$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft File: eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft (raw, json) Hash identifier: TJeAhSnUwRhF1bgE/IC66WjJ4G8cghPmtB7edamVhEY= Subject key identifier: 3A:7C:CC:3F:49:1F:06:CC:5A:E3:27:05:B7:C0:A2:27:E2:CF:CA:E3 Authority key identifier: 78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D Certificate issuer: /CN=A911DA4A/serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D Certificate serial: 1C40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft Manifest number: 1C3A Signing time: Sat 18 May 2024 16:35:17 +0000 Manifest this update: Sat 18 May 2024 16:35:16 +0000 Manifest next update: Sat 25 May 2024 16:35:16 +0000 Files and hashes: 1: eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl (hash: wottJRRj5CrZkik9xFob6NUD0ADyUz/gZKxkdeYHe8E=) 2: 8DB2B8E6E27F11EEA6719536C4F9AE02.roa (hash: lKb0rShsvsq6/PiRFV9WYxvr2Wk6w8LZDzoWqk9lB7U=) 3: 8D3981D8E27F11EEA6719536C4F9AE02.roa (hash: Qb2a5Um+RHBVJhp5rbhaL4h5O8P9X+wU4eMF3v1ky5k=) 4: DBB62584510F11EE91E98858C4F9AE02.roa (hash: W9WZGIxbYrjYpSpY3e8lvF4TArk2aRuFMQkSa8eE5aM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7232 (0x1c40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DA4A/serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D Validity Not Before: May 18 16:35:16 2024 GMT Not After : May 25 16:35:16 2024 GMT Subject: CN=6648d8c5-93fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:99:cb:7a:93:f7:cc:d4:67:27:a0:09:42:85: d6:3d:0d:00:91:11:90:01:a1:74:b0:77:4e:59:7d: 12:08:35:45:12:d9:41:fe:4d:6d:32:6a:7c:1d:07: 14:04:f0:cf:9d:9a:37:b4:ef:02:15:f1:85:2e:39: 85:79:ab:66:04:69:a5:19:a8:2a:e1:b7:b4:29:0c: 5f:4b:f8:2a:bc:85:f3:33:62:55:a6:79:d2:7e:e2: f7:e9:17:ff:a8:55:bc:d0:fe:74:1a:bf:ab:6b:30: 0c:e5:6e:af:ff:9e:af:87:39:ea:d5:28:b5:31:02: df:37:5a:cf:cd:2a:c4:57:fb:cd:6a:88:ff:1f:0c: 4d:c2:fc:a5:57:0d:79:44:62:57:9b:6c:71:1f:9d: a3:72:e8:9b:b4:64:c8:86:2b:50:1a:5b:0b:b9:1e: 36:ff:0a:7d:4f:13:92:6a:88:3c:d6:eb:12:6b:c6: f8:a7:6f:3d:3b:ae:8b:22:30:28:de:31:95:f8:01: 71:6f:ef:35:55:15:d0:02:fe:97:df:8f:8d:7b:57: 87:4b:7c:23:d7:ce:d2:ad:38:6c:9d:f2:ff:bb:47: 02:84:1d:5d:1b:c1:c9:7e:ed:af:b4:47:fe:59:d3: 25:0b:48:36:84:00:b4:45:ca:2b:93:26:04:ab:36: 4c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:7C:CC:3F:49:1F:06:CC:5A:E3:27:05:B7:C0:A2:27:E2:CF:CA:E3 X509v3 Authority Key Identifier: keyid:78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:85:75:fa:99:c7:5e:91:02:fd:38:c8:ea:b5:ea:90:1f:bb: 66:5c:bf:11:8e:da:ad:b7:f6:00:e8:ef:e2:e8:e1:d3:a2:2a: 1b:e2:37:09:07:3e:8c:68:5e:05:7f:fa:52:3f:aa:fa:81:38: 23:f0:50:a5:8a:da:dc:7b:40:f4:33:cd:5a:95:64:7e:d0:ff: e5:cb:b0:3d:2e:c1:50:08:65:a1:73:5e:bd:ff:4a:e5:8a:2c: 49:a4:a3:46:e0:c8:79:87:d6:32:f5:dd:83:0a:62:38:f4:67: 9a:0f:62:77:1f:c0:5c:0f:f0:84:ed:a9:61:d4:f7:ba:bf:d0: 46:d3:0a:63:69:7d:00:f4:4b:0a:fd:6a:e1:87:4e:df:01:38: 72:6d:38:20:f8:68:30:5b:82:e4:d5:87:d5:72:e7:18:f4:c2: 1b:e6:0d:7e:f0:8c:d2:67:65:68:d3:b3:1f:79:fa:c3:d5:ca: 9c:6f:40:8b:79:df:55:66:ab:b1:11:53:1d:97:e2:69:59:cc: 08:33:96:42:50:a7:88:98:de:9d:84:ae:4c:43:5b:d4:3a:fb: de:22:11:aa:10:e4:da:95:5c:78:07:42:8f:fa:91:5d:84:33: 65:ae:d9:eb:73:7c:d1:38:0c:bd:a0:2f:be:e0:b3:ca:53:4e: 76:d1:ff:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURBNEExMTAvBgNVBAUTKDc4OTIwNjRERDQ1Qjk3RUQwOTQ3MUVCMDU0NTFFQUMw OThDOUNCM0QwHhcNMjQwNTE4MTYzNTE2WhcNMjQwNTI1MTYzNTE2WjAYMRYwFAYD VQQDEw02NjQ4ZDhjNS05M2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJnLepP3zNRnJ6AJQoXWPQ0AkRGQAaF0sHdOWX0SCDVFEtlB/k1tMmp8HQcU BPDPnZo3tO8CFfGFLjmFeatmBGmlGagq4be0KQxfS/gqvIXzM2JVpnnSfuL36Rf/ qFW80P50Gr+razAM5W6v/56vhznq1Si1MQLfN1rPzSrEV/vNaoj/HwxNwvylVw15 RGJXm2xxH52jcuibtGTIhitQGlsLuR42/wp9TxOSaog81usSa8b4p289O66LIjAo 3jGV+AFxb+81VRXQAv6X34+Ne1eHS3wj187SrThsnfL/u0cChB1dG8HJfu2vtEf+ WdMlC0g2hAC0RcorkyYEqzZMxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDp8zD9J HwbMWuMnBbfAoifiz8rjMB8GA1UdIwQYMBaAFHiSBk3UW5ftCUcesFRR6sCYycs9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREE0QS83MjU3RjkzMkJD QjAxMUU2OTk4RTgyNTZDNEY5QUUwMi9lSklHVGRSYmwtMEpSeDZ3VkZIcXdKakp5 ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VKSUdUZFJibC0wSlJ4NndWRkhxd0pqSnl6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REE0QS83MjU3RjkzMkJDQjAxMUU2OTk4RTgyNTZDNEY5QUUwMi9lSklHVGRSYmwt MEpSeDZ3VkZIcXdKakp5ejAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwhXX6mcdekQL9OMjqteqQH7tmXL8Rjtqtt/YA6O/i6OHToiob4jcJ Bz6MaF4Ff/pSP6r6gTgj8FClitrce0D0M81alWR+0P/ly7A9LsFQCGWhc169/0rl iixJpKNG4Mh5h9Yy9d2DCmI49GeaD2J3H8BcD/CE7alh1Pe6v9BG0wpjaX0A9EsK /Wrhh07fAThybTgg+GgwW4Lk1YfVcucY9MIb5g1+8IzSZ2Vo07MfefrD1cqcb0CL ed9VZquxEVMdl+JpWcwIM5ZCUKeImN6dhK5MQ1vUOvveIhGqEOTalVx4B0KP+pFd hDNlrtnrc3zROAy9oC++4LPKU0520f/i -----END CERTIFICATE-----Generated at Sat May 18 17:20:03 2024 by rpki-client on console-ams.rpki-client.org