$ rpki-client -vvf rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.mft File: e9PkPRNOUjXpdgPOi6lIa2KpseY.mft (raw, json) Hash identifier: /DweqERlvQ0gMjs97hUdc4zmr5XYqx2SULXHuWv5QQY= Subject key identifier: 8A:A9:53:3D:B7:E9:81:1A:11:75:BC:02:65:89:2A:D7:D2:67:20:71 Authority key identifier: 7B:D3:E4:3D:13:4E:52:35:E9:76:03:CE:8B:A9:48:6B:62:A9:B1:E6 Certificate issuer: /CN=A915C631/serialNumber=7BD3E43D134E5235E97603CE8BA9486B62A9B1E6 Certificate serial: 025B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9PkPRNOUjXpdgPOi6lIa2KpseY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.mft Manifest number: 024B Signing time: Fri 03 May 2024 04:08:18 +0000 Manifest this update: Fri 03 May 2024 04:08:18 +0000 Manifest next update: Fri 10 May 2024 04:08:17 +0000 Files and hashes: 1: e9PkPRNOUjXpdgPOi6lIa2KpseY.crl (hash: UOIRjqomBnb9pSesPhzz9MvNlcOen5c04DLacBs8nyA=) 2: 63F05DE02F1D11EDA3E29B09C4F9AE02.roa (hash: agvFHbWRNeaxotO+lELOx4J3OTYqWk/z5EMkXu7NM4E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.crl rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9PkPRNOUjXpdgPOi6lIa2KpseY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 603 (0x25b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C631/serialNumber=7BD3E43D134E5235E97603CE8BA9486B62A9B1E6 Validity Not Before: May 3 04:08:18 2024 GMT Not After : May 10 04:08:17 2024 GMT Subject: CN=66346332-011f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f9:a6:29:1d:22:f3:d7:1c:f4:80:1d:07:d8: f7:c8:11:73:00:fb:69:8a:80:21:86:e2:f2:b3:46: 3e:af:48:52:96:e8:a1:f5:b3:69:8f:b0:ea:86:8e: 17:1a:f4:c2:72:ec:f4:b3:75:99:5a:7b:1b:18:d5: 9d:a5:26:8e:3a:e6:9d:04:03:7f:af:f6:dc:0a:2f: 68:62:99:73:27:f8:86:78:c9:eb:2c:a7:e5:a5:41: 21:2e:e2:35:a6:7d:76:52:9f:03:de:fa:94:09:39: 3e:35:b1:50:24:c6:94:e8:ae:46:8a:fe:7f:5c:47: 9b:6f:ad:b0:04:4a:25:52:47:9a:41:c7:ad:b8:be: 25:1b:1b:b3:eb:fa:9c:4f:20:15:f3:fa:f2:eb:89: 4e:0c:c3:12:1b:53:d3:99:06:3a:94:4a:c9:c5:ac: 82:c8:30:94:1e:a0:ab:54:82:de:dc:8f:b9:f7:e7: fb:ae:fe:18:c4:fb:bf:37:5f:1f:25:d4:fc:8c:59: 9d:26:5b:8f:99:21:4d:d2:33:e8:d2:1a:c7:a1:a2: 61:82:76:6a:37:2a:3a:b5:2d:e2:c7:b0:b8:93:af: ff:6c:47:66:1d:a0:6d:2c:a4:31:43:9a:2e:93:60: 69:03:15:30:a7:0e:bb:9d:cf:64:f9:22:23:f1:1c: f2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A9:53:3D:B7:E9:81:1A:11:75:BC:02:65:89:2A:D7:D2:67:20:71 X509v3 Authority Key Identifier: keyid:7B:D3:E4:3D:13:4E:52:35:E9:76:03:CE:8B:A9:48:6B:62:A9:B1:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9PkPRNOUjXpdgPOi6lIa2KpseY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:8f:50:11:47:91:3c:50:f0:e0:41:27:a3:1b:6c:50:ae:49: 23:c3:4d:10:bc:01:80:fd:33:d1:de:40:65:b7:b0:ab:d8:9e: 2d:61:f0:78:78:ab:7e:aa:d3:99:a0:c0:d6:47:0f:c6:33:44: ce:51:ee:34:8b:43:f8:10:e2:ee:f1:77:91:f0:71:fa:87:dc: 9c:e3:bf:69:75:02:c8:cf:d5:f7:26:25:62:9f:53:7e:87:b8: df:c7:62:ea:f3:43:53:2c:da:61:fe:ad:07:28:3e:b1:63:cc: 47:6b:fa:18:1c:44:16:38:74:a7:d6:bf:d2:45:ab:b7:fb:ad: 1a:fd:d4:fb:f0:c1:a4:68:20:0b:0d:47:66:fc:2b:5b:2b:36: 2e:e1:6c:1b:64:a6:df:37:c9:64:64:30:0f:32:b0:e9:08:90: 22:ff:bc:83:11:64:90:4f:cb:0e:3c:13:ff:8f:fa:19:7c:3c: bf:27:a8:03:8d:e7:f6:69:3e:c7:6f:ae:96:39:4d:b8:b3:d4: af:8f:20:84:d2:43:d7:64:06:65:ea:92:3a:f0:73:d3:61:35: 98:6a:80:a8:8e:25:8f:72:58:86:cf:f9:91:2a:11:f8:20:e4: e1:b6:c0:45:43:04:b9:6e:f7:79:37:1d:ab:34:d9:a6:c2:01: 87:0b:24:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM2MzExMTAvBgNVBAUTKDdCRDNFNDNEMTM0RTUyMzVFOTc2MDNDRThCQTk0ODZC NjJBOUIxRTYwHhcNMjQwNTAzMDQwODE4WhcNMjQwNTEwMDQwODE3WjAYMRYwFAYD VQQDEw02NjM0NjMzMi0wMTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0fmmKR0i89cc9IAdB9j3yBFzAPtpioAhhuLys0Y+r0hSluih9bNpj7Dqho4X GvTCcuz0s3WZWnsbGNWdpSaOOuadBAN/r/bcCi9oYplzJ/iGeMnrLKflpUEhLuI1 pn12Up8D3vqUCTk+NbFQJMaU6K5Giv5/XEebb62wBEolUkeaQcetuL4lGxuz6/qc TyAV8/ry64lODMMSG1PTmQY6lErJxayCyDCUHqCrVILe3I+59+f7rv4YxPu/N18f JdT8jFmdJluPmSFN0jPo0hrHoaJhgnZqNyo6tS3ix7C4k6//bEdmHaBtLKQxQ5ou k2BpAxUwpw67nc9k+SIj8RzyAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIqpUz23 6YEaEXW8AmWJKtfSZyBxMB8GA1UdIwQYMBaAFHvT5D0TTlI16XYDzoupSGtiqbHm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzYzMS8zOUU0RDdBOERD NzgxMUVDQTRFMzA2MTdDNEY5QUUwMi9lOVBrUFJOT1VqWHBkZ1BPaTZsSWEyS3Bz ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2U5UGtQUk5PVWpYcGRnUE9pNmxJYTJLcHNlWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzYzMS8zOUU0RDdBOERDNzgxMUVDQTRFMzA2MTdDNEY5QUUwMi9lOVBrUFJOT1Vq WHBkZ1BPaTZsSWEyS3BzZVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjj1ARR5E8UPDgQSejG2xQrkkjw00QvAGA/TPR3kBlt7Cr2J4tYfB4 eKt+qtOZoMDWRw/GM0TOUe40i0P4EOLu8XeR8HH6h9yc479pdQLIz9X3JiVin1N+ h7jfx2Lq80NTLNph/q0HKD6xY8xHa/oYHEQWOHSn1r/SRau3+60a/dT78MGkaCAL DUdm/CtbKzYu4WwbZKbfN8lkZDAPMrDpCJAi/7yDEWSQT8sOPBP/j/oZfDy/J6gD jef2aT7Hb66WOU24s9SvjyCE0kPXZAZl6pI68HPTYTWYaoCojiWPcliGz/mRKhH4 IOThtsBFQwS5bvd5Nx2rNNmmwgGHCyRs -----END CERTIFICATE-----Generated at Fri May 3 05:32:33 2024 by rpki-client on console-ams.rpki-client.org