$ rpki-client -vvf rpki.apnic.net/member_repository/A917D3A6/1A651EA2570711ECB7BDF334C4F9AE02/Efnbq5DK44NpHfn-wpeCo2cVXyc.mft File: Efnbq5DK44NpHfn-wpeCo2cVXyc.mft (raw, json) Hash identifier: SIh4QAww9HuhsDbs2DRV63Jen8s295mKfkiHWyhvtAk= Subject key identifier: 72:FC:BB:CA:D5:28:77:0E:6D:01:D0:E8:B3:EC:5E:DB:01:F3:BF:C2 Authority key identifier: 11:F9:DB:AB:90:CA:E3:83:69:1D:F9:FE:C2:97:82:A3:67:15:5F:27 Certificate issuer: /CN=A917D3A6/serialNumber=11F9DBAB90CAE383691DF9FEC29782A367155F27 Certificate serial: 0385 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Efnbq5DK44NpHfn-wpeCo2cVXyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D3A6/1A651EA2570711ECB7BDF334C4F9AE02/Efnbq5DK44NpHfn-wpeCo2cVXyc.mft Manifest number: 0382 Signing time: Tue 07 May 2024 02:40:53 +0000 Manifest this update: Tue 07 May 2024 02:40:53 +0000 Manifest next update: Tue 14 May 2024 02:40:53 +0000 Files and hashes: 1: Efnbq5DK44NpHfn-wpeCo2cVXyc.crl (hash: ALlXhiPr5GrIFbUzKyhxW90gxLq8prp5VnS88ypnAOw=) 2: 010C8118570A11ECB999F138C4F9AE02.roa (hash: waLHNR/b6f0hwEbPgraLtfs3S9dJvhG3CM5lZSWlk/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D3A6/1A651EA2570711ECB7BDF334C4F9AE02/Efnbq5DK44NpHfn-wpeCo2cVXyc.crl rsync://rpki.apnic.net/member_repository/A917D3A6/1A651EA2570711ECB7BDF334C4F9AE02/Efnbq5DK44NpHfn-wpeCo2cVXyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Efnbq5DK44NpHfn-wpeCo2cVXyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 02:30:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 901 (0x385) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D3A6/serialNumber=11F9DBAB90CAE383691DF9FEC29782A367155F27 Validity Not Before: May 7 02:40:53 2024 GMT Not After : May 14 02:40:53 2024 GMT Subject: CN=663994b5-be11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:56:65:77:0f:b3:1b:b5:53:2f:59:14:37:4f: 7a:e8:61:fa:6b:de:a8:07:6c:cb:74:e5:9e:8c:80: 2e:cd:f9:71:8d:af:b7:78:50:fd:53:b8:de:6d:74: 65:d7:d5:22:f4:e4:23:87:22:7e:22:e1:3d:4e:25: 5a:14:28:06:0c:93:47:21:a1:9b:27:fe:91:41:c7: aa:3b:a1:fb:26:34:6d:a4:51:1d:8e:1d:1e:fe:e1: 13:cd:13:fa:73:f4:d9:42:2a:28:15:1b:25:2c:2d: ff:e1:1f:97:76:3d:cd:c5:e6:49:e3:52:c1:9d:67: cd:a5:9c:b7:05:4f:b5:9b:56:27:18:55:2e:94:d8: 09:52:3c:5e:45:8d:ce:dc:a6:74:c7:c6:a6:f0:d1: 87:39:ab:ac:80:5d:bf:61:fa:01:5e:ae:e8:a7:d2: b9:5b:56:ae:0c:b7:af:e3:7d:2d:01:4a:12:84:a1: cf:ac:0c:99:0c:4b:fc:3a:b2:f4:0e:eb:bb:21:ba: 85:ca:b2:7e:b0:5a:1a:60:03:db:ec:39:c0:ec:6f: 16:2d:94:8c:a9:f6:45:e9:2a:2e:ed:d9:a2:6f:0a: ce:43:80:40:0f:7b:e3:c7:50:2a:20:72:f2:74:53: 6d:ec:f1:7e:5e:81:6a:30:39:7a:90:99:fb:47:d8: 74:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:FC:BB:CA:D5:28:77:0E:6D:01:D0:E8:B3:EC:5E:DB:01:F3:BF:C2 X509v3 Authority Key Identifier: keyid:11:F9:DB:AB:90:CA:E3:83:69:1D:F9:FE:C2:97:82:A3:67:15:5F:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D3A6/1A651EA2570711ECB7BDF334C4F9AE02/Efnbq5DK44NpHfn-wpeCo2cVXyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Efnbq5DK44NpHfn-wpeCo2cVXyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D3A6/1A651EA2570711ECB7BDF334C4F9AE02/Efnbq5DK44NpHfn-wpeCo2cVXyc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:28:21:e8:1d:16:a4:e1:84:a5:42:cd:84:75:d2:1c:3d:c7: 11:0d:84:eb:12:1c:99:fb:27:77:8b:97:78:55:9e:32:d6:9c: 5d:91:46:9d:2b:b8:44:b6:2b:09:45:5f:80:11:93:77:4b:01: 6c:ec:2e:a2:80:ef:5d:96:d5:97:09:8a:e0:6d:63:2c:c8:8d: 03:c3:fd:05:ae:6a:69:2c:d4:ca:31:4a:d0:2d:1a:68:b9:0e: ee:62:56:f7:24:6f:89:d0:8f:c0:f0:16:e1:65:eb:5c:cd:bc: dd:5f:cf:69:f0:6c:dc:d4:f7:0b:be:09:04:b8:e5:fa:23:9c: 13:17:4f:27:5f:24:56:f9:80:6e:0f:86:76:9e:08:56:91:d0: e9:95:eb:c5:57:86:c4:d4:af:cc:35:05:99:8c:ba:3f:2f:c7: d2:1e:ff:76:3e:e6:b7:39:1d:6c:04:11:b5:99:05:93:45:44: 73:31:26:72:b2:74:6c:23:4e:ef:7a:98:c1:2f:7d:02:ad:ce: 6c:5e:63:f2:12:e4:fc:b2:a8:7c:a3:a3:9a:ba:7e:da:10:32: b6:65:a4:ab:f6:4c:92:51:30:40:e9:66:52:ac:a2:2c:cc:ba: b3:65:3a:84:8c:58:e1:97:f9:6c:25:5c:18:95:77:ae:c1:57: 8e:0b:db:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0QzQTYxMTAvBgNVBAUTKDExRjlEQkFCOTBDQUUzODM2OTFERjlGRUMyOTc4MkEz NjcxNTVGMjcwHhcNMjQwNTA3MDI0MDUzWhcNMjQwNTE0MDI0MDUzWjAYMRYwFAYD VQQDEw02NjM5OTRiNS1iZTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2FZldw+zG7VTL1kUN0966GH6a96oB2zLdOWejIAuzflxja+3eFD9U7jebXRl 19Ui9OQjhyJ+IuE9TiVaFCgGDJNHIaGbJ/6RQceqO6H7JjRtpFEdjh0e/uETzRP6 c/TZQiooFRslLC3/4R+Xdj3NxeZJ41LBnWfNpZy3BU+1m1YnGFUulNgJUjxeRY3O 3KZ0x8am8NGHOausgF2/YfoBXq7op9K5W1auDLev430tAUoShKHPrAyZDEv8OrL0 Duu7IbqFyrJ+sFoaYAPb7DnA7G8WLZSMqfZF6Sou7dmibwrOQ4BAD3vjx1AqIHLy dFNt7PF+XoFqMDl6kJn7R9h00wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHL8u8rV KHcObQHQ6LPsXtsB87/CMB8GA1UdIwQYMBaAFBH526uQyuODaR35/sKXgqNnFV8n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDNBNi8xQTY1MUVBMjU3 MDcxMUVDQjdCREYzMzRDNEY5QUUwMi9FZm5icTVESzQ0TnBIZm4td3BlQ28yY1ZY eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VmbmJxNURLNDROcEhmbi13cGVDbzJjVlh5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDNBNi8xQTY1MUVBMjU3MDcxMUVDQjdCREYzMzRDNEY5QUUwMi9FZm5icTVESzQ0 TnBIZm4td3BlQ28yY1ZYeWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVKCHoHRak4YSlQs2EddIcPccRDYTrEhyZ+yd3i5d4VZ4y1pxdkUad K7hEtisJRV+AEZN3SwFs7C6igO9dltWXCYrgbWMsyI0Dw/0FrmppLNTKMUrQLRpo uQ7uYlb3JG+J0I/A8BbhZetczbzdX89p8Gzc1PcLvgkEuOX6I5wTF08nXyRW+YBu D4Z2nghWkdDplevFV4bE1K/MNQWZjLo/L8fSHv92Pua3OR1sBBG1mQWTRURzMSZy snRsI07vepjBL30Crc5sXmPyEuT8sqh8o6Oaun7aEDK2ZaSr9kySUTBA6WZSrKIs zLqzZTqEjFjhl/lsJVwYlXeuwVeOC9sJ -----END CERTIFICATE-----Generated at Tue May 7 03:12:20 2024 by rpki-client on console-fra.rpki-client.org