$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.mft File: ealNKOVCRzgJE4PV9Jdb_bzqrnk.mft (raw, json) Hash identifier: +1NBasSVKYPZZYqAjJbu+vCRZ3yPNwCBi64d7YCsg2A= Subject key identifier: 71:02:83:3E:BB:4A:AE:43:28:F3:EE:F5:66:CA:BD:7C:D3:00:B1:38 Authority key identifier: 79:A9:4D:28:E5:42:47:38:09:13:83:D5:F4:97:5B:FD:BC:EA:AE:79 Certificate issuer: /CN=A91F5FA2/serialNumber=79A94D28E5424738091383D5F4975BFDBCEAAE79 Certificate serial: 0602 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ealNKOVCRzgJE4PV9Jdb_bzqrnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.mft Manifest number: 05FB Signing time: Wed 01 May 2024 00:16:41 +0000 Manifest this update: Wed 01 May 2024 00:16:41 +0000 Manifest next update: Wed 08 May 2024 00:16:41 +0000 Files and hashes: 1: ealNKOVCRzgJE4PV9Jdb_bzqrnk.crl (hash: aSFTRlR4WoHU8MxwJ7+4qEcJUdbpi5nxfRAkrPsHras=) 2: FE4992F25C3411EBA2B9004DC4F9AE02.roa (hash: wHNA0x4GasQrWrqSDrq3YT+oTPhFuFFUgCOX0+Iim4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.crl rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ealNKOVCRzgJE4PV9Jdb_bzqrnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 00:16:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1538 (0x602) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5FA2/serialNumber=79A94D28E5424738091383D5F4975BFDBCEAAE79 Validity Not Before: May 1 00:16:41 2024 GMT Not After : May 8 00:16:41 2024 GMT Subject: CN=663189e9-6dbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:61:8b:cb:ac:38:a4:9d:99:c3:10:52:5b:de: ba:7f:5a:5e:ab:6a:5b:08:b8:cd:bc:c1:e4:41:cb: f9:64:0c:72:35:ee:76:58:b1:be:51:7b:e9:69:33: fc:13:39:04:33:50:c9:09:68:e0:c7:f5:9b:9e:d7: 01:d9:92:ea:c1:3b:dc:ba:92:a4:cc:12:c0:af:c1: 20:a5:57:3e:23:85:99:1c:11:f1:a5:20:2e:25:97: 9f:93:1e:4d:5b:a2:c7:43:33:10:94:a9:1b:2f:61: 1e:d3:56:5e:62:2f:5f:00:2c:c9:bf:5c:c3:2e:be: 34:f5:19:f3:28:3a:42:84:22:59:94:04:18:43:a2: 84:63:9c:34:14:24:a6:a7:62:71:1d:a2:f2:c4:f8: 47:63:23:c0:54:79:47:af:9f:43:c7:23:79:0b:e1: 46:87:a2:43:78:e5:08:6d:0d:ed:c5:0f:d2:5e:83: 62:f7:e1:23:39:8e:5f:0e:45:59:e7:29:64:78:28: 9d:86:30:df:a9:29:11:8d:ca:b3:b0:b7:67:93:dc: b7:76:f8:b7:00:12:45:15:bc:9f:11:94:81:26:64: 61:45:9b:af:37:29:a0:ac:b5:64:a3:3d:b2:b9:83: 55:97:db:6c:ff:cc:f1:bc:b1:7a:3b:ef:3c:ef:b8: fc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:02:83:3E:BB:4A:AE:43:28:F3:EE:F5:66:CA:BD:7C:D3:00:B1:38 X509v3 Authority Key Identifier: keyid:79:A9:4D:28:E5:42:47:38:09:13:83:D5:F4:97:5B:FD:BC:EA:AE:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ealNKOVCRzgJE4PV9Jdb_bzqrnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:1a:3e:77:53:8b:0a:a3:88:3c:e5:07:c3:d3:95:fe:47:c3: b1:e8:b2:94:7b:b1:b2:5c:ff:6b:23:47:e1:44:56:48:0e:02: c9:53:29:b3:9f:b2:d5:6f:49:83:b3:82:15:ba:a4:94:3b:27: 40:58:26:5e:24:c1:58:5d:41:ef:32:73:59:05:4c:37:5e:93: eb:34:a2:27:b7:d1:93:89:82:70:a9:f9:f1:62:dc:15:4c:94: 7a:ef:25:db:c1:3a:86:84:53:83:cd:4f:dc:b1:97:af:63:ad: e0:cf:0c:e7:59:67:34:e1:77:2b:36:51:cc:a2:d2:cf:15:dd: 82:a1:9b:a0:91:d7:94:bb:91:88:d8:5f:17:8c:c2:96:8b:28: c4:29:1f:7d:37:68:08:c6:2d:ba:e2:11:a2:81:c6:d9:08:7f: bb:ee:8d:70:f3:de:3f:82:c4:5f:1e:2f:4c:33:02:6e:80:7f: 81:58:f2:15:92:97:da:ae:76:27:eb:88:db:5d:3b:7e:6e:c2: 00:72:94:c2:9b:7f:95:77:65:f1:94:d1:1d:96:bd:c4:55:4f: 5c:eb:0b:e3:10:04:dc:16:b5:a4:77:78:7b:1d:44:3a:5b:4a: 0e:ab:c3:40:b4:c6:d0:80:c5:25:de:be:c6:da:48:d8:99:9c: 7a:4f:d8:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjVGQTIxMTAvBgNVBAUTKDc5QTk0RDI4RTU0MjQ3MzgwOTEzODNENUY0OTc1QkZE QkNFQUFFNzkwHhcNMjQwNTAxMDAxNjQxWhcNMjQwNTA4MDAxNjQxWjAYMRYwFAYD VQQDEw02NjMxODllOS02ZGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5mGLy6w4pJ2ZwxBSW966f1peq2pbCLjNvMHkQcv5ZAxyNe52WLG+UXvpaTP8 EzkEM1DJCWjgx/WbntcB2ZLqwTvcupKkzBLAr8EgpVc+I4WZHBHxpSAuJZefkx5N W6LHQzMQlKkbL2Ee01ZeYi9fACzJv1zDLr409RnzKDpChCJZlAQYQ6KEY5w0FCSm p2JxHaLyxPhHYyPAVHlHr59DxyN5C+FGh6JDeOUIbQ3txQ/SXoNi9+EjOY5fDkVZ 5ylkeCidhjDfqSkRjcqzsLdnk9y3dvi3ABJFFbyfEZSBJmRhRZuvNymgrLVkoz2y uYNVl9ts/8zxvLF6O+8877j8uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHECgz67 Sq5DKPPu9WbKvXzTALE4MB8GA1UdIwQYMBaAFHmpTSjlQkc4CROD1fSXW/286q55 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNUZBMi8wMzI1NDQ0MDVD MzIxMUVCOTdCRjdDNDVDNEY5QUUwMi9lYWxOS09WQ1J6Z0pFNFBWOUpkYl9ienFy bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VhbE5LT1ZDUnpnSkU0UFY5SmRiX2J6cXJuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NUZBMi8wMzI1NDQ0MDVDMzIxMUVCOTdCRjdDNDVDNEY5QUUwMi9lYWxOS09WQ1J6 Z0pFNFBWOUpkYl9ienFybmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxGj53U4sKo4g85QfD05X+R8Ox6LKUe7GyXP9rI0fhRFZIDgLJUymz n7LVb0mDs4IVuqSUOydAWCZeJMFYXUHvMnNZBUw3XpPrNKInt9GTiYJwqfnxYtwV TJR67yXbwTqGhFODzU/csZevY63gzwznWWc04XcrNlHMotLPFd2CoZugkdeUu5GI 2F8XjMKWiyjEKR99N2gIxi264hGigcbZCH+77o1w894/gsRfHi9MMwJugH+BWPIV kpfarnYn64jbXTt+bsIAcpTCm3+Vd2XxlNEdlr3EVU9c6wvjEATcFrWkd3h7HUQ6 W0oOq8NAtMbQgMUl3r7G2kjYmZx6T9iT -----END CERTIFICATE-----Generated at Wed May 1 01:38:32 2024 by rpki-client on console-ams.rpki-client.org