$ rpki-client -vvf rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.mft File: e9PkPRNOUjXpdgPOi6lIa2KpseY.mft (raw, json) Hash identifier: NM/DQRXgWQ5YNiQIjvCWhxfblQoscceAgN3/QpdgpmM= Subject key identifier: 5B:07:DB:BB:7E:DA:E7:F1:84:D2:EC:A1:EB:97:86:20:D2:25:8D:EF Authority key identifier: 7B:D3:E4:3D:13:4E:52:35:E9:76:03:CE:8B:A9:48:6B:62:A9:B1:E6 Certificate issuer: /CN=A915C631/serialNumber=7BD3E43D134E5235E97603CE8BA9486B62A9B1E6 Certificate serial: 0262 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9PkPRNOUjXpdgPOi6lIa2KpseY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.mft Manifest number: 0252 Signing time: Sun 19 May 2024 04:00:35 +0000 Manifest this update: Sun 19 May 2024 04:00:34 +0000 Manifest next update: Sun 26 May 2024 04:00:34 +0000 Files and hashes: 1: e9PkPRNOUjXpdgPOi6lIa2KpseY.crl (hash: Wnmn3NrPENOXoW0mQABnLHbl4qCN08EaYPECvLvuIL4=) 2: 63F05DE02F1D11EDA3E29B09C4F9AE02.roa (hash: agvFHbWRNeaxotO+lELOx4J3OTYqWk/z5EMkXu7NM4E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.crl rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9PkPRNOUjXpdgPOi6lIa2KpseY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 610 (0x262) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C631/serialNumber=7BD3E43D134E5235E97603CE8BA9486B62A9B1E6 Validity Not Before: May 19 04:00:34 2024 GMT Not After : May 26 04:00:34 2024 GMT Subject: CN=66497963-1d1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9a:a2:cd:24:36:12:c1:c8:3d:8f:66:71:1c: ac:ab:e9:3e:86:da:3b:05:23:fa:51:41:7c:cb:03: 9b:e3:89:2d:d4:5d:99:ba:da:80:b8:a8:13:eb:72: a7:79:1f:c6:1b:e8:1d:45:7a:fe:a3:cd:3b:3d:56: da:50:10:d0:ee:e6:16:95:bc:4d:10:8a:db:23:fb: 83:c2:e6:3c:83:d2:03:41:04:4a:b4:5f:a9:3d:a8: ae:d9:28:32:05:97:23:ce:f6:c2:d1:ee:eb:e3:43: 27:66:30:56:85:e0:a8:21:52:a8:9c:a9:66:9d:22: 04:c9:46:ce:49:ce:0f:a8:d4:82:48:43:dc:ec:35: 2c:f1:c1:b4:20:cf:d6:67:d9:11:d1:f6:70:e9:91: 54:9c:32:83:e1:9b:8f:98:82:f2:e5:7f:88:13:42: d9:9f:3a:d9:17:01:f5:c0:1b:50:d7:c8:99:b1:3c: 36:d4:7b:42:02:60:c0:55:a6:9e:ba:9a:6c:97:6b: d5:dd:d0:84:bf:1c:2f:f9:f0:60:1d:6c:4e:2c:59: 46:3d:6d:0b:50:c6:91:b1:fa:4a:a5:d3:96:01:f7: e5:24:02:93:24:f8:3d:0c:a0:83:c6:a6:8c:6b:db: 75:e4:01:3f:8a:80:82:a9:bd:dd:a8:99:69:8f:cc: 4e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:07:DB:BB:7E:DA:E7:F1:84:D2:EC:A1:EB:97:86:20:D2:25:8D:EF X509v3 Authority Key Identifier: keyid:7B:D3:E4:3D:13:4E:52:35:E9:76:03:CE:8B:A9:48:6B:62:A9:B1:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9PkPRNOUjXpdgPOi6lIa2KpseY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:e3:3b:f7:3c:dd:05:82:1b:d5:04:2b:1f:1a:4b:1f:c2:5b: dd:3f:bf:97:b3:a4:67:73:80:0f:70:bd:6d:e1:77:a0:9e:61: a9:ba:64:11:9c:57:d0:6f:20:a0:f9:42:5f:28:26:fd:c2:ac: 81:d6:2e:8a:e2:57:79:b2:0d:51:9c:29:27:3c:83:6d:33:38: d7:a2:cd:cf:8d:1e:74:03:ff:be:a8:ee:c0:e1:e5:ef:fa:53: 53:32:6c:6c:56:92:8a:cc:6b:7a:bc:af:69:3d:3c:57:9f:9d: 4c:b9:f1:5f:16:86:12:4b:43:f9:12:ae:d7:43:3f:aa:68:7c: cb:b2:8d:ac:54:89:50:55:4d:6b:ae:15:d8:9d:3d:f2:3e:3d: f4:71:df:0b:03:b4:1c:01:3a:e5:1c:bc:a8:84:49:16:88:a2: 94:45:d9:8d:1b:09:8c:8b:e2:ec:60:8d:da:d8:ac:c9:5e:01: ce:25:a6:1a:6f:a6:e9:cf:5b:ad:b9:00:42:41:e9:6c:90:60: 0a:5b:e2:1d:7a:51:8c:96:4a:58:65:fa:01:32:83:96:1e:80: 27:6f:97:0e:3d:a4:7f:15:9a:cb:26:53:67:2c:86:e0:6e:df: f5:cb:d6:2f:3c:e6:7a:7f:f1:a6:5c:a8:b6:ec:be:35:d9:0d: 67:0c:db:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM2MzExMTAvBgNVBAUTKDdCRDNFNDNEMTM0RTUyMzVFOTc2MDNDRThCQTk0ODZC NjJBOUIxRTYwHhcNMjQwNTE5MDQwMDM0WhcNMjQwNTI2MDQwMDM0WjAYMRYwFAYD VQQDEw02NjQ5Nzk2My0xZDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5qizSQ2EsHIPY9mcRysq+k+hto7BSP6UUF8ywOb44kt1F2ZutqAuKgT63Kn eR/GG+gdRXr+o807PVbaUBDQ7uYWlbxNEIrbI/uDwuY8g9IDQQRKtF+pPaiu2Sgy BZcjzvbC0e7r40MnZjBWheCoIVKonKlmnSIEyUbOSc4PqNSCSEPc7DUs8cG0IM/W Z9kR0fZw6ZFUnDKD4ZuPmILy5X+IE0LZnzrZFwH1wBtQ18iZsTw21HtCAmDAVaae uppsl2vV3dCEvxwv+fBgHWxOLFlGPW0LUMaRsfpKpdOWAfflJAKTJPg9DKCDxqaM a9t15AE/ioCCqb3dqJlpj8xOfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFsH27t+ 2ufxhNLsoeuXhiDSJY3vMB8GA1UdIwQYMBaAFHvT5D0TTlI16XYDzoupSGtiqbHm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzYzMS8zOUU0RDdBOERD NzgxMUVDQTRFMzA2MTdDNEY5QUUwMi9lOVBrUFJOT1VqWHBkZ1BPaTZsSWEyS3Bz ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2U5UGtQUk5PVWpYcGRnUE9pNmxJYTJLcHNlWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzYzMS8zOUU0RDdBOERDNzgxMUVDQTRFMzA2MTdDNEY5QUUwMi9lOVBrUFJOT1Vq WHBkZ1BPaTZsSWEyS3BzZVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA34zv3PN0FghvVBCsfGksfwlvdP7+Xs6Rnc4APcL1t4XegnmGpumQR nFfQbyCg+UJfKCb9wqyB1i6K4ld5sg1RnCknPINtMzjXos3PjR50A/++qO7A4eXv +lNTMmxsVpKKzGt6vK9pPTxXn51MufFfFoYSS0P5Eq7XQz+qaHzLso2sVIlQVU1r rhXYnT3yPj30cd8LA7QcATrlHLyohEkWiKKURdmNGwmMi+LsYI3a2KzJXgHOJaYa b6bpz1utuQBCQelskGAKW+IdelGMlkpYZfoBMoOWHoAnb5cOPaR/FZrLJlNnLIbg bt/1y9YvPOZ6f/GmXKi27L412Q1nDNv0 -----END CERTIFICATE-----Generated at Sun May 19 04:56:55 2024 by rpki-client on console-fra.rpki-client.org