$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft File: CgFEnq6g-yiFx_PFZO6TMac_P_k.mft (raw, json) Hash identifier: e3O3Fk2TqZQvPRVPTJD42lHMAxL5blcV5aqkrmYQhKs= Subject key identifier: BA:66:00:82:C3:4D:BE:99:29:A0:0D:A3:C1:9E:D2:6D:9F:11:F4:9A Authority key identifier: 0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9 Certificate issuer: /CN=A91567D5/serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9 Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft Manifest number: E8 Signing time: Tue 07 May 2024 05:55:43 +0000 Manifest this update: Tue 07 May 2024 05:55:42 +0000 Manifest next update: Tue 14 May 2024 05:55:42 +0000 Files and hashes: 1: CgFEnq6g-yiFx_PFZO6TMac_P_k.crl (hash: wFDxIqjsI3K3KfaVT6Fl7CUMAGVktEEwWPax9XDx1Os=) 2: 9E1B3044EFF611EEA7028633C4F9AE02.roa (hash: p104F6H4fv0309D1Y5ZFFdpPPi6wToz8E4FclT5Wnmg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 05:49:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91567D5/serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9 Validity Not Before: May 7 05:55:42 2024 GMT Not After : May 14 05:55:42 2024 GMT Subject: CN=6639c25f-11f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:06:40:19:4a:f9:a5:9d:9f:2f:88:c3:9e:cb: f4:60:94:09:89:cb:3b:7f:4e:63:74:e0:d5:98:dc: 4b:fc:d5:83:88:27:84:ae:28:86:36:0f:66:5a:41: 94:7c:b0:f9:1a:dc:97:6d:84:5d:63:59:91:ad:f5: d5:99:6f:fd:80:ab:1d:14:0d:bb:c3:ce:aa:69:c4: 1a:9f:a0:cb:92:93:54:40:53:8d:b7:5e:d1:b5:a0: 25:d4:87:a3:77:06:07:8e:61:b3:30:c1:16:24:fb: 7c:a0:f5:88:1d:b9:6a:81:5d:a5:df:58:ac:41:4d: fc:01:cc:e2:80:59:bc:e1:e5:dc:29:9a:01:38:f3: c4:3e:f9:53:7a:5e:d0:89:16:63:34:40:0b:da:0c: a1:51:e0:5a:1f:82:a4:9f:ac:89:a9:29:17:95:a7: 1a:c0:60:e7:8d:89:b6:9b:9b:41:53:7a:d2:f2:ee: bc:35:c2:eb:6c:77:39:b7:15:22:6d:25:58:2a:f0: 1d:a1:0b:8e:d6:ce:de:84:63:f5:26:20:d0:b3:b9: dc:4e:bd:ef:40:b8:e5:4d:1f:fc:06:39:ab:5f:39: 70:d2:d2:ec:0b:e5:c2:83:02:a5:95:76:f8:c8:01: 55:8e:2c:31:8f:2a:dd:37:a8:0a:1a:df:af:65:55: fd:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:66:00:82:C3:4D:BE:99:29:A0:0D:A3:C1:9E:D2:6D:9F:11:F4:9A X509v3 Authority Key Identifier: keyid:0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:ed:a4:ca:9c:25:d4:a8:42:6b:e8:42:73:a4:2f:6a:84:32: c6:a9:62:29:07:93:ef:a0:aa:af:98:7b:b1:42:64:e1:1a:f9: bb:1d:bd:d6:65:0c:74:5b:4b:c2:a6:44:f4:ea:ec:02:79:52: 26:69:e9:61:a6:de:a5:7e:37:f8:04:10:c7:62:25:8d:59:97: fe:c8:26:c8:7c:0b:a7:13:ee:c4:95:d2:25:ba:b4:c5:02:bc: 68:b9:93:63:7e:13:44:68:22:bb:c5:63:92:76:5a:8d:c2:83: 00:82:16:db:8b:48:12:25:15:94:e0:df:98:1a:7a:86:8e:e3: 83:cf:94:f3:7b:85:24:4b:1d:22:d0:a9:40:a3:f9:6f:4a:ed: fd:58:8a:51:0a:f6:a8:da:88:55:55:39:cb:69:cd:31:d3:b7: cd:fb:01:69:7b:4b:76:db:76:b2:6e:9c:fb:7f:fa:12:19:2b: 66:1b:23:38:4b:9b:9f:67:53:e4:6b:1d:37:7a:21:da:d7:74: 66:85:34:b7:f0:5a:6b:24:cb:c7:c5:aa:99:40:1c:cc:78:66: 2a:82:bb:f8:0f:31:ba:69:45:2b:bb:df:12:f2:12:16:37:02: 58:86:b2:a0:e2:23:06:c5:1b:5d:b2:db:74:bf:d1:21:67:7c: a0:8b:4f:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3RDUxMTAvBgNVBAUTKDBBMDE0NDlFQUVBMEZCMjg4NUM3RjNDNTY0RUU5MzMx QTczRjNGRjkwHhcNMjQwNTA3MDU1NTQyWhcNMjQwNTE0MDU1NTQyWjAYMRYwFAYD VQQDEw02NjM5YzI1Zi0xMWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4AZAGUr5pZ2fL4jDnsv0YJQJics7f05jdODVmNxL/NWDiCeEriiGNg9mWkGU fLD5GtyXbYRdY1mRrfXVmW/9gKsdFA27w86qacQan6DLkpNUQFONt17RtaAl1Iej dwYHjmGzMMEWJPt8oPWIHblqgV2l31isQU38AczigFm84eXcKZoBOPPEPvlTel7Q iRZjNEAL2gyhUeBaH4Kkn6yJqSkXlacawGDnjYm2m5tBU3rS8u68NcLrbHc5txUi bSVYKvAdoQuO1s7ehGP1JiDQs7ncTr3vQLjlTR/8BjmrXzlw0tLsC+XCgwKllXb4 yAFVjiwxjyrdN6gKGt+vZVX96QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLpmAILD Tb6ZKaANo8Ge0m2fEfSaMB8GA1UdIwQYMBaAFAoBRJ6uoPsohcfzxWTukzGnPz/5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjdENS9ERUZDQTQ1MkI0 MUIxMUVEQjZDOERENjdDNEY5QUUwMi9DZ0ZFbnE2Zy15aUZ4X1BGWk82VE1hY19Q X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NnRkVucTZnLXlpRnhfUEZaTzZUTWFjX1Bfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjdENS9ERUZDQTQ1MkI0MUIxMUVEQjZDOERENjdDNEY5QUUwMi9DZ0ZFbnE2Zy15 aUZ4X1BGWk82VE1hY19QX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd7aTKnCXUqEJr6EJzpC9qhDLGqWIpB5PvoKqvmHuxQmThGvm7Hb3W ZQx0W0vCpkT06uwCeVImaelhpt6lfjf4BBDHYiWNWZf+yCbIfAunE+7EldIlurTF ArxouZNjfhNEaCK7xWOSdlqNwoMAghbbi0gSJRWU4N+YGnqGjuODz5Tze4UkSx0i 0KlAo/lvSu39WIpRCvao2ohVVTnLac0x07fN+wFpe0t223aybpz7f/oSGStmGyM4 S5ufZ1Pkax03eiHa13RmhTS38FprJMvHxaqZQBzMeGYqgrv4DzG6aUUru98S8hIW NwJYhrKg4iMGxRtdstt0v9EhZ3ygi0+4 -----END CERTIFICATE-----Generated at Tue May 7 06:29:47 2024 by rpki-client on console-ams.rpki-client.org