$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft File: 7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft (raw, json) Hash identifier: JwX8B1tv3vCOmZiffcCFgVsqVUtPsfP9qHXt5Vskn5U= Subject key identifier: 46:02:53:6C:C2:95:CA:00:D8:89:EE:54:4B:D8:1A:24:5D:C5:C3:11 Authority key identifier: EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA Certificate issuer: /CN=A91D63AF/serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft Manifest number: 43 Signing time: Wed 15 May 2024 08:19:39 +0000 Manifest this update: Wed 15 May 2024 08:19:38 +0000 Manifest next update: Wed 22 May 2024 08:19:38 +0000 Files and hashes: 1: 7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl (hash: wbk1zNUxyefufGGnizt1X9C25Y9pgjZpGBowrDhrnis=) 2: E3E47D36B6B911EE8E72C641C4F9AE02.roa (hash: 8NNDcn/CtNpBvMIFdldKUPUuvftRiLW48mBlQXNrmYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63AF/serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA Validity Not Before: May 15 08:19:38 2024 GMT Not After : May 22 08:19:38 2024 GMT Subject: CN=6644701b-da49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:31:09:3f:62:66:c3:41:39:7f:c1:f8:7d:84: be:b4:d6:b5:27:15:73:0b:7e:c0:7d:dd:99:df:12: fd:e2:25:d1:33:11:34:c2:90:e8:99:32:a9:79:f1: 3e:28:33:cb:e4:d8:d5:9a:13:81:1a:c2:43:83:b5: 2c:ef:7f:a2:f1:61:93:70:51:83:e8:6e:c9:79:f9: 78:03:18:e7:30:77:8d:aa:42:f5:2d:77:da:53:26: e5:5d:cf:32:ef:89:63:4e:6f:06:8d:ac:f6:4c:48: 5b:9e:4f:40:17:63:ab:bd:88:d8:06:10:44:aa:b3: 09:ee:c1:38:cf:d8:22:33:d2:06:fe:11:de:e4:be: dc:10:d5:8c:fb:c2:5a:2f:bd:c9:aa:1a:76:1a:02: d4:dd:9c:81:25:89:99:0f:b3:66:cf:a3:d4:1d:4a: f9:23:08:82:23:f4:d6:24:77:f2:d7:2b:29:72:ec: 84:06:a1:2b:e8:4d:a8:f8:67:43:b3:d7:2b:ed:94: be:0c:86:44:41:35:b5:10:83:81:11:64:0f:2f:67: 0b:09:1d:5d:72:ea:a8:1f:a9:ab:7e:0f:e7:81:f5: 94:0e:2c:f8:31:2c:ea:93:b9:63:6b:06:06:ff:97: b2:ce:58:0b:f8:2d:58:2c:98:93:f2:03:00:3a:b6: 89:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:02:53:6C:C2:95:CA:00:D8:89:EE:54:4B:D8:1A:24:5D:C5:C3:11 X509v3 Authority Key Identifier: keyid:EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:6d:da:ea:97:d8:d8:a8:32:2b:d6:54:59:1f:b6:4d:dc:c5: e1:7b:fc:01:ea:cf:1d:ae:93:1f:44:76:b9:55:d5:f6:c1:f2: 8c:57:0a:b5:28:7e:0c:e1:83:f6:3b:60:1c:ed:27:da:52:61: ba:c8:ac:0f:1f:e0:8f:58:41:01:ca:d2:6e:35:59:16:fb:00: 0c:1d:8b:2f:cb:88:21:c3:5d:b4:e6:24:9b:d6:03:b1:1e:b4: 4b:1d:de:e8:e5:b8:af:9b:59:b0:5d:58:32:a2:d1:1a:52:26: f4:62:08:32:14:17:2c:0c:4d:2d:0c:3f:76:ad:d2:b0:56:ce: 8f:e4:ad:ed:4d:6e:36:8e:c4:ed:be:67:ca:37:b2:a3:6c:72: d8:ca:7a:82:39:47:41:4e:2e:93:8b:4a:8d:70:4d:d7:b0:8a: ed:c8:00:da:e9:a5:66:3c:3a:da:c2:8d:d6:38:40:ce:b6:57: a9:00:74:0e:06:e4:9b:0a:6b:8f:0d:25:77:a7:ac:86:5b:85: 9e:38:13:7b:df:cf:80:5f:a3:e3:a4:79:4f:9b:9f:43:9b:cd: 8d:df:b6:2e:c1:aa:72:ae:7e:50:de:77:01:16:6a:36:af:72: ea:fe:d4:0f:82:d0:af:cb:94:5e:e4:25:73:87:c4:30:06:8d: 0a:79:69:8a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NjNBRjExMC8GA1UEBRMoRUYzMEEyNDE0NkRGNjZCMUZBNkZCQTVENjc2NzY5RUI2 NEIzODdBQTAeFw0yNDA1MTUwODE5MzhaFw0yNDA1MjIwODE5MzhaMBgxFjAUBgNV BAMTDTY2NDQ3MDFiLWRhNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDlMQk/YmbDQTl/wfh9hL601rUnFXMLfsB93ZnfEv3iJdEzETTCkOiZMql58T4o M8vk2NWaE4EawkODtSzvf6LxYZNwUYPobsl5+XgDGOcwd42qQvUtd9pTJuVdzzLv iWNObwaNrPZMSFueT0AXY6u9iNgGEESqswnuwTjP2CIz0gb+Ed7kvtwQ1Yz7wlov vcmqGnYaAtTdnIEliZkPs2bPo9QdSvkjCIIj9NYkd/LXKyly7IQGoSvoTaj4Z0Oz 1yvtlL4MhkRBNbUQg4ERZA8vZwsJHV1y6qgfqat+D+eB9ZQOLPgxLOqTuWNrBgb/ l7LOWAv4LVgsmJPyAwA6tomvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURgJTbMKV ygDYie5US9gaJF3FwxEwHwYDVR0jBBgwFoAU7zCiQUbfZrH6b7pdZ2dp62Szh6ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2M0FGL0UxNEQxQUI0QjZB NjExRUVBMDRBOEIyM0M0RjlBRTAyLzd6Q2lRVWJmWnJINmI3cGRaMmRwNjJTemg2 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN3pDaVFVYmZackg2YjdwZFoyZHA2MlN6aDZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2 M0FGL0UxNEQxQUI0QjZBNjExRUVBMDRBOEIyM0M0RjlBRTAyLzd6Q2lRVWJmWnJI NmI3cGRaMmRwNjJTemg2by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKht2uqX2NioMivWVFkftk3cxeF7/AHqzx2ukx9EdrlV1fbB8oxXCrUo fgzhg/Y7YBztJ9pSYbrIrA8f4I9YQQHK0m41WRb7AAwdiy/LiCHDXbTmJJvWA7Ee tEsd3ujluK+bWbBdWDKi0RpSJvRiCDIUFywMTS0MP3at0rBWzo/kre1NbjaOxO2+ Z8o3sqNsctjKeoI5R0FOLpOLSo1wTdewiu3IANrppWY8OtrCjdY4QM62V6kAdA4G 5JsKa48NJXenrIZbhZ44E3vfz4Bfo+OkeU+bn0ObzY3fti7BqnKuflDedwEWajav cur+1A+C0K/LlF7kJXOHxDAGjQp5aYo= -----END CERTIFICATE-----Generated at Wed May 15 09:28:16 2024 by rpki-client on console-fra.rpki-client.org