$ rpki-client -vvf rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft File: 7EhKUeRjuYr44bAq4ilVoTIvH3U.mft (raw, json) Hash identifier: CZ5tOvofXFGYPDCE7Q9rt3nSmr02jpK0HozUAaOEGYI= Subject key identifier: A9:D2:5A:A7:66:F5:93:02:00:5B:91:F0:76:6D:D9:14:F9:20:DB:8D Authority key identifier: EC:48:4A:51:E4:63:B9:8A:F8:E1:B0:2A:E2:29:55:A1:32:2F:1F:75 Certificate issuer: /CN=A91F48F2/serialNumber=EC484A51E463B98AF8E1B02AE22955A1322F1F75 Certificate serial: 33E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft Manifest number: 33CE Signing time: Fri 26 Apr 2024 15:29:18 +0000 Manifest this update: Fri 26 Apr 2024 15:29:18 +0000 Manifest next update: Fri 03 May 2024 15:29:18 +0000 Files and hashes: 1: 7EhKUeRjuYr44bAq4ilVoTIvH3U.crl (hash: 2m410auLCZLy9pQjghX9kDpDFVY1faixcsDt+EZE4Ns=) 2: 579661B0C35411EBB2866C79C4F9AE02.roa (hash: hAHBlIc63fjBz7m8D1LH4yeKYVrIacs9IaXPJ3EIcMU=) 3: A41F0E9A9B5111EBB9E83D28C4F9AE02.roa (hash: WpjTjpMXKFBkfdRUub5ZzmaRQ8eYU6DXclbnuRHYHxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.crl rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:29:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13285 (0x33e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F48F2/serialNumber=EC484A51E463B98AF8E1B02AE22955A1322F1F75 Validity Not Before: Apr 26 15:29:18 2024 GMT Not After : May 3 15:29:18 2024 GMT Subject: CN=662bc84e-ad42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:68:a4:60:13:0c:64:da:be:31:fe:3d:a1:fe: 20:ad:41:60:86:5e:a7:22:54:c9:a7:52:98:f1:de: e5:1b:ec:dc:c8:7a:e1:eb:65:9a:fa:0e:32:1a:14: d2:b1:f5:a2:7a:df:5b:4b:93:a8:73:b9:3b:73:81: 54:11:30:66:7e:e9:e6:74:44:c1:59:2d:9f:0f:84: a7:e8:54:57:5c:41:40:a5:0c:a3:14:88:11:09:1e: c2:86:dc:32:6c:2c:50:2c:34:69:37:89:4c:4d:84: 0b:45:58:56:d2:29:0b:ea:85:63:ed:24:7e:2b:72: bf:85:02:e5:14:87:82:af:46:92:32:57:16:22:15: d9:54:12:18:71:44:a0:a8:d9:88:de:32:2a:a3:db: f9:2d:2e:ca:ac:26:2e:f1:61:9a:d0:66:fa:58:e1: 2a:26:34:ea:3a:a5:b3:35:07:31:24:16:29:b8:29: 08:57:21:e9:6a:f6:5e:b5:b8:20:09:49:ad:f5:0e: e7:79:66:f9:13:d8:06:c3:7e:1d:f3:1a:6a:1c:71: 64:8d:ea:25:8a:d9:23:2f:f0:8f:74:5f:8a:fe:9a: 7d:10:99:83:ae:1b:a4:62:0b:cb:ea:8f:80:82:26: 54:0a:0c:c7:ef:19:18:d7:08:01:b5:47:1d:56:5a: 6d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D2:5A:A7:66:F5:93:02:00:5B:91:F0:76:6D:D9:14:F9:20:DB:8D X509v3 Authority Key Identifier: keyid:EC:48:4A:51:E4:63:B9:8A:F8:E1:B0:2A:E2:29:55:A1:32:2F:1F:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:53:b7:fc:47:30:cc:30:98:17:92:fb:92:a7:01:e9:92:97: 63:43:2e:dd:84:2f:37:0e:83:9d:2a:56:22:88:e5:fb:3f:86: 55:c3:98:45:c7:fc:c9:8a:04:2d:81:69:50:f4:99:5b:2c:5c: 34:45:75:6f:cd:44:35:cd:aa:26:04:8a:68:03:ce:4f:63:b2: 3c:a2:69:bb:69:5f:c4:a7:9c:75:40:a9:0d:1d:13:e3:6d:97: d2:82:ad:87:a7:a6:b0:a8:74:06:4e:cd:05:99:d9:46:7b:41: d0:c3:28:73:a1:41:73:c7:96:1c:4e:28:cf:1d:c7:62:80:15: f3:9b:f9:90:dc:7f:b2:d8:c0:7e:b3:be:25:51:51:b9:69:11: 0a:8f:f1:42:44:83:3d:d2:4c:8f:e8:d3:32:1a:c4:f2:99:fb: de:01:e8:e4:09:a5:45:e0:2a:f8:75:6d:1b:4b:a8:ca:ff:46: cf:59:88:35:9d:5f:5d:6e:4c:57:bf:39:e7:53:b1:78:c1:55: ad:04:ca:96:46:f2:52:bd:ff:7a:25:b7:21:52:d1:77:1c:f0: 0a:d9:79:1a:40:de:12:0d:8c:f8:69:5d:3e:59:42:76:d9:db: a8:8f:99:8d:ca:65:4c:b9:36:b4:85:38:6e:70:d2:8d:e9:54: cc:2f:96:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ4RjIxMTAvBgNVBAUTKEVDNDg0QTUxRTQ2M0I5OEFGOEUxQjAyQUUyMjk1NUEx MzIyRjFGNzUwHhcNMjQwNDI2MTUyOTE4WhcNMjQwNTAzMTUyOTE4WjAYMRYwFAYD VQQDEw02NjJiYzg0ZS1hZDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2ikYBMMZNq+Mf49of4grUFghl6nIlTJp1KY8d7lG+zcyHrh62Wa+g4yGhTS sfWiet9bS5Ooc7k7c4FUETBmfunmdETBWS2fD4Sn6FRXXEFApQyjFIgRCR7Chtwy bCxQLDRpN4lMTYQLRVhW0ikL6oVj7SR+K3K/hQLlFIeCr0aSMlcWIhXZVBIYcUSg qNmI3jIqo9v5LS7KrCYu8WGa0Gb6WOEqJjTqOqWzNQcxJBYpuCkIVyHpavZetbgg CUmt9Q7neWb5E9gGw34d8xpqHHFkjeolitkjL/CPdF+K/pp9EJmDrhukYgvL6o+A giZUCgzH7xkY1wgBtUcdVlpt+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKnSWqdm 9ZMCAFuR8HZt2RT5INuNMB8GA1UdIwQYMBaAFOxISlHkY7mK+OGwKuIpVaEyLx91 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDhGMi80NkQwOTE5ODFE QTkxMUUyOUNGRDNFQTQwOEIwMkNEMi83RWhLVWVSanVZcjQ0YkFxNGlsVm9USXZI M1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFaEtVZVJqdVlyNDRiQXE0aWxWb1RJdkgzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDhGMi80NkQwOTE5ODFEQTkxMUUyOUNGRDNFQTQwOEIwMkNEMi83RWhLVWVSanVZ cjQ0YkFxNGlsVm9USXZIM1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACU7f8RzDMMJgXkvuSpwHpkpdjQy7dhC83DoOdKlYiiOX7P4ZVw5hF x/zJigQtgWlQ9JlbLFw0RXVvzUQ1zaomBIpoA85PY7I8omm7aV/Ep5x1QKkNHRPj bZfSgq2Hp6awqHQGTs0FmdlGe0HQwyhzoUFzx5YcTijPHcdigBXzm/mQ3H+y2MB+ s74lUVG5aREKj/FCRIM90kyP6NMyGsTymfveAejkCaVF4Cr4dW0bS6jK/0bPWYg1 nV9dbkxXvznnU7F4wVWtBMqWRvJSvf96JbchUtF3HPAK2XkaQN4SDYz4aV0+WUJ2 2duoj5mNymVMuTa0hThucNKN6VTML5YQ -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:58 2024 by rpki-client on console-ams.rpki-client.org