$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft File: e1ZuSGesy4G3S6nWZiJObARfDCc.mft (raw, json) Hash identifier: vGxSWWlxpZp6+GWtNS7wEYs/uLCZQIlptE8qQp0Qve8= Subject key identifier: BC:BE:66:6B:05:FC:72:CA:12:5D:CE:E4:DE:06:81:3D:A2:1A:C4:AC Authority key identifier: 7B:56:6E:48:67:AC:CB:81:B7:4B:A9:D6:66:22:4E:6C:04:5F:0C:27 Certificate issuer: /CN=A91F2DFB/serialNumber=7B566E4867ACCB81B74BA9D666224E6C045F0C27 Certificate serial: 02CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft Manifest number: 02C9 Signing time: Tue 07 May 2024 03:26:33 +0000 Manifest this update: Tue 07 May 2024 03:26:32 +0000 Manifest next update: Tue 14 May 2024 03:26:32 +0000 Files and hashes: 1: e1ZuSGesy4G3S6nWZiJObARfDCc.crl (hash: peay0FFXmxHX9/zEYzNarDyij0cKchVi/tWliPfeknA=) 2: 478248BEA05511ECABAEA234C4F9AE02.roa (hash: cArt6YUTsbYSvd5ig9TOlKQHhkid32MBiY+8srmpgT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.crl rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 03:26:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 716 (0x2cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2DFB/serialNumber=7B566E4867ACCB81B74BA9D666224E6C045F0C27 Validity Not Before: May 7 03:26:32 2024 GMT Not After : May 14 03:26:32 2024 GMT Subject: CN=66399f68-9156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:88:fa:c5:d7:be:e1:23:f3:31:76:28:44:10: 7c:2e:1a:4a:9b:10:d3:ea:7e:e8:86:cc:ba:9e:19: 29:07:de:90:33:18:ce:19:9c:80:8b:2c:d2:43:1a: f1:d9:0a:d6:56:a5:95:9c:e7:9c:ae:46:ff:89:38: 49:e7:ca:a9:fc:a0:dd:2f:ee:72:2f:81:ae:22:98: 31:1b:ef:aa:d9:cc:60:d3:48:60:75:54:ed:9d:fa: 1a:90:a0:1e:45:60:75:3d:f7:b2:84:96:99:b0:41: 9b:ec:ba:ba:12:0f:3c:15:d9:62:9c:7c:56:14:66: 0a:ed:52:3b:c8:74:d4:a1:61:10:d0:57:69:11:d9: 6c:fa:7f:13:e2:8c:3a:0e:f7:6a:c1:81:60:54:cb: 86:b1:ac:be:cf:85:99:ef:da:18:48:89:71:a3:a2: 50:fb:cc:6f:d1:b0:98:49:1b:22:17:65:72:d0:c6: b6:ce:53:d9:1d:21:99:bf:74:c6:69:f4:bd:8c:8b: c4:db:2b:c1:94:6f:28:b1:cd:1d:ee:de:28:9b:f7: e3:24:79:e6:fb:b6:7e:23:6c:65:e2:98:66:64:1d: 32:1f:8c:96:d9:a2:d3:bd:0f:d6:85:be:e6:3d:4f: 7c:b2:a7:f6:86:bc:a3:a3:07:c5:7b:6a:98:ef:5a: 80:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:BE:66:6B:05:FC:72:CA:12:5D:CE:E4:DE:06:81:3D:A2:1A:C4:AC X509v3 Authority Key Identifier: keyid:7B:56:6E:48:67:AC:CB:81:B7:4B:A9:D6:66:22:4E:6C:04:5F:0C:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:71:0c:47:44:8d:44:b8:c0:b8:15:4d:53:d7:7b:d3:a2:c3: 2b:e5:47:e0:e1:8f:ea:d9:03:53:5e:5a:40:e4:8d:f2:ed:da: 26:75:07:eb:99:5e:d5:c0:a8:fd:22:3b:a4:29:75:a1:fa:68: 61:a5:e4:93:05:40:a0:cd:cd:f3:b0:27:c6:01:74:48:f9:c8: 82:a1:4e:b0:21:4c:f1:c6:3a:eb:15:ca:5f:c9:42:a9:20:f6: d5:d3:9d:5e:69:a2:37:41:9e:ee:c1:f8:b5:eb:d3:4a:8f:92: 9b:85:39:ea:10:dc:e3:3e:0a:98:78:0f:53:f1:3f:0f:35:fc: ec:df:c0:bc:56:0f:0d:7c:47:8a:89:d2:3c:bd:90:d9:77:ca: e4:1b:47:28:6b:38:68:64:79:19:2b:b3:ee:39:4b:aa:a7:cf: 78:5d:8b:2a:f6:cb:e8:a0:56:a3:36:74:16:09:c5:1a:8b:b2: 1b:5c:0c:b9:7c:55:94:51:f0:be:c6:35:e1:b5:41:86:47:5f: dd:8c:ae:ba:a0:0c:25:89:9a:c4:97:4a:d9:52:5e:ca:77:ec: 05:fb:d3:aa:91:96:c3:27:a7:ed:6a:44:b7:4c:9c:cb:5b:d6: c8:cd:ff:d2:06:30:08:f6:80:31:9f:bb:e9:55:c1:39:38:bc: f7:a8:c8:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJERkIxMTAvBgNVBAUTKDdCNTY2RTQ4NjdBQ0NCODFCNzRCQTlENjY2MjI0RTZD MDQ1RjBDMjcwHhcNMjQwNTA3MDMyNjMyWhcNMjQwNTE0MDMyNjMyWjAYMRYwFAYD VQQDEw02NjM5OWY2OC05MTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnYj6xde+4SPzMXYoRBB8LhpKmxDT6n7ohsy6nhkpB96QMxjOGZyAiyzSQxrx 2QrWVqWVnOecrkb/iThJ58qp/KDdL+5yL4GuIpgxG++q2cxg00hgdVTtnfoakKAe RWB1PfeyhJaZsEGb7Lq6Eg88FdlinHxWFGYK7VI7yHTUoWEQ0FdpEdls+n8T4ow6 DvdqwYFgVMuGsay+z4WZ79oYSIlxo6JQ+8xv0bCYSRsiF2Vy0Ma2zlPZHSGZv3TG afS9jIvE2yvBlG8osc0d7t4om/fjJHnm+7Z+I2xl4phmZB0yH4yW2aLTvQ/Whb7m PU98sqf2hryjowfFe2qY71qAyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLy+ZmsF /HLKEl3O5N4GgT2iGsSsMB8GA1UdIwQYMBaAFHtWbkhnrMuBt0up1mYiTmwEXwwn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkRGQi85RkNBQURGRUEw NTAxMUVDOTdCRjhENzJDNEY5QUUwMi9lMVp1U0dlc3k0RzNTNm5XWmlKT2JBUmZE Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UxWnVTR2VzeTRHM1M2bldaaUpPYkFSZkRDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkRGQi85RkNBQURGRUEwNTAxMUVDOTdCRjhENzJDNEY5QUUwMi9lMVp1U0dlc3k0 RzNTNm5XWmlKT2JBUmZEQ2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/cQxHRI1EuMC4FU1T13vTosMr5Ufg4Y/q2QNTXlpA5I3y7domdQfr mV7VwKj9IjukKXWh+mhhpeSTBUCgzc3zsCfGAXRI+ciCoU6wIUzxxjrrFcpfyUKp IPbV051eaaI3QZ7uwfi169NKj5KbhTnqENzjPgqYeA9T8T8PNfzs38C8Vg8NfEeK idI8vZDZd8rkG0coazhoZHkZK7PuOUuqp894XYsq9svooFajNnQWCcUai7IbXAy5 fFWUUfC+xjXhtUGGR1/djK66oAwliZrEl0rZUl7Kd+wF+9OqkZbDJ6ftakS3TJzL W9bIzf/SBjAI9oAxn7vpVcE5OLz3qMjb -----END CERTIFICATE-----Generated at Tue May 7 04:34:53 2024 by rpki-client on console-fra.rpki-client.org