$ rpki-client -vvf rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft File: AduB721jlOZtOzIxW0eevteZyTc.mft (raw, json) Hash identifier: MFrnIW0ao5VDPAh5UKVsS2u1jIEoB6NPebjFJVHE1J4= Subject key identifier: 0A:00:E0:E4:93:92:EE:06:A7:E3:19:D8:48:47:EB:BC:18:A4:67:E1 Authority key identifier: 01:DB:81:EF:6D:63:94:E6:6D:3B:32:31:5B:47:9E:BE:D7:99:C9:37 Certificate issuer: /CN=A91FECDA/serialNumber=01DB81EF6D6394E66D3B32315B479EBED799C937 Certificate serial: 0E77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft Manifest number: 0E71 Signing time: Thu 02 May 2024 18:26:41 +0000 Manifest this update: Thu 02 May 2024 18:26:40 +0000 Manifest next update: Thu 09 May 2024 18:26:40 +0000 Files and hashes: 1: AduB721jlOZtOzIxW0eevteZyTc.crl (hash: U03a6czslPgswcikWTetX3GTbWiRVHAWRT31Ejy5O3o=) 2: E47A45626F9E11E9B98EF633C4F9AE02.roa (hash: usLm6ZKXkqgP4LipBRC+8rgtpbIBBfKXyGejQeUCVA0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.crl rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 18:26:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3703 (0xe77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FECDA/serialNumber=01DB81EF6D6394E66D3B32315B479EBED799C937 Validity Not Before: May 2 18:26:40 2024 GMT Not After : May 9 18:26:40 2024 GMT Subject: CN=6633dae1-2c15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2a:04:69:a9:2f:26:ac:8d:29:57:9e:04:85: 08:f6:55:2d:60:85:dd:8a:c2:cf:62:86:7e:39:b0: 72:68:57:ff:e4:c4:88:02:74:52:eb:43:67:9d:47: 50:9f:41:4a:ac:9b:87:82:6c:d0:54:3f:ad:68:c7: 35:27:fc:f1:ab:ce:b3:17:7a:df:8e:45:c1:8f:dd: d8:a9:85:86:b4:d2:24:fd:ea:1f:58:3d:17:1f:4f: 63:76:6d:77:cc:db:c9:f3:24:a1:36:16:46:c5:c6: df:3a:25:94:d0:58:d5:fe:40:86:77:6f:14:37:48: a6:1e:4a:0a:c6:45:66:f2:90:7d:bf:0b:fc:ea:dc: 7f:22:a0:cb:57:df:d7:4e:c0:1d:19:dd:50:02:d3: 30:e6:dc:a3:31:c0:9c:91:ee:b6:dd:46:74:2f:84: 61:ec:9b:40:e8:db:53:2e:59:85:f8:9b:39:af:0d: 89:4b:e2:bb:39:77:7d:94:34:97:95:56:ed:ee:ae: a9:64:e5:db:48:6b:ff:e3:25:e6:6c:f4:0f:49:4f: c7:30:dd:62:db:9f:4f:00:ff:de:a7:2c:a6:99:f2: a2:21:7d:c0:37:84:a2:9f:4b:38:bd:5c:f1:7a:29: e6:e6:2e:c2:e2:e9:9f:5c:5b:01:5b:ad:0c:77:5b: 4c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:00:E0:E4:93:92:EE:06:A7:E3:19:D8:48:47:EB:BC:18:A4:67:E1 X509v3 Authority Key Identifier: keyid:01:DB:81:EF:6D:63:94:E6:6D:3B:32:31:5B:47:9E:BE:D7:99:C9:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:3d:4c:8d:83:ba:70:5d:19:f6:4b:36:b0:fe:6c:88:85:a1: 07:8a:69:ff:45:86:e4:9a:1b:c7:28:d2:e3:8b:61:41:0f:64: 8d:d6:d7:61:5f:4d:3d:44:28:d9:b9:30:b5:75:c9:2b:eb:59: 28:23:77:f7:1d:42:45:30:80:dd:88:b4:f6:94:7f:28:25:d4: e0:e7:59:96:4a:3f:ab:26:d5:a1:a4:38:06:b0:c9:48:a1:fc: 8e:cd:cf:2c:53:b1:00:76:3d:61:9c:ea:6f:b8:37:38:25:9a: 85:46:88:82:9e:6c:82:a4:d3:92:f9:16:14:b8:7a:08:da:1f: 3d:b7:e7:18:0f:f8:66:30:9a:36:43:0c:2d:82:23:b6:e7:e7: 07:ee:d3:d9:b4:ab:5b:58:18:9f:56:18:23:9c:bd:4f:f2:57: 33:b4:cc:3e:c2:d8:0a:14:be:d7:23:d8:e3:09:a6:c1:e0:2b: 7e:9b:06:d9:aa:cf:04:96:7c:76:f3:21:5c:9c:52:ea:dd:52: c6:53:97:51:37:56:96:4c:c6:52:a7:82:83:3a:1d:8d:cf:ab: e8:59:e5:ae:44:48:a7:0a:da:89:cd:e1:84:23:fc:92:d8:c3: f9:93:20:2d:a2:ae:24:30:a9:4f:14:9f:73:a1:92:aa:b0:18: cc:b6:8d:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVDREExMTAvBgNVBAUTKDAxREI4MUVGNkQ2Mzk0RTY2RDNCMzIzMTVCNDc5RUJF RDc5OUM5MzcwHhcNMjQwNTAyMTgyNjQwWhcNMjQwNTA5MTgyNjQwWjAYMRYwFAYD VQQDEw02NjMzZGFlMS0yYzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxSoEaakvJqyNKVeeBIUI9lUtYIXdisLPYoZ+ObByaFf/5MSIAnRS60NnnUdQ n0FKrJuHgmzQVD+taMc1J/zxq86zF3rfjkXBj93YqYWGtNIk/eofWD0XH09jdm13 zNvJ8yShNhZGxcbfOiWU0FjV/kCGd28UN0imHkoKxkVm8pB9vwv86tx/IqDLV9/X TsAdGd1QAtMw5tyjMcCcke623UZ0L4Rh7JtA6NtTLlmF+Js5rw2JS+K7OXd9lDSX lVbt7q6pZOXbSGv/4yXmbPQPSU/HMN1i259PAP/epyymmfKiIX3AN4Sin0s4vVzx einm5i7C4umfXFsBW60Md1tMTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAoA4OST ku4Gp+MZ2EhH67wYpGfhMB8GA1UdIwQYMBaAFAHbge9tY5TmbTsyMVtHnr7Xmck3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUNEQS84QTg4RjEwNDZG OUMxMUU5QTUwNzRCMkZDNEY5QUUwMi9BZHVCNzIxamxPWnRPekl4VzBlZXZ0ZVp5 VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FkdUI3MjFqbE9adE96SXhXMGVldnRlWnlUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUNEQS84QTg4RjEwNDZGOUMxMUU5QTUwNzRCMkZDNEY5QUUwMi9BZHVCNzIxamxP WnRPekl4VzBlZXZ0ZVp5VGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOPUyNg7pwXRn2Szaw/myIhaEHimn/RYbkmhvHKNLji2FBD2SN1tdh X009RCjZuTC1dckr61koI3f3HUJFMIDdiLT2lH8oJdTg51mWSj+rJtWhpDgGsMlI ofyOzc8sU7EAdj1hnOpvuDc4JZqFRoiCnmyCpNOS+RYUuHoI2h89t+cYD/hmMJo2 QwwtgiO25+cH7tPZtKtbWBifVhgjnL1P8lcztMw+wtgKFL7XI9jjCabB4Ct+mwbZ qs8Elnx28yFcnFLq3VLGU5dRN1aWTMZSp4KDOh2Nz6voWeWuREinCtqJzeGEI/yS 2MP5kyAtoq4kMKlPFJ9zoZKqsBjMto3g -----END CERTIFICATE-----Generated at Thu May 2 20:50:39 2024 by rpki-client on console-fra.rpki-client.org