$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft File: eX36GIOfh9ExDpypw0EKvraDnnQ.mft (raw, json) Hash identifier: NDMCQHKpUlvz9Y3vZ0tVpaY2wbLDBScex4kVrRDAOXY= Subject key identifier: E4:FF:47:91:64:A2:EC:9D:81:D0:18:CE:E8:6B:3B:30:D3:72:1E:ED Authority key identifier: 79:7D:FA:18:83:9F:87:D1:31:0E:9C:A9:C3:41:0A:BE:B6:83:9E:74 Certificate issuer: /CN=A9167F52/serialNumber=797DFA18839F87D1310E9CA9C3410ABEB6839E74 Certificate serial: 035F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft Manifest number: 035C Signing time: Sun 19 May 2024 02:53:04 +0000 Manifest this update: Sun 19 May 2024 02:53:04 +0000 Manifest next update: Sun 26 May 2024 02:53:04 +0000 Files and hashes: 1: eX36GIOfh9ExDpypw0EKvraDnnQ.crl (hash: 50/Eu+E/Hw+OJ7Sv3+VrUyRnlW3yj6Ef3QHI9RUI7n0=) 2: ED6CA80868B211EC9974F51FC4F9AE02.roa (hash: XSLjjtzIZHDGpae35gBpg6eAc1XRpZRiaQr9/QxHoFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.crl rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 863 (0x35f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F52/serialNumber=797DFA18839F87D1310E9CA9C3410ABEB6839E74 Validity Not Before: May 19 02:53:04 2024 GMT Not After : May 26 02:53:04 2024 GMT Subject: CN=66496990-ead9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d4:86:cb:73:af:12:fc:18:48:d2:13:17:ca: d6:55:d5:82:98:ca:33:3a:a5:03:17:df:73:dc:3f: 45:b2:f0:4b:5a:b8:28:6f:8b:cc:08:ae:22:39:e3: da:89:41:9e:6b:30:10:e1:1a:41:74:12:72:8f:d7: 10:f0:d6:d8:92:05:7a:33:b6:14:66:14:36:b0:67: 4a:3f:52:6b:cc:8f:ae:96:b3:92:1c:60:df:ef:ca: d5:34:12:b5:1b:ab:1e:e1:2b:a7:42:08:95:48:a1: 31:71:b1:04:07:48:68:fc:4a:37:dc:d0:8b:9a:7d: 14:bd:0f:48:a8:15:7a:f9:50:56:0d:59:7b:2a:cb: 6a:c5:88:4c:d4:bc:be:84:69:38:43:7d:45:00:d6: 7c:56:cd:9e:1d:4f:4e:f2:93:77:80:b2:c9:ed:23: ef:7c:d7:0e:52:24:ed:c5:31:7c:79:59:2e:13:d7: 91:eb:47:5f:13:92:89:df:b4:9d:c4:2d:6d:49:b6: 2e:d6:8c:f2:13:df:03:ed:71:40:36:ca:97:63:87: 9c:5c:0a:a4:08:8d:fd:eb:8e:38:62:95:9e:be:eb: 72:64:db:9c:e0:05:c8:3f:a5:9c:2f:36:9a:c0:89: ea:b1:cc:e9:6a:63:4b:04:1a:f0:cc:28:91:1a:17: 5a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:FF:47:91:64:A2:EC:9D:81:D0:18:CE:E8:6B:3B:30:D3:72:1E:ED X509v3 Authority Key Identifier: keyid:79:7D:FA:18:83:9F:87:D1:31:0E:9C:A9:C3:41:0A:BE:B6:83:9E:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:ef:2a:dc:61:92:8c:1e:50:5d:ce:24:f8:8d:7f:5a:bb:ee: 7a:8e:ca:f0:11:33:4d:be:2b:10:db:ec:9f:40:f3:8e:d3:ac: b8:82:19:5b:37:aa:27:43:dc:0d:85:ed:90:82:b9:ad:22:ce: c1:42:87:a4:62:59:4d:84:fb:98:13:ff:a7:13:86:ee:d8:48: 3c:88:95:8d:d1:a3:ae:d2:63:11:8b:8d:30:2d:0e:df:84:4c: af:19:51:97:a6:c9:66:c3:ab:77:5c:ef:76:19:2c:12:b0:98: c1:bf:36:31:93:b8:26:0a:78:f5:65:ed:c3:ae:04:56:c0:26: 33:37:10:08:0e:49:27:2d:2a:2c:6e:e3:cf:e8:1a:9c:cc:f9: 45:ae:34:97:99:5e:51:d5:6c:d0:51:d5:22:a5:02:c4:3e:eb: 2b:9e:29:f0:67:19:89:f5:06:e0:62:04:e8:ef:09:aa:09:1d: 9c:fc:89:ab:09:6f:be:06:69:36:1d:ff:02:a9:58:67:98:ac: be:38:65:5f:c3:05:cb:63:a0:4e:d7:8b:74:ca:7d:50:0c:fa: 21:6a:c3:3e:69:1f:56:8c:b9:96:4f:72:83:86:59:00:ec:17: c3:03:d1:b6:29:82:2f:46:3e:12:90:11:cc:3f:3e:38:6f:9e: 11:30:dd:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGNTIxMTAvBgNVBAUTKDc5N0RGQTE4ODM5Rjg3RDEzMTBFOUNBOUMzNDEwQUJF QjY4MzlFNzQwHhcNMjQwNTE5MDI1MzA0WhcNMjQwNTI2MDI1MzA0WjAYMRYwFAYD VQQDEw02NjQ5Njk5MC1lYWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdSGy3OvEvwYSNITF8rWVdWCmMozOqUDF99z3D9FsvBLWrgob4vMCK4iOePa iUGeazAQ4RpBdBJyj9cQ8NbYkgV6M7YUZhQ2sGdKP1JrzI+ulrOSHGDf78rVNBK1 G6se4SunQgiVSKExcbEEB0ho/Eo33NCLmn0UvQ9IqBV6+VBWDVl7KstqxYhM1Ly+ hGk4Q31FANZ8Vs2eHU9O8pN3gLLJ7SPvfNcOUiTtxTF8eVkuE9eR60dfE5KJ37Sd xC1tSbYu1ozyE98D7XFANsqXY4ecXAqkCI396444YpWevutyZNuc4AXIP6WcLzaa wInqsczpamNLBBrwzCiRGhdaRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOT/R5Fk ouydgdAYzuhrOzDTch7tMB8GA1UdIwQYMBaAFHl9+hiDn4fRMQ6cqcNBCr62g550 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0Y1Mi9FOTQ2NjZDQzY4 QUYxMUVDQURENkI1NkZDNEY5QUUwMi9lWDM2R0lPZmg5RXhEcHlwdzBFS3ZyYURu blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VYMzZHSU9maDlFeERweXB3MEVLdnJhRG5uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0Y1Mi9FOTQ2NjZDQzY4QUYxMUVDQURENkI1NkZDNEY5QUUwMi9lWDM2R0lPZmg5 RXhEcHlwdzBFS3ZyYURublEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA97yrcYZKMHlBdziT4jX9au+56jsrwETNNvisQ2+yfQPOO06y4ghlb N6onQ9wNhe2QgrmtIs7BQoekYllNhPuYE/+nE4bu2Eg8iJWN0aOu0mMRi40wLQ7f hEyvGVGXpslmw6t3XO92GSwSsJjBvzYxk7gmCnj1Ze3DrgRWwCYzNxAIDkknLSos buPP6BqczPlFrjSXmV5R1WzQUdUipQLEPusrninwZxmJ9QbgYgTo7wmqCR2c/Imr CW++Bmk2Hf8CqVhnmKy+OGVfwwXLY6BO14t0yn1QDPohasM+aR9WjLmWT3KDhlkA 7BfDA9G2KYIvRj4SkBHMPz44b54RMN3L -----END CERTIFICATE-----Generated at Sun May 19 03:48:51 2024 by rpki-client on console-fra.rpki-client.org