$ rpki-client -vvf rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft File: _Ern2eP0GafSBKVMedHz76mn1sg.mft (raw, json) Hash identifier: YCCNC+bHDahO6KTWtRKUrLM5h/ifeZ9TX3tdjXrgd28= Subject key identifier: 61:47:68:00:C6:64:45:7B:23:59:DF:4D:E0:14:01:73:9D:5E:7D:F4 Authority key identifier: FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8 Certificate issuer: /CN=A91262F0/serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8 Certificate serial: EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft Manifest number: EB Signing time: Fri 03 May 2024 05:53:39 +0000 Manifest this update: Fri 03 May 2024 05:53:38 +0000 Manifest next update: Fri 10 May 2024 05:53:38 +0000 Files and hashes: 1: _Ern2eP0GafSBKVMedHz76mn1sg.crl (hash: 6I6g8VS9MirBJt2BwIbkDZfl88QerEXwRbU679xRRh8=) 2: 8E412748A33311EDA2CB2420C4F9AE02.roa (hash: agaKvT35E3Jq0ilHrclwTlATlov0trZoPCX9IOtsMC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 05:53:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 239 (0xef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91262F0/serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8 Validity Not Before: May 3 05:53:38 2024 GMT Not After : May 10 05:53:38 2024 GMT Subject: CN=66347be3-3d75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b4:f5:9e:ff:5f:b2:b1:e6:a4:0c:8d:4c:e8: 2d:ff:c2:b4:5f:96:b5:34:f2:89:d3:39:31:96:d5: 36:00:c8:b2:15:72:e8:74:dc:39:13:e5:f2:0d:9f: 7e:75:05:88:dd:3b:15:70:8f:2d:e1:0a:5f:fb:06: d6:b0:2a:89:b7:04:d6:87:f0:68:c4:7e:80:5c:8c: b9:46:cb:ad:09:0f:71:56:55:5c:54:60:33:c1:45: 2c:f2:e8:43:2d:77:3e:9e:7a:97:9b:09:98:ea:9c: f7:f4:0e:d4:5b:7d:dc:e8:84:45:4a:79:ec:3a:a3: 3d:22:16:9b:66:c1:7f:6e:32:5a:3e:26:ec:67:a4: be:2d:f0:2e:dd:e5:c7:de:f2:fc:69:22:54:e6:c3: 8a:7b:9e:35:ca:60:c1:68:a4:23:d9:98:58:a9:b8: c0:90:66:19:6a:1a:7c:cc:b2:f1:b4:8c:33:9c:f5: aa:e9:b3:6d:9e:94:9f:3e:84:6f:fb:e1:ef:56:6b: 02:b6:32:d6:80:bf:74:5a:0c:1e:c0:4c:b1:6e:57: 75:06:83:44:45:29:51:15:9b:d5:1c:97:48:6d:7d: 01:48:11:e5:ef:12:37:9c:bb:19:ea:af:0a:79:8a: 34:5c:06:ee:52:43:d7:7a:94:b5:cc:5d:86:37:79: 25:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:47:68:00:C6:64:45:7B:23:59:DF:4D:E0:14:01:73:9D:5E:7D:F4 X509v3 Authority Key Identifier: keyid:FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:ff:16:3e:38:9b:eb:af:99:b2:63:81:9c:a9:80:71:2c:49: 92:48:c3:77:58:36:5b:89:b8:df:b8:82:c8:d0:0c:0b:13:de: ce:04:e2:f6:2c:0e:af:e0:ab:90:d1:79:aa:fd:90:80:ac:7e: 49:a4:ac:33:89:62:ab:6d:8f:ba:4f:56:b6:ce:fb:f6:67:3e: c1:b7:5b:24:aa:e4:4b:ef:78:33:c3:db:1e:62:47:36:04:0c: 4e:2c:3e:f2:26:e4:68:c0:d1:a4:44:9e:ee:5d:9e:5d:a6:85: 36:70:fd:fb:1e:fa:69:33:3c:c9:43:1e:d5:96:3c:1b:4f:fa: 12:33:b5:88:7f:a8:14:75:44:0f:9f:c6:34:ad:a0:af:22:84: 70:67:48:56:da:be:f0:b3:a4:29:eb:42:a2:76:5d:df:01:3b: c7:3b:f0:aa:37:c9:41:b7:fa:92:0d:40:ed:28:44:d2:53:b1: 09:48:e4:ea:3d:71:ae:14:e9:0c:81:8e:f0:d1:5b:76:6d:76: be:bd:eb:ff:25:5b:bb:70:5c:06:06:9c:69:1e:20:7c:9d:f3: 32:fd:51:36:60:8e:34:b4:9a:06:c2:32:5e:d5:61:74:fe:f4: 63:cb:80:2d:78:c5:a2:f4:f5:4a:c1:8a:6c:18:06:06:84:69: c2:2e:7a:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyRjAxMTAvBgNVBAUTKEZDNEFFN0Q5RTNGNDE5QTdEMjA0QTU0Qzc5RDFGM0VG QTlBN0Q2QzgwHhcNMjQwNTAzMDU1MzM4WhcNMjQwNTEwMDU1MzM4WjAYMRYwFAYD VQQDEw02NjM0N2JlMy0zZDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubT1nv9fsrHmpAyNTOgt/8K0X5a1NPKJ0zkxltU2AMiyFXLodNw5E+XyDZ9+ dQWI3TsVcI8t4Qpf+wbWsCqJtwTWh/BoxH6AXIy5RsutCQ9xVlVcVGAzwUUs8uhD LXc+nnqXmwmY6pz39A7UW33c6IRFSnnsOqM9IhabZsF/bjJaPibsZ6S+LfAu3eXH 3vL8aSJU5sOKe541ymDBaKQj2ZhYqbjAkGYZahp8zLLxtIwznPWq6bNtnpSfPoRv ++HvVmsCtjLWgL90WgwewEyxbld1BoNERSlRFZvVHJdIbX0BSBHl7xI3nLsZ6q8K eYo0XAbuUkPXepS1zF2GN3kl7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGFHaADG ZEV7I1nfTeAUAXOdXn30MB8GA1UdIwQYMBaAFPxK59nj9Bmn0gSlTHnR8++pp9bI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJGMC8zM0FEMEE2MkEz MEMxMUVEQjMzODhDMENDNEY5QUUwMi9fRXJuMmVQMEdhZlNCS1ZNZWRIejc2bW4x c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19Fcm4yZVAwR2FmU0JLVk1lZEh6NzZtbjFzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjJGMC8zM0FEMEE2MkEzMEMxMUVEQjMzODhDMENDNEY5QUUwMi9fRXJuMmVQMEdh ZlNCS1ZNZWRIejc2bW4xc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDB/xY+OJvrr5myY4GcqYBxLEmSSMN3WDZbibjfuILI0AwLE97OBOL2 LA6v4KuQ0Xmq/ZCArH5JpKwziWKrbY+6T1a2zvv2Zz7Bt1skquRL73gzw9seYkc2 BAxOLD7yJuRowNGkRJ7uXZ5dpoU2cP37HvppMzzJQx7VljwbT/oSM7WIf6gUdUQP n8Y0raCvIoRwZ0hW2r7ws6Qp60Kidl3fATvHO/CqN8lBt/qSDUDtKETSU7EJSOTq PXGuFOkMgY7w0Vt2bXa+vev/JVu7cFwGBpxpHiB8nfMy/VE2YI40tJoGwjJe1WF0 /vRjy4AteMWi9PVKwYpsGAYGhGnCLnrq -----END CERTIFICATE-----Generated at Fri May 3 08:21:07 2024 by rpki-client on console-ams.rpki-client.org