$ rpki-client -vvf rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.mft File: EE2-9WUN1zWSotPPgXKfJprZkQg.mft (raw, json) Hash identifier: y3su42vgCNCZAr4H3BjUnM8l3UfsYccNpI397thOoyA= Subject key identifier: BD:33:95:C8:1A:04:2E:CF:0C:10:93:A4:C2:FF:2A:E7:F2:BF:46:EC Authority key identifier: 10:4D:BE:F5:65:0D:D7:35:92:A2:D3:CF:81:72:9F:26:9A:D9:91:08 Certificate issuer: /CN=A914C429/serialNumber=104DBEF5650DD73592A2D3CF81729F269AD99108 Certificate serial: 067E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE2-9WUN1zWSotPPgXKfJprZkQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.mft Manifest number: 067A Signing time: Thu 30 May 2024 23:57:01 +0000 Manifest this update: Thu 30 May 2024 23:57:01 +0000 Manifest next update: Thu 06 Jun 2024 23:57:01 +0000 Files and hashes: 1: EE2-9WUN1zWSotPPgXKfJprZkQg.crl (hash: cdjOw4VBV6zm9jtxYEiCD3SbShQtJVgQTVzDAogYRsk=) 2: 4D5B35402E8511EB850F8A18C4F9AE02.roa (hash: eVZ25PhJmdJJ+k8iptjOXcq06eNx21H+Qxt0VJ6DxhM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.crl rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE2-9WUN1zWSotPPgXKfJprZkQg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 23:57:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1662 (0x67e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C429/serialNumber=104DBEF5650DD73592A2D3CF81729F269AD99108 Validity Not Before: May 30 23:57:01 2024 GMT Not After : Jun 6 23:57:01 2024 GMT Subject: CN=6659124d-9e80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:73:6d:33:71:ac:ec:a7:33:3c:22:96:9b:ec: ab:1d:90:45:66:81:69:ab:a2:ea:63:61:5d:5e:e1: 0e:50:bb:fb:2d:7e:73:cd:cc:cc:ed:84:d8:cb:14: b6:27:d2:58:f6:be:d8:a7:6e:bf:bf:5a:e6:8f:49: 9d:4d:6c:f0:bc:dc:db:ec:99:7b:20:95:7b:f2:34: 4a:dc:e6:e7:0d:e2:ec:76:5c:8e:a7:00:e5:ad:c9: 4c:b7:6c:bd:98:be:bc:76:b2:2a:d2:97:73:c1:99: 25:e3:e2:95:a9:63:2a:2a:10:bb:37:9c:09:d0:5f: bb:62:79:d5:58:f7:32:78:9c:32:f8:8c:b5:94:0a: 9c:af:88:b9:47:02:b9:3a:01:40:67:93:d9:11:0d: 19:ba:c9:e8:df:f1:76:1a:cb:21:46:48:ed:d9:73: 65:d0:12:fd:2f:90:72:f4:96:d7:b5:be:1d:2e:a1: 3b:0d:59:d1:e5:f1:09:96:e2:bc:02:f4:90:07:91: 66:bd:c6:b1:e7:c6:b9:0f:93:15:7c:67:86:6a:67: 94:bf:43:90:f7:0d:21:f1:3a:18:58:23:ea:ce:e9: 83:37:3f:b7:d3:ed:df:de:0e:5c:61:2c:33:ff:c2: 5d:d8:b3:6f:31:75:3f:53:1b:98:27:34:8c:b3:8c: 7b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:33:95:C8:1A:04:2E:CF:0C:10:93:A4:C2:FF:2A:E7:F2:BF:46:EC X509v3 Authority Key Identifier: keyid:10:4D:BE:F5:65:0D:D7:35:92:A2:D3:CF:81:72:9F:26:9A:D9:91:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE2-9WUN1zWSotPPgXKfJprZkQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:dd:3f:95:01:fd:30:ed:3a:3d:b4:3d:2b:6c:9b:52:34:e3: 8e:12:cc:c5:8a:f0:f6:96:be:33:3e:fc:12:56:99:27:4f:44: ed:46:39:6b:4e:80:1a:89:e4:6c:5e:f3:f2:bb:fa:c0:d1:f3: 4f:df:87:1b:da:85:8a:20:87:38:34:43:99:2d:63:3f:7c:51: dc:89:94:e2:cd:27:1c:77:72:54:b1:95:ba:8e:bf:18:60:d4: d4:52:f4:08:88:3e:12:8e:01:a4:6f:63:c9:7f:b8:f6:18:d7: 20:e3:93:bd:7b:0b:45:8b:2f:50:c5:e0:48:ff:f3:5b:e2:7a: aa:eb:2d:34:30:64:94:48:db:b5:27:58:b6:ac:f6:c3:24:3d: 73:0e:13:22:07:f5:ba:6c:7d:e3:e0:fd:c6:d5:cb:52:07:f3: 28:a3:7d:68:66:0a:de:32:d1:6d:c0:1b:f1:9b:73:83:9c:d9: a6:94:22:0f:98:40:44:89:61:51:f5:e2:27:7f:eb:09:9c:f5: e7:36:7e:c8:df:83:77:d9:89:e1:a8:08:8e:54:1d:23:17:fa: d8:83:55:99:de:52:e8:95:b8:53:52:7a:83:ee:2f:cd:4b:a1: 82:42:d7:7a:e1:50:61:ff:c6:1e:6f:a1:9e:e0:21:5d:93:dd: fb:22:a9:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM0MjkxMTAvBgNVBAUTKDEwNERCRUY1NjUwREQ3MzU5MkEyRDNDRjgxNzI5RjI2 OUFEOTkxMDgwHhcNMjQwNTMwMjM1NzAxWhcNMjQwNjA2MjM1NzAxWjAYMRYwFAYD VQQDEw02NjU5MTI0ZC05ZTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3NtM3Gs7KczPCKWm+yrHZBFZoFpq6LqY2FdXuEOULv7LX5zzczM7YTYyxS2 J9JY9r7Yp26/v1rmj0mdTWzwvNzb7Jl7IJV78jRK3ObnDeLsdlyOpwDlrclMt2y9 mL68drIq0pdzwZkl4+KVqWMqKhC7N5wJ0F+7YnnVWPcyeJwy+Iy1lAqcr4i5RwK5 OgFAZ5PZEQ0Zusno3/F2GsshRkjt2XNl0BL9L5By9JbXtb4dLqE7DVnR5fEJluK8 AvSQB5Fmvcax58a5D5MVfGeGameUv0OQ9w0h8ToYWCPqzumDNz+30+3f3g5cYSwz /8Jd2LNvMXU/UxuYJzSMs4x7QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0zlcga BC7PDBCTpML/Kufyv0bsMB8GA1UdIwQYMBaAFBBNvvVlDdc1kqLTz4Fynyaa2ZEI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzQyOS8yNkQ2QjdDNDJF ODQxMUVCQTMxNkMzMTdDNEY5QUUwMi9FRTItOVdVTjF6V1NvdFBQZ1hLZkpwclpr UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VFMi05V1VOMXpXU290UFBnWEtmSnByWmtRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzQyOS8yNkQ2QjdDNDJFODQxMUVCQTMxNkMzMTdDNEY5QUUwMi9FRTItOVdVTjF6 V1NvdFBQZ1hLZkpwclprUWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAM3T+VAf0w7To9tD0rbJtSNOOOEszFivD2lr4zPvwSVpknT0TtRjlr ToAaieRsXvPyu/rA0fNP34cb2oWKIIc4NEOZLWM/fFHciZTizSccd3JUsZW6jr8Y YNTUUvQIiD4SjgGkb2PJf7j2GNcg45O9ewtFiy9QxeBI//Nb4nqq6y00MGSUSNu1 J1i2rPbDJD1zDhMiB/W6bH3j4P3G1ctSB/Moo31oZgreMtFtwBvxm3ODnNmmlCIP mEBEiWFR9eInf+sJnPXnNn7I34N32YnhqAiOVB0jF/rYg1WZ3lLolbhTUnqD7i/N S6GCQtd64VBh/8Yeb6Ge4CFdk937Iqka -----END CERTIFICATE-----Generated at Fri May 31 01:33:47 2024 by rpki-client on console-ams.rpki-client.org