdSSMBH/cAa7mWeRAw 4x0A00+PM3VjQMYMMSjD6om6oVXIZY9GXVuxjNeyPr6UNXCZyfz3zp+sm7RiJt0m VkZESazJiyVmhnO44QVN5M1gzEt6GXqgTuCSGQtpES+N0myB2TaqmRKL95xAHGuh OpN6ubUrr4maKstTqR/utA/aDtbdWruX -----END CERTIFICATE-----Generated at Sat May 4 17:19:50 2024 by rpki-client on console-fra.rpki-client.org