$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft File: epirabcrqsZmDlTdHG2KBi4s0v4.mft (raw, json) Hash identifier: akJP59BeNRxWheYolD793PffbbFk0yeAAaGZKkxxVOg= Subject key identifier: 3C:C6:DC:60:06:64:0A:37:57:05:55:99:20:DF:55:2B:9E:90:FB:90 Authority key identifier: 7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE Certificate issuer: /CN=A91E6038/serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE Certificate serial: 02B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft Manifest number: 02AE Signing time: Sat 01 Jun 2024 04:43:12 +0000 Manifest this update: Sat 01 Jun 2024 04:43:12 +0000 Manifest next update: Sat 08 Jun 2024 04:43:12 +0000 Files and hashes: 1: epirabcrqsZmDlTdHG2KBi4s0v4.crl (hash: ZTL8vOdwUyHI8Z80YFRA2vIHIMutAx4d1b6rZ+8vZoI=) 2: 7ABCBB70AFFE11ECA52DBA5DC4F9AE02.roa (hash: GdhDO8CP9YhBJBGV8fIc+KXsGLLVbxk4WQm2nhWfMew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 04:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 690 (0x2b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6038/serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE Validity Not Before: Jun 1 04:43:12 2024 GMT Not After : Jun 8 04:43:12 2024 GMT Subject: CN=665aa6e0-80e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:00:e0:d2:3b:40:b6:5c:de:ea:1c:61:bb:49: 52:97:1b:cf:00:f2:a3:d5:d2:d6:da:e1:72:63:02: 76:21:6d:b3:35:b0:0a:0c:15:bf:5b:ab:72:6d:f6: ab:ac:dd:f2:44:f3:28:16:13:6c:c5:1b:d1:84:7a: 51:ab:14:81:b5:80:ca:a8:f0:97:07:bc:0d:51:f3: 65:eb:0e:31:1f:46:c7:fb:b6:27:7b:09:1a:63:3a: 4f:36:53:b0:cb:73:00:a0:9b:80:14:00:a1:e1:e7: 7e:c1:f2:33:f2:2e:5b:f0:23:22:7b:9c:8b:9f:0f: fa:23:35:30:a5:35:6a:4a:b4:eb:0a:f6:c6:d0:fb: ed:0c:44:8a:be:8e:af:5c:8f:d7:24:7f:fa:3b:89: e4:74:5f:d4:cd:3f:d3:63:00:c0:25:d2:4d:a0:34: d8:be:aa:ff:77:58:35:49:c0:90:54:14:77:f4:fb: aa:14:3d:70:e2:13:23:61:86:69:71:31:cb:82:c7: 06:a4:17:98:4d:06:59:59:5d:74:47:e0:db:83:ec: ed:40:ba:59:cf:aa:24:ee:fd:cd:62:e6:76:bc:7f: 25:73:e3:32:e7:df:a9:1b:d6:94:bf:0e:6b:22:1b: 70:9b:53:e8:b6:86:d3:c4:57:3f:57:3e:43:98:f7: 61:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C6:DC:60:06:64:0A:37:57:05:55:99:20:DF:55:2B:9E:90:FB:90 X509v3 Authority Key Identifier: keyid:7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:e5:c6:e9:4f:6d:41:da:d3:d2:7f:8a:3b:e4:12:97:7b:c8: fb:8f:6c:05:db:69:87:b9:06:ec:3b:af:a4:e1:31:9c:20:b2: e3:a8:12:c5:7c:a0:61:5b:ab:86:c5:df:17:44:68:51:af:d8: 9f:d1:39:26:1f:d9:0a:e9:a4:c3:ed:ed:95:60:7e:e6:84:a1: 68:ae:0e:ab:91:f8:9d:2b:cb:2c:47:ac:af:55:44:17:f0:a3: 30:45:38:d5:6b:18:6e:e7:bc:38:d7:07:aa:87:e7:26:47:30: dd:1b:10:b2:54:2f:a4:0a:89:3e:4d:85:eb:da:db:ab:44:05: 4d:d4:45:91:35:8c:82:e4:6a:08:3c:1c:b0:77:3e:3e:40:9f: e9:d1:ac:4d:ec:9a:61:bb:8b:60:00:68:e7:c1:53:f4:34:d0: 24:87:17:2a:08:f5:e9:85:8d:7f:9e:f0:eb:b1:14:2d:4c:40: a0:c7:d2:85:5b:fb:e6:d1:5f:94:88:63:c1:53:62:4d:00:3e: 69:27:a1:3f:85:68:95:70:a5:be:dc:91:64:6a:b3:3e:12:90: 1c:14:b5:35:4a:e7:18:37:16:95:8b:d2:76:56:84:be:13:fd: 42:57:e7:fa:7c:68:07:d4:01:cb:20:bf:06:92:1f:12:a1:ca: 59:e3:72:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYwMzgxMTAvBgNVBAUTKDdBOThBQjY5QjcyQkFBQzY2NjBFNTRERDFDNkQ4QTA2 MkUyQ0QyRkUwHhcNMjQwNjAxMDQ0MzEyWhcNMjQwNjA4MDQ0MzEyWjAYMRYwFAYD VQQDEw02NjVhYTZlMC04MGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxgDg0jtAtlze6hxhu0lSlxvPAPKj1dLW2uFyYwJ2IW2zNbAKDBW/W6tybfar rN3yRPMoFhNsxRvRhHpRqxSBtYDKqPCXB7wNUfNl6w4xH0bH+7YnewkaYzpPNlOw y3MAoJuAFACh4ed+wfIz8i5b8CMie5yLnw/6IzUwpTVqSrTrCvbG0PvtDESKvo6v XI/XJH/6O4nkdF/UzT/TYwDAJdJNoDTYvqr/d1g1ScCQVBR39PuqFD1w4hMjYYZp cTHLgscGpBeYTQZZWV10R+Dbg+ztQLpZz6ok7v3NYuZ2vH8lc+My59+pG9aUvw5r Ihtwm1PotobTxFc/Vz5DmPdhewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDzG3GAG ZAo3VwVVmSDfVSuekPuQMB8GA1UdIwQYMBaAFHqYq2m3K6rGZg5U3RxtigYuLNL+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjAzOC85MUUwQzg1MkFG RkMxMUVDQjBDMzg4NURDNEY5QUUwMi9lcGlyYWJjcnFzWm1EbFRkSEcyS0JpNHMw djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwaXJhYmNycXNabURsVGRIRzJLQmk0czB2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjAzOC85MUUwQzg1MkFGRkMxMUVDQjBDMzg4NURDNEY5QUUwMi9lcGlyYWJjcnFz Wm1EbFRkSEcyS0JpNHMwdjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV5cbpT21B2tPSf4o75BKXe8j7j2wF22mHuQbsO6+k4TGcILLjqBLF fKBhW6uGxd8XRGhRr9if0TkmH9kK6aTD7e2VYH7mhKForg6rkfidK8ssR6yvVUQX 8KMwRTjVaxhu57w41weqh+cmRzDdGxCyVC+kCok+TYXr2turRAVN1EWRNYyC5GoI PBywdz4+QJ/p0axN7Jphu4tgAGjnwVP0NNAkhxcqCPXphY1/nvDrsRQtTECgx9KF W/vm0V+UiGPBU2JNAD5pJ6E/hWiVcKW+3JFkarM+EpAcFLU1SucYNxaVi9J2VoS+ E/1CV+f6fGgH1AHLIL8Gkh8SocpZ43L2 -----END CERTIFICATE-----Generated at Sat Jun 1 05:48:44 2024 by rpki-client on console-fra.rpki-client.org