$ rpki-client -vvf rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft File: e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft (raw, json) Hash identifier: oBrHNg2inC4VRQp+OFL3eRSDkFHNWXTGlF52qPc+048= Subject key identifier: D9:0D:C8:9C:50:71:D5:91:09:E8:55:63:8D:18:D7:3D:31:1B:E0:F0 Authority key identifier: 7B:72:13:88:FD:13:E8:AE:43:C9:7F:03:01:98:1D:22:92:C8:88:97 Certificate issuer: /CN=A9115964/serialNumber=7B721388FD13E8AE43C97F0301981D2292C88897 Certificate serial: 06B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3ITiP0T6K5DyX8DAZgdIpLIiJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft Manifest number: 06A6 Signing time: Thu 02 May 2024 23:31:44 +0000 Manifest this update: Thu 02 May 2024 23:31:44 +0000 Manifest next update: Thu 09 May 2024 23:31:44 +0000 Files and hashes: 1: e3ITiP0T6K5DyX8DAZgdIpLIiJc.crl (hash: +8whNN9u0Iqc5KNit41/eDTiChXtLk7eTREElKiqOnM=) 2: FAFC712C485611EDB713C522C4F9AE02.roa (hash: BxFPmfPTwgp2tJjAzM/9EFLesG9jRjNr4vYZabIjAUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.crl rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3ITiP0T6K5DyX8DAZgdIpLIiJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1720 (0x6b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115964/serialNumber=7B721388FD13E8AE43C97F0301981D2292C88897 Validity Not Before: May 2 23:31:44 2024 GMT Not After : May 9 23:31:44 2024 GMT Subject: CN=66342260-1b04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:46:00:7e:6a:19:d9:49:db:ca:98:e1:f5:c6: 56:ca:3b:78:18:ea:d3:ae:de:7a:9b:ba:03:e6:fe: d6:5f:c2:36:a3:16:e9:ff:8e:0b:0a:60:cf:9a:bf: a1:73:10:81:bf:39:90:16:3d:a0:94:10:0e:13:50: fe:d6:bd:7d:cd:6f:fe:35:a7:db:e9:04:f8:71:9d: 27:72:ce:db:52:df:6f:54:8f:d5:ef:91:63:42:0a: 08:0c:bd:0a:b6:94:0b:d6:5c:4c:78:0f:07:71:2f: 25:c4:3a:bd:a2:7d:be:c2:55:6f:dc:a4:5f:58:b1: ee:93:25:37:08:13:5e:45:d1:04:c1:a9:86:9c:2c: ca:3b:fc:48:af:58:e0:83:71:42:df:d8:02:d2:aa: a5:54:8e:39:15:7f:ba:cf:dc:59:c6:4b:40:d4:02: 3f:21:68:3d:f8:fe:0b:63:34:ae:1d:b1:c7:f3:1f: cc:2f:32:b0:5f:c3:ac:e1:17:99:b3:79:5f:49:a2: 5a:43:43:a9:23:0a:72:94:a3:e3:49:b8:a7:20:c9: 27:ac:00:fe:37:ce:b2:5a:4a:b0:c1:e1:b5:36:00: 65:4b:04:7d:7e:61:c5:96:44:5a:39:f5:3d:da:69: 28:01:25:2f:3e:66:fa:4e:6d:75:66:1c:d9:e4:a2: 9b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:0D:C8:9C:50:71:D5:91:09:E8:55:63:8D:18:D7:3D:31:1B:E0:F0 X509v3 Authority Key Identifier: keyid:7B:72:13:88:FD:13:E8:AE:43:C9:7F:03:01:98:1D:22:92:C8:88:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3ITiP0T6K5DyX8DAZgdIpLIiJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:1d:b7:9c:b7:31:78:c8:d6:8f:cb:a2:1a:28:c4:35:78:68: c7:30:3b:2b:4f:66:b4:c6:ed:12:fb:aa:76:9d:95:25:96:b9: dc:2a:e8:7c:73:5e:8e:f6:ad:5e:46:de:d9:6b:5a:cd:73:25: c2:01:5a:11:43:90:ba:1b:f4:02:26:d3:16:f1:e8:fd:4f:ac: d0:e7:56:1c:4e:60:6b:f4:57:54:4b:e8:c0:7c:35:17:0d:10: 96:86:a1:d9:3a:41:ee:30:ba:35:5b:75:dd:18:b4:4a:03:8f: 86:56:60:be:01:01:a7:02:b9:ed:b2:06:86:22:2a:aa:22:71: 58:49:6c:f1:f6:b9:db:c2:6f:50:ad:dc:1c:98:15:ac:a8:78: 26:54:94:71:21:a4:76:ea:58:ed:3d:0b:60:89:fc:d6:47:95: 9b:2c:39:45:50:dc:e7:3e:1a:2f:20:55:a9:29:ce:1d:a4:4a: 2e:d2:7f:1c:59:c3:db:8d:88:d2:b8:07:74:af:9e:9a:22:52: c4:aa:3d:f2:b7:fe:d4:37:ed:79:8a:65:62:59:e3:3a:f8:a7: 53:30:1f:5d:5c:4e:bb:d7:14:36:a3:70:20:c9:78:33:c4:2a: 05:94:c7:ec:eb:8a:51:a7:d8:02:7c:26:d8:cb:bb:8e:16:2a: 1e:12:f7:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU5NjQxMTAvBgNVBAUTKDdCNzIxMzg4RkQxM0U4QUU0M0M5N0YwMzAxOTgxRDIy OTJDODg4OTcwHhcNMjQwNTAyMjMzMTQ0WhcNMjQwNTA5MjMzMTQ0WjAYMRYwFAYD VQQDEw02NjM0MjI2MC0xYjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8EYAfmoZ2Unbypjh9cZWyjt4GOrTrt56m7oD5v7WX8I2oxbp/44LCmDPmr+h cxCBvzmQFj2glBAOE1D+1r19zW/+Nafb6QT4cZ0ncs7bUt9vVI/V75FjQgoIDL0K tpQL1lxMeA8HcS8lxDq9on2+wlVv3KRfWLHukyU3CBNeRdEEwamGnCzKO/xIr1jg g3FC39gC0qqlVI45FX+6z9xZxktA1AI/IWg9+P4LYzSuHbHH8x/MLzKwX8Os4ReZ s3lfSaJaQ0OpIwpylKPjSbinIMknrAD+N86yWkqwweG1NgBlSwR9fmHFlkRaOfU9 2mkoASUvPmb6Tm11ZhzZ5KKb9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNkNyJxQ cdWRCehVY40Y1z0xG+DwMB8GA1UdIwQYMBaAFHtyE4j9E+iuQ8l/AwGYHSKSyIiX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTk2NC9FRkMyQ0NCQzI3 MEYxMUVCQURFNkMwMTlDNEY5QUUwMi9lM0lUaVAwVDZLNUR5WDhEQVpnZElwTElp SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UzSVRpUDBUNks1RHlYOERBWmdkSXBMSWlKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTk2NC9FRkMyQ0NCQzI3MEYxMUVCQURFNkMwMTlDNEY5QUUwMi9lM0lUaVAwVDZL NUR5WDhEQVpnZElwTElpSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcHbectzF4yNaPy6IaKMQ1eGjHMDsrT2a0xu0S+6p2nZUllrncKuh8 c16O9q1eRt7Za1rNcyXCAVoRQ5C6G/QCJtMW8ej9T6zQ51YcTmBr9FdUS+jAfDUX DRCWhqHZOkHuMLo1W3XdGLRKA4+GVmC+AQGnArntsgaGIiqqInFYSWzx9rnbwm9Q rdwcmBWsqHgmVJRxIaR26ljtPQtgifzWR5WbLDlFUNznPhovIFWpKc4dpEou0n8c WcPbjYjSuAd0r56aIlLEqj3yt/7UN+15imViWeM6+KdTMB9dXE671xQ2o3AgyXgz xCoFlMfs64pRp9gCfCbYy7uOFioeEvfZ -----END CERTIFICATE-----Generated at Fri May 3 00:07:11 2024 by rpki-client on console-ams.rpki-client.org