$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft File: E4zRCkd43g41kR6cnJRPSyHE2wk.mft (raw, json) Hash identifier: 1tX966M05QI8s4XfzKoZkmpq4eLh7Uf+pt3pHRORGSY= Subject key identifier: 14:EF:6D:C2:0E:94:35:47:48:16:C8:75:33:2A:E8:A1:05:8E:D7:26 Authority key identifier: 13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09 Certificate issuer: /CN=A9130F9C/serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09 Certificate serial: 0BE5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft Manifest number: 0BD0 Signing time: Fri 31 May 2024 19:41:32 +0000 Manifest this update: Fri 31 May 2024 19:41:31 +0000 Manifest next update: Fri 07 Jun 2024 19:41:31 +0000 Files and hashes: 1: E4zRCkd43g41kR6cnJRPSyHE2wk.crl (hash: a8TtcxfWi20hEtAxR8klrPvnU+ClfVLV2XRjMWgPnjo=) 2: 1FC5063AE0D411ECB6C0B01CC4F9AE02.roa (hash: logqdhARGTyBkzJX/eotDYOSUYMcRn8n6eQk1B3sltA=) 3: 41CBB5B87F7611ECAD50FA4EC4F9AE02.roa (hash: GtVkTj6lkgw7RXe+n4R0d/g9GkOJM8psiPRDO4atRDw=) 4: 0827E4147F7911EC86DE4B56C4F9AE02.roa (hash: CFNa1CRrRXsw2NlqSuSKe2rvDg2ywkEC8x6fBZFbOK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 19:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3045 (0xbe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130F9C/serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09 Validity Not Before: May 31 19:41:31 2024 GMT Not After : Jun 7 19:41:31 2024 GMT Subject: CN=665a27eb-5776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c4:02:10:f7:5c:fb:df:ea:a7:24:a4:41:b9: ca:e6:6a:f6:03:56:c8:5c:33:89:6e:cf:9d:58:3c: ba:52:49:1f:6f:1e:73:a5:39:8b:05:70:4d:36:2c: ed:fd:d9:45:28:d4:5d:ef:7e:0b:26:64:da:e4:1f: e7:81:1e:a4:e8:aa:51:a2:2c:04:db:8c:b4:53:43: ac:49:c4:19:69:05:47:09:e0:e6:00:ec:7b:c9:35: 5f:94:93:9e:a8:14:50:1a:8c:b7:d6:08:82:b5:ac: 66:12:d1:97:37:26:a6:90:90:42:aa:c8:98:31:99: 86:17:4c:f7:bb:75:d8:11:12:80:74:cb:3c:4c:35: cd:10:58:5a:7c:23:68:06:ab:91:0d:17:5c:b6:82: d4:13:82:4b:75:b0:1a:2b:0f:f0:ac:a1:00:e2:18: 64:b6:23:63:bd:03:a3:f2:35:24:b9:ef:a1:f8:59: 56:7e:b0:34:22:6c:18:89:fa:3a:bf:c3:aa:3f:3f: a9:20:3c:d8:6e:c9:30:af:ce:92:a4:4d:54:f6:b9: c7:f0:34:b0:bd:08:f9:19:2e:e9:b0:a5:3f:67:f1: 7b:b9:8a:b0:17:19:9a:2d:c1:58:d1:1c:a8:b3:8d: 86:3b:4f:98:56:37:72:4a:dc:34:a0:ee:53:d4:40: 9d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:EF:6D:C2:0E:94:35:47:48:16:C8:75:33:2A:E8:A1:05:8E:D7:26 X509v3 Authority Key Identifier: keyid:13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:d9:49:4f:d0:ae:ef:66:c3:5f:c0:69:65:3e:19:78:aa:fa: 76:ad:f4:96:dc:d4:ec:8b:de:fe:66:e2:3a:7a:85:d8:a5:45: f4:8e:48:ec:6d:e9:ec:aa:9d:39:b8:8f:93:b2:a1:2c:31:bc: bf:63:a9:5e:8a:78:2c:15:68:71:6c:0d:cb:05:21:f3:c7:14: 81:cf:93:45:2a:a9:fb:c7:2a:25:d7:ea:ee:35:44:fe:4d:66: 98:90:84:13:e8:12:e5:a3:5c:dc:c5:82:10:1f:b9:8b:e7:82: 87:b7:3a:b8:4a:fa:06:5a:0e:6e:4a:8d:cf:d4:aa:07:55:ff: be:2f:33:f5:84:ae:bc:69:0f:a4:9b:c6:f2:34:1e:54:2a:cc: e6:0c:e5:6a:a8:8f:9b:17:9d:7a:08:24:04:34:04:91:f4:19: 96:2a:ba:61:f5:62:72:69:99:d1:91:1d:1c:cb:d9:9b:3f:bd: f7:2c:a4:7e:59:c2:87:a1:94:58:ef:70:d0:af:fb:f3:bb:91: fd:c8:4e:c3:86:cf:19:96:9c:f3:c4:1f:82:15:84:1d:5b:fc: c1:d1:29:5a:0a:6f:b4:e8:28:98:91:43:aa:95:f0:72:1d:c9: a6:90:2b:12:88:70:e9:e9:11:65:9a:64:9a:b9:37:66:e4:79: ff:ab:0d:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBGOUMxMTAvBgNVBAUTKDEzOENEMTBBNDc3OERFMEUzNTkxMUU5QzlDOTQ0RjRC MjFDNERCMDkwHhcNMjQwNTMxMTk0MTMxWhcNMjQwNjA3MTk0MTMxWjAYMRYwFAYD VQQDEw02NjVhMjdlYi01Nzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0MQCEPdc+9/qpySkQbnK5mr2A1bIXDOJbs+dWDy6Ukkfbx5zpTmLBXBNNizt /dlFKNRd734LJmTa5B/ngR6k6KpRoiwE24y0U0OsScQZaQVHCeDmAOx7yTVflJOe qBRQGoy31giCtaxmEtGXNyamkJBCqsiYMZmGF0z3u3XYERKAdMs8TDXNEFhafCNo BquRDRdctoLUE4JLdbAaKw/wrKEA4hhktiNjvQOj8jUkue+h+FlWfrA0ImwYifo6 v8OqPz+pIDzYbskwr86SpE1U9rnH8DSwvQj5GS7psKU/Z/F7uYqwFxmaLcFY0Ryo s42GO0+YVjdyStw0oO5T1ECdlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTvbcIO lDVHSBbIdTMq6KEFjtcmMB8GA1UdIwQYMBaAFBOM0QpHeN4ONZEenJyUT0shxNsJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEY5Qy8yOUNCMDIwRUZB MEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNnNDFrUjZjbkpSUFN5SEUy d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U0elJDa2Q0M2c0MWtSNmNuSlJQU3lIRTJ3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEY5Qy8yOUNCMDIwRUZBMEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNn NDFrUjZjbkpSUFN5SEUyd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj2UlP0K7vZsNfwGllPhl4qvp2rfSW3NTsi97+ZuI6eoXYpUX0jkjs bensqp05uI+TsqEsMby/Y6leingsFWhxbA3LBSHzxxSBz5NFKqn7xyol1+ruNUT+ TWaYkIQT6BLlo1zcxYIQH7mL54KHtzq4SvoGWg5uSo3P1KoHVf++LzP1hK68aQ+k m8byNB5UKszmDOVqqI+bF516CCQENASR9BmWKrph9WJyaZnRkR0cy9mbP733LKR+ WcKHoZRY73DQr/vzu5H9yE7Dhs8ZlpzzxB+CFYQdW/zB0SlaCm+06CiYkUOqlfBy HcmmkCsSiHDp6RFlmmSauTdm5Hn/qw0B -----END CERTIFICATE-----Generated at Fri May 31 22:13:02 2024 by rpki-client on console-fra.rpki-client.org