$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft File: E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft (raw, json) Hash identifier: Au/ENIItY1tVl/YselNuX1M7VL6qfkxEjXSsmsfHjao= Subject key identifier: 0F:D0:9D:5C:C9:D3:D8:6E:46:75:20:EC:55:D0:3F:C8:0C:2C:80:FC Authority key identifier: 13:B2:7F:D4:62:48:F4:A7:33:D9:24:65:1C:94:0C:B7:F1:A3:06:09 Certificate issuer: /CN=A91FFEDB/serialNumber=13B27FD46248F4A733D924651C940CB7F1A30609 Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft Manifest number: 0121 Signing time: Sun 05 May 2024 05:15:57 +0000 Manifest this update: Sun 05 May 2024 05:15:57 +0000 Manifest next update: Sun 12 May 2024 05:15:57 +0000 Files and hashes: 1: E7J_1GJI9Kcz2SRlHJQMt_GjBgk.crl (hash: X/q6YYzAtEyKeIQ/yE5hONDKsyY5dgFbiVS6IJPu4ls=) 2: 26BE1334558F11EDB3A5ED4FC4F9AE02.roa (hash: sMnTVVIG0bU72TKbOdi8+QBWhbPXKm3qru48EVYfCi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.crl rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFEDB/serialNumber=13B27FD46248F4A733D924651C940CB7F1A30609 Validity Not Before: May 5 05:15:57 2024 GMT Not After : May 12 05:15:57 2024 GMT Subject: CN=6637160d-3338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bf:89:b9:20:05:39:38:18:de:8f:15:d4:11: fb:d2:3c:5e:d9:ed:7c:8f:f0:17:d9:56:9a:cd:5f: 3b:87:cd:c4:55:2b:bc:30:bb:4d:53:e3:46:97:0b: d9:b6:5d:5d:09:6b:bc:d2:f5:fc:d6:d4:ee:aa:28: 53:c1:e4:19:3a:b2:2f:6d:46:6e:ac:95:64:ee:2c: f1:5e:d6:7b:53:43:26:f6:ef:94:e4:52:52:a7:50: e1:a6:87:05:51:ce:d9:b8:59:ac:ea:27:b0:37:80: 52:21:ea:b8:d8:4d:f1:4a:55:a7:f0:4e:65:3d:e8: 6d:4a:cc:3d:86:43:a2:28:06:21:77:a7:52:16:70: c5:05:f1:20:bb:2e:72:f8:c8:94:c2:87:19:d1:06: 1a:ac:55:74:4d:80:08:3f:cb:3f:f7:0b:7c:b6:a1: f6:f2:9c:7b:8a:ce:ef:18:04:f9:3c:42:e2:d7:12: 17:b6:32:0f:4f:d9:a6:f5:32:50:ee:57:fa:e0:63: c3:18:a6:b7:c6:5c:a5:a3:18:c2:fe:89:0c:33:f9: 58:58:5a:9f:89:77:ac:b7:d3:78:39:6f:f2:3e:1c: e0:c6:3d:d2:4e:6a:99:d0:88:76:2c:da:d1:63:a0: 92:63:53:a1:b9:e4:94:90:a2:16:3f:21:07:c7:43: 5c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D0:9D:5C:C9:D3:D8:6E:46:75:20:EC:55:D0:3F:C8:0C:2C:80:FC X509v3 Authority Key Identifier: keyid:13:B2:7F:D4:62:48:F4:A7:33:D9:24:65:1C:94:0C:B7:F1:A3:06:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:65:d9:b9:e0:45:5a:00:b1:b7:81:61:76:ea:32:89:73:50: 1b:4c:10:2f:ef:20:9f:7e:55:46:86:ef:fb:d2:84:3f:13:07: 7e:a8:ef:0d:71:ac:3b:8b:48:88:36:a5:f5:a5:26:99:d8:2d: 79:4f:05:ad:20:75:f5:b7:02:0c:6d:1a:67:4c:ad:73:69:60: c5:91:80:69:95:7f:ab:4b:e3:b8:8c:7c:f8:ed:2a:88:40:bd: 83:f2:85:13:ea:29:f3:40:fb:6a:ae:ad:4c:20:7d:db:07:dc: a5:ca:c5:65:e9:91:fb:ae:6c:f8:d4:a5:1a:0e:29:03:dc:b1: a0:7f:36:ac:ee:26:0d:4e:e9:6a:42:ad:37:ca:7f:54:4b:3b: 49:c0:ee:12:d4:e6:ec:0e:9b:3e:6a:7f:fb:21:d5:70:86:2c: a5:72:54:07:df:49:51:70:a2:21:cc:5f:bc:c6:67:20:8c:b6: 58:9a:06:6b:e5:c8:a2:04:a2:34:b7:c5:54:6e:cc:69:a8:10: ac:7f:8d:e4:45:9e:5d:55:6f:e6:5a:a1:c2:16:39:81:8f:d6: 6d:19:ea:52:37:9b:be:2c:30:b3:e9:f8:7e:8b:c5:a1:1d:c5: ba:42:a4:cb:db:b0:09:29:28:d4:10:ee:6b:a6:e2:d3:62:75: 60:df:ea:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZFREIxMTAvBgNVBAUTKDEzQjI3RkQ0NjI0OEY0QTczM0Q5MjQ2NTFDOTQwQ0I3 RjFBMzA2MDkwHhcNMjQwNTA1MDUxNTU3WhcNMjQwNTEyMDUxNTU3WjAYMRYwFAYD VQQDEw02NjM3MTYwZC0zMzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7+JuSAFOTgY3o8V1BH70jxe2e18j/AX2VaazV87h83EVSu8MLtNU+NGlwvZ tl1dCWu80vX81tTuqihTweQZOrIvbUZurJVk7izxXtZ7U0Mm9u+U5FJSp1DhpocF Uc7ZuFms6iewN4BSIeq42E3xSlWn8E5lPehtSsw9hkOiKAYhd6dSFnDFBfEguy5y +MiUwocZ0QYarFV0TYAIP8s/9wt8tqH28px7is7vGAT5PELi1xIXtjIPT9mm9TJQ 7lf64GPDGKa3xlyloxjC/okMM/lYWFqfiXest9N4OW/yPhzgxj3STmqZ0Ih2LNrR Y6CSY1OhueSUkKIWPyEHx0NcWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/QnVzJ 09huRnUg7FXQP8gMLID8MB8GA1UdIwQYMBaAFBOyf9RiSPSnM9kkZRyUDLfxowYJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkVEQi8zRUY3RTlCQzU1 MDIxMUVEOTY0QjdBNEFDNEY5QUUwMi9FN0pfMUdKSTlLY3oyU1JsSEpRTXRfR2pC Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U3Sl8xR0pJOUtjejJTUmxISlFNdF9HakJnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkVEQi8zRUY3RTlCQzU1MDIxMUVEOTY0QjdBNEFDNEY5QUUwMi9FN0pfMUdKSTlL Y3oyU1JsSEpRTXRfR2pCZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEZdm54EVaALG3gWF26jKJc1AbTBAv7yCfflVGhu/70oQ/Ewd+qO8N caw7i0iINqX1pSaZ2C15TwWtIHX1twIMbRpnTK1zaWDFkYBplX+rS+O4jHz47SqI QL2D8oUT6inzQPtqrq1MIH3bB9ylysVl6ZH7rmz41KUaDikD3LGgfzas7iYNTulq Qq03yn9USztJwO4S1ObsDps+an/7IdVwhiylclQH30lRcKIhzF+8xmcgjLZYmgZr 5ciiBKI0t8VUbsxpqBCsf43kRZ5dVW/mWqHCFjmBj9ZtGepSN5u+LDCz6fh+i8Wh HcW6QqTL27AJKSjUEO5rpuLTYnVg3+ok -----END CERTIFICATE-----Generated at Sun May 5 06:13:38 2024 by rpki-client on console-ams.rpki-client.org