$ rpki-client -vvf rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft File: E3NT0OjBRaWAywC8MiIInEBIrlE.mft (raw, json) Hash identifier: xMRV7FV9XKclFwIkYQWuw6AwEptnAY3NjyTQGOhrn8Y= Subject key identifier: AC:53:C3:31:B0:69:16:8A:E4:1C:D4:69:4D:2B:35:4F:5E:8A:59:33 Authority key identifier: 13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51 Certificate issuer: /CN=A9153490/serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft Manifest number: 2F Signing time: Fri 17 May 2024 08:34:20 +0000 Manifest this update: Fri 17 May 2024 08:34:19 +0000 Manifest next update: Fri 24 May 2024 08:34:19 +0000 Files and hashes: 1: E3NT0OjBRaWAywC8MiIInEBIrlE.crl (hash: DHEgdrNmIS20sHPh2PTMZEL+tupiFxUI3y+csOv/Vic=) 2: 0FE13C92EBB411EE9D86095BC4F9AE02.roa (hash: Urnbb3WwZrA7rnMnP0+t9Rx88lYq3mJh+CKBhIzde4E=) 3: 1040CDC4EBB411EE9D86095BC4F9AE02.roa (hash: HX1UJ6Z1gWtshlGvKrZML4BzjT3RV1AiLypvinMfc/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153490/serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51 Validity Not Before: May 17 08:34:19 2024 GMT Not After : May 24 08:34:19 2024 GMT Subject: CN=6647168c-3670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b7:65:8c:1b:61:18:f6:13:98:99:a3:af:5b: c0:a4:5e:b5:65:58:49:fb:c4:82:a2:80:3f:c0:53: d4:ba:95:23:76:1a:ad:42:8f:40:24:58:08:38:62: 4d:fd:14:cf:90:46:7a:9c:da:54:fd:60:38:01:56: 42:70:ea:55:04:0c:d9:c6:c9:b7:ff:0e:1f:eb:8f: bc:eb:c3:cb:4d:03:e8:c1:39:82:50:30:8d:a3:53: 9f:08:aa:94:b3:d8:f5:b8:68:4f:b4:fe:8d:e4:84: b3:3d:58:70:f1:cb:8c:91:f5:82:fc:62:16:dd:47: 91:5f:0b:2e:af:0f:60:a1:b5:9c:38:45:9a:99:1a: 40:5c:29:ac:ba:97:54:ee:56:ec:02:e9:f7:84:a6: d5:e9:07:8f:32:6c:7a:2b:97:4a:6c:29:44:f6:00: 03:a2:7d:be:91:2d:d6:f5:b0:d9:e1:e6:ab:c3:a9: 2b:62:af:db:79:38:fc:04:d6:ba:ed:56:20:13:b1: f9:5e:4d:6e:4b:aa:8a:6b:d6:9c:77:40:15:6b:3c: 52:c3:fd:2e:3c:09:29:c0:92:61:ad:5d:f7:cc:d8: 7f:d2:97:45:66:6d:73:a0:91:88:98:e8:f5:4c:9e: 25:de:10:08:2e:24:3e:03:f5:47:b1:bc:cb:ab:2e: 23:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:53:C3:31:B0:69:16:8A:E4:1C:D4:69:4D:2B:35:4F:5E:8A:59:33 X509v3 Authority Key Identifier: keyid:13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:8e:54:8e:6a:54:74:89:f9:6a:95:e4:17:e1:44:05:d7:9a: 1d:3e:00:75:94:23:8f:fe:68:83:3e:35:17:2c:57:cb:2a:58: a4:fe:a2:af:36:ae:c9:5b:e8:36:e4:44:5e:8f:ee:38:b2:25: 9e:92:4d:fa:c6:4f:d9:52:3e:18:b1:32:28:97:f2:14:b4:84: 12:c8:c3:a6:7f:f8:1a:14:8f:cf:e6:88:66:21:e9:cb:00:3f: 3e:b8:b9:62:1f:5d:be:91:ac:69:75:d7:3e:1b:75:22:70:4f: a4:80:26:be:ef:49:24:c8:28:ee:75:ba:e0:e7:63:6a:b2:ca: f3:9c:78:a7:71:53:22:a9:9e:52:80:ae:bc:29:76:6e:79:aa: 96:8c:52:61:fc:b5:ef:8f:c3:4c:4c:5e:b1:b0:ef:a3:73:88: 83:85:39:8c:8e:e6:5c:4a:54:61:b3:e5:56:30:82:46:3f:c7: 35:9f:48:b2:b6:10:02:6c:9d:52:27:2f:a8:a1:0f:f9:73:fd: 39:d9:8b:9c:cb:1f:e4:8b:50:13:4b:1b:ab:bb:6c:27:88:55: 00:12:f8:66:37:60:82:9a:61:ae:cf:f6:26:a2:e8:b6:52:8c: f7:d9:b5:b3:d3:3b:2d:fd:fe:24:26:cb:c7:58:30:a1:e6:8e: ad:ab:d0:b1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MzQ5MDExMC8GA1UEBRMoMTM3MzUzRDBFOEMxNDVBNTgwQ0IwMEJDMzIyMjA4OUM0 MDQ4QUU1MTAeFw0yNDA1MTcwODM0MTlaFw0yNDA1MjQwODM0MTlaMBgxFjAUBgNV BAMTDTY2NDcxNjhjLTM2NzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGt2WMG2EY9hOYmaOvW8CkXrVlWEn7xIKigD/AU9S6lSN2Gq1Cj0AkWAg4Yk39 FM+QRnqc2lT9YDgBVkJw6lUEDNnGybf/Dh/rj7zrw8tNA+jBOYJQMI2jU58IqpSz 2PW4aE+0/o3khLM9WHDxy4yR9YL8YhbdR5FfCy6vD2ChtZw4RZqZGkBcKay6l1Tu VuwC6feEptXpB48ybHorl0psKUT2AAOifb6RLdb1sNnh5qvDqStir9t5OPwE1rrt ViATsfleTW5Lqopr1px3QBVrPFLD/S48CSnAkmGtXffM2H/Sl0VmbXOgkYiY6PVM niXeEAguJD4D9UexvMurLiNDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrFPDMbBp ForkHNRpTSs1T16KWTMwHwYDVR0jBBgwFoAUE3NT0OjBRaWAywC8MiIInEBIrlEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzNDkwLzk5MTk4RjEyRDA1 NDExRUVBRjc5OUYxNkM0RjlBRTAyL0UzTlQwT2pCUmFXQXl3QzhNaUlJbkVCSXJs RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRTNOVDBPakJSYVdBeXdDOE1pSUluRUJJcmxFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz NDkwLzk5MTk4RjEyRDA1NDExRUVBRjc5OUYxNkM0RjlBRTAyL0UzTlQwT2pCUmFX QXl3QzhNaUlJbkVCSXJsRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD6OVI5qVHSJ+WqV5BfhRAXXmh0+AHWUI4/+aIM+NRcsV8sqWKT+oq82 rslb6DbkRF6P7jiyJZ6STfrGT9lSPhixMiiX8hS0hBLIw6Z/+BoUj8/miGYh6csA Pz64uWIfXb6RrGl11z4bdSJwT6SAJr7vSSTIKO51uuDnY2qyyvOceKdxUyKpnlKA rrwpdm55qpaMUmH8te+Pw0xMXrGw76NziIOFOYyO5lxKVGGz5VYwgkY/xzWfSLK2 EAJsnVInL6ihD/lz/TnZi5zLH+SLUBNLG6u7bCeIVQAS+GY3YIKaYa7P9iai6LZS jPfZtbPTOy39/iQmy8dYMKHmjq2r0LE= -----END CERTIFICATE-----Generated at Fri May 17 10:59:10 2024 by rpki-client on console-ams.rpki-client.org