$ rpki-client -vvf rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft File: rJEs76dYoRmcG-3gaxSp6jmJdfc.mft (raw, json) Hash identifier: HO1r/e1iruQ8WnNlWoqKTomXuAVQbDtFrI/QR0aj9e0= Subject key identifier: 75:0C:75:00:C5:60:2B:94:F2:5A:36:1F:D9:D3:08:96:2D:60:9B:89 Authority key identifier: AC:91:2C:EF:A7:58:A1:19:9C:1B:ED:E0:6B:14:A9:EA:39:89:75:F7 Certificate issuer: /CN=A911285C/serialNumber=AC912CEFA758A1199C1BEDE06B14A9EA398975F7 Certificate serial: 0130 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft Manifest number: 0124 Signing time: Fri 03 May 2024 05:19:54 +0000 Manifest this update: Fri 03 May 2024 05:19:54 +0000 Manifest next update: Fri 10 May 2024 05:19:54 +0000 Files and hashes: 1: rJEs76dYoRmcG-3gaxSp6jmJdfc.crl (hash: 29EqxVqN9h7v++c8Cv1Ji/WlZV0zdEb/sikFJTP5Svc=) 2: 38E02CDC04EE11EE89900876C4F9AE02.roa (hash: TI9mHaq+nSiF95UKzqARFSVJjwuPveXnpdDY0+JZwvM=) 3: EE0C206E96FF11ED87B56F84C4F9AE02.roa (hash: 9Vezv6f2TBHikRfC4HayJsEyH5ehPHuwkPj3WFW/m9o=) 4: EF1E23F896FF11ED87B56F84C4F9AE02.roa (hash: eIVi7HYbt0D8MqI/rpORYfeMPzB1M0qkWd8yT90MMQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.crl rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911285C/serialNumber=AC912CEFA758A1199C1BEDE06B14A9EA398975F7 Validity Not Before: May 3 05:19:54 2024 GMT Not After : May 10 05:19:54 2024 GMT Subject: CN=663473fa-56d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:91:b4:35:51:e9:fb:a2:60:24:d5:79:92:9c: da:3c:c9:96:e4:30:f2:57:a2:b8:58:83:0f:93:fb: 2f:08:e4:dd:e0:43:7e:2d:dc:e3:11:57:dd:2b:b8: f9:4a:ac:63:5f:08:ec:b0:25:93:ce:de:cc:a9:87: a1:e1:d6:bf:23:6d:30:76:b3:8a:02:6b:b9:a6:67: df:fc:ad:d2:cb:ef:f8:3e:56:96:77:9a:e3:aa:89: bd:5a:9c:76:15:5b:d2:7e:5a:66:07:df:83:10:7c: 27:11:ab:d6:00:70:10:b0:f7:1f:d0:ae:19:5f:d5: cb:45:e3:b2:09:42:62:2f:61:75:b4:40:16:cb:c6: a1:2c:43:91:a2:cc:e2:75:0d:fb:ac:39:5d:a0:0d: 6e:a0:c7:87:34:69:6f:7d:63:47:5e:5f:b4:b8:5f: 5b:18:f1:fe:bd:cb:d6:d7:db:a9:ba:e6:db:0c:89: 5a:28:6a:26:03:2b:32:a3:40:10:b1:76:4c:74:68: 93:07:73:6c:a6:b2:31:89:46:34:1b:f8:66:1f:9d: 7e:c9:17:71:0b:c1:0a:f0:6b:26:19:1c:b4:20:12: 19:c2:e3:35:45:82:4c:12:94:37:cc:4a:f2:9f:72: a7:3f:e7:eb:2d:9b:24:82:b5:9d:44:5b:1c:e7:99: bf:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:0C:75:00:C5:60:2B:94:F2:5A:36:1F:D9:D3:08:96:2D:60:9B:89 X509v3 Authority Key Identifier: keyid:AC:91:2C:EF:A7:58:A1:19:9C:1B:ED:E0:6B:14:A9:EA:39:89:75:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:0f:b8:4c:04:6f:2d:8b:9b:b6:ee:25:0f:31:f2:41:d0:a1: 55:36:5e:e0:9f:c2:4b:bc:eb:63:df:c3:53:d8:95:a9:fa:f3: 43:c6:5f:e8:1d:b1:28:35:e0:f0:43:8a:86:dd:81:5e:5c:6d: 9a:80:00:54:87:e1:f9:44:76:ca:58:18:ee:62:4b:13:31:9b: 02:ac:cd:c0:12:87:8a:22:6e:48:d4:88:6b:f1:fd:a1:f7:23: e1:c5:b5:f0:74:60:e9:5d:78:3d:6d:0c:b0:f3:64:d4:94:62: 04:c0:6d:31:3e:be:e9:40:c7:fb:4f:0a:b6:d9:c6:da:55:5d: 27:79:92:7a:3b:49:1b:1b:ac:0f:a8:b8:80:e0:19:4f:be:e9: cf:b8:a6:03:20:1d:8c:2d:f6:bf:32:8f:9e:f6:22:c2:a5:8d: f8:ae:29:95:29:e7:2f:7b:af:fc:47:aa:96:82:84:3c:8c:09: f2:31:73:02:46:6c:22:fe:71:37:ac:72:c4:e4:7f:8f:98:8a: af:79:6d:1f:97:03:43:d7:44:5f:b8:e2:a9:6a:2d:3b:84:f6: e5:2f:88:6c:87:e5:4e:cb:59:0e:1f:33:a5:3f:a6:7d:6c:60: 1b:4a:e3:73:a6:6d:32:30:54:b9:29:a4:70:90:ef:81:02:ba: 9f:a8:13:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4NUMxMTAvBgNVBAUTKEFDOTEyQ0VGQTc1OEExMTk5QzFCRURFMDZCMTRBOUVB Mzk4OTc1RjcwHhcNMjQwNTAzMDUxOTU0WhcNMjQwNTEwMDUxOTU0WjAYMRYwFAYD VQQDEw02NjM0NzNmYS01NmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzZG0NVHp+6JgJNV5kpzaPMmW5DDyV6K4WIMPk/svCOTd4EN+LdzjEVfdK7j5 SqxjXwjssCWTzt7MqYeh4da/I20wdrOKAmu5pmff/K3Sy+/4PlaWd5rjqom9Wpx2 FVvSflpmB9+DEHwnEavWAHAQsPcf0K4ZX9XLReOyCUJiL2F1tEAWy8ahLEORoszi dQ37rDldoA1uoMeHNGlvfWNHXl+0uF9bGPH+vcvW19upuubbDIlaKGomAysyo0AQ sXZMdGiTB3NsprIxiUY0G/hmH51+yRdxC8EK8GsmGRy0IBIZwuM1RYJMEpQ3zEry n3KnP+frLZskgrWdRFsc55m/wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUMdQDF YCuU8lo2H9nTCJYtYJuJMB8GA1UdIwQYMBaAFKyRLO+nWKEZnBvt4GsUqeo5iXX3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjg1Qy8wQTY4QjExODYw OEQxMUVEQUYyQzY1NjdDNEY5QUUwMi9ySkVzNzZkWW9SbWNHLTNnYXhTcDZqbUpk ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JKRXM3NmRZb1JtY0ctM2dheFNwNmptSmRmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Mjg1Qy8wQTY4QjExODYwOEQxMUVEQUYyQzY1NjdDNEY5QUUwMi9ySkVzNzZkWW9S bWNHLTNnYXhTcDZqbUpkZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArD7hMBG8ti5u27iUPMfJB0KFVNl7gn8JLvOtj38NT2JWp+vNDxl/o HbEoNeDwQ4qG3YFeXG2agABUh+H5RHbKWBjuYksTMZsCrM3AEoeKIm5I1Ihr8f2h 9yPhxbXwdGDpXXg9bQyw82TUlGIEwG0xPr7pQMf7Twq22cbaVV0neZJ6O0kbG6wP qLiA4BlPvunPuKYDIB2MLfa/Mo+e9iLCpY34rimVKecve6/8R6qWgoQ8jAnyMXMC Rmwi/nE3rHLE5H+PmIqveW0flwND10RfuOKpai07hPblL4hsh+VOy1kOHzOlP6Z9 bGAbSuNzpm0yMFS5KaRwkO+BArqfqBM9 -----END CERTIFICATE-----Generated at Fri May 3 06:18:27 2024 by rpki-client on console-ams.rpki-client.org