$ rpki-client -vvf rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.mft File: E39piIvunMg7q0H68slC0Qryy2U.mft (raw, json) Hash identifier: 4h+n7m8Kv6+mPW6Pq3/hxzYztMz1jl9QaZnDGOzk8tU= Subject key identifier: 47:AA:12:B0:8D:19:76:4B:B0:4E:C9:AF:C9:44:2D:1D:3E:7F:98:9C Authority key identifier: 13:7F:69:88:8B:EE:9C:C8:3B:AB:41:FA:F2:C9:42:D1:0A:F2:CB:65 Certificate issuer: /CN=A914B30A/serialNumber=137F69888BEE9CC83BAB41FAF2C942D10AF2CB65 Certificate serial: 03B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E39piIvunMg7q0H68slC0Qryy2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.mft Manifest number: 03B2 Signing time: Sun 19 May 2024 02:29:32 +0000 Manifest this update: Sun 19 May 2024 02:29:31 +0000 Manifest next update: Sun 26 May 2024 02:29:31 +0000 Files and hashes: 1: E39piIvunMg7q0H68slC0Qryy2U.crl (hash: 2ToSh8bVr80PmOywBKyL35UB2HsYdUhxQOCtg3BkYQs=) 2: 279EE41683E111ECBB82F47DC4F9AE02.roa (hash: ngK147vMs6q/RHxhjfKLOtDjm0hQwKZIJBdKYWfYSHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.crl rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E39piIvunMg7q0H68slC0Qryy2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 950 (0x3b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B30A/serialNumber=137F69888BEE9CC83BAB41FAF2C942D10AF2CB65 Validity Not Before: May 19 02:29:31 2024 GMT Not After : May 26 02:29:31 2024 GMT Subject: CN=6649640c-b09e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d9:de:f2:36:59:9c:be:10:68:41:42:36:cb: 4c:8e:c4:a9:96:fe:ac:45:49:85:3a:ad:20:8a:36: 45:88:41:71:64:7d:17:2c:64:5f:df:b7:6c:c8:28: 6b:03:cc:c5:2b:a5:15:e9:a8:45:db:ce:1e:6f:fe: 49:a3:11:ba:76:75:9a:3f:94:e8:22:bf:5b:3b:92: 20:bb:b6:8a:bd:ad:e9:fc:c1:c1:c3:65:d8:2e:ab: 02:06:9b:60:11:b0:8e:94:a5:e3:60:f3:75:75:bf: fa:a9:fa:ba:3d:f2:33:92:01:94:93:13:69:06:1f: f7:34:3e:ce:2e:26:6d:c2:65:52:8c:5e:ea:d4:e7: 09:c5:f4:16:2f:ff:a4:a9:f8:20:8c:d6:0d:51:87: 19:58:82:e4:0e:43:19:c7:97:5b:3c:e4:be:45:9e: e2:9f:83:a5:21:f0:40:52:aa:ac:ad:92:19:cb:cf: af:6e:8e:d9:00:5e:9e:ce:48:ad:c2:66:cf:8b:b9: aa:f7:71:63:f7:89:24:57:38:fb:e2:3a:c7:7a:cb: 5d:98:7c:96:47:6b:e7:00:6c:43:69:14:57:8f:48: fb:f6:68:ba:8f:da:35:76:df:48:33:78:82:dd:c7: d8:e4:a8:68:11:b4:e3:ef:f9:5a:7f:5f:d6:7b:89: 2a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:AA:12:B0:8D:19:76:4B:B0:4E:C9:AF:C9:44:2D:1D:3E:7F:98:9C X509v3 Authority Key Identifier: keyid:13:7F:69:88:8B:EE:9C:C8:3B:AB:41:FA:F2:C9:42:D1:0A:F2:CB:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E39piIvunMg7q0H68slC0Qryy2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:67:f5:f3:06:c5:c0:d8:82:42:1c:e1:ea:2d:59:35:89:f2: 4a:f2:f0:36:ad:ba:ce:fa:60:24:74:84:3e:3c:1f:8d:88:fa: 6e:71:23:20:0b:dd:44:a7:b4:e9:d8:3d:31:92:09:8c:72:8d: b7:5d:0b:74:72:34:70:e7:ca:08:65:0c:61:ba:3c:17:31:55: c5:2d:97:62:d7:11:e0:2c:28:b5:43:18:32:c2:cb:43:14:28: 17:cc:5e:10:ce:1a:54:bf:4b:d0:a5:a1:9f:c9:0e:f8:3c:cd: 24:9b:1f:59:dd:b8:44:cf:dd:c3:94:b3:60:8f:a9:59:03:3d: c5:9f:32:df:19:f0:6a:b8:2e:41:76:fe:4a:01:f6:d8:8b:b5: 7a:70:ac:2f:34:a7:48:1b:f6:31:c6:37:68:55:2e:aa:f0:bb: aa:c4:86:58:36:79:1d:1f:8c:7f:a2:0a:94:a7:a4:bb:98:b7: b2:ba:d8:c5:79:5b:5b:67:60:40:b9:17:ce:0a:07:55:6a:ad: 09:6b:17:b1:eb:0c:28:83:ae:8d:0f:76:17:69:1d:53:a7:c6: b4:92:d7:4e:4f:49:4f:f4:db:fb:4a:50:fa:d6:35:5d:fc:09: 2a:d0:cf:f8:5b:4d:ac:66:b1:09:f2:dc:21:67:c4:03:90:d1: 56:21:ff:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIzMEExMTAvBgNVBAUTKDEzN0Y2OTg4OEJFRTlDQzgzQkFCNDFGQUYyQzk0MkQx MEFGMkNCNjUwHhcNMjQwNTE5MDIyOTMxWhcNMjQwNTI2MDIyOTMxWjAYMRYwFAYD VQQDEw02NjQ5NjQwYy1iMDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9ne8jZZnL4QaEFCNstMjsSplv6sRUmFOq0gijZFiEFxZH0XLGRf37dsyChr A8zFK6UV6ahF284eb/5JoxG6dnWaP5ToIr9bO5Igu7aKva3p/MHBw2XYLqsCBptg EbCOlKXjYPN1db/6qfq6PfIzkgGUkxNpBh/3ND7OLiZtwmVSjF7q1OcJxfQWL/+k qfggjNYNUYcZWILkDkMZx5dbPOS+RZ7in4OlIfBAUqqsrZIZy8+vbo7ZAF6ezkit wmbPi7mq93Fj94kkVzj74jrHestdmHyWR2vnAGxDaRRXj0j79mi6j9o1dt9IM3iC 3cfY5KhoEbTj7/laf1/We4kqhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEeqErCN GXZLsE7Jr8lELR0+f5icMB8GA1UdIwQYMBaAFBN/aYiL7pzIO6tB+vLJQtEK8stl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjMwQS85MUFFNjlBQTQ2 N0MxMUVDQkQ2NjEyNkJDNEY5QUUwMi9FMzlwaUl2dW5NZzdxMEg2OHNsQzBRcnl5 MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UzOXBpSXZ1bk1nN3EwSDY4c2xDMFFyeXkyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjMwQS85MUFFNjlBQTQ2N0MxMUVDQkQ2NjEyNkJDNEY5QUUwMi9FMzlwaUl2dW5N ZzdxMEg2OHNsQzBRcnl5MlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqZ/XzBsXA2IJCHOHqLVk1ifJK8vA2rbrO+mAkdIQ+PB+NiPpucSMg C91Ep7Tp2D0xkgmMco23XQt0cjRw58oIZQxhujwXMVXFLZdi1xHgLCi1QxgywstD FCgXzF4QzhpUv0vQpaGfyQ74PM0kmx9Z3bhEz93DlLNgj6lZAz3FnzLfGfBquC5B dv5KAfbYi7V6cKwvNKdIG/YxxjdoVS6q8LuqxIZYNnkdH4x/ogqUp6S7mLeyutjF eVtbZ2BAuRfOCgdVaq0Jaxex6wwog66ND3YXaR1Tp8a0ktdOT0lP9Nv7SlD61jVd /Akq0M/4W02sZrEJ8twhZ8QDkNFWIf/t -----END CERTIFICATE-----Generated at Sun May 19 03:38:14 2024 by rpki-client on console-ams.rpki-client.org