$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft File: 0Eyx4nFXho90821weRXZ1_CXyQg.mft (raw, json) Hash identifier: j7UA4hB5+DGFwGDpct1Czjdo9HpifrSrNKL6Vwf1k8g= Subject key identifier: 4E:CE:29:6A:3A:E2:3F:EF:3C:66:26:CB:B6:79:B6:FB:6C:27:06:CC Authority key identifier: D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08 Certificate issuer: /CN=A91D5AA8/serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908 Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft Manifest number: FC Signing time: Tue 07 May 2024 05:41:33 +0000 Manifest this update: Tue 07 May 2024 05:41:32 +0000 Manifest next update: Tue 14 May 2024 05:41:32 +0000 Files and hashes: 1: 0Eyx4nFXho90821weRXZ1_CXyQg.crl (hash: qFTdkBDI7UcfY8UFNCsuPJRlk9Q+7PS5LV3hrI6CYP0=) 2: A070F93091F311EDB5268923C4F9AE02.roa (hash: uYZ7KxB+HpKC09pE9mVGMNWgVak7LLuvq+9xq7mvNt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 05:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5AA8/serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908 Validity Not Before: May 7 05:41:32 2024 GMT Not After : May 14 05:41:32 2024 GMT Subject: CN=6639bf0c-c16a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bd:bd:0c:7c:fa:7d:fc:da:40:06:6f:68:19: 04:ba:39:d4:8d:b4:10:57:53:31:87:33:9f:2a:a3: 6b:2a:61:1c:3a:68:c4:53:8e:e4:e8:2f:6e:20:f9: 92:7e:d3:2a:f4:94:5c:28:07:de:40:6c:86:23:1e: 40:d0:c2:e8:6d:cf:72:03:c7:88:c4:67:2e:5a:4a: 0b:6e:af:de:ee:e7:e2:14:87:55:5d:d2:a6:eb:50: fc:95:67:ec:65:f8:2d:a1:0c:56:3b:81:c3:97:85: bc:48:9d:0b:1f:c9:e2:74:43:3f:09:64:d6:11:e5: 9d:4c:3b:66:fa:bf:ca:5b:c7:36:f1:68:ca:ac:84: b3:c1:24:ae:c9:93:2e:fe:a6:e3:41:18:7a:eb:b7: 44:1c:64:25:18:d4:08:b9:17:1d:62:84:cf:70:6c: a5:9e:9b:8d:61:60:8b:ed:e8:9b:da:b7:3d:4f:4d: 55:00:b1:43:95:63:3a:4c:c8:c9:4c:20:39:4b:28: ce:a0:4e:bf:67:6f:31:33:40:46:65:be:ff:82:f6: 88:6d:9f:b3:12:3d:c9:c2:7c:69:aa:32:bc:c5:f7: 62:77:81:b7:ef:d7:ec:37:ec:13:bb:09:9d:36:0a: 2f:73:5d:ef:1f:dc:61:d4:42:c4:cf:50:88:da:3a: a9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:CE:29:6A:3A:E2:3F:EF:3C:66:26:CB:B6:79:B6:FB:6C:27:06:CC X509v3 Authority Key Identifier: keyid:D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:30:f2:8d:4b:0f:1f:56:82:99:ed:b0:38:3e:06:99:e0:6c: 28:0a:48:ce:10:f9:5b:65:fa:84:7f:fc:9c:67:58:33:a2:aa: 79:e3:72:2e:86:bc:4b:43:f7:33:00:f1:b6:6f:eb:94:ed:24: db:7f:1e:c3:0b:23:1f:84:1c:69:18:fb:7a:bb:1d:21:7c:0c: 4a:ce:15:14:7d:90:83:7d:51:60:5b:f4:67:84:b4:7d:22:3e: 0c:1f:99:4a:12:b1:19:1e:dd:3d:8d:09:2d:2a:d0:18:da:1a: 66:85:e2:7d:b3:5c:b2:9c:05:b5:5c:c5:8d:d6:d2:11:f7:12: b5:9b:ca:6a:0d:8f:cf:39:fb:d0:64:86:12:0b:e5:5f:7b:a2: a3:c5:08:24:d6:91:95:20:b7:df:03:02:f1:f8:a6:ed:c2:ac: 66:77:19:b4:9e:f7:71:28:dd:9d:76:33:37:38:c2:b1:1c:25: d0:5a:4e:9d:e0:79:cc:fd:52:6f:c3:c1:1b:75:db:ec:6c:ed: 86:78:76:26:2c:c7:a6:c6:76:df:2b:7b:aa:4c:5f:15:15:c3: 5a:2c:29:56:24:f7:b7:50:29:5c:19:32:f5:59:90:08:23:78: 97:ba:fa:bc:54:78:55:a2:2f:18:2e:b8:77:40:92:e1:c1:cf: 15:85:8a:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVBQTgxMTAvBgNVBAUTKEQwNENCMUUyNzE1Nzg2OEY3NEYzNkQ3MDc5MTVEOUQ3 RjA5N0M5MDgwHhcNMjQwNTA3MDU0MTMyWhcNMjQwNTE0MDU0MTMyWjAYMRYwFAYD VQQDEw02NjM5YmYwYy1jMTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsr29DHz6ffzaQAZvaBkEujnUjbQQV1MxhzOfKqNrKmEcOmjEU47k6C9uIPmS ftMq9JRcKAfeQGyGIx5A0MLobc9yA8eIxGcuWkoLbq/e7ufiFIdVXdKm61D8lWfs ZfgtoQxWO4HDl4W8SJ0LH8nidEM/CWTWEeWdTDtm+r/KW8c28WjKrISzwSSuyZMu /qbjQRh667dEHGQlGNQIuRcdYoTPcGylnpuNYWCL7eib2rc9T01VALFDlWM6TMjJ TCA5SyjOoE6/Z28xM0BGZb7/gvaIbZ+zEj3JwnxpqjK8xfdid4G379fsN+wTuwmd Ngovc13vH9xh1ELEz1CI2jqpnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7OKWo6 4j/vPGYmy7Z5tvtsJwbMMB8GA1UdIwQYMBaAFNBMseJxV4aPdPNtcHkV2dfwl8kI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUFBOC8yNzg1OTkxMjkx RUYxMUVEQjA2QkFEMUZDNEY5QUUwMi8wRXl4NG5GWGhvOTA4MjF3ZVJYWjFfQ1h5 UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBFeXg0bkZYaG85MDgyMXdlUlhaMV9DWHlRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUFBOC8yNzg1OTkxMjkxRUYxMUVEQjA2QkFEMUZDNEY5QUUwMi8wRXl4NG5GWGhv OTA4MjF3ZVJYWjFfQ1h5UWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3MPKNSw8fVoKZ7bA4PgaZ4GwoCkjOEPlbZfqEf/ycZ1gzoqp543Iu hrxLQ/czAPG2b+uU7STbfx7DCyMfhBxpGPt6ux0hfAxKzhUUfZCDfVFgW/RnhLR9 Ij4MH5lKErEZHt09jQktKtAY2hpmheJ9s1yynAW1XMWN1tIR9xK1m8pqDY/POfvQ ZIYSC+Vfe6KjxQgk1pGVILffAwLx+Kbtwqxmdxm0nvdxKN2ddjM3OMKxHCXQWk6d 4HnM/VJvw8EbddvsbO2GeHYmLMemxnbfK3uqTF8VFcNaLClWJPe3UClcGTL1WZAI I3iXuvq8VHhVoi8YLrh3QJLhwc8VhYrZ -----END CERTIFICATE-----Generated at Tue May 7 06:30:14 2024 by rpki-client on console-ams.rpki-client.org