$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft File: EcBLr8HLQLBzED91iraOWH9b_gQ.mft (raw, json) Hash identifier: kkj4cx47mhplIF+zYWE8FQhKWi5MljWwgT6/1SywGH0= Subject key identifier: CC:2B:11:CF:E1:B9:33:1B:89:2A:31:84:5A:6B:D8:92:C3:8E:D8:C2 Authority key identifier: 11:C0:4B:AF:C1:CB:40:B0:73:10:3F:75:8A:B6:8E:58:7F:5B:FE:04 Certificate issuer: /CN=A91FE295/serialNumber=11C04BAFC1CB40B073103F758AB68E587F5BFE04 Certificate serial: 02CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft Manifest number: 02CB Signing time: Sun 19 May 2024 03:26:52 +0000 Manifest this update: Sun 19 May 2024 03:26:52 +0000 Manifest next update: Sun 26 May 2024 03:26:52 +0000 Files and hashes: 1: EcBLr8HLQLBzED91iraOWH9b_gQ.crl (hash: RlBSUImOg5wGJo72nXHWmffsD83wRKPGprZU8WlXIbU=) 2: 4153181E1D4211ED99608059C4F9AE02.roa (hash: bo3M0SHEmY6fxlknnF6CrnoZr8k2yntFb0qjHa/esME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.crl rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 717 (0x2cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE295/serialNumber=11C04BAFC1CB40B073103F758AB68E587F5BFE04 Validity Not Before: May 19 03:26:52 2024 GMT Not After : May 26 03:26:52 2024 GMT Subject: CN=6649717c-04f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:19:9a:37:ae:f1:fd:0c:47:2d:01:cc:46:5b: 35:35:c5:51:c3:4c:fa:37:ac:33:e7:bc:4d:0e:bf: d8:99:8a:a1:e7:d6:b5:ca:22:41:4d:e6:91:4f:64: 73:0d:6a:8c:93:4e:96:80:37:1d:a3:52:92:46:25: a6:6d:60:96:da:52:f2:9d:6c:eb:06:d5:b6:0c:2b: 1f:4b:38:76:f3:95:73:2e:cf:9b:ef:55:cf:1e:db: d4:74:c7:f4:d1:9c:b1:50:74:fd:3e:02:1c:1d:5b: 5f:e4:be:39:a3:6a:1f:91:19:51:ec:30:f5:f2:2b: ff:0d:cd:85:b9:23:5c:c3:c0:bf:13:ae:ae:19:a4: 60:9a:77:3d:0b:69:14:15:fb:23:9b:e8:06:dd:f4: e6:b3:52:8e:b5:b4:ae:97:c1:e8:e9:08:3b:69:c8: e7:be:f2:39:2e:b3:67:fb:85:ee:55:0e:03:98:a3: 0f:3a:92:40:c7:4d:2c:92:bc:8b:27:1d:0e:5c:85: 01:1f:3a:e2:a9:bf:a4:33:77:65:06:2b:8c:5c:1c: 27:cd:c0:99:b2:10:99:e5:3f:15:da:ac:da:76:6f: a7:e4:0d:fd:11:13:80:4a:84:9b:a4:42:ba:6a:9f: 4b:5c:cb:0b:25:2e:f4:4d:07:3b:9a:78:73:62:4d: 3b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:2B:11:CF:E1:B9:33:1B:89:2A:31:84:5A:6B:D8:92:C3:8E:D8:C2 X509v3 Authority Key Identifier: keyid:11:C0:4B:AF:C1:CB:40:B0:73:10:3F:75:8A:B6:8E:58:7F:5B:FE:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:81:32:4d:f0:da:7e:50:72:29:8c:bb:12:a2:95:61:e9:c3: 52:9c:f0:ea:dc:a2:f6:9c:45:01:7d:0f:2f:3b:4a:55:a8:13: 42:70:0f:90:ef:15:ff:f8:c9:4d:69:4f:27:07:f2:47:a2:a9: e9:50:4e:2a:a6:5e:bb:25:74:3e:20:8e:14:68:6a:47:69:81: ea:d8:f6:db:63:24:0e:1e:e5:0e:1c:12:29:31:e8:c5:c4:bd: 96:ed:fa:2e:47:51:30:8d:8c:aa:35:0c:06:45:a4:2a:7f:31: 28:2b:24:ca:1b:6b:dd:b8:38:00:4c:59:59:80:71:5f:63:61: 10:33:0b:35:a3:3f:e0:55:e3:1f:bc:15:5b:a4:37:ad:44:d6: 32:6b:c7:39:34:29:eb:07:b9:9a:ad:03:3f:2e:02:ab:81:be: 99:11:3e:83:30:91:e1:28:72:b8:1f:12:50:fc:63:f2:8a:75: 4a:14:7c:a9:26:fa:c1:00:ba:85:21:db:49:ed:6e:19:b2:fd: e1:8a:46:7c:29:b5:07:d5:6a:97:8d:87:03:72:87:76:0d:c6: a8:4f:8a:cb:48:73:a4:f1:3d:6d:f7:c4:4e:21:e1:e6:be:a5: 08:34:5f:5d:be:d5:60:d4:4f:d2:a1:af:bf:63:c1:39:d7:50: 8c:f9:96:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkUyOTUxMTAvBgNVBAUTKDExQzA0QkFGQzFDQjQwQjA3MzEwM0Y3NThBQjY4RTU4 N0Y1QkZFMDQwHhcNMjQwNTE5MDMyNjUyWhcNMjQwNTI2MDMyNjUyWjAYMRYwFAYD VQQDEw02NjQ5NzE3Yy0wNGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3xmaN67x/QxHLQHMRls1NcVRw0z6N6wz57xNDr/YmYqh59a1yiJBTeaRT2Rz DWqMk06WgDcdo1KSRiWmbWCW2lLynWzrBtW2DCsfSzh285VzLs+b71XPHtvUdMf0 0ZyxUHT9PgIcHVtf5L45o2ofkRlR7DD18iv/Dc2FuSNcw8C/E66uGaRgmnc9C2kU Ffsjm+gG3fTms1KOtbSul8Ho6Qg7acjnvvI5LrNn+4XuVQ4DmKMPOpJAx00skryL Jx0OXIUBHzriqb+kM3dlBiuMXBwnzcCZshCZ5T8V2qzadm+n5A39EROASoSbpEK6 ap9LXMsLJS70TQc7mnhzYk07MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMwrEc/h uTMbiSoxhFpr2JLDjtjCMB8GA1UdIwQYMBaAFBHAS6/By0CwcxA/dYq2jlh/W/4E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTI5NS82Rjk2QzBEQ0Ew MTkxMUVDOTQ4NEQxMkZDNEY5QUUwMi9FY0JMcjhITFFMQnpFRDkxaXJhT1dIOWJf Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VjQkxyOEhMUUxCekVEOTFpcmFPV0g5Yl9nUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTI5NS82Rjk2QzBEQ0EwMTkxMUVDOTQ4NEQxMkZDNEY5QUUwMi9FY0JMcjhITFFM QnpFRDkxaXJhT1dIOWJfZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHgTJN8Np+UHIpjLsSopVh6cNSnPDq3KL2nEUBfQ8vO0pVqBNCcA+Q 7xX/+MlNaU8nB/JHoqnpUE4qpl67JXQ+II4UaGpHaYHq2PbbYyQOHuUOHBIpMejF xL2W7fouR1EwjYyqNQwGRaQqfzEoKyTKG2vduDgATFlZgHFfY2EQMws1oz/gVeMf vBVbpDetRNYya8c5NCnrB7marQM/LgKrgb6ZET6DMJHhKHK4HxJQ/GPyinVKFHyp JvrBALqFIdtJ7W4Zsv3hikZ8KbUH1WqXjYcDcod2DcaoT4rLSHOk8T1t98ROIeHm vqUINF9dvtVg1E/Soa+/Y8E511CM+Zbm -----END CERTIFICATE-----Generated at Sun May 19 04:20:44 2024 by rpki-client on console-ams.rpki-client.org