$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft File: ER6YG60wGDD3weWQzBqotIImDtg.mft (raw, json) Hash identifier: Ct6L9L6feyxVDKwXv0PeyJpvqtj9c/oTiXYWKsSegYo= Subject key identifier: 43:35:00:E2:23:F5:F8:94:7E:8A:3F:19:C8:73:DA:0A:8B:BA:0F:1E Authority key identifier: 11:1E:98:1B:AD:30:18:30:F7:C1:E5:90:CC:1A:A8:B4:82:26:0E:D8 Certificate issuer: /CN=A91F0FE2/serialNumber=111E981BAD301830F7C1E590CC1AA8B482260ED8 Certificate serial: 1B7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft Manifest number: 1B66 Signing time: Thu 30 May 2024 16:54:10 +0000 Manifest this update: Thu 30 May 2024 16:54:09 +0000 Manifest next update: Thu 06 Jun 2024 16:54:09 +0000 Files and hashes: 1: ER6YG60wGDD3weWQzBqotIImDtg.crl (hash: HjdG/UhDXUhsaWirVlGPL8+s6wgSdKVG4wpBWzoIlDk=) 2: 14564AB0E83311E6A72DC543C4F9AE02.roa (hash: NUz4kB3CyIG2IBuDbo+UA9LBpVU0SpPOT0o+emRtCgw=) 3: 20C4803669A011EA9055BD0EC4F9AE02.roa (hash: FnUaKoThOa5+XgHVHWe2uhUGOR/oiQOVc+Zdq2BOUUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.crl rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 16:54:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7037 (0x1b7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0FE2/serialNumber=111E981BAD301830F7C1E590CC1AA8B482260ED8 Validity Not Before: May 30 16:54:09 2024 GMT Not After : Jun 6 16:54:09 2024 GMT Subject: CN=6658af32-4386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e0:6a:fe:5a:63:49:c9:09:22:14:48:0e:38: dd:0b:93:fd:2e:9b:01:72:f3:a8:20:66:70:7c:62: 7f:54:24:3f:75:37:e9:0c:0e:6a:c8:50:5d:34:2c: d8:87:a3:04:c7:10:34:64:9c:73:88:84:0f:4a:fd: a8:f2:2d:16:26:17:46:3f:e6:20:af:15:91:cd:1b: 29:e3:69:53:ca:4e:6e:01:82:fb:cd:dc:f2:6d:3b: 9e:0e:35:57:ad:15:9c:53:97:59:ce:ca:d6:82:80: 11:c8:4d:e9:e7:38:7f:f5:60:a7:95:0c:89:6e:f3: ef:81:ca:d6:d5:1a:09:6c:f6:bc:6b:68:a2:23:19: b6:7a:d7:82:cf:76:93:df:23:37:62:45:34:95:f7: 11:be:d0:14:06:a6:92:c9:7c:61:8a:f7:d3:d1:5c: 08:27:b9:45:57:c1:95:e4:55:8d:4b:5e:83:d3:81: d8:8b:79:25:c5:59:bc:2c:c9:53:29:8c:6f:34:43: 3f:4b:56:0c:2d:20:eb:d6:ea:f7:83:d9:95:6b:1d: 4d:fb:7e:97:fd:bc:39:30:0e:2c:67:d9:38:16:2c: e2:0d:1d:b0:55:ee:93:f5:d9:f7:ff:91:c2:25:d8: 48:b4:c1:bf:22:81:e1:cb:45:e9:f9:3a:4e:65:5c: df:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:35:00:E2:23:F5:F8:94:7E:8A:3F:19:C8:73:DA:0A:8B:BA:0F:1E X509v3 Authority Key Identifier: keyid:11:1E:98:1B:AD:30:18:30:F7:C1:E5:90:CC:1A:A8:B4:82:26:0E:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:98:c1:c1:2c:a7:c8:5e:5c:fa:96:aa:8d:48:87:ce:37:cf: 92:85:f1:2e:45:a5:eb:e3:3c:66:da:56:90:f9:e1:e7:c1:d1: f0:7a:2b:b0:96:14:99:cc:30:34:42:09:21:6c:ce:d2:e5:b5: af:96:a0:b2:fb:b3:1b:7c:0c:6d:bc:9f:91:bf:64:c7:3c:f1: a4:24:9b:c2:e9:65:af:62:57:ec:dc:0a:87:aa:4b:d8:d5:c9: f1:68:a4:af:b1:c6:48:46:d1:fc:21:71:e1:27:9f:69:97:2f: 8d:24:0f:23:ad:eb:66:2f:56:4e:a2:8e:3b:f3:38:12:35:4e: 49:b1:ce:78:17:4d:28:54:27:32:8f:04:47:74:eb:2e:e0:d2: de:8e:bd:13:1c:36:74:6f:d1:af:ae:35:9a:35:3c:11:9c:49: e5:46:42:85:d9:2b:e4:ee:f2:95:55:bb:4e:3d:75:46:a2:d6: b9:02:cc:64:be:39:80:73:3d:fb:d0:b2:63:3f:6b:ae:c1:70: d4:92:2b:48:f6:12:bc:ad:fd:2b:a2:5f:bc:9b:20:7e:11:f4: 96:fc:c0:88:81:0a:68:25:de:02:47:1f:bb:a0:16:4b:85:74: 90:40:2e:3a:ec:e6:0b:39:f3:b8:42:db:1a:ab:f2:74:16:f0: 9c:3e:12:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGRTIxMTAvBgNVBAUTKDExMUU5ODFCQUQzMDE4MzBGN0MxRTU5MENDMUFBOEI0 ODIyNjBFRDgwHhcNMjQwNTMwMTY1NDA5WhcNMjQwNjA2MTY1NDA5WjAYMRYwFAYD VQQDEw02NjU4YWYzMi00Mzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0eBq/lpjSckJIhRIDjjdC5P9LpsBcvOoIGZwfGJ/VCQ/dTfpDA5qyFBdNCzY h6MExxA0ZJxziIQPSv2o8i0WJhdGP+YgrxWRzRsp42lTyk5uAYL7zdzybTueDjVX rRWcU5dZzsrWgoARyE3p5zh/9WCnlQyJbvPvgcrW1RoJbPa8a2iiIxm2eteCz3aT 3yM3YkU0lfcRvtAUBqaSyXxhivfT0VwIJ7lFV8GV5FWNS16D04HYi3klxVm8LMlT KYxvNEM/S1YMLSDr1ur3g9mVax1N+36X/bw5MA4sZ9k4FiziDR2wVe6T9dn3/5HC JdhItMG/IoHhy0Xp+TpOZVzfRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEM1AOIj 9fiUfoo/Gchz2gqLug8eMB8GA1UdIwQYMBaAFBEemButMBgw98HlkMwaqLSCJg7Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEZFMi8yRkY5QkIyMkU4 MzIxMUU2QkY1MTI4NDJDNEY5QUUwMi9FUjZZRzYwd0dERDN3ZVdRekJxb3RJSW1E dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VSNllHNjB3R0REM3dlV1F6QnFvdElJbUR0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEZFMi8yRkY5QkIyMkU4MzIxMUU2QkY1MTI4NDJDNEY5QUUwMi9FUjZZRzYwd0dE RDN3ZVdRekJxb3RJSW1EdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVmMHBLKfIXlz6lqqNSIfON8+ShfEuRaXr4zxm2laQ+eHnwdHweiuw lhSZzDA0QgkhbM7S5bWvlqCy+7MbfAxtvJ+Rv2THPPGkJJvC6WWvYlfs3AqHqkvY 1cnxaKSvscZIRtH8IXHhJ59ply+NJA8jretmL1ZOoo478zgSNU5Jsc54F00oVCcy jwRHdOsu4NLejr0THDZ0b9GvrjWaNTwRnEnlRkKF2Svk7vKVVbtOPXVGota5Asxk vjmAcz370LJjP2uuwXDUkitI9hK8rf0rol+8myB+EfSW/MCIgQpoJd4CRx+7oBZL hXSQQC467OYLOfO4Qtsaq/J0FvCcPhK1 -----END CERTIFICATE-----Generated at Thu May 30 18:46:49 2024 by rpki-client on console-ams.rpki-client.org