$ rpki-client -vvf rpki.apnic.net/member_repository/A91348DF/E6BF830CC1DD11ECB97B9C7FC4F9AE02/EJRq-RG2VUYsGl7wHWhGiOGWh9M.mft File: EJRq-RG2VUYsGl7wHWhGiOGWh9M.mft (raw, json) Hash identifier: E09dLoURAm/3eQrCkRN09mOh+e/fCkcY2BoFcTHW0Bs= Subject key identifier: 04:44:B0:7C:6A:BE:BB:3B:98:A2:D3:7A:79:86:17:FD:DB:E1:62:03 Authority key identifier: 10:94:6A:F9:11:B6:55:46:2C:1A:5E:F0:1D:68:46:88:E1:96:87:D3 Certificate issuer: /CN=A91348DF/serialNumber=10946AF911B655462C1A5EF01D684688E19687D3 Certificate serial: 0279 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJRq-RG2VUYsGl7wHWhGiOGWh9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91348DF/E6BF830CC1DD11ECB97B9C7FC4F9AE02/EJRq-RG2VUYsGl7wHWhGiOGWh9M.mft Manifest number: 0277 Signing time: Sun 19 May 2024 03:43:54 +0000 Manifest this update: Sun 19 May 2024 03:43:54 +0000 Manifest next update: Sun 26 May 2024 03:43:54 +0000 Files and hashes: 1: EJRq-RG2VUYsGl7wHWhGiOGWh9M.crl (hash: HEzTJENcVRmNYAq3tNC2vcs051kRQLc5L9b6hu9Yn18=) 2: 9F8BF452C1E711EC97315146C4F9AE02.roa (hash: +H35ZzajlMf2CAn7imL4kdl24ZLW2UKLJmF3R9MhK1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91348DF/E6BF830CC1DD11ECB97B9C7FC4F9AE02/EJRq-RG2VUYsGl7wHWhGiOGWh9M.crl rsync://rpki.apnic.net/member_repository/A91348DF/E6BF830CC1DD11ECB97B9C7FC4F9AE02/EJRq-RG2VUYsGl7wHWhGiOGWh9M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJRq-RG2VUYsGl7wHWhGiOGWh9M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 633 (0x279) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91348DF/serialNumber=10946AF911B655462C1A5EF01D684688E19687D3 Validity Not Before: May 19 03:43:54 2024 GMT Not After : May 26 03:43:54 2024 GMT Subject: CN=6649757a-cad5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fb:0f:96:45:d2:bf:e8:85:c0:3f:21:ab:68: 8d:fc:37:4d:75:3d:e0:4b:57:01:05:52:81:4f:96: 6c:bf:40:bf:b4:a5:03:94:31:0b:07:21:36:a2:a4: 64:50:f6:30:6f:e3:4f:34:16:d7:da:b0:62:91:6a: 14:88:fc:86:c7:1d:23:3a:0e:30:7b:44:c1:6e:55: a5:e1:34:24:86:0e:53:32:b5:75:9f:34:5e:2d:58: af:ac:9a:e6:25:7a:7c:5a:be:b2:93:db:34:77:09: 45:88:96:76:5a:1c:da:0b:81:a6:bc:f5:96:18:45: 48:1e:1a:2e:31:f2:10:db:29:7d:49:3b:3e:45:53: a6:1d:ec:96:69:39:5e:a5:ad:0f:f7:05:03:00:07: 65:31:80:09:f0:4d:f3:cf:9b:46:5f:d1:c5:bb:ec: 0f:93:82:51:6d:8e:0b:ee:24:a2:16:da:5f:d1:9b: 0d:5f:f4:67:70:b7:14:ee:92:84:90:6f:f1:93:0b: b6:9f:69:20:89:f4:60:0a:13:68:2e:56:48:1f:69: 13:a3:3e:4f:49:2f:02:96:a8:63:da:da:09:f0:15: 28:c4:88:b3:c9:b9:23:f1:f0:48:64:31:b8:3c:12: 5f:ab:53:df:8a:24:28:40:d5:07:aa:9d:19:05:01: 06:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:44:B0:7C:6A:BE:BB:3B:98:A2:D3:7A:79:86:17:FD:DB:E1:62:03 X509v3 Authority Key Identifier: keyid:10:94:6A:F9:11:B6:55:46:2C:1A:5E:F0:1D:68:46:88:E1:96:87:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91348DF/E6BF830CC1DD11ECB97B9C7FC4F9AE02/EJRq-RG2VUYsGl7wHWhGiOGWh9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJRq-RG2VUYsGl7wHWhGiOGWh9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348DF/E6BF830CC1DD11ECB97B9C7FC4F9AE02/EJRq-RG2VUYsGl7wHWhGiOGWh9M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:d2:ca:d6:3c:8f:09:9a:10:04:53:af:bd:59:ce:b3:04:c9: 30:03:a9:89:5f:85:8f:e9:d1:84:9a:f6:f4:c9:ef:34:83:2f: 39:7e:25:c8:7e:5c:a7:b8:8d:3e:8c:39:21:93:18:b5:8d:e1: 70:0c:cc:bf:5f:0c:c9:a5:d1:20:cf:b9:ec:40:9d:2b:4e:05: ed:c1:80:6e:37:86:32:51:0d:7c:64:c4:f9:97:88:25:e1:30: 3c:bb:b6:8e:90:ab:fa:b1:1d:57:c4:5a:fb:ce:31:0e:e7:09: 8c:91:9e:cd:bb:82:e8:a2:60:0c:1f:1e:82:b5:59:33:cd:ee: 72:0b:4b:f3:c8:98:7c:e0:62:73:ac:7e:2b:f4:99:42:68:0b: 2f:22:ca:f9:4b:ae:ec:93:52:cf:ce:fd:3e:eb:4f:e4:de:1d: 95:0d:a7:a3:08:af:9c:c2:5d:f6:5d:8f:8a:30:81:e3:5d:ab: 47:81:43:ec:47:5e:50:4d:91:b2:a6:ee:63:1d:52:52:32:7e: b9:22:0f:78:56:fb:d9:ec:ee:c6:78:ea:65:8e:d9:f1:fb:8b: ec:72:4d:b2:58:47:c4:2d:2e:2a:a8:0c:f5:a1:d4:45:1e:f2: ce:59:ca:e3:d0:21:8b:56:63:89:3f:f4:5e:92:5a:9e:00:99: 46:47:e6:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ4REYxMTAvBgNVBAUTKDEwOTQ2QUY5MTFCNjU1NDYyQzFBNUVGMDFENjg0Njg4 RTE5Njg3RDMwHhcNMjQwNTE5MDM0MzU0WhcNMjQwNTI2MDM0MzU0WjAYMRYwFAYD VQQDEw02NjQ5NzU3YS1jYWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPsPlkXSv+iFwD8hq2iN/DdNdT3gS1cBBVKBT5Zsv0C/tKUDlDELByE2oqRk UPYwb+NPNBbX2rBikWoUiPyGxx0jOg4we0TBblWl4TQkhg5TMrV1nzReLVivrJrm JXp8Wr6yk9s0dwlFiJZ2WhzaC4GmvPWWGEVIHhouMfIQ2yl9STs+RVOmHeyWaTle pa0P9wUDAAdlMYAJ8E3zz5tGX9HFu+wPk4JRbY4L7iSiFtpf0ZsNX/RncLcU7pKE kG/xkwu2n2kgifRgChNoLlZIH2kToz5PSS8Clqhj2toJ8BUoxIizybkj8fBIZDG4 PBJfq1PfiiQoQNUHqp0ZBQEGPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAREsHxq vrs7mKLTenmGF/3b4WIDMB8GA1UdIwQYMBaAFBCUavkRtlVGLBpe8B1oRojhlofT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDhERi9FNkJGODMwQ0Mx REQxMUVDQjk3QjlDN0ZDNEY5QUUwMi9FSlJxLVJHMlZVWXNHbDd3SFdoR2lPR1do OU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VKUnEtUkcyVlVZc0dsN3dIV2hHaU9HV2g5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDhERi9FNkJGODMwQ0MxREQxMUVDQjk3QjlDN0ZDNEY5QUUwMi9FSlJxLVJHMlZV WXNHbDd3SFdoR2lPR1doOU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBL0srWPI8JmhAEU6+9Wc6zBMkwA6mJX4WP6dGEmvb0ye80gy85fiXI flynuI0+jDkhkxi1jeFwDMy/XwzJpdEgz7nsQJ0rTgXtwYBuN4YyUQ18ZMT5l4gl 4TA8u7aOkKv6sR1XxFr7zjEO5wmMkZ7Nu4LoomAMHx6CtVkzze5yC0vzyJh84GJz rH4r9JlCaAsvIsr5S67sk1LPzv0+60/k3h2VDaejCK+cwl32XY+KMIHjXatHgUPs R15QTZGypu5jHVJSMn65Ig94VvvZ7O7GeOpljtnx+4vsck2yWEfELS4qqAz1odRF HvLOWcrj0CGLVmOJP/ReklqeAJlGR+b5 -----END CERTIFICATE-----Generated at Sun May 19 04:20:42 2024 by rpki-client on console-ams.rpki-client.org