$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft File: enhVXghERXV_vNAN3R10w2nLoLA.mft (raw, json) Hash identifier: ojLfv6bGNW0R9lqy9XOC+g4JSBzEYxWCfZ5JTLf/vr4= Subject key identifier: 16:4A:86:3E:7C:95:69:1B:A0:D7:96:C6:FA:2A:4F:A3:8D:8C:57:03 Authority key identifier: 7A:78:55:5E:08:44:45:75:7F:BC:D0:0D:DD:1D:74:C3:69:CB:A0:B0 Certificate issuer: /CN=A914E6AA/serialNumber=7A78555E084445757FBCD00DDD1D74C369CBA0B0 Certificate serial: 83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft Manifest number: 066B Signing time: Sun 19 May 2024 00:58:00 +0000 Manifest this update: Sun 19 May 2024 00:58:00 +0000 Manifest next update: Sun 26 May 2024 00:58:00 +0000 Files and hashes: 1: enhVXghERXV_vNAN3R10w2nLoLA.crl (hash: wPksN7Pr3nCoh55yx21QPGA3xulLN7UEDP7zPDe6ubQ=) 2: 0299ED8A581211EE9C15B578C4F9AE02.roa (hash: WTs+JsBLhwsVk7dpOedQtVkL/wK5SOS/nZaMAMoT8nY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.crl rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E6AA/serialNumber=7A78555E084445757FBCD00DDD1D74C369CBA0B0 Validity Not Before: May 19 00:58:00 2024 GMT Not After : May 26 00:58:00 2024 GMT Subject: CN=66494e98-8fc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:dd:1d:14:e5:ab:54:a3:52:ed:00:ec:90:e7: ee:a8:79:78:41:d7:39:16:74:0f:bc:b3:c9:e2:3d: 92:24:5c:a5:d0:29:12:c6:25:8e:b7:17:8d:e5:a5: 34:92:b7:d5:c5:3c:cf:6d:8d:96:03:9f:18:bf:5a: 92:5a:98:72:e6:e2:6c:d1:41:81:94:9c:a4:2d:ec: 3e:ce:3e:d4:bc:61:df:7f:b1:24:e3:9d:e7:12:21: 6a:72:15:ea:6f:e5:40:46:f8:85:8e:36:88:ad:11: 30:ac:43:c5:84:ad:73:6e:8c:74:36:22:e9:57:d9: 8f:ab:09:50:13:b9:38:e0:19:2c:55:3f:61:fb:67: 13:ad:37:ac:75:0b:9e:8a:d7:bb:9a:51:d1:74:cc: c8:cc:27:f6:45:ea:5f:56:a4:f4:38:53:bd:a8:67: f3:34:b5:f9:e0:2f:12:93:cb:31:e3:25:ed:95:7b: 74:24:17:28:bf:38:f5:3f:44:34:57:45:44:de:3f: 29:c3:6e:dd:bf:4b:b0:90:8c:0d:6c:40:08:9a:99: f6:44:17:a0:e5:28:28:1b:75:fa:68:60:07:47:95: 00:38:4e:c4:73:6b:96:24:83:6e:7c:e2:65:30:83: 05:d4:cf:21:c4:d6:6c:a9:d6:2a:7d:7b:c8:19:6e: 8d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:4A:86:3E:7C:95:69:1B:A0:D7:96:C6:FA:2A:4F:A3:8D:8C:57:03 X509v3 Authority Key Identifier: keyid:7A:78:55:5E:08:44:45:75:7F:BC:D0:0D:DD:1D:74:C3:69:CB:A0:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:40:08:70:92:26:d2:95:d6:91:57:66:2f:0e:fa:a1:eb:9b: 61:bc:4c:48:75:99:0d:1c:f6:7d:8e:7e:12:d6:85:57:27:1d: af:1f:4f:7b:70:97:03:2b:83:38:30:24:36:d4:30:a2:51:a6: 1e:54:e8:c3:65:8a:f5:ac:02:a5:4a:c7:c5:f8:9a:2e:c6:ce: 5d:91:10:46:6d:a1:9a:b0:71:bf:6e:a2:4b:74:c2:13:62:32: 41:15:07:19:e7:8a:d3:c1:ca:73:cd:8a:40:b6:0d:31:86:d6: 58:f6:15:cf:35:94:05:04:27:52:86:99:dc:96:c4:7f:17:fd: 48:65:94:b2:c5:57:8e:bb:55:0e:97:76:87:a2:24:ad:08:97: cb:f6:5f:3c:48:3e:b7:5c:57:ec:40:f2:4f:bd:fd:fb:c4:4a: 59:32:63:ad:e3:94:80:7e:cc:b2:15:85:94:91:c7:ba:58:a7: 98:40:4a:26:bb:a1:f1:f3:63:6e:b7:d3:06:2f:65:1f:1b:d7: e8:45:20:b3:35:ec:c5:30:75:c8:21:6b:62:96:0f:62:37:e0: 0c:6a:8c:21:9b:49:da:ee:2b:d3:d7:7a:d1:94:89:aa:01:01: 23:b0:ef:59:7b:0e:19:fc:bc:31:1d:f7:d1:12:e1:cc:d3:33: 61:fa:25:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU2QUExMTAvBgNVBAUTKDdBNzg1NTVFMDg0NDQ1NzU3RkJDRDAwREREMUQ3NEMz NjlDQkEwQjAwHhcNMjQwNTE5MDA1ODAwWhcNMjQwNTI2MDA1ODAwWjAYMRYwFAYD VQQDEw02NjQ5NGU5OC04ZmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvt0dFOWrVKNS7QDskOfuqHl4Qdc5FnQPvLPJ4j2SJFyl0CkSxiWOtxeN5aU0 krfVxTzPbY2WA58Yv1qSWphy5uJs0UGBlJykLew+zj7UvGHff7Ek453nEiFqchXq b+VARviFjjaIrREwrEPFhK1zbox0NiLpV9mPqwlQE7k44BksVT9h+2cTrTesdQue ite7mlHRdMzIzCf2RepfVqT0OFO9qGfzNLX54C8Sk8sx4yXtlXt0JBcovzj1P0Q0 V0VE3j8pw27dv0uwkIwNbEAImpn2RBeg5SgoG3X6aGAHR5UAOE7Ec2uWJINufOJl MIMF1M8hxNZsqdYqfXvIGW6NdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBZKhj58 lWkboNeWxvoqT6ONjFcDMB8GA1UdIwQYMBaAFHp4VV4IREV1f7zQDd0ddMNpy6Cw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTZBQS84RURCMTA3RUFE QTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9lbmhWWGdoRVJYVl92TkFOM1IxMHcybkxv TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VuaFZYZ2hFUlhWX3ZOQU4zUjEwdzJuTG9MQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTZBQS84RURCMTA3RUFEQTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9lbmhWWGdoRVJY Vl92TkFOM1IxMHcybkxvTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRQAhwkibSldaRV2YvDvqh65thvExIdZkNHPZ9jn4S1oVXJx2vH097 cJcDK4M4MCQ21DCiUaYeVOjDZYr1rAKlSsfF+Jouxs5dkRBGbaGasHG/bqJLdMIT YjJBFQcZ54rTwcpzzYpAtg0xhtZY9hXPNZQFBCdShpnclsR/F/1IZZSyxVeOu1UO l3aHoiStCJfL9l88SD63XFfsQPJPvf37xEpZMmOt45SAfsyyFYWUkce6WKeYQEom u6Hx82Nut9MGL2UfG9foRSCzNezFMHXIIWtilg9iN+AMaowhm0na7ivT13rRlImq AQEjsO9Zew4Z/LwxHffREuHM0zNh+iUy -----END CERTIFICATE-----Generated at Sun May 19 01:47:09 2024 by rpki-client on console-ams.rpki-client.org