$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft File: ERAxDg-ARncD2Ed_s-4l8diIjp4.mft (raw, json) Hash identifier: KdN/FlUT80vXrJSy4tepezn7Gxr5t0F3zMRnKIG8rL4= Subject key identifier: 4E:B8:50:CA:39:87:5C:1E:22:CC:E2:E1:EC:C0:5C:80:8B:7A:3F:13 Authority key identifier: 11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E Certificate issuer: /CN=A91EA958/serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E Certificate serial: 23E6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft Manifest number: 23BF Signing time: Sat 18 May 2024 15:13:10 +0000 Manifest this update: Sat 18 May 2024 15:13:10 +0000 Manifest next update: Sat 25 May 2024 15:13:10 +0000 Files and hashes: 1: ERAxDg-ARncD2Ed_s-4l8diIjp4.crl (hash: 3VtKXtDwCnpA/fxA8mgsy+tZ3N9M9vcn7ATmWUk7/rg=) 2: D4EB3054E66811ECA007390EC4F9AE02.roa (hash: 622edGfL7zpYdLfyesl42frqJs8mT2fdL/bzTmlsAog=) 3: D27AE4B27E9511ECA9132A0BC4F9AE02.roa (hash: aQK++BjoRFZ9lJLkDxp2sCvuJ+H/CLK5fNjW9ot0pgo=) 4: 81E6A038BEBD11EBA1BC8A0FC4F9AE02.roa (hash: bAJcZHdALLdVj0G8hEZ9WP5gBsuWQMocptxTv2oTQ7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9190 (0x23e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA958/serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E Validity Not Before: May 18 15:13:10 2024 GMT Not After : May 25 15:13:10 2024 GMT Subject: CN=6648c586-3d45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:12:db:43:22:24:3f:9e:1c:62:83:df:87:5a: 2c:7f:fe:f8:65:59:d8:87:e5:4c:05:1c:e1:5f:37: 43:1c:4a:de:4d:32:6f:42:5f:25:c1:0e:b0:38:6a: db:ef:5f:aa:20:36:89:cf:aa:99:30:74:1b:17:82: 70:7d:11:cc:70:d5:f3:99:fa:1a:0a:be:3b:d5:6d: 59:29:df:b1:77:7d:f5:61:35:7f:d2:62:82:6f:2b: e5:8a:35:55:22:87:36:81:b9:2d:8f:12:59:02:00: ca:a2:0b:8a:b4:37:5c:51:21:36:d6:ac:35:e0:bc: f0:9f:ea:c3:de:4e:18:40:d0:67:ce:ed:2b:5a:e1: 4c:2a:57:4e:0b:6d:54:e2:00:9a:79:ae:e3:35:b7: 58:42:7e:d9:5c:9b:f6:d5:db:39:31:ef:34:17:76: c3:f4:9b:a2:47:d1:76:36:37:bf:cf:42:87:ed:9b: dd:fb:c8:71:5b:80:ac:b7:25:92:8f:51:75:c1:14: ab:77:e1:18:38:92:c5:47:85:ca:cf:ff:d3:00:a0: 0f:5e:7f:f3:ea:33:e7:c6:e2:90:8d:f3:ab:2d:c3: 31:cd:18:1c:e0:92:70:07:38:6c:aa:18:1c:ad:c7: 48:a6:08:8b:09:7f:3c:10:cd:71:8c:ee:ef:52:92: 2b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B8:50:CA:39:87:5C:1E:22:CC:E2:E1:EC:C0:5C:80:8B:7A:3F:13 X509v3 Authority Key Identifier: keyid:11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:51:45:c5:c8:a8:93:41:3d:40:71:ae:75:96:8b:d5:00:5a: fa:c5:40:14:c4:be:7a:5c:95:d7:b2:9b:c1:f9:49:e9:8a:84: e5:b8:94:1e:98:4c:c8:2c:96:ff:64:3f:96:52:6d:6a:9e:86: 95:a4:89:b8:f0:6b:1d:48:59:73:b9:33:1f:08:81:8e:9d:85: 26:b6:27:e4:dc:8d:f1:71:3f:c2:df:6f:2b:54:99:3d:98:31: c0:97:16:3e:8e:d1:17:c9:25:75:06:e1:13:0c:cf:09:fe:62: 7e:53:42:74:2e:aa:4e:c6:6b:ca:77:5c:3b:19:37:da:b9:b0: b0:db:03:3e:75:23:74:10:f8:65:b5:d4:61:c8:5a:83:04:e5: 19:5c:65:1d:3f:09:4e:56:78:f1:22:f3:ea:c6:c3:ef:01:4d: e0:81:2e:3e:cf:80:a7:b3:a6:fc:8b:b8:dd:b0:55:e1:32:6c: 39:e7:cf:0b:5c:61:49:af:35:5e:4d:d5:f0:e9:b0:57:f0:71: a6:52:19:c6:4e:4d:45:46:7a:72:10:b0:d5:ed:f0:13:09:30: 2b:ed:95:72:ae:78:f4:5f:de:4e:da:eb:b5:06:86:48:f7:29: e0:ca:3c:e7:c0:54:cf:20:08:32:e4:9e:b3:42:8b:4b:6d:f8: 50:f7:f5:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NTgxMTAvBgNVBAUTKDExMTAzMTBFMEY4MDQ2NzcwM0Q4NDc3RkIzRUUyNUYx RDg4ODhFOUUwHhcNMjQwNTE4MTUxMzEwWhcNMjQwNTI1MTUxMzEwWjAYMRYwFAYD VQQDEw02NjQ4YzU4Ni0zZDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9RLbQyIkP54cYoPfh1osf/74ZVnYh+VMBRzhXzdDHEreTTJvQl8lwQ6wOGrb 71+qIDaJz6qZMHQbF4JwfRHMcNXzmfoaCr471W1ZKd+xd331YTV/0mKCbyvlijVV Ioc2gbktjxJZAgDKoguKtDdcUSE21qw14Lzwn+rD3k4YQNBnzu0rWuFMKldOC21U 4gCaea7jNbdYQn7ZXJv21ds5Me80F3bD9JuiR9F2Nje/z0KH7Zvd+8hxW4CstyWS j1F1wRSrd+EYOJLFR4XKz//TAKAPXn/z6jPnxuKQjfOrLcMxzRgc4JJwBzhsqhgc rcdIpgiLCX88EM1xjO7vUpIrKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE64UMo5 h1weIszi4ezAXICLej8TMB8GA1UdIwQYMBaAFBEQMQ4PgEZ3A9hHf7PuJfHYiI6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk1OC9GREVGRDczNjRC RDYxMUU1QTdDQTMwMzNDNEY5QUUwMi9FUkF4RGctQVJuY0QyRWRfcy00bDhkaUlq cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VSQXhEZy1BUm5jRDJFZF9zLTRsOGRpSWpwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTk1OC9GREVGRDczNjRCRDYxMUU1QTdDQTMwMzNDNEY5QUUwMi9FUkF4RGctQVJu Y0QyRWRfcy00bDhkaUlqcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQUUXFyKiTQT1Aca51lovVAFr6xUAUxL56XJXXspvB+UnpioTluJQe mEzILJb/ZD+WUm1qnoaVpIm48GsdSFlzuTMfCIGOnYUmtifk3I3xcT/C328rVJk9 mDHAlxY+jtEXySV1BuETDM8J/mJ+U0J0LqpOxmvKd1w7GTfaubCw2wM+dSN0EPhl tdRhyFqDBOUZXGUdPwlOVnjxIvPqxsPvAU3ggS4+z4Cns6b8i7jdsFXhMmw5588L XGFJrzVeTdXw6bBX8HGmUhnGTk1FRnpyELDV7fATCTAr7ZVyrnj0X95O2uu1BoZI 9yngyjznwFTPIAgy5J6zQotLbfhQ9/Xw -----END CERTIFICATE-----Generated at Sat May 18 15:58:27 2024 by rpki-client on console-ams.rpki-client.org