$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft File: E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft (raw, json) Hash identifier: XUlDzoQhxW8orHt0ebh6dBIaqj2gZE9CgaozM3P0/Fs= Subject key identifier: 95:21:9E:BD:65:38:86:F5:7B:20:78:4D:51:60:6C:BC:4A:AA:2F:9E Authority key identifier: 13:D6:4D:5D:8F:B7:B1:CF:89:38:77:01:1B:80:CF:40:16:F6:16:38 Certificate issuer: /CN=A91A8CB9/serialNumber=13D64D5D8FB7B1CF893877011B80CF4016F61638 Certificate serial: 04A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft Manifest number: 04A1 Signing time: Sun 19 May 2024 01:34:21 +0000 Manifest this update: Sun 19 May 2024 01:34:20 +0000 Manifest next update: Sun 26 May 2024 01:34:20 +0000 Files and hashes: 1: E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.crl (hash: WKsHZb6ZkZNIzOUZcRqpQONQ4oDO1/ypCDbVzGGcHfI=) 2: BC009860E65811EBA233DC2DC4F9AE02.roa (hash: CRLW/v275CUlaeWr5oEQBrUTv3O40NRfAD7Vi/IYlCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.crl rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1189 (0x4a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8CB9/serialNumber=13D64D5D8FB7B1CF893877011B80CF4016F61638 Validity Not Before: May 19 01:34:20 2024 GMT Not After : May 26 01:34:20 2024 GMT Subject: CN=6649571d-6ba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:2c:3d:35:fa:ac:79:86:5a:b5:a2:f7:ac:b3: 4d:72:7c:9e:91:33:b6:ca:71:bd:6e:15:f9:77:dc: f1:5e:35:ab:dd:24:f0:27:d7:f3:16:17:35:9d:28: 3a:66:c8:67:7b:04:77:62:a0:52:dc:f8:02:23:e9: aa:0a:b3:11:97:79:e4:72:c3:02:aa:0f:4b:30:47: 31:28:f9:51:de:41:16:61:b4:17:9c:6a:01:24:c3: 35:c8:79:dd:dd:44:e6:a8:29:6f:6c:7b:5e:93:bd: 5b:0a:19:15:93:0d:0c:4c:d4:9c:5b:0c:a5:2d:79: fd:c6:9b:f4:d9:52:eb:b7:a8:b8:4c:99:9c:3f:cc: 1a:cc:2d:4b:4c:ae:1f:50:63:e5:b6:7d:e2:13:4e: 1d:de:a4:6c:e5:ec:0d:e9:72:79:32:8d:d0:14:b9: fe:c2:53:a0:a2:8e:4e:26:ff:8c:04:c8:88:82:ba: 23:26:c3:c4:b5:d4:49:62:24:fc:23:fb:9a:b5:0b: 9d:bf:6a:0f:51:f2:ce:90:15:ae:84:e2:51:3f:b7: b3:e9:75:c2:df:bd:5d:47:a6:7c:84:8d:b2:64:88: 78:3d:67:16:7a:88:a9:5e:16:ad:34:36:d1:50:d7: 15:e9:c1:d2:d9:19:77:c0:a7:38:3c:56:22:5d:50: 1c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:21:9E:BD:65:38:86:F5:7B:20:78:4D:51:60:6C:BC:4A:AA:2F:9E X509v3 Authority Key Identifier: keyid:13:D6:4D:5D:8F:B7:B1:CF:89:38:77:01:1B:80:CF:40:16:F6:16:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:c0:a8:bf:62:4f:ff:fe:cf:56:05:24:a5:cf:55:c2:73:e8: 6f:c1:a3:d1:eb:0c:4f:e5:ad:c7:3e:e9:86:62:9d:80:51:44: 4c:6e:87:68:1b:5a:a6:09:06:1c:11:64:4b:6f:fc:0c:48:0d: da:d6:10:a4:e7:e6:59:ef:6d:35:f4:b0:dc:75:7f:0e:82:39: 76:84:f1:8b:83:06:79:eb:3f:d7:f5:17:dc:e1:68:21:a9:18: 12:f6:38:c0:5e:af:d5:1a:e6:04:de:f1:10:f1:25:d8:43:cc: ed:d9:a3:e5:f5:8f:d8:55:27:54:92:61:df:5c:8c:f7:94:55: fd:fc:f9:fc:99:8f:5c:e7:c2:c9:7d:5f:1a:db:12:e6:18:2c: 2a:dd:17:fc:b9:a2:e4:4c:70:59:02:c6:9d:11:56:68:d1:29: bb:62:97:cd:66:de:18:dc:a3:7f:b5:d4:1c:e0:89:b8:88:56: 0c:bf:57:3d:6f:ad:aa:6c:5e:80:f3:df:80:28:72:df:2e:f1: c7:23:24:e6:e1:51:59:18:90:b6:32:b2:95:87:0e:62:6a:f7: 89:02:0d:0b:b4:f1:ca:6c:cd:c6:cd:89:26:72:44:9b:b0:fe: fe:9a:47:3f:c5:61:85:31:d5:9d:ab:4c:95:9f:5c:8b:12:b5: d1:4f:a6:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThDQjkxMTAvBgNVBAUTKDEzRDY0RDVEOEZCN0IxQ0Y4OTM4NzcwMTFCODBDRjQw MTZGNjE2MzgwHhcNMjQwNTE5MDEzNDIwWhcNMjQwNTI2MDEzNDIwWjAYMRYwFAYD VQQDEw02NjQ5NTcxZC02YmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3yw9NfqseYZataL3rLNNcnyekTO2ynG9bhX5d9zxXjWr3STwJ9fzFhc1nSg6 ZshnewR3YqBS3PgCI+mqCrMRl3nkcsMCqg9LMEcxKPlR3kEWYbQXnGoBJMM1yHnd 3UTmqClvbHtek71bChkVkw0MTNScWwylLXn9xpv02VLrt6i4TJmcP8wazC1LTK4f UGPltn3iE04d3qRs5ewN6XJ5Mo3QFLn+wlOgoo5OJv+MBMiIgrojJsPEtdRJYiT8 I/uatQudv2oPUfLOkBWuhOJRP7ez6XXC371dR6Z8hI2yZIh4PWcWeoipXhatNDbR UNcV6cHS2Rl3wKc4PFYiXVAcrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJUhnr1l OIb1eyB4TVFgbLxKqi+eMB8GA1UdIwQYMBaAFBPWTV2Pt7HPiTh3ARuAz0AW9hY4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOENCOS9DMEQ1MDBGNEU2 NTUxMUVCQjBGMjkwMjdDNEY5QUUwMi9FOVpOWFktM3NjLUpPSGNCRzREUFFCYjJG amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U5Wk5YWS0zc2MtSk9IY0JHNERQUUJiMkZqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OENCOS9DMEQ1MDBGNEU2NTUxMUVCQjBGMjkwMjdDNEY5QUUwMi9FOVpOWFktM3Nj LUpPSGNCRzREUFFCYjJGamcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjwKi/Yk///s9WBSSlz1XCc+hvwaPR6wxP5a3HPumGYp2AUURMbodo G1qmCQYcEWRLb/wMSA3a1hCk5+ZZ72019LDcdX8Ogjl2hPGLgwZ56z/X9Rfc4Wgh qRgS9jjAXq/VGuYE3vEQ8SXYQ8zt2aPl9Y/YVSdUkmHfXIz3lFX9/Pn8mY9c58LJ fV8a2xLmGCwq3Rf8uaLkTHBZAsadEVZo0Sm7YpfNZt4Y3KN/tdQc4Im4iFYMv1c9 b62qbF6A89+AKHLfLvHHIyTm4VFZGJC2MrKVhw5iaveJAg0LtPHKbM3GzYkmckSb sP7+mkc/xWGFMdWdq0yVn1yLErXRT6ZA -----END CERTIFICATE-----Generated at Sun May 19 02:59:11 2024 by rpki-client on console-ams.rpki-client.org