$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft File: E3PX27MxtT_PfCjcDfs-n9p-9JA.mft (raw, json) Hash identifier: BRKL5kF40+yl2J/9AWABW6rSDqAQiCPK0SsqkYwakwU= Subject key identifier: 3F:F4:09:5B:80:7F:27:7F:DA:43:DE:A0:43:19:97:E5:7C:9D:75:74 Authority key identifier: 13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90 Certificate issuer: /CN=A91B9288/serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490 Certificate serial: 03FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft Manifest number: 03F7 Signing time: Sun 19 May 2024 02:12:24 +0000 Manifest this update: Sun 19 May 2024 02:12:23 +0000 Manifest next update: Sun 26 May 2024 02:12:23 +0000 Files and hashes: 1: E3PX27MxtT_PfCjcDfs-n9p-9JA.crl (hash: UCP97VtuuqHE2zwY4RZBQCq2/NQtSHjx/myoEEc3Lw4=) 2: BC0960102C5A11ECAB4C276BC4F9AE02.roa (hash: fOG6E1uEMWBMMvid+cOfH446mAotQFl/kKBSOr9l7sE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1019 (0x3fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9288/serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490 Validity Not Before: May 19 02:12:23 2024 GMT Not After : May 26 02:12:23 2024 GMT Subject: CN=66496008-88df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c6:e8:fb:ec:e5:eb:23:5b:4a:54:0d:c4:fc: 30:4b:56:01:47:53:6c:44:6f:1c:ba:8a:63:98:b4: c1:a1:61:ff:3d:88:f1:62:50:b9:d5:f7:dd:cb:ab: b4:f8:bb:70:ae:98:fd:5f:f3:80:57:fe:ab:72:d4: f6:d9:bf:92:4d:5f:40:4a:7a:59:a3:8a:e0:3c:2e: 5d:20:76:53:72:4b:ee:2d:a0:3f:03:9a:65:5d:78: b2:13:46:33:79:53:38:0e:64:bb:5b:52:99:b5:04: a2:b9:2c:7e:75:d3:18:39:60:65:2a:7e:ec:62:0d: d6:bf:81:1d:0a:39:cb:aa:f9:90:a5:42:24:b7:85: 0d:f0:4d:33:ac:f9:3c:3e:5c:fd:69:48:a5:8a:21: fa:f7:3f:2d:dc:1e:9c:8b:8d:36:23:7a:ba:0a:44: c8:0f:24:24:b5:2e:5e:d1:98:aa:b2:f3:ba:26:0d: 7b:7c:37:1e:05:c3:a5:7b:82:0f:78:3d:a6:44:06: 9f:4c:ac:5e:58:c1:44:c1:53:0e:bb:e3:16:18:4c: 61:3c:ed:cf:5d:8d:40:ed:f4:25:eb:32:fb:98:46: 69:db:47:97:ac:86:91:c0:96:fb:17:47:b8:03:f1: f6:25:42:c9:0c:46:06:46:87:69:bf:1e:8c:ca:7f: 97:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F4:09:5B:80:7F:27:7F:DA:43:DE:A0:43:19:97:E5:7C:9D:75:74 X509v3 Authority Key Identifier: keyid:13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:7f:b6:6a:c7:c7:30:d6:c6:19:65:04:4b:75:94:a6:42:9b: 32:fd:8e:73:c0:bb:fd:15:88:61:8a:97:a3:74:6a:25:39:99: c6:c0:7e:de:0d:6c:dd:51:d6:42:3f:63:47:28:31:7a:d8:33: b5:2b:78:df:a1:0c:5e:c8:24:b9:d6:f5:15:72:7b:79:57:8c: f1:95:e8:8a:95:13:07:9b:0c:4d:d4:45:eb:17:23:1b:2b:11: 87:6d:ae:cf:aa:42:de:84:59:34:0d:0e:d6:42:35:57:27:57: e6:73:f9:8d:3a:c9:a1:b0:75:90:da:74:0f:cb:a4:bf:e7:c9: 38:c2:a0:6b:1c:67:94:e1:45:51:af:33:6f:d8:36:28:86:55: 84:35:ff:c9:bb:11:50:bf:95:23:6c:50:5c:10:18:27:60:7f: 69:fb:61:b1:b4:ee:ee:8e:7e:91:d0:bb:3e:90:8c:13:81:e1: 1e:2f:e8:92:f4:80:7c:90:c4:36:2f:51:e9:64:2a:97:cd:c7: b7:5f:7a:d2:2b:f9:89:00:fb:53:ef:90:4a:e1:7e:39:33:c4: f6:70:e0:6b:69:00:f0:92:a7:03:d9:bf:3e:d7:eb:c1:01:c9: 83:66:74:a3:2d:7e:7a:18:a0:3f:5f:22:c7:54:1a:c5:8a:53: 9f:1b:12:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyODgxMTAvBgNVBAUTKDEzNzNEN0RCQjMzMUI1M0ZDRjdDMjhEQzBERkIzRTlG REE3RUY0OTAwHhcNMjQwNTE5MDIxMjIzWhcNMjQwNTI2MDIxMjIzWjAYMRYwFAYD VQQDEw02NjQ5NjAwOC04OGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAucbo++zl6yNbSlQNxPwwS1YBR1NsRG8cuopjmLTBoWH/PYjxYlC51ffdy6u0 +Ltwrpj9X/OAV/6rctT22b+STV9ASnpZo4rgPC5dIHZTckvuLaA/A5plXXiyE0Yz eVM4DmS7W1KZtQSiuSx+ddMYOWBlKn7sYg3Wv4EdCjnLqvmQpUIkt4UN8E0zrPk8 Plz9aUiliiH69z8t3B6ci402I3q6CkTIDyQktS5e0ZiqsvO6Jg17fDceBcOle4IP eD2mRAafTKxeWMFEwVMOu+MWGExhPO3PXY1A7fQl6zL7mEZp20eXrIaRwJb7F0e4 A/H2JULJDEYGRodpvx6Myn+XZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD/0CVuA fyd/2kPeoEMZl+V8nXV0MB8GA1UdIwQYMBaAFBNz19uzMbU/z3wo3A37Pp/afvSQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI4OC8xRkREQTdCMDJD NTkxMUVDQkFGNUY4NkFDNEY5QUUwMi9FM1BYMjdNeHRUX1BmQ2pjRGZzLW45cC05 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UzUFgyN014dFRfUGZDamNEZnMtbjlwLTlKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTI4OC8xRkREQTdCMDJDNTkxMUVDQkFGNUY4NkFDNEY5QUUwMi9FM1BYMjdNeHRU X1BmQ2pjRGZzLW45cC05SkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYf7Zqx8cw1sYZZQRLdZSmQpsy/Y5zwLv9FYhhipejdGolOZnGwH7e DWzdUdZCP2NHKDF62DO1K3jfoQxeyCS51vUVcnt5V4zxleiKlRMHmwxN1EXrFyMb KxGHba7PqkLehFk0DQ7WQjVXJ1fmc/mNOsmhsHWQ2nQPy6S/58k4wqBrHGeU4UVR rzNv2DYohlWENf/JuxFQv5UjbFBcEBgnYH9p+2GxtO7ujn6R0Ls+kIwTgeEeL+iS 9IB8kMQ2L1HpZCqXzce3X3rSK/mJAPtT75BK4X45M8T2cOBraQDwkqcD2b8+1+vB AcmDZnSjLX56GKA/XyLHVBrFilOfGxK6 -----END CERTIFICATE-----Generated at Sun May 19 02:59:14 2024 by rpki-client on console-ams.rpki-client.org