$ rpki-client -vvf rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.mft File: E39piIvunMg7q0H68slC0Qryy2U.mft (raw, json) Hash identifier: +mbJENe0edp/mWvGUAppWwBhtrKr6OO2F+v3H5ipZyE= Subject key identifier: CC:AE:07:7B:8E:62:A5:91:B3:37:31:AB:97:EC:E4:BD:48:9E:63:34 Authority key identifier: 13:7F:69:88:8B:EE:9C:C8:3B:AB:41:FA:F2:C9:42:D1:0A:F2:CB:65 Certificate issuer: /CN=A914B30A/serialNumber=137F69888BEE9CC83BAB41FAF2C942D10AF2CB65 Certificate serial: 03B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E39piIvunMg7q0H68slC0Qryy2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.mft Manifest number: 03AC Signing time: Sun 05 May 2024 02:38:25 +0000 Manifest this update: Sun 05 May 2024 02:38:25 +0000 Manifest next update: Sun 12 May 2024 02:38:25 +0000 Files and hashes: 1: E39piIvunMg7q0H68slC0Qryy2U.crl (hash: vxfDvlgyoJyUaTAO/wtX/M00shYSshjcRbf66R4wnV8=) 2: 279EE41683E111ECBB82F47DC4F9AE02.roa (hash: ngK147vMs6q/RHxhjfKLOtDjm0hQwKZIJBdKYWfYSHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.crl rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E39piIvunMg7q0H68slC0Qryy2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 944 (0x3b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B30A/serialNumber=137F69888BEE9CC83BAB41FAF2C942D10AF2CB65 Validity Not Before: May 5 02:38:25 2024 GMT Not After : May 12 02:38:25 2024 GMT Subject: CN=6636f121-c8a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:3e:f1:e8:61:34:a8:00:ee:1b:e2:e6:f7:d5: dd:8c:f8:e8:1c:4a:5e:9d:8d:72:72:8f:16:30:6a: 0a:4e:9c:70:ac:1d:61:20:e5:00:db:d8:41:2d:cd: 93:4f:02:14:ce:e2:00:aa:41:68:b3:c5:bd:20:69: 95:54:de:26:55:4f:9d:9f:3a:28:ac:de:14:d7:cc: d7:fb:cd:16:cd:f2:7d:6d:ca:c7:11:15:dc:5b:de: 22:b7:8c:58:2d:c0:55:c7:07:c2:38:54:32:aa:e2: e3:05:fe:dd:e7:45:c1:54:52:af:a9:6d:a2:1a:26: c8:2a:b6:68:15:a0:06:60:78:37:2b:51:20:8d:b2: 97:1c:2c:32:b8:f7:d7:da:8a:b2:01:8c:5e:f7:19: ba:92:47:f3:98:41:14:8c:97:98:0a:66:7c:be:37: ec:f5:ab:44:61:40:50:7f:ad:72:39:37:d7:e7:75: c5:76:d1:04:3f:d2:f6:17:c0:f5:51:16:dc:eb:15: 73:f2:82:a9:f8:03:36:ba:8b:4b:36:c1:94:bb:91: 0d:a7:6a:1f:46:7a:8f:0a:95:29:c8:94:54:30:cc: 11:3a:99:b5:c5:ff:7e:5f:08:11:8e:9a:a1:92:0b: 1d:e1:4b:34:5a:70:b9:08:2e:6c:3d:8d:6a:58:56: 95:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:AE:07:7B:8E:62:A5:91:B3:37:31:AB:97:EC:E4:BD:48:9E:63:34 X509v3 Authority Key Identifier: keyid:13:7F:69:88:8B:EE:9C:C8:3B:AB:41:FA:F2:C9:42:D1:0A:F2:CB:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E39piIvunMg7q0H68slC0Qryy2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:e4:5a:82:22:3a:63:cc:eb:bb:3b:69:4e:77:cc:0f:4f:58: e3:a1:35:fe:da:8d:db:62:e9:ae:b2:a1:8a:36:ed:cf:af:4a: e3:6f:e3:fd:48:dc:19:59:71:73:03:a0:59:4c:8e:e7:be:da: 6d:66:fe:2a:1d:d7:8e:f3:2b:8b:bf:d8:d3:c3:04:01:57:a5: b2:ba:18:fe:6c:05:70:1f:c1:93:7b:0e:30:07:98:86:47:6b: 27:c7:7d:84:96:3f:e4:0e:0d:8d:e7:0f:ad:78:9e:21:1d:96: f3:8b:32:8e:4a:79:58:00:f3:86:6b:23:f7:92:50:17:1e:15: 99:52:f4:9a:6c:c8:69:f3:88:ca:56:6f:e2:9f:6f:89:cd:e0: e1:02:6b:0f:16:75:46:a0:d4:9b:bd:ae:ad:71:fa:05:6d:a5: 92:f5:03:b7:2a:b7:9c:d8:dc:17:0a:23:9f:dc:25:e3:d0:c3: 36:90:7d:e0:10:8b:4e:07:bb:d6:7c:78:3a:d4:dd:48:a3:48: 87:39:93:6d:36:32:aa:0f:0b:c6:e8:86:08:fc:b4:0f:45:ab: 55:91:da:0a:13:a4:d3:c9:7b:93:93:e1:2e:6e:7e:45:66:fd: 55:cb:23:81:0e:9d:31:6a:e6:ea:e7:d3:61:f1:10:a3:fa:1e: b1:f2:1b:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIzMEExMTAvBgNVBAUTKDEzN0Y2OTg4OEJFRTlDQzgzQkFCNDFGQUYyQzk0MkQx MEFGMkNCNjUwHhcNMjQwNTA1MDIzODI1WhcNMjQwNTEyMDIzODI1WjAYMRYwFAYD VQQDEw02NjM2ZjEyMS1jOGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8T7x6GE0qADuG+Lm99XdjPjoHEpenY1yco8WMGoKTpxwrB1hIOUA29hBLc2T TwIUzuIAqkFos8W9IGmVVN4mVU+dnzoorN4U18zX+80WzfJ9bcrHERXcW94it4xY LcBVxwfCOFQyquLjBf7d50XBVFKvqW2iGibIKrZoFaAGYHg3K1EgjbKXHCwyuPfX 2oqyAYxe9xm6kkfzmEEUjJeYCmZ8vjfs9atEYUBQf61yOTfX53XFdtEEP9L2F8D1 URbc6xVz8oKp+AM2uotLNsGUu5ENp2ofRnqPCpUpyJRUMMwROpm1xf9+XwgRjpqh kgsd4Us0WnC5CC5sPY1qWFaV9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMyuB3uO YqWRszcxq5fs5L1InmM0MB8GA1UdIwQYMBaAFBN/aYiL7pzIO6tB+vLJQtEK8stl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjMwQS85MUFFNjlBQTQ2 N0MxMUVDQkQ2NjEyNkJDNEY5QUUwMi9FMzlwaUl2dW5NZzdxMEg2OHNsQzBRcnl5 MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UzOXBpSXZ1bk1nN3EwSDY4c2xDMFFyeXkyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjMwQS85MUFFNjlBQTQ2N0MxMUVDQkQ2NjEyNkJDNEY5QUUwMi9FMzlwaUl2dW5N ZzdxMEg2OHNsQzBRcnl5MlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCh5FqCIjpjzOu7O2lOd8wPT1jjoTX+2o3bYumusqGKNu3Pr0rjb+P9 SNwZWXFzA6BZTI7nvtptZv4qHdeO8yuLv9jTwwQBV6Wyuhj+bAVwH8GTew4wB5iG R2snx32Elj/kDg2N5w+teJ4hHZbzizKOSnlYAPOGayP3klAXHhWZUvSabMhp84jK Vm/in2+JzeDhAmsPFnVGoNSbva6tcfoFbaWS9QO3Krec2NwXCiOf3CXj0MM2kH3g EItOB7vWfHg61N1Io0iHOZNtNjKqDwvG6IYI/LQPRatVkdoKE6TTyXuTk+Eubn5F Zv1VyyOBDp0xaubq59Nh8RCj+h6x8htY -----END CERTIFICATE-----Generated at Sun May 5 03:09:54 2024 by rpki-client on console-ams.rpki-client.org