$ rpki-client -vvf rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft File: iEthKajamClnFMU6WhKA_RAZ-KM.mft (raw, json) Hash identifier: YT6cKhW6zI3vz2vQp090dc31AC/SQlX5RfXF0ergJCU= Subject key identifier: CC:C6:AA:8E:79:74:BF:D8:DB:C8:AC:1F:EF:94:84:99:22:C8:05:E0 Authority key identifier: 88:4B:61:29:A8:DA:98:29:67:14:C5:3A:5A:12:80:FD:10:19:F8:A3 Certificate issuer: /CN=A915F6E4/serialNumber=884B6129A8DA98296714C53A5A1280FD1019F8A3 Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft Manifest number: 89 Signing time: Sun 19 May 2024 07:08:47 +0000 Manifest this update: Sun 19 May 2024 07:08:47 +0000 Manifest next update: Sun 26 May 2024 07:08:47 +0000 Files and hashes: 1: iEthKajamClnFMU6WhKA_RAZ-KM.crl (hash: Usl1529tXqzuzzz+eGbNwYuCxVWdMJsiOdEXsmlgS2k=) 2: E1B42772611A11EE9022C77EC4F9AE02.roa (hash: rihTg/cAg86XODANY58nGeXrXqb2a2j3EKJ+pY71Ob8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.crl rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F6E4/serialNumber=884B6129A8DA98296714C53A5A1280FD1019F8A3 Validity Not Before: May 19 07:08:47 2024 GMT Not After : May 26 07:08:47 2024 GMT Subject: CN=6649a57f-f3bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:55:f0:dd:a5:0f:12:e4:cc:1f:46:94:4e:c3: f3:18:47:d1:09:56:77:bb:c0:79:61:17:c5:8a:57: e8:27:61:8a:60:0a:c2:34:2d:b9:13:cc:58:b2:1f: 72:c2:2a:cf:22:c2:ae:09:7f:f4:d4:3b:0c:41:7f: e1:2a:89:2a:a4:79:6e:c3:96:fc:1d:2a:b4:a9:df: 32:de:49:dd:e2:b8:5a:06:6a:09:db:ea:d3:18:61: e9:f7:49:4b:1f:cf:cf:00:e7:85:5b:b2:a8:6c:80: b4:fd:52:a6:47:ab:1a:06:46:de:17:65:b9:18:c4: f1:18:7f:b1:4e:be:5d:52:13:f1:6e:d8:ab:5c:7f: 52:98:e8:3f:91:36:b4:94:4d:24:d0:01:7a:2e:4b: 1f:e7:25:b9:1d:4a:1f:0c:51:f9:07:de:ac:10:a3: 65:aa:9d:1b:ec:69:84:6d:19:7b:e8:b1:52:92:eb: 39:8f:5d:8d:f4:eb:1d:54:f3:db:c0:b2:06:28:1d: 64:da:87:ea:e7:9e:92:a0:32:ec:8d:32:4f:3a:99: a0:e7:81:d5:d6:26:c2:3c:b3:73:1e:ab:ac:25:80: ba:b0:cd:c9:ad:29:e0:de:33:a6:6b:59:6d:5d:be: 36:8b:63:f8:0d:87:05:a5:6f:72:58:1b:7c:f8:14: fa:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C6:AA:8E:79:74:BF:D8:DB:C8:AC:1F:EF:94:84:99:22:C8:05:E0 X509v3 Authority Key Identifier: keyid:88:4B:61:29:A8:DA:98:29:67:14:C5:3A:5A:12:80:FD:10:19:F8:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:28:e7:b8:9c:3d:89:e8:f6:07:6c:ec:0a:7f:40:bf:22:d6: 28:2f:a7:c1:7a:82:99:f1:bb:b9:13:f8:f2:0d:d0:b4:98:c7: 35:c9:46:a3:0e:6e:96:18:19:b4:02:4c:69:aa:d2:91:bf:a3: 84:81:43:c0:76:09:a8:b9:19:1f:df:d4:a2:6c:aa:a3:1a:1d: 3f:63:34:22:07:e9:d7:8d:17:f8:a4:03:d9:48:2e:4f:11:12: 4e:4d:01:f3:72:93:61:84:33:a4:ff:d6:68:ba:be:95:a1:bb: 45:63:65:64:ea:ad:8a:59:54:aa:45:47:19:81:5d:e1:61:87: ca:57:06:b3:a0:fa:ae:54:4e:91:1d:e8:f7:c2:d0:b2:69:6c: 5a:26:13:27:a4:c0:0c:58:25:b5:a4:74:df:5b:65:ab:e3:78: e0:f2:c7:e3:b4:b3:e6:de:4a:77:ea:a1:7b:19:5f:68:98:dc: f6:2d:3f:88:af:1c:7c:6a:79:53:db:ad:88:04:c0:4e:5b:03: c2:ae:e3:71:bc:51:30:67:5c:60:e7:88:43:34:10:d6:d7:d4: 2f:42:ec:39:b3:63:fd:eb:94:de:88:89:5c:44:23:13:df:d6: 64:7b:9d:e4:26:76:1d:9e:12:18:46:0d:6a:04:5e:73:da:43: b8:f5:b5:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY2RTQxMTAvBgNVBAUTKDg4NEI2MTI5QThEQTk4Mjk2NzE0QzUzQTVBMTI4MEZE MTAxOUY4QTMwHhcNMjQwNTE5MDcwODQ3WhcNMjQwNTI2MDcwODQ3WjAYMRYwFAYD VQQDEw02NjQ5YTU3Zi1mM2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtlXw3aUPEuTMH0aUTsPzGEfRCVZ3u8B5YRfFilfoJ2GKYArCNC25E8xYsh9y wirPIsKuCX/01DsMQX/hKokqpHluw5b8HSq0qd8y3knd4rhaBmoJ2+rTGGHp90lL H8/PAOeFW7KobIC0/VKmR6saBkbeF2W5GMTxGH+xTr5dUhPxbtirXH9SmOg/kTa0 lE0k0AF6Lksf5yW5HUofDFH5B96sEKNlqp0b7GmEbRl76LFSkus5j12N9OsdVPPb wLIGKB1k2ofq556SoDLsjTJPOpmg54HV1ibCPLNzHqusJYC6sM3JrSng3jOma1lt Xb42i2P4DYcFpW9yWBt8+BT67QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMzGqo55 dL/Y28isH++UhJkiyAXgMB8GA1UdIwQYMBaAFIhLYSmo2pgpZxTFOloSgP0QGfij MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjZFNC9DQTgxRDlGRTRF MTAxMUVFOUZFMEJEMjZDNEY5QUUwMi9pRXRoS2FqYW1DbG5GTVU2V2hLQV9SQVot S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lFdGhLYWphbUNsbkZNVTZXaEtBX1JBWi1LTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjZFNC9DQTgxRDlGRTRFMTAxMUVFOUZFMEJEMjZDNEY5QUUwMi9pRXRoS2FqYW1D bG5GTVU2V2hLQV9SQVotS00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlKOe4nD2J6PYHbOwKf0C/ItYoL6fBeoKZ8bu5E/jyDdC0mMc1yUaj Dm6WGBm0AkxpqtKRv6OEgUPAdgmouRkf39SibKqjGh0/YzQiB+nXjRf4pAPZSC5P ERJOTQHzcpNhhDOk/9Zour6VobtFY2Vk6q2KWVSqRUcZgV3hYYfKVwazoPquVE6R Hej3wtCyaWxaJhMnpMAMWCW1pHTfW2Wr43jg8sfjtLPm3kp36qF7GV9omNz2LT+I rxx8anlT262IBMBOWwPCruNxvFEwZ1xg54hDNBDW19QvQuw5s2P965TeiIlcRCMT 39Zke53kJnYdnhIYRg1qBF5z2kO49bWn -----END CERTIFICATE-----Generated at Sun May 19 07:40:39 2024 by rpki-client on console-fra.rpki-client.org