$ rpki-client -vvf rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft File: _Ern2eP0GafSBKVMedHz76mn1sg.mft (raw, json) Hash identifier: ThaglSXlbnedPlMHpAR6viJ0CeYDC6HG5CORC/6lWwM= Subject key identifier: 7A:46:ED:CE:D8:C2:65:30:7A:52:F1:65:94:D5:95:09:81:E5:1D:3E Authority key identifier: FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8 Certificate issuer: /CN=A91262F0/serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8 Certificate serial: F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft Manifest number: F2 Signing time: Sun 19 May 2024 05:45:22 +0000 Manifest this update: Sun 19 May 2024 05:45:21 +0000 Manifest next update: Sun 26 May 2024 05:45:21 +0000 Files and hashes: 1: _Ern2eP0GafSBKVMedHz76mn1sg.crl (hash: NK/apDErojMQbWzoLdUJJIxANw63KWV6hGCBaW0TVbE=) 2: 8E412748A33311EDA2CB2420C4F9AE02.roa (hash: agaKvT35E3Jq0ilHrclwTlATlov0trZoPCX9IOtsMC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 246 (0xf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91262F0/serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8 Validity Not Before: May 19 05:45:21 2024 GMT Not After : May 26 05:45:21 2024 GMT Subject: CN=664991f2-90a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4e:d2:a0:d3:e0:92:23:7a:11:8b:c6:c9:65: a8:e6:3b:88:eb:ef:fe:03:8b:ff:4e:a3:28:b0:04: 1b:52:21:6b:4d:d1:7c:e2:13:d0:b9:23:a8:13:b3: b5:18:7c:b3:72:d1:32:4d:33:bb:5c:10:a9:9e:f8: ae:75:52:27:09:64:f2:77:00:2e:4c:c9:e4:ae:39: ea:f5:30:15:ff:d0:59:a2:17:07:32:f7:5e:11:d4: 73:65:ee:11:8a:32:9c:ec:f0:18:4a:ba:10:32:ea: fb:fb:2b:57:0d:30:53:d8:5e:7c:b7:27:12:8b:90: 2a:81:80:37:77:f5:92:f9:ac:d3:5a:10:85:2b:29: 11:69:7b:a8:75:11:97:da:17:9c:15:08:4c:a2:b1: b6:5c:4e:c9:3d:71:06:ad:85:cc:63:67:cd:ff:65: 57:42:e3:12:57:26:89:c1:4c:04:01:29:f3:e7:ac: 28:1d:66:6b:cb:2f:6f:43:59:bc:00:b5:de:90:2c: e9:d9:5a:ee:1f:7b:30:2b:90:9b:35:dd:94:a4:52: d7:c5:44:1e:fa:7a:6a:a9:ff:ee:27:82:b8:93:6a: f4:14:f2:74:6f:ad:b3:00:c9:33:a1:94:be:05:b6: 20:85:36:b1:78:9a:ee:e8:d2:0d:4d:9c:6c:a6:0f: 92:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:46:ED:CE:D8:C2:65:30:7A:52:F1:65:94:D5:95:09:81:E5:1D:3E X509v3 Authority Key Identifier: keyid:FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:0d:f7:f3:ea:c6:c4:ad:60:22:e0:72:81:26:44:95:99:cd: 03:25:1f:1e:c7:9e:7f:9f:cc:dd:47:b1:63:54:91:62:56:de: 84:ac:33:9d:27:bd:be:86:dd:64:9b:06:6e:af:ea:66:6a:ac: 77:82:2d:20:1d:79:d8:d5:2e:d4:28:44:70:1f:39:9d:9e:e2: 4b:dc:e3:bf:ae:b2:8c:10:94:dd:5a:c4:e6:21:c3:a0:8d:ae: 42:57:75:2f:4b:e7:e6:12:25:20:d2:d3:77:af:0c:43:32:4c: 2d:1b:17:3f:46:a7:99:35:a2:f5:30:38:59:25:ad:51:d5:2a: 75:e7:09:b8:6e:52:a5:0b:c3:ba:c5:dc:1e:da:95:74:a4:cc: 79:71:29:bd:65:7d:bd:b1:43:6a:66:ac:2a:67:99:73:bf:32: bb:08:b1:81:e6:e7:30:03:04:ef:04:94:aa:f0:65:cb:f9:a3: 03:79:08:ea:21:e0:54:31:fe:9f:26:11:e3:cc:e2:ad:77:31: 01:5e:81:4b:e7:2e:b8:85:8e:9f:f0:46:c3:c4:98:08:38:b8: c7:a2:47:95:aa:0b:29:bf:71:9e:d1:7d:17:da:41:6a:00:27: d6:4d:78:da:0b:32:6c:11:eb:5b:ef:d4:f9:c4:d3:91:19:71: a2:88:6c:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyRjAxMTAvBgNVBAUTKEZDNEFFN0Q5RTNGNDE5QTdEMjA0QTU0Qzc5RDFGM0VG QTlBN0Q2QzgwHhcNMjQwNTE5MDU0NTIxWhcNMjQwNTI2MDU0NTIxWjAYMRYwFAYD VQQDEw02NjQ5OTFmMi05MGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwE7SoNPgkiN6EYvGyWWo5juI6+/+A4v/TqMosAQbUiFrTdF84hPQuSOoE7O1 GHyzctEyTTO7XBCpnviudVInCWTydwAuTMnkrjnq9TAV/9BZohcHMvdeEdRzZe4R ijKc7PAYSroQMur7+ytXDTBT2F58tycSi5AqgYA3d/WS+azTWhCFKykRaXuodRGX 2hecFQhMorG2XE7JPXEGrYXMY2fN/2VXQuMSVyaJwUwEASnz56woHWZryy9vQ1m8 ALXekCzp2VruH3swK5CbNd2UpFLXxUQe+npqqf/uJ4K4k2r0FPJ0b62zAMkzoZS+ BbYghTaxeJru6NINTZxspg+SZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHpG7c7Y wmUwelLxZZTVlQmB5R0+MB8GA1UdIwQYMBaAFPxK59nj9Bmn0gSlTHnR8++pp9bI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJGMC8zM0FEMEE2MkEz MEMxMUVEQjMzODhDMENDNEY5QUUwMi9fRXJuMmVQMEdhZlNCS1ZNZWRIejc2bW4x c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19Fcm4yZVAwR2FmU0JLVk1lZEh6NzZtbjFzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjJGMC8zM0FEMEE2MkEzMEMxMUVEQjMzODhDMENDNEY5QUUwMi9fRXJuMmVQMEdh ZlNCS1ZNZWRIejc2bW4xc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjDffz6sbErWAi4HKBJkSVmc0DJR8ex55/n8zdR7FjVJFiVt6ErDOd J72+ht1kmwZur+pmaqx3gi0gHXnY1S7UKERwHzmdnuJL3OO/rrKMEJTdWsTmIcOg ja5CV3UvS+fmEiUg0tN3rwxDMkwtGxc/RqeZNaL1MDhZJa1R1Sp15wm4blKlC8O6 xdwe2pV0pMx5cSm9ZX29sUNqZqwqZ5lzvzK7CLGB5ucwAwTvBJSq8GXL+aMDeQjq IeBUMf6fJhHjzOKtdzEBXoFL5y64hY6f8EbDxJgIOLjHokeVqgspv3Ge0X0X2kFq ACfWTXjaCzJsEetb79T5xNORGXGiiGy1 -----END CERTIFICATE-----Generated at Sun May 19 06:14:33 2024 by rpki-client on console-ams.rpki-client.org