$ rpki-client -vvf rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft File: SErowNFXmbX_CB_kDD4eAOTolHg.mft (raw, json) Hash identifier: c1cUweXlZgCXqX7EI2YBmLRhbL3roRx1lEleVIJelRg= Subject key identifier: C7:3A:4B:B2:BF:70:03:6E:7C:6E:3A:91:F4:C9:7B:C3:99:37:E7:17 Authority key identifier: 48:4A:E8:C0:D1:57:99:B5:FF:08:1F:E4:0C:3E:1E:00:E4:E8:94:78 Certificate issuer: /CN=A9148827/serialNumber=484AE8C0D15799B5FF081FE40C3E1E00E4E89478 Certificate serial: 0A3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft Manifest number: 0A2A Signing time: Sat 04 May 2024 20:46:41 +0000 Manifest this update: Sat 04 May 2024 20:46:41 +0000 Manifest next update: Sat 11 May 2024 20:46:41 +0000 Files and hashes: 1: SErowNFXmbX_CB_kDD4eAOTolHg.crl (hash: XoRpvoQRe2NMRajSSxwT+rsU1M4UWwh/GnOJmQSJ6Vk=) 2: 09DF69582A3411EB9E69467DC4F9AE02.roa (hash: 8H7Nb6RrKAdvN5EHtztaBVfV6WjB5E2CorO6gN96tZ0=) 3: E5DE3744492611EAA7ADEB71C4F9AE02.roa (hash: Fz0CDYPtXNYhgB9YTjI1zGiOeMCYZZOlR8VF0yZ8kZs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.crl rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 20:46:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2621 (0xa3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148827/serialNumber=484AE8C0D15799B5FF081FE40C3E1E00E4E89478 Validity Not Before: May 4 20:46:41 2024 GMT Not After : May 11 20:46:41 2024 GMT Subject: CN=66369eb1-0b96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:af:09:72:10:73:78:ab:d6:34:2b:c9:07:a1: 6b:12:3d:e0:db:bf:aa:ef:18:f5:58:85:97:d6:f3: e7:80:19:98:4c:f9:4c:b9:92:f8:ff:71:57:11:4c: d9:87:e8:cf:1b:d4:30:d1:2b:c1:86:5c:d9:08:2d: 81:ef:65:ea:bd:07:49:18:d5:0b:29:aa:92:4d:e5: aa:73:e9:9a:7a:25:77:1b:e8:a1:7c:3f:22:ac:b7: 18:67:20:58:83:0d:76:27:65:7d:d1:36:5b:5e:c6: 8d:97:20:21:c3:17:bf:6d:32:1f:1d:8d:e8:ff:b0: 4f:ab:14:ad:ae:c2:47:de:68:37:8a:ee:e2:36:ad: cc:a4:0b:a9:a6:6a:db:fb:63:c0:f8:35:cf:ef:d2: e4:31:21:c3:28:ab:ee:ec:b0:4e:aa:eb:44:cd:8f: 37:af:f2:36:c9:77:5e:64:57:53:a0:4b:c1:62:27: 3f:33:64:6f:09:54:42:94:ff:d4:69:50:af:a0:0e: 00:50:97:56:73:30:7b:3f:37:03:37:0c:ea:3d:f7: f8:99:a7:82:55:21:d6:2b:63:07:e5:1c:bb:af:ce: f0:8f:b6:ff:de:e7:b2:01:83:39:8b:3d:3e:2c:e8: 79:5c:3d:29:d5:98:e2:59:88:29:6e:56:8a:b3:5a: 77:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:3A:4B:B2:BF:70:03:6E:7C:6E:3A:91:F4:C9:7B:C3:99:37:E7:17 X509v3 Authority Key Identifier: keyid:48:4A:E8:C0:D1:57:99:B5:FF:08:1F:E4:0C:3E:1E:00:E4:E8:94:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:01:33:93:aa:37:87:70:00:6b:86:9d:49:64:2e:2f:8e:b5: dc:55:9c:bd:bd:18:71:71:9c:97:a4:80:a2:53:0d:bc:2b:0c: 00:ac:08:b3:04:34:ff:b9:67:8b:83:13:6d:bf:34:a6:d5:dc: c7:ed:23:bf:e0:3b:d4:d9:03:af:97:8e:7b:07:c2:f7:bf:2a: 95:44:71:a1:cb:20:50:ec:d6:30:b2:1a:16:29:b5:6f:73:c9: 65:da:f0:a8:dd:90:c7:48:5d:ab:f0:31:3f:50:8f:46:1b:5a: 70:a8:88:d2:63:1e:2c:ab:3d:ba:13:94:10:60:fd:f6:c4:78: f4:18:7f:6e:bb:3b:35:31:37:2b:12:7a:a4:cc:29:45:49:57: d0:19:ea:62:22:5b:67:00:c6:81:26:b5:da:98:92:b0:0e:11: d4:ee:63:08:ba:a2:f1:3c:a2:36:35:c2:ff:d5:d0:bc:88:c3: 10:4a:ad:9d:f7:13:1f:61:f9:47:4e:84:a9:b5:7b:f4:6e:6b: 11:c5:f6:f8:78:8b:bb:f1:33:50:a4:07:b6:3d:00:2f:9e:14: 9e:69:ef:18:3c:37:97:e5:fa:f4:ae:30:20:65:76:cc:12:82: 5c:39:ab:47:e5:5e:fc:12:74:c3:8f:1d:51:c5:b6:54:6c:22: 62:85:01:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg4MjcxMTAvBgNVBAUTKDQ4NEFFOEMwRDE1Nzk5QjVGRjA4MUZFNDBDM0UxRTAw RTRFODk0NzgwHhcNMjQwNTA0MjA0NjQxWhcNMjQwNTExMjA0NjQxWjAYMRYwFAYD VQQDEw02NjM2OWViMS0wYjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoq8JchBzeKvWNCvJB6FrEj3g27+q7xj1WIWX1vPngBmYTPlMuZL4/3FXEUzZ h+jPG9Qw0SvBhlzZCC2B72XqvQdJGNULKaqSTeWqc+maeiV3G+ihfD8irLcYZyBY gw12J2V90TZbXsaNlyAhwxe/bTIfHY3o/7BPqxStrsJH3mg3iu7iNq3MpAuppmrb +2PA+DXP79LkMSHDKKvu7LBOqutEzY83r/I2yXdeZFdToEvBYic/M2RvCVRClP/U aVCvoA4AUJdWczB7PzcDNwzqPff4maeCVSHWK2MH5Ry7r87wj7b/3ueyAYM5iz0+ LOh5XD0p1ZjiWYgpblaKs1p3ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMc6S7K/ cANufG46kfTJe8OZN+cXMB8GA1UdIwQYMBaAFEhK6MDRV5m1/wgf5Aw+HgDk6JR4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODgyNy84ODg3MTkzNjQ5 MjUxMUVBQTk0NDk3NkZDNEY5QUUwMi9TRXJvd05GWG1iWF9DQl9rREQ0ZUFPVG9s SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NFcm93TkZYbWJYX0NCX2tERDRlQU9Ub2xIZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODgyNy84ODg3MTkzNjQ5MjUxMUVBQTk0NDk3NkZDNEY5QUUwMi9TRXJvd05GWG1i WF9DQl9rREQ0ZUFPVG9sSGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbATOTqjeHcABrhp1JZC4vjrXcVZy9vRhxcZyXpICiUw28KwwArAiz BDT/uWeLgxNtvzSm1dzH7SO/4DvU2QOvl457B8L3vyqVRHGhyyBQ7NYwshoWKbVv c8ll2vCo3ZDHSF2r8DE/UI9GG1pwqIjSYx4sqz26E5QQYP32xHj0GH9uuzs1MTcr EnqkzClFSVfQGepiIltnAMaBJrXamJKwDhHU7mMIuqLxPKI2NcL/1dC8iMMQSq2d 9xMfYflHToSptXv0bmsRxfb4eIu78TNQpAe2PQAvnhSeae8YPDeX5fr0rjAgZXbM EoJcOatH5V78EnTDjx1RxbZUbCJihQHJ -----END CERTIFICATE-----Generated at Sat May 4 22:06:52 2024 by rpki-client on console-ams.rpki-client.org