$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft File: E72mTG8bWiwzOUc2NU6ejmvK4lY.mft (raw, json) Hash identifier: qe4US+kxYrLtoKm7Tptp2XoKGoDPbKk3iuCuDXaFOkw= Subject key identifier: E9:4F:56:CA:28:8B:FD:73:EA:9D:9E:BC:17:C5:E8:43:8D:8B:6B:10 Authority key identifier: 13:BD:A6:4C:6F:1B:5A:2C:33:39:47:36:35:4E:9E:8E:6B:CA:E2:56 Certificate issuer: /CN=A91F1C8C/serialNumber=13BDA64C6F1B5A2C33394736354E9E8E6BCAE256 Certificate serial: 0741 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft Manifest number: 073A Signing time: Sat 04 May 2024 22:35:16 +0000 Manifest this update: Sat 04 May 2024 22:35:16 +0000 Manifest next update: Sat 11 May 2024 22:35:16 +0000 Files and hashes: 1: E72mTG8bWiwzOUc2NU6ejmvK4lY.crl (hash: 4/EvOx3d3i9Ih4bErV1q9bDbyyMpMyrmVE0r4+/OPhU=) 2: FA870AFA94E011EDB701A974C4F9AE02.roa (hash: mqCx8M/RHuZYj43fBbP/BXD8QsL91PAOj7j3fAkLTIA=) 3: F8C3E4EA94E011EDB701A974C4F9AE02.roa (hash: DJlon1wpYevv0Gt/wwHCAXbi/zN+/rfFa315l1OWXL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.crl rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1857 (0x741) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1C8C/serialNumber=13BDA64C6F1B5A2C33394736354E9E8E6BCAE256 Validity Not Before: May 4 22:35:16 2024 GMT Not After : May 11 22:35:16 2024 GMT Subject: CN=6636b824-cd0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fe:d0:7d:17:36:01:68:92:55:d4:4c:a3:ae: 5f:11:51:8a:2a:f6:ff:a6:1a:dd:8e:7b:d9:7c:d3: 88:f8:56:00:bb:6a:41:ee:52:84:dd:7b:7f:8a:90: d2:a7:44:fe:28:e0:fa:68:be:fe:48:df:12:6f:2f: 68:48:a6:4c:e0:87:72:e8:32:5a:4a:97:dd:e0:50: d5:3e:ec:69:1f:dd:d1:46:35:03:e1:01:6a:00:ba: 9a:8d:a2:51:31:d7:dc:fd:64:9e:26:a6:46:b9:20: 8c:32:9c:eb:65:e6:32:36:0d:c3:2a:24:d8:fb:c1: 37:34:78:da:b1:da:35:27:fc:3a:e9:65:30:60:cf: ce:28:bd:21:0c:a4:7f:5a:95:26:c8:12:11:e6:65: ad:03:24:71:be:1d:fa:5a:61:8b:3c:c5:3a:d2:e5: 9d:7b:39:0c:34:ca:56:09:1d:f5:a7:48:fb:8d:f9: ae:88:95:56:50:da:9a:00:df:aa:0a:8c:33:71:48: 2e:59:07:0e:00:a0:16:63:c3:83:13:ec:a5:54:e1: 27:23:9f:7e:44:b2:41:73:83:f1:bc:42:17:dc:6a: ea:9b:35:cc:e6:15:eb:a0:f5:b0:5b:f6:06:9a:06: 96:cd:7a:d7:3d:ad:49:b1:f9:05:50:c2:f9:bd:54: 0f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:4F:56:CA:28:8B:FD:73:EA:9D:9E:BC:17:C5:E8:43:8D:8B:6B:10 X509v3 Authority Key Identifier: keyid:13:BD:A6:4C:6F:1B:5A:2C:33:39:47:36:35:4E:9E:8E:6B:CA:E2:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:2c:2a:d1:d3:de:9f:fb:e4:41:a9:98:a8:1c:53:83:85:57: 7c:96:66:16:df:7b:2a:1f:2c:ed:48:8c:78:e1:b0:e0:d7:24: 74:a4:2e:c7:0e:d8:cf:9d:f9:ff:ab:30:db:24:59:a0:c9:b6: 1f:91:2a:3b:c2:c0:d0:3d:f0:ed:33:90:9d:c1:08:58:a3:32: 59:bf:ab:e9:ca:6d:7e:d8:eb:90:01:7f:51:73:cd:a0:65:e6: 34:2e:8a:a4:f3:5b:bd:84:8e:3d:f8:b1:79:61:23:2c:97:8d: da:16:b4:5a:72:9a:dc:df:a3:0b:18:b5:f0:ca:76:00:e8:cf: cd:58:27:e4:1f:46:3b:6d:fb:4e:aa:04:12:70:25:f3:21:44: 9d:26:7f:5c:e1:a1:c9:7a:74:e8:6a:ca:0f:cc:e6:4e:3e:27: ba:8f:7f:b8:0a:64:ea:92:0c:4b:7b:e0:63:49:6d:64:94:f2: b8:17:1e:24:2b:78:36:06:66:d8:f6:fd:28:11:68:d1:6d:fd: 86:e8:52:a5:c6:de:bc:89:75:cf:7a:fa:2c:88:67:6a:e9:f0: 0f:1e:9b:63:4e:63:c6:ec:8c:31:0f:56:61:d2:1b:e1:56:bf: 8e:8f:14:72:c4:db:9b:5e:28:7b:be:9b:13:7e:d4:fa:ec:d9: fc:a4:bf:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFDOEMxMTAvBgNVBAUTKDEzQkRBNjRDNkYxQjVBMkMzMzM5NDczNjM1NEU5RThF NkJDQUUyNTYwHhcNMjQwNTA0MjIzNTE2WhcNMjQwNTExMjIzNTE2WjAYMRYwFAYD VQQDEw02NjM2YjgyNC1jZDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsP7QfRc2AWiSVdRMo65fEVGKKvb/phrdjnvZfNOI+FYAu2pB7lKE3Xt/ipDS p0T+KOD6aL7+SN8Sby9oSKZM4Idy6DJaSpfd4FDVPuxpH93RRjUD4QFqALqajaJR Mdfc/WSeJqZGuSCMMpzrZeYyNg3DKiTY+8E3NHjasdo1J/w66WUwYM/OKL0hDKR/ WpUmyBIR5mWtAyRxvh36WmGLPMU60uWdezkMNMpWCR31p0j7jfmuiJVWUNqaAN+q CowzcUguWQcOAKAWY8ODE+ylVOEnI59+RLJBc4PxvEIX3GrqmzXM5hXroPWwW/YG mgaWzXrXPa1JsfkFUML5vVQPoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOlPVsoo i/1z6p2evBfF6EONi2sQMB8GA1UdIwQYMBaAFBO9pkxvG1osMzlHNjVOno5ryuJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUM4Qy8yM0U1RDVERURG OTkxMUVBOUY4NUQ5ODJDNEY5QUUwMi9FNzJtVEc4Yldpd3pPVWMyTlU2ZWptdks0 bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U3Mm1URzhiV2l3ek9VYzJOVTZlam12SzRsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUM4Qy8yM0U1RDVERURGOTkxMUVBOUY4NUQ5ODJDNEY5QUUwMi9FNzJtVEc4Yldp d3pPVWMyTlU2ZWptdks0bFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9LCrR096f++RBqZioHFODhVd8lmYW33sqHyztSIx44bDg1yR0pC7H DtjPnfn/qzDbJFmgybYfkSo7wsDQPfDtM5CdwQhYozJZv6vpym1+2OuQAX9Rc82g ZeY0Loqk81u9hI49+LF5YSMsl43aFrRacprc36MLGLXwynYA6M/NWCfkH0Y7bftO qgQScCXzIUSdJn9c4aHJenToasoPzOZOPie6j3+4CmTqkgxLe+BjSW1klPK4Fx4k K3g2BmbY9v0oEWjRbf2G6FKlxt68iXXPevosiGdq6fAPHptjTmPG7IwxD1Zh0hvh Vr+OjxRyxNubXih7vpsTftT67Nn8pL8m -----END CERTIFICATE-----Generated at Sun May 5 00:14:47 2024 by rpki-client on console-ams.rpki-client.org