$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft File: se7FntVhoNs9fUDDCvKrb-0pepg.mft (raw, json) Hash identifier: CyLaxkwJ/GP6OVZSFQgUrehNVhyPpt4k7Ed/Q2iJCa4= Subject key identifier: 46:4C:9C:F2:80:EB:76:80:70:1F:B6:DD:29:06:83:B5:67:D9:51:53 Authority key identifier: B1:EE:C5:9E:D5:61:A0:DB:3D:7D:40:C3:0A:F2:AB:6F:ED:29:7A:98 Certificate issuer: /CN=A91FDA00/serialNumber=B1EEC59ED561A0DB3D7D40C30AF2AB6FED297A98 Certificate serial: 06A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se7FntVhoNs9fUDDCvKrb-0pepg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft Manifest number: 069C Signing time: Sat 04 May 2024 23:26:08 +0000 Manifest this update: Sat 04 May 2024 23:26:08 +0000 Manifest next update: Sat 11 May 2024 23:26:08 +0000 Files and hashes: 1: se7FntVhoNs9fUDDCvKrb-0pepg.crl (hash: CgKG4Sl1Rm/p6i1FoJdRxGGr16v88dtEgF1PxPQJ8mw=) 2: B77DFD4E1CE311EB88EB1B78C4F9AE02.roa (hash: JMs2/LJjQt6KiixkV3wONxqsVX9WfdE5oB9RcjzVjrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.crl rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se7FntVhoNs9fUDDCvKrb-0pepg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1697 (0x6a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDA00/serialNumber=B1EEC59ED561A0DB3D7D40C30AF2AB6FED297A98 Validity Not Before: May 4 23:26:08 2024 GMT Not After : May 11 23:26:08 2024 GMT Subject: CN=6636c410-b825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bb:d1:89:4c:80:e9:0f:ca:31:9f:00:e7:11: ac:a9:ac:cc:1d:61:f4:a3:dd:0b:bc:49:83:ed:10: 71:28:65:df:2f:5f:2d:15:cc:04:9c:c3:0a:78:ff: e5:df:01:4f:f8:2e:f0:4c:a5:b5:91:88:a8:56:16: 07:2f:ee:bc:03:ac:27:08:d4:bf:d4:ba:5b:9e:fa: ab:da:8e:b1:a2:78:a4:c0:6a:5f:02:ba:1b:bf:e3: 7d:a0:2c:8e:11:20:fe:28:3e:14:21:b5:6f:88:60: 6f:6b:63:63:f6:7f:aa:5e:94:1d:62:dd:65:e6:00: 52:30:ec:79:ab:00:5d:5f:56:ce:f2:f2:e5:9d:b4: 7e:47:e0:e2:7d:b8:b3:dd:ef:aa:d7:0b:a3:f7:e4: 9f:01:6a:2e:fa:20:a0:24:7c:23:14:dc:d9:34:b2: 2b:84:3b:c6:aa:10:ea:33:64:3f:ad:4c:8b:cf:b7: 3d:fa:14:a6:e3:e2:ba:a1:ae:99:80:6d:f4:71:48: 51:2d:28:b5:fa:7b:79:50:69:36:cb:ce:c2:bd:60: e7:93:79:cd:3f:e9:c8:a6:22:82:5b:50:6f:0b:ef: fd:59:e4:2b:54:6f:57:cf:ee:cd:23:65:e1:b4:59: 4a:c6:2e:45:94:83:ac:b9:5b:ea:cc:bd:cc:32:b1: a7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:4C:9C:F2:80:EB:76:80:70:1F:B6:DD:29:06:83:B5:67:D9:51:53 X509v3 Authority Key Identifier: keyid:B1:EE:C5:9E:D5:61:A0:DB:3D:7D:40:C3:0A:F2:AB:6F:ED:29:7A:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se7FntVhoNs9fUDDCvKrb-0pepg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:f9:03:6e:19:4e:70:fa:9e:8d:2c:c6:3f:72:9b:d8:12:08: 65:d6:6a:2d:5b:73:1f:22:8c:94:c2:2b:0f:b3:44:71:c3:9a: f6:6f:0c:8b:86:08:91:2c:31:bc:f6:89:67:9a:1f:7d:d6:b5: b9:98:20:21:9f:8b:3f:e7:33:80:9f:06:5b:1e:17:b7:88:06: 61:41:9d:c2:aa:af:c8:c3:fc:f2:6a:34:d8:68:83:ae:89:31: f3:b2:39:c1:17:17:35:65:bb:15:30:38:8b:0c:b1:98:74:7f: d4:46:fb:11:6e:6f:32:20:3d:75:b5:3a:f0:af:bc:75:1a:2b: 6c:9d:9e:a5:8e:38:9f:b8:26:d5:43:d4:d2:57:35:e8:e3:a0: 73:d5:50:b3:49:dd:65:04:d7:09:0f:54:72:80:5f:23:40:3d: d7:d1:4a:84:69:eb:f4:e0:a0:0c:f6:af:a3:cb:12:ee:21:26: 70:c4:ae:8e:32:5a:fc:49:cd:b1:01:ac:03:86:7a:5b:02:6f: 16:82:78:d6:53:c1:64:04:51:1b:9c:67:dc:59:e4:d6:da:75: a3:32:ed:0f:0a:b7:65:7a:50:fc:52:e6:5c:e4:8f:c6:1d:cc: bd:22:cf:26:12:56:11:e8:3f:6e:24:fc:15:35:a0:80:e4:43: 06:3e:de:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRBMDAxMTAvBgNVBAUTKEIxRUVDNTlFRDU2MUEwREIzRDdENDBDMzBBRjJBQjZG RUQyOTdBOTgwHhcNMjQwNTA0MjMyNjA4WhcNMjQwNTExMjMyNjA4WjAYMRYwFAYD VQQDEw02NjM2YzQxMC1iODI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArrvRiUyA6Q/KMZ8A5xGsqazMHWH0o90LvEmD7RBxKGXfL18tFcwEnMMKeP/l 3wFP+C7wTKW1kYioVhYHL+68A6wnCNS/1Lpbnvqr2o6xonikwGpfArobv+N9oCyO ESD+KD4UIbVviGBva2Nj9n+qXpQdYt1l5gBSMOx5qwBdX1bO8vLlnbR+R+Difbiz 3e+q1wuj9+SfAWou+iCgJHwjFNzZNLIrhDvGqhDqM2Q/rUyLz7c9+hSm4+K6oa6Z gG30cUhRLSi1+nt5UGk2y87CvWDnk3nNP+nIpiKCW1BvC+/9WeQrVG9Xz+7NI2Xh tFlKxi5FlIOsuVvqzL3MMrGnaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZMnPKA 63aAcB+23SkGg7Vn2VFTMB8GA1UdIwQYMBaAFLHuxZ7VYaDbPX1Awwryq2/tKXqY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREEwMC83REQ3NTBEQzFD RTIxMUVCOUFBQjQ5NzdDNEY5QUUwMi9zZTdGbnRWaG9OczlmVUREQ3ZLcmItMHBl cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NlN0ZudFZob05zOWZVRERDdktyYi0wcGVwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REEwMC83REQ3NTBEQzFDRTIxMUVCOUFBQjQ5NzdDNEY5QUUwMi9zZTdGbnRWaG9O czlmVUREQ3ZLcmItMHBlcGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCM+QNuGU5w+p6NLMY/cpvYEghl1motW3MfIoyUwisPs0Rxw5r2bwyL hgiRLDG89olnmh991rW5mCAhn4s/5zOAnwZbHhe3iAZhQZ3Cqq/Iw/zyajTYaIOu iTHzsjnBFxc1ZbsVMDiLDLGYdH/URvsRbm8yID11tTrwr7x1GitsnZ6ljjifuCbV Q9TSVzXo46Bz1VCzSd1lBNcJD1RygF8jQD3X0UqEaev04KAM9q+jyxLuISZwxK6O Mlr8Sc2xAawDhnpbAm8WgnjWU8FkBFEbnGfcWeTW2nWjMu0PCrdlelD8UuZc5I/G Hcy9Is8mElYR6D9uJPwVNaCA5EMGPt7h -----END CERTIFICATE-----Generated at Sun May 5 00:14:48 2024 by rpki-client on console-ams.rpki-client.org