$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft File: E4zRCkd43g41kR6cnJRPSyHE2wk.mft (raw, json) Hash identifier: bW+XemIZBB2hXwPFeg/E2DLJmSuImwT7HSFN/1AMqZI= Subject key identifier: 74:81:FB:98:45:01:D9:96:C5:84:6F:29:2D:70:A7:F3:AF:F5:13:41 Authority key identifier: 13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09 Certificate issuer: /CN=A9130F9C/serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09 Certificate serial: 0BD0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft Manifest number: 0BBE Signing time: Tue 30 Apr 2024 19:28:21 +0000 Manifest this update: Tue 30 Apr 2024 19:28:20 +0000 Manifest next update: Tue 07 May 2024 19:28:20 +0000 Files and hashes: 1: E4zRCkd43g41kR6cnJRPSyHE2wk.crl (hash: ZoX9TUJGcPO2i+Y+y2lcGkQsSEE9iJGSqUfyEc5C5dc=) 2: 1FC5063AE0D411ECB6C0B01CC4F9AE02.roa (hash: bNfRuiTZc+rw2Og4k3oGIRDo7kzPEK6F5coTg4F4sKE=) 3: 41CBB5B87F7611ECAD50FA4EC4F9AE02.roa (hash: Li0u/U8ueJYpevdQ/gYDnsoDTa8agFy/7wST/iBBAg0=) 4: 0827E4147F7911EC86DE4B56C4F9AE02.roa (hash: Y0xFr2eRz2jguPa5IyJLDoG4mUsNXcKQt7SdilXerlw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 19:28:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3024 (0xbd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130F9C/serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09 Validity Not Before: Apr 30 19:28:20 2024 GMT Not After : May 7 19:28:20 2024 GMT Subject: CN=66314654-57cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:52:cd:81:5d:bd:b3:3a:07:df:b0:62:1f:be: c0:b9:d9:cf:c5:05:ed:d0:e8:db:f7:df:ba:dc:44: 3d:c0:cb:a7:89:b7:e5:97:aa:eb:91:8b:ea:bb:db: f3:13:af:9a:af:6a:33:6f:86:c1:2d:3f:d1:19:07: 36:28:fc:7b:79:b4:a8:53:06:7a:ca:28:25:6f:59: d7:80:cb:50:a9:8f:74:f0:16:bc:1d:e3:72:34:d7: 20:6f:e3:ee:61:1c:2d:98:db:92:09:87:e6:25:4c: 38:bd:3a:78:e5:23:12:dc:96:84:82:a1:de:7d:37: dd:cd:46:aa:4b:eb:29:fa:59:ca:f6:6e:bd:ef:77: 1e:bc:35:b3:9e:46:6c:12:48:24:36:31:88:b3:16: e2:c9:d1:4b:8c:fa:60:ec:e5:ec:c0:e5:cc:5c:3f: 5b:c3:1d:44:08:ca:24:1d:4c:8b:42:76:16:3b:a7: 61:06:b8:3d:a5:00:07:5c:09:28:dc:0c:69:1f:39: 1d:2a:85:e3:d0:74:de:d0:3a:f1:b6:6c:1c:58:20: 17:36:92:f4:e0:bb:cd:aa:5d:3f:b2:a5:f4:ef:0a: 5d:1b:8f:fa:2b:92:9e:a8:36:91:8b:11:49:25:af: b8:91:65:2e:74:45:e1:fb:7b:5c:15:f7:d5:8b:87: d2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:81:FB:98:45:01:D9:96:C5:84:6F:29:2D:70:A7:F3:AF:F5:13:41 X509v3 Authority Key Identifier: keyid:13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:2c:24:c1:c0:90:97:09:c7:9c:5b:2c:8e:f1:52:49:ce:4e: 19:b0:28:ea:ad:b4:bf:e5:bd:b3:ec:f4:32:99:ba:bd:f9:ff: 08:31:05:da:a8:a1:ea:3b:fc:43:93:3b:5d:20:a4:df:d6:12: e9:95:7c:3d:71:cb:70:95:13:2c:9a:1d:8f:3c:7a:8e:ba:a8: 48:8a:ff:35:33:89:fc:57:89:40:ea:55:ab:77:aa:c2:32:25: 6e:8f:26:b3:fb:22:66:51:ed:f6:9f:58:3b:73:e5:f7:6d:99: 62:84:6f:71:a7:57:c5:e9:b2:e9:79:a8:fd:57:51:67:51:2b: d4:74:d2:e9:11:95:82:a1:8f:c0:42:52:f5:43:19:b3:d2:1a: fa:c5:1f:71:f1:ae:3f:ae:b3:7d:bc:c0:71:c4:9c:c9:a3:78: e5:32:92:a0:b9:26:da:94:8f:67:9d:f6:88:76:cd:99:d4:3d: 41:c8:e9:a8:ff:9c:93:7f:f5:3b:f0:8e:43:17:bd:44:ea:3c: 26:db:f3:52:f0:ef:59:7c:9c:1d:79:0a:79:0c:1c:99:6c:32: eb:11:d4:32:72:50:d2:36:db:a7:dc:dd:aa:16:34:15:b2:62: 88:72:27:f4:e5:51:69:3b:b6:c2:fe:04:17:7f:c9:d6:ea:02: bd:08:0c:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBGOUMxMTAvBgNVBAUTKDEzOENEMTBBNDc3OERFMEUzNTkxMUU5QzlDOTQ0RjRC MjFDNERCMDkwHhcNMjQwNDMwMTkyODIwWhcNMjQwNTA3MTkyODIwWjAYMRYwFAYD VQQDEw02NjMxNDY1NC01N2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4VLNgV29szoH37BiH77AudnPxQXt0Ojb99+63EQ9wMunibfll6rrkYvqu9vz E6+ar2ozb4bBLT/RGQc2KPx7ebSoUwZ6yiglb1nXgMtQqY908Ba8HeNyNNcgb+Pu YRwtmNuSCYfmJUw4vTp45SMS3JaEgqHefTfdzUaqS+sp+lnK9m6973cevDWznkZs EkgkNjGIsxbiydFLjPpg7OXswOXMXD9bwx1ECMokHUyLQnYWO6dhBrg9pQAHXAko 3AxpHzkdKoXj0HTe0DrxtmwcWCAXNpL04LvNql0/sqX07wpdG4/6K5KeqDaRixFJ Ja+4kWUudEXh+3tcFffVi4fSswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHSB+5hF AdmWxYRvKS1wp/Ov9RNBMB8GA1UdIwQYMBaAFBOM0QpHeN4ONZEenJyUT0shxNsJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEY5Qy8yOUNCMDIwRUZB MEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNnNDFrUjZjbkpSUFN5SEUy d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U0elJDa2Q0M2c0MWtSNmNuSlJQU3lIRTJ3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEY5Qy8yOUNCMDIwRUZBMEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNn NDFrUjZjbkpSUFN5SEUyd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoLCTBwJCXCcecWyyO8VJJzk4ZsCjqrbS/5b2z7PQymbq9+f8IMQXa qKHqO/xDkztdIKTf1hLplXw9cctwlRMsmh2PPHqOuqhIiv81M4n8V4lA6lWrd6rC MiVujyaz+yJmUe32n1g7c+X3bZlihG9xp1fF6bLpeaj9V1FnUSvUdNLpEZWCoY/A QlL1Qxmz0hr6xR9x8a4/rrN9vMBxxJzJo3jlMpKguSbalI9nnfaIds2Z1D1ByOmo /5yTf/U78I5DF71E6jwm2/NS8O9ZfJwdeQp5DByZbDLrEdQyclDSNtun3N2qFjQV smKIcif05VFpO7bC/gQXf8nW6gK9CAxw -----END CERTIFICATE-----Generated at Tue Apr 30 21:37:54 2024 by rpki-client on console-fra.rpki-client.org