$ rpki-client -vvf rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft File: EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft (raw, json) Hash identifier: v4Qccm6ylgE8PH7ad32Fttyzcmgc2wL9bIMZ1kz4zGw= Subject key identifier: DE:1E:4F:02:9A:16:AA:40:98:60:60:B3:97:B2:F7:0D:7C:B4:04:00 Authority key identifier: 10:9C:B7:1B:4F:64:16:6F:1D:DA:42:2C:EB:72:1E:E3:ED:19:67:98 Certificate issuer: /CN=A914C10B/serialNumber=109CB71B4F64166F1DDA422CEB721EE3ED196798 Certificate serial: 052D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft Manifest number: 0529 Signing time: Sun 05 May 2024 01:09:45 +0000 Manifest this update: Sun 05 May 2024 01:09:45 +0000 Manifest next update: Sun 12 May 2024 01:09:45 +0000 Files and hashes: 1: EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl (hash: 2pcCBfDPak9DsxJdmTjDBNlBCBV/Dt8gMQluvHbpCWg=) 2: CFBB0C48B28A11EBB4CE6E70C4F9AE02.roa (hash: /hN22pXefmAaJ7eqsgQoPWOe4RzJ8IU1SJr06tXv2cg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1325 (0x52d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C10B/serialNumber=109CB71B4F64166F1DDA422CEB721EE3ED196798 Validity Not Before: May 5 01:09:45 2024 GMT Not After : May 12 01:09:45 2024 GMT Subject: CN=6636dc59-1551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7c:b4:cd:5c:0e:03:7e:ce:3a:be:bf:c0:9a: ac:5a:bb:f1:61:98:27:c7:a7:94:a4:9c:a0:fb:82: ea:99:4f:a6:fc:66:be:91:28:eb:48:d9:b7:6a:a7: ba:f7:e7:8b:99:27:79:df:e7:71:92:2e:05:39:d1: 81:95:5a:f3:97:e0:03:e3:0f:0b:19:40:80:3a:08: b4:36:22:16:e6:8e:f1:ca:53:68:13:f4:02:b0:17: 3c:25:32:e7:32:ed:d2:ce:fa:71:48:00:66:50:25: 1e:bf:7e:3b:c1:3b:5e:df:5b:7d:e3:70:99:92:80: 6d:56:58:64:d9:e3:3d:a7:d8:1a:76:ef:20:68:54: 3d:16:18:89:ca:80:0b:89:aa:02:dc:3e:c4:52:03: 02:ff:48:b5:92:2f:d6:3e:64:3a:28:12:5f:72:dc: e7:1b:15:a3:7b:6d:40:cc:e5:87:d0:d5:92:9e:27: 90:36:98:b9:ff:50:c0:ef:c3:26:00:26:1b:17:7f: de:2d:5f:69:ab:76:66:2e:34:8c:41:33:11:d9:bf: 41:02:d9:f0:3d:05:04:5c:dc:87:87:37:3f:07:27: 3d:65:dc:f0:1b:e5:1a:e1:96:a8:ee:8c:8f:12:29: 42:2a:a3:1d:41:b7:26:cd:1c:13:ca:af:76:c3:50: 18:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:1E:4F:02:9A:16:AA:40:98:60:60:B3:97:B2:F7:0D:7C:B4:04:00 X509v3 Authority Key Identifier: keyid:10:9C:B7:1B:4F:64:16:6F:1D:DA:42:2C:EB:72:1E:E3:ED:19:67:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:b9:66:12:3a:6c:bc:36:0c:c5:1a:e2:50:d6:58:fb:a0:b7: 70:30:68:e4:3a:20:cb:ca:48:88:88:ad:5c:3f:0d:23:82:bd: 2f:c6:5b:a7:05:78:bd:24:c8:63:de:32:ea:7a:64:e0:52:8b: a8:38:5c:65:fb:7b:f4:6a:3f:d4:48:e6:5c:c9:65:88:87:d4: d6:08:20:e7:04:db:46:af:10:05:56:9b:fc:32:ef:a3:cd:d2: c6:e0:44:9b:c7:85:82:0d:4a:43:fc:6d:7f:7c:2f:87:35:a8: c8:4c:3a:74:ef:20:c1:e2:81:1d:72:2c:cc:da:39:16:0c:0e: 6f:ab:90:41:77:b3:f9:d5:65:3c:6b:b1:11:19:a2:65:e6:0b: d6:f2:f2:f0:fc:33:6a:2c:d7:c1:7d:9e:91:23:86:5c:31:7b: c5:f4:91:92:0d:22:eb:ba:c0:b1:87:08:af:8c:12:1a:80:80: 17:9d:f6:53:ca:24:07:ce:9e:a1:88:f5:81:87:c9:38:90:e7: a3:aa:37:c6:e5:eb:fc:b6:9f:3c:dd:c6:65:49:f9:d0:1b:83: 2e:91:48:bd:5c:b5:b7:d9:f4:b8:5e:eb:e8:26:bd:2f:63:10: 8e:e1:3d:7d:8e:ac:ca:c2:81:79:21:07:98:69:cd:2b:c4:ba: 11:23:83:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMxMEIxMTAvBgNVBAUTKDEwOUNCNzFCNEY2NDE2NkYxRERBNDIyQ0VCNzIxRUUz RUQxOTY3OTgwHhcNMjQwNTA1MDEwOTQ1WhcNMjQwNTEyMDEwOTQ1WjAYMRYwFAYD VQQDEw02NjM2ZGM1OS0xNTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtny0zVwOA37OOr6/wJqsWrvxYZgnx6eUpJyg+4LqmU+m/Ga+kSjrSNm3aqe6 9+eLmSd53+dxki4FOdGBlVrzl+AD4w8LGUCAOgi0NiIW5o7xylNoE/QCsBc8JTLn Mu3SzvpxSABmUCUev347wTte31t943CZkoBtVlhk2eM9p9gadu8gaFQ9FhiJyoAL iaoC3D7EUgMC/0i1ki/WPmQ6KBJfctznGxWje21AzOWH0NWSnieQNpi5/1DA78Mm ACYbF3/eLV9pq3ZmLjSMQTMR2b9BAtnwPQUEXNyHhzc/Byc9ZdzwG+Ua4Zao7oyP EilCKqMdQbcmzRwTyq92w1AYlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN4eTwKa FqpAmGBgs5ey9w18tAQAMB8GA1UdIwQYMBaAFBCctxtPZBZvHdpCLOtyHuPtGWeY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzEwQi83MjMxQzNEQUFG NjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9FSnkzRzA5a0ZtOGQya0lzNjNJZTQtMFpa NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VKeTNHMDlrRm04ZDJrSXM2M0llNC0wWlo1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzEwQi83MjMxQzNEQUFGNjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9FSnkzRzA5a0Zt OGQya0lzNjNJZTQtMFpaNWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxuWYSOmy8NgzFGuJQ1lj7oLdwMGjkOiDLykiIiK1cPw0jgr0vxlun BXi9JMhj3jLqemTgUouoOFxl+3v0aj/USOZcyWWIh9TWCCDnBNtGrxAFVpv8Mu+j zdLG4ESbx4WCDUpD/G1/fC+HNajITDp07yDB4oEdcizM2jkWDA5vq5BBd7P51WU8 a7ERGaJl5gvW8vLw/DNqLNfBfZ6RI4ZcMXvF9JGSDSLrusCxhwivjBIagIAXnfZT yiQHzp6hiPWBh8k4kOejqjfG5ev8tp883cZlSfnQG4MukUi9XLW32fS4XuvoJr0v YxCO4T19jqzKwoF5IQeYac0rxLoRI4O1 -----END CERTIFICATE-----Generated at Sun May 5 02:13:01 2024 by rpki-client on console-ams.rpki-client.org