$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft File: ER6YG60wGDD3weWQzBqotIImDtg.mft (raw, json) Hash identifier: lUXD5+JXX2dFJd2sdIStiwt6laJlwDs3/Mp15IsZWro= Subject key identifier: 40:B9:A4:E0:54:E5:A0:ED:50:27:37:0F:39:C5:F8:65:22:26:80:25 Authority key identifier: 11:1E:98:1B:AD:30:18:30:F7:C1:E5:90:CC:1A:A8:B4:82:26:0E:D8 Certificate issuer: /CN=A91F0FE2/serialNumber=111E981BAD301830F7C1E590CC1AA8B482260ED8 Certificate serial: 1B6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft Manifest number: 1B56 Signing time: Sun 28 Apr 2024 16:38:30 +0000 Manifest this update: Sun 28 Apr 2024 16:38:30 +0000 Manifest next update: Sun 05 May 2024 16:38:30 +0000 Files and hashes: 1: ER6YG60wGDD3weWQzBqotIImDtg.crl (hash: 4+NGLK+Xf+ZXYOJ8VbUdFbd/RMBvHmkOcB8ztP17n60=) 2: 14564AB0E83311E6A72DC543C4F9AE02.roa (hash: NUz4kB3CyIG2IBuDbo+UA9LBpVU0SpPOT0o+emRtCgw=) 3: 20C4803669A011EA9055BD0EC4F9AE02.roa (hash: FnUaKoThOa5+XgHVHWe2uhUGOR/oiQOVc+Zdq2BOUUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.crl rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 16:23:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7021 (0x1b6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0FE2/serialNumber=111E981BAD301830F7C1E590CC1AA8B482260ED8 Validity Not Before: Apr 28 16:38:30 2024 GMT Not After : May 5 16:38:30 2024 GMT Subject: CN=662e7b86-192b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:90:18:57:0d:6a:18:87:00:43:90:3b:35:8d: 4a:81:01:70:18:1a:07:59:1d:9b:08:b8:91:43:14: 79:fd:93:41:9f:9f:3b:fd:e3:94:f8:26:89:1c:66: 4d:4f:c3:ec:6c:4d:98:a0:1c:d4:cd:58:41:67:c7: 30:14:af:44:1d:de:4d:b2:eb:e0:15:9e:96:36:46: 0d:20:9f:20:23:09:19:fe:55:86:d0:a3:de:8f:37: 8e:1e:27:66:0c:3b:2d:09:25:a9:c6:ba:ba:1d:b9: 1e:61:f4:38:b6:39:23:2a:28:2d:77:0a:7e:3d:d2: 7f:12:e6:fc:02:b0:4b:0a:ae:14:1a:63:b4:c5:e3: 79:b5:c9:5e:a4:06:e0:85:5f:1f:71:c1:76:92:9f: 14:09:f2:dd:6b:54:15:83:34:40:cd:a5:b1:a0:47: 66:f3:6a:92:b2:f4:b6:fa:8d:a0:f3:fe:0b:f8:7d: d7:5d:92:73:a6:87:35:c2:3b:0f:29:28:58:0f:f7: 0b:e9:d5:33:05:70:60:af:a9:be:5c:e9:d3:c6:41: 23:e8:33:b6:0f:c1:49:27:9e:6f:25:80:56:9a:2e: ed:67:d8:11:48:43:70:58:9b:7f:9a:42:b8:7f:74: f8:0c:b2:ec:8b:3f:c2:bd:fb:04:1b:2e:91:a5:52: fb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B9:A4:E0:54:E5:A0:ED:50:27:37:0F:39:C5:F8:65:22:26:80:25 X509v3 Authority Key Identifier: keyid:11:1E:98:1B:AD:30:18:30:F7:C1:E5:90:CC:1A:A8:B4:82:26:0E:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:67:53:52:82:9a:26:97:02:a6:b0:78:a3:79:1d:2b:10:e2: 4a:79:60:d5:6d:a5:0b:46:7a:f7:c3:2b:16:b4:8a:8c:5e:21: e7:fb:17:fb:33:52:4a:1c:d0:37:96:31:4d:e7:f4:91:f5:37: 2b:62:02:90:1c:6a:ae:c2:ab:9c:ac:af:09:be:60:ec:cd:38: e7:cb:4b:66:87:e9:2f:cc:c0:41:ed:cd:0b:77:91:25:74:9d: 47:a8:0a:d6:77:6f:82:dc:95:36:15:0a:4a:91:44:56:56:40: dc:7a:74:71:bc:ef:21:dd:a3:e4:c0:f5:2d:8e:fb:7c:96:cf: ff:36:c4:c7:ce:9b:e7:4f:eb:ec:b1:a3:6e:ea:c9:6b:c6:6a: fd:9f:48:9a:d5:1f:4e:90:c4:e1:25:67:bd:53:dc:eb:a9:cd: e4:0d:b1:a9:b8:f2:e9:33:88:55:71:53:14:5b:c9:b2:40:31: 5b:eb:23:00:2c:d2:d4:48:da:3e:72:95:84:52:da:b3:f7:bd: 92:5d:e4:83:de:d0:04:bb:9d:0f:e8:49:b4:de:c4:4f:ed:26: 99:84:16:3e:a2:6f:2f:88:a8:8f:62:83:88:71:06:86:56:f0: cc:01:03:59:75:97:96:b9:c3:25:fe:f3:b0:91:16:c0:1b:a6: ea:e8:bd:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGRTIxMTAvBgNVBAUTKDExMUU5ODFCQUQzMDE4MzBGN0MxRTU5MENDMUFBOEI0 ODIyNjBFRDgwHhcNMjQwNDI4MTYzODMwWhcNMjQwNTA1MTYzODMwWjAYMRYwFAYD VQQDEw02NjJlN2I4Ni0xOTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5AYVw1qGIcAQ5A7NY1KgQFwGBoHWR2bCLiRQxR5/ZNBn587/eOU+CaJHGZN T8PsbE2YoBzUzVhBZ8cwFK9EHd5NsuvgFZ6WNkYNIJ8gIwkZ/lWG0KPejzeOHidm DDstCSWpxrq6HbkeYfQ4tjkjKigtdwp+PdJ/Eub8ArBLCq4UGmO0xeN5tclepAbg hV8fccF2kp8UCfLda1QVgzRAzaWxoEdm82qSsvS2+o2g8/4L+H3XXZJzpoc1wjsP KShYD/cL6dUzBXBgr6m+XOnTxkEj6DO2D8FJJ55vJYBWmi7tZ9gRSENwWJt/mkK4 f3T4DLLsiz/CvfsEGy6RpVL7eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEC5pOBU 5aDtUCc3DznF+GUiJoAlMB8GA1UdIwQYMBaAFBEemButMBgw98HlkMwaqLSCJg7Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEZFMi8yRkY5QkIyMkU4 MzIxMUU2QkY1MTI4NDJDNEY5QUUwMi9FUjZZRzYwd0dERDN3ZVdRekJxb3RJSW1E dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VSNllHNjB3R0REM3dlV1F6QnFvdElJbUR0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEZFMi8yRkY5QkIyMkU4MzIxMUU2QkY1MTI4NDJDNEY5QUUwMi9FUjZZRzYwd0dE RDN3ZVdRekJxb3RJSW1EdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2Z1NSgpomlwKmsHijeR0rEOJKeWDVbaULRnr3wysWtIqMXiHn+xf7 M1JKHNA3ljFN5/SR9TcrYgKQHGquwqucrK8JvmDszTjny0tmh+kvzMBB7c0Ld5El dJ1HqArWd2+C3JU2FQpKkURWVkDcenRxvO8h3aPkwPUtjvt8ls//NsTHzpvnT+vs saNu6slrxmr9n0ia1R9OkMThJWe9U9zrqc3kDbGpuPLpM4hVcVMUW8myQDFb6yMA LNLUSNo+cpWEUtqz972SXeSD3tAEu50P6Em03sRP7SaZhBY+om8viKiPYoOIcQaG VvDMAQNZdZeWucMl/vOwkRbAG6bq6L3q -----END CERTIFICATE-----Generated at Sun Apr 28 19:01:42 2024 by rpki-client on console-fra.rpki-client.org