$ rpki-client -vvf rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft File: epYXaVSeCq0Km_mSVoO673M6Lxo.mft (raw, json) Hash identifier: FczgtCXuh8nwf3VoVjQD2AVfgU6KbIuUfLaYW9zwn1w= Subject key identifier: 79:8A:8C:76:E4:56:3F:C6:BB:5A:54:0A:84:30:75:36:D4:D7:0C:FD Authority key identifier: 7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A Certificate issuer: /CN=A911C5B0/serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A Certificate serial: 33E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft Manifest number: 33D6 Signing time: Sat 18 May 2024 14:24:05 +0000 Manifest this update: Sat 18 May 2024 14:24:05 +0000 Manifest next update: Sat 25 May 2024 14:24:05 +0000 Files and hashes: 1: epYXaVSeCq0Km_mSVoO673M6Lxo.crl (hash: v/K7TZuecz1HQHsUlTaQIKDzUf2VB2aKlIx/eFkdJkg=) 2: 3E8B52A4C34F11EE8EFD7916C4F9AE02.roa (hash: +yYkETmiz4f1WjO0VI/D0V/XhkpjRjIPDeg46cPjkmg=) 3: 1A83389CC35211EE8CE04C38C4F9AE02.roa (hash: ABHRVa51+3FPp63vvRRjd9rbI2IwdKCW8s6MHnP0STY=) 4: 1F5CD892C35111EE9D744F36C4F9AE02.roa (hash: kWNVfDLs1+2Y53t+8wep1l/lz0MK8fqRm6f70PeE45Y=) 5: DA202262C34F11EE93BC8317C4F9AE02.roa (hash: UPNy9mXh9V1JREa7xBmKEY6nu0QxtMbBhZWdNaDQGV0=) 6: 61A65BF2C35011EE95366E18C4F9AE02.roa (hash: JeLyuHAlbKpP/f4B6s1W4jn3AabFiwBPCpy341c6Qe4=) 7: 1EEE3E0AC35111EE9D744F36C4F9AE02.roa (hash: DSZWfSJyTwlWzEMYtybTq8RbGq0Spn7l88rd5LsPi5U=) 8: AC3033FAC35011EE8A0A4819C4F9AE02.roa (hash: /OBT7LfaLNKCK43gSEXr65RRwwTpkiBa1i6HSuZOLxo=) 9: A50EE218C34D11EEBC95A913C4F9AE02.roa (hash: JfCY4kglkn7+akZh2gV81bsJmnXHR/kuI+sxoT8tNSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13289 (0x33e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C5B0/serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A Validity Not Before: May 18 14:24:05 2024 GMT Not After : May 25 14:24:05 2024 GMT Subject: CN=6648ba05-948e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f5:5d:aa:d3:5c:94:66:62:33:4b:50:e3:c1: 0c:ad:85:53:c5:f3:10:b2:a5:a1:7e:73:03:f2:23: b6:e0:da:26:e6:bd:8f:ab:bb:48:7d:84:f1:db:3b: 6b:de:e8:00:bc:62:81:8f:98:97:34:d8:6a:18:3f: 26:69:3e:e4:b1:de:c6:a8:0e:ba:0e:02:d0:8b:26: 83:ca:50:0e:92:82:b1:06:bc:f1:3a:c2:61:f4:1b: 69:08:68:89:e7:95:56:ca:04:b6:d4:50:59:87:87: 3b:e4:2e:4e:ce:1e:b7:5a:21:86:56:2e:6c:6c:3a: 79:d1:3a:27:57:35:f8:5a:ac:90:f1:a1:a7:45:d5: ba:0d:58:ab:b8:ed:91:ec:4b:be:9e:89:ba:e4:06: 04:b1:cd:25:10:e4:4b:a2:f9:2c:00:f9:b9:38:c4: 60:df:8f:7a:02:7b:61:a7:a4:70:9b:7b:9a:46:b1: 3c:d1:bf:52:38:13:08:2e:8b:26:bc:15:72:a2:61: 2c:70:e6:96:41:42:49:0b:eb:8c:a4:de:02:b6:53: 93:2d:ad:a0:7a:51:c7:ef:2d:13:66:80:ac:26:82: b7:d1:35:cd:52:03:db:ae:13:b4:24:0a:54:a9:bf: 07:86:2b:15:b7:86:33:5e:0b:72:10:0e:7a:a7:b2: 8f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:8A:8C:76:E4:56:3F:C6:BB:5A:54:0A:84:30:75:36:D4:D7:0C:FD X509v3 Authority Key Identifier: keyid:7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:91:e8:71:fc:92:6e:9b:7b:d3:42:72:5e:5c:a8:9a:9b:76: 02:7f:e6:d1:9b:85:43:78:0d:f3:fb:2d:b1:e4:56:af:c1:10: b2:82:20:e4:54:eb:8e:98:9e:7a:a3:f8:b9:c3:c3:91:00:94: 90:83:ef:34:2b:4c:eb:08:98:05:80:1c:d0:e4:45:2f:3c:67: 62:e6:eb:c3:bd:be:2d:9c:a7:b3:2f:0e:c9:2f:cf:d9:37:cd: c2:61:08:48:c3:f0:47:d3:a1:64:ca:a6:de:79:fe:c2:96:43: 13:b5:8b:6c:62:c9:fb:03:7a:dc:c2:7e:ed:af:61:55:72:bc: 9a:5b:82:19:2d:45:11:9a:56:a9:0b:26:5f:41:ad:49:81:44: 72:fb:56:3f:1c:4b:0f:de:57:70:fc:09:b4:06:bb:2d:e7:87: 4a:8c:c8:8d:3b:c9:7d:f2:6f:d0:88:17:97:60:42:dc:67:34: 9a:a9:c3:e0:d3:d6:06:b2:be:2f:ef:2e:c2:43:c4:94:ab:6d: 90:78:6f:9c:70:19:0e:4a:4a:48:72:dd:ad:1f:08:1a:5c:96: 44:8f:50:3f:1f:40:27:03:7c:36:70:cd:ee:7d:63:4e:69:f6: 71:26:f2:dc:83:e4:53:ff:da:7d:47:52:ac:0d:f8:1b:db:e1: 25:76:5c:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM1QjAxMTAvBgNVBAUTKDdBOTYxNzY5NTQ5RTBBQUQwQTlCRjk5MjU2ODNCQUVG NzMzQTJGMUEwHhcNMjQwNTE4MTQyNDA1WhcNMjQwNTI1MTQyNDA1WjAYMRYwFAYD VQQDEw02NjQ4YmEwNS05NDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfVdqtNclGZiM0tQ48EMrYVTxfMQsqWhfnMD8iO24Nom5r2Pq7tIfYTx2ztr 3ugAvGKBj5iXNNhqGD8maT7ksd7GqA66DgLQiyaDylAOkoKxBrzxOsJh9BtpCGiJ 55VWygS21FBZh4c75C5Ozh63WiGGVi5sbDp50TonVzX4WqyQ8aGnRdW6DViruO2R 7Eu+nom65AYEsc0lEORLovksAPm5OMRg3496Anthp6Rwm3uaRrE80b9SOBMILosm vBVyomEscOaWQUJJC+uMpN4CtlOTLa2gelHH7y0TZoCsJoK30TXNUgPbrhO0JApU qb8HhisVt4YzXgtyEA56p7KPUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmKjHbk Vj/Gu1pUCoQwdTbU1wz9MB8GA1UdIwQYMBaAFHqWF2lUngqtCpv5klaDuu9zOi8a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzVCMC80MEM4RDVBNjFE ODMxMUUyODIzQTVGRDgwOEIwMkNEMi9lcFlYYVZTZUNxMEttX21TVm9PNjczTTZM eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwWVhhVlNlQ3EwS21fbVNWb082NzNNNkx4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzVCMC80MEM4RDVBNjFEODMxMUUyODIzQTVGRDgwOEIwMkNEMi9lcFlYYVZTZUNx MEttX21TVm9PNjczTTZMeG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZkehx/JJum3vTQnJeXKiam3YCf+bRm4VDeA3z+y2x5FavwRCygiDk VOuOmJ56o/i5w8ORAJSQg+80K0zrCJgFgBzQ5EUvPGdi5uvDvb4tnKezLw7JL8/Z N83CYQhIw/BH06Fkyqbeef7ClkMTtYtsYsn7A3rcwn7tr2FVcryaW4IZLUURmlap CyZfQa1JgURy+1Y/HEsP3ldw/Am0Brst54dKjMiNO8l98m/QiBeXYELcZzSaqcPg 09YGsr4v7y7CQ8SUq22QeG+ccBkOSkpIct2tHwgaXJZEj1A/H0AnA3w2cM3ufWNO afZxJvLcg+RT/9p9R1KsDfgb2+Eldlxu -----END CERTIFICATE-----Generated at Sat May 18 15:58:20 2024 by rpki-client on console-ams.rpki-client.org