$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft File: eX36GIOfh9ExDpypw0EKvraDnnQ.mft (raw, json) Hash identifier: DMSI+QFZ9V45Yf4bYTyEmdtENAtWlV2vMCYofNrR1Do= Subject key identifier: EF:E6:26:6D:EA:B8:9E:FA:62:B7:4A:D8:C3:AC:D1:FC:90:D7:AD:5E Authority key identifier: 79:7D:FA:18:83:9F:87:D1:31:0E:9C:A9:C3:41:0A:BE:B6:83:9E:74 Certificate issuer: /CN=A9167F52/serialNumber=797DFA18839F87D1310E9CA9C3410ABEB6839E74 Certificate serial: 0355 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft Manifest number: 0352 Signing time: Sat 27 Apr 2024 02:50:28 +0000 Manifest this update: Sat 27 Apr 2024 02:50:27 +0000 Manifest next update: Sat 04 May 2024 02:50:27 +0000 Files and hashes: 1: eX36GIOfh9ExDpypw0EKvraDnnQ.crl (hash: vc9pGBRxjfQnrPArVSRSLoxKwncVsAk0cdyhJHqFHXY=) 2: ED6CA80868B211EC9974F51FC4F9AE02.roa (hash: XSLjjtzIZHDGpae35gBpg6eAc1XRpZRiaQr9/QxHoFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.crl rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 02:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 853 (0x355) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F52/serialNumber=797DFA18839F87D1310E9CA9C3410ABEB6839E74 Validity Not Before: Apr 27 02:50:27 2024 GMT Not After : May 4 02:50:27 2024 GMT Subject: CN=662c67f4-7c17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:79:0a:1b:73:0b:29:64:75:5c:5d:90:a7:db: 08:b1:b9:4c:74:fa:e9:f6:e5:00:42:6d:35:ec:9b: 51:b2:b2:95:f4:fe:b4:f4:1f:da:24:14:9e:b7:74: 76:bb:90:9e:e4:26:f5:e9:11:6f:0e:72:5e:1a:a3: 6e:9e:7a:51:24:b9:09:63:c8:e8:fe:53:85:b6:e7: 29:f5:b5:7f:60:78:55:15:2e:a6:3a:c1:bc:07:a8: 19:5a:fb:9e:9b:4b:b2:55:ad:eb:82:ed:ab:88:37: fe:80:9f:35:03:97:bb:43:f7:ba:1c:5d:3d:0c:32: 8a:8a:05:00:cc:ec:d2:63:10:95:78:22:a2:8b:91: 3e:dc:e3:b9:f6:a4:0e:8f:f9:7b:76:40:03:b9:39: 3b:f8:e7:52:c2:27:95:4c:3b:4a:3e:7f:dd:f1:9c: e1:8a:f5:d0:bf:d5:cc:ad:de:66:4a:67:59:06:a2: bb:7a:8f:21:2a:6b:ed:a2:ac:57:76:d2:4c:70:da: ca:c6:60:72:7c:07:07:9b:9d:e9:92:f5:1f:05:69: 50:5e:56:8b:24:b3:cb:ca:44:61:2b:7e:17:45:64: 06:ac:91:a5:75:67:d5:c7:1d:fb:79:9c:df:31:b8: b6:04:ed:9c:99:6a:de:78:44:e3:1f:a1:d5:8b:54: cc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:E6:26:6D:EA:B8:9E:FA:62:B7:4A:D8:C3:AC:D1:FC:90:D7:AD:5E X509v3 Authority Key Identifier: keyid:79:7D:FA:18:83:9F:87:D1:31:0E:9C:A9:C3:41:0A:BE:B6:83:9E:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:7a:0c:7a:70:e8:82:02:eb:c3:f2:d6:b5:54:47:cb:88:09: 80:a0:bd:88:c5:f2:1d:17:97:f3:d5:3c:9d:45:9a:09:30:a6: a0:bc:03:a0:d9:eb:57:f6:ab:91:1d:1e:f0:2f:67:a6:db:e5: 80:bf:97:de:0a:af:86:37:a6:ca:be:83:7f:26:ba:5a:58:e2: 63:58:36:bc:9c:bb:f1:f7:20:df:b3:ab:e7:9e:12:c2:f1:14: 22:29:5a:9c:57:1c:61:2c:36:ca:18:57:ff:78:7a:5f:1d:ed: 8a:5c:d9:a9:64:c3:c2:ed:8f:7e:05:e6:a1:34:af:1c:32:dc: 08:90:7d:17:b1:e9:e1:fc:0b:32:1d:60:cc:21:e0:fd:f7:e4: f4:03:eb:dc:b9:02:3f:de:ec:2b:65:78:3d:f7:44:76:a4:95: f1:9c:c2:d0:56:9b:40:6c:9a:72:c1:9b:dc:36:b8:af:d9:32: b9:24:fe:37:6e:fd:d0:d6:c9:80:3c:dc:71:c6:87:b0:81:ac: 0d:75:e6:2a:49:66:93:f0:32:70:e1:e9:db:c3:78:b5:21:47: dc:3f:48:75:da:c8:38:05:6f:34:4d:58:6b:e1:2b:9f:41:71: ed:60:fc:a8:79:ea:45:fe:aa:3d:1f:ec:3a:b6:0e:28:d5:08: 0e:5e:2f:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGNTIxMTAvBgNVBAUTKDc5N0RGQTE4ODM5Rjg3RDEzMTBFOUNBOUMzNDEwQUJF QjY4MzlFNzQwHhcNMjQwNDI3MDI1MDI3WhcNMjQwNTA0MDI1MDI3WjAYMRYwFAYD VQQDEw02NjJjNjdmNC03YzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6nkKG3MLKWR1XF2Qp9sIsblMdPrp9uUAQm017JtRsrKV9P609B/aJBSet3R2 u5Ce5Cb16RFvDnJeGqNunnpRJLkJY8jo/lOFtucp9bV/YHhVFS6mOsG8B6gZWvue m0uyVa3rgu2riDf+gJ81A5e7Q/e6HF09DDKKigUAzOzSYxCVeCKii5E+3OO59qQO j/l7dkADuTk7+OdSwieVTDtKPn/d8ZzhivXQv9XMrd5mSmdZBqK7eo8hKmvtoqxX dtJMcNrKxmByfAcHm53pkvUfBWlQXlaLJLPLykRhK34XRWQGrJGldWfVxx37eZzf Mbi2BO2cmWreeETjH6HVi1TMOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO/mJm3q uJ76YrdK2MOs0fyQ161eMB8GA1UdIwQYMBaAFHl9+hiDn4fRMQ6cqcNBCr62g550 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0Y1Mi9FOTQ2NjZDQzY4 QUYxMUVDQURENkI1NkZDNEY5QUUwMi9lWDM2R0lPZmg5RXhEcHlwdzBFS3ZyYURu blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VYMzZHSU9maDlFeERweXB3MEVLdnJhRG5uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0Y1Mi9FOTQ2NjZDQzY4QUYxMUVDQURENkI1NkZDNEY5QUUwMi9lWDM2R0lPZmg5 RXhEcHlwdzBFS3ZyYURublEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4egx6cOiCAuvD8ta1VEfLiAmAoL2IxfIdF5fz1TydRZoJMKagvAOg 2etX9quRHR7wL2em2+WAv5feCq+GN6bKvoN/JrpaWOJjWDa8nLvx9yDfs6vnnhLC 8RQiKVqcVxxhLDbKGFf/eHpfHe2KXNmpZMPC7Y9+BeahNK8cMtwIkH0Xsenh/Asy HWDMIeD99+T0A+vcuQI/3uwrZXg990R2pJXxnMLQVptAbJpywZvcNriv2TK5JP43 bv3Q1smAPNxxxoewgawNdeYqSWaT8DJw4enbw3i1IUfcP0h12sg4BW80TVhr4Suf QXHtYPyoeepF/qo9H+w6tg4o1QgOXi93 -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:04 2024 by rpki-client on console-ams.rpki-client.org