$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft File: mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft (raw, json) Hash identifier: kTIkj00siFyZo+3Fx2uiqaNA/5PUO3P1myUnb6v+EgA= Subject key identifier: 59:4A:7F:83:40:01:1E:5F:25:91:01:46:F6:F0:C9:19:A8:9D:0D:60 Authority key identifier: 98:43:C8:92:77:A8:12:AB:D7:FA:DA:B5:2D:1D:61:D2:78:BA:2B:19 Certificate issuer: /CN=A9145E67/serialNumber=9843C89277A812ABD7FADAB52D1D61D278BA2B19 Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mEPIkneoEqvX-tq1LR1h0ni6Kxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft Manifest number: E8 Signing time: Sun 05 May 2024 05:58:22 +0000 Manifest this update: Sun 05 May 2024 05:58:21 +0000 Manifest next update: Sun 12 May 2024 05:58:21 +0000 Files and hashes: 1: mEPIkneoEqvX-tq1LR1h0ni6Kxk.crl (hash: Z8jvTzx4H0ErXgg65xrjPv8Ez5z8Yz0g67vY5NIeq+Q=) 2: EE4D73F2AE5611EDA021E516C4F9AE02.roa (hash: Y7rwBbYTnchmBAucXdCEl+WBGxzWb608eKIUvJXWeXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.crl rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mEPIkneoEqvX-tq1LR1h0ni6Kxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 05:58:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145E67/serialNumber=9843C89277A812ABD7FADAB52D1D61D278BA2B19 Validity Not Before: May 5 05:58:21 2024 GMT Not After : May 12 05:58:21 2024 GMT Subject: CN=66371ffe-095a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f1:2b:18:3c:75:ac:02:10:3e:a9:ff:78:9f: fa:c1:2a:05:c8:51:e4:0b:ce:a3:04:00:f7:a8:d8: ef:d7:8d:6d:f2:9e:f7:c4:8f:91:cd:bd:b3:0d:a7: eb:20:e0:58:ab:aa:d5:90:2d:bd:41:83:8d:cf:cf: 38:c8:26:0c:81:e6:04:1a:c7:7d:ab:0c:4b:9e:f2: 08:67:b2:97:02:5f:8b:56:d3:ae:c7:72:b1:c0:6a: a5:a3:42:6f:6e:5c:22:6d:d3:e1:30:a9:41:cd:76: c2:91:9c:16:15:db:ef:fc:ce:35:3b:d6:f6:5b:2e: 3a:d9:f8:be:1e:0e:ac:f5:1e:9b:92:26:a6:a0:21: f2:8e:bc:27:27:5d:21:d0:bd:62:46:c3:19:9b:3d: f3:6a:a2:ad:f2:80:4d:1a:bb:81:88:bd:6d:87:0b: 83:0a:db:bc:20:e8:8a:d9:58:aa:b9:5e:f5:dc:7e: 46:22:fc:2d:0a:bd:98:0f:24:ba:27:24:bc:1a:29: 37:30:bf:c3:54:06:94:0b:48:9f:e4:17:7f:76:cb: 72:a7:87:e8:55:09:d8:a5:92:47:34:54:d2:bc:f8: 1c:9e:80:07:b8:f5:ef:ff:64:3d:c6:93:c0:e6:df: f5:23:6a:65:35:e5:b0:fe:7a:79:c7:c5:de:ff:c4: 3a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:4A:7F:83:40:01:1E:5F:25:91:01:46:F6:F0:C9:19:A8:9D:0D:60 X509v3 Authority Key Identifier: keyid:98:43:C8:92:77:A8:12:AB:D7:FA:DA:B5:2D:1D:61:D2:78:BA:2B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mEPIkneoEqvX-tq1LR1h0ni6Kxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:e3:d9:81:a6:cf:76:54:d6:aa:6d:04:d5:9a:e6:cd:0f:ea: 38:27:4a:ae:6e:27:0b:5a:6f:2f:cc:c6:21:28:3c:de:6f:64: fc:60:c7:1e:21:b9:b5:67:89:fc:62:1e:2d:cc:7f:a6:f1:34: 26:6e:ee:7f:a2:c6:77:f8:dd:76:8b:b0:8c:5e:fe:5e:c3:51: 34:fb:0f:8b:79:48:56:ea:66:14:f0:75:ad:57:79:b7:ad:2f: 0c:57:16:72:61:1f:a7:38:a3:f7:33:af:58:cc:27:ca:4a:e2: 74:f3:f9:4c:da:70:e5:d4:6c:1e:98:b7:4f:a6:c5:ee:40:e6: d3:28:44:87:b7:1a:61:a2:09:d6:f9:24:35:f6:4a:c0:06:bc: 20:fb:14:fa:11:dc:38:b1:58:96:d3:34:7f:5e:26:ed:71:5c: 4a:82:5a:9f:17:c0:10:2c:cf:d3:ae:4f:8a:27:c4:94:e2:64: 2b:32:fa:14:c0:ea:d2:b8:9b:87:07:c4:74:6c:5f:85:97:13: 9a:68:89:29:6c:e8:33:98:1d:96:38:f9:0b:53:77:ad:25:fc: 49:81:aa:5f:45:3d:69:14:7f:6c:0e:97:ef:b8:f8:db:48:5e: 54:5d:97:35:a0:5f:96:04:74:b9:cd:db:e5:be:be:b7:45:50: 09:20:d3:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVFNjcxMTAvBgNVBAUTKDk4NDNDODkyNzdBODEyQUJEN0ZBREFCNTJEMUQ2MUQy NzhCQTJCMTkwHhcNMjQwNTA1MDU1ODIxWhcNMjQwNTEyMDU1ODIxWjAYMRYwFAYD VQQDEw02NjM3MWZmZS0wOTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/ErGDx1rAIQPqn/eJ/6wSoFyFHkC86jBAD3qNjv141t8p73xI+Rzb2zDafr IOBYq6rVkC29QYONz884yCYMgeYEGsd9qwxLnvIIZ7KXAl+LVtOux3KxwGqlo0Jv blwibdPhMKlBzXbCkZwWFdvv/M41O9b2Wy462fi+Hg6s9R6bkiamoCHyjrwnJ10h 0L1iRsMZmz3zaqKt8oBNGruBiL1thwuDCtu8IOiK2ViquV713H5GIvwtCr2YDyS6 JyS8Gik3ML/DVAaUC0if5Bd/dstyp4foVQnYpZJHNFTSvPgcnoAHuPXv/2Q9xpPA 5t/1I2plNeWw/np5x8Xe/8Q6zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFlKf4NA AR5fJZEBRvbwyRmonQ1gMB8GA1UdIwQYMBaAFJhDyJJ3qBKr1/ratS0dYdJ4uisZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUU2Ny8yMkMxNDUyOEFF NTIxMUVEOUM1REEzMTBDNEY5QUUwMi9tRVBJa25lb0VxdlgtdHExTFIxaDBuaTZL eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21FUElrbmVvRXF2WC10cTFMUjFoMG5pNkt4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUU2Ny8yMkMxNDUyOEFFNTIxMUVEOUM1REEzMTBDNEY5QUUwMi9tRVBJa25lb0Vx dlgtdHExTFIxaDBuaTZLeGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBe49mBps92VNaqbQTVmubND+o4J0qubicLWm8vzMYhKDzeb2T8YMce Ibm1Z4n8Yh4tzH+m8TQmbu5/osZ3+N12i7CMXv5ew1E0+w+LeUhW6mYU8HWtV3m3 rS8MVxZyYR+nOKP3M69YzCfKSuJ08/lM2nDl1GwemLdPpsXuQObTKESHtxphognW +SQ19krABrwg+xT6Edw4sViW0zR/XibtcVxKglqfF8AQLM/Trk+KJ8SU4mQrMvoU wOrSuJuHB8R0bF+FlxOaaIkpbOgzmB2WOPkLU3etJfxJgapfRT1pFH9sDpfvuPjb SF5UXZc1oF+WBHS5zdvlvr63RVAJINPb -----END CERTIFICATE-----Generated at Sun May 5 08:21:05 2024 by rpki-client on console-ams.rpki-client.org