$ rpki-client -vvf rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft File: EjJ9_J6Ig827bG7us5JfLIwPfl4.mft (raw, json) Hash identifier: gRsitij2e44XVMjqnAsMqSOfa6lE86+esm675PPnJTY= Subject key identifier: 13:F0:6B:72:68:DE:73:BE:83:F5:C4:B0:4D:8F:35:B8:64:37:A7:02 Authority key identifier: 12:32:7D:FC:9E:88:83:CD:BB:6C:6E:EE:B3:92:5F:2C:8C:0F:7E:5E Certificate issuer: /CN=A91833FF/serialNumber=12327DFC9E8883CDBB6C6EEEB3925F2C8C0F7E5E Certificate serial: 1153 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EjJ9_J6Ig827bG7us5JfLIwPfl4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft Manifest number: 1148 Signing time: Fri 26 Apr 2024 17:48:46 +0000 Manifest this update: Fri 26 Apr 2024 17:48:46 +0000 Manifest next update: Fri 03 May 2024 17:48:46 +0000 Files and hashes: 1: EjJ9_J6Ig827bG7us5JfLIwPfl4.crl (hash: dG+xsWJb8mjS17OqKLNFUGdoIRGvXdwoQQbjL3re4AY=) 2: 659F6E188F2211E98AC7590DC4F9AE02.roa (hash: KUVlMOoR1giZV/OiHZN1blNC34ENUmYVcEirlrIHi/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.crl rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EjJ9_J6Ig827bG7us5JfLIwPfl4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 17:48:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4435 (0x1153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91833FF/serialNumber=12327DFC9E8883CDBB6C6EEEB3925F2C8C0F7E5E Validity Not Before: Apr 26 17:48:46 2024 GMT Not After : May 3 17:48:46 2024 GMT Subject: CN=662be8fe-f9a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b4:97:fe:ae:56:55:e1:cb:d9:3a:b8:d2:80: fa:4a:83:56:21:2a:be:70:76:0f:b8:3b:5e:d1:be: 7f:e8:4b:1a:e0:09:5c:fe:a0:d8:92:c6:fb:36:6a: 8b:d3:22:66:0d:9b:33:80:c9:f0:f3:ec:57:8b:28: 66:74:44:28:86:88:3f:6d:43:65:7c:3b:6a:00:f6: 2d:61:e7:6a:5a:0a:7c:88:6e:f3:5f:da:58:f9:f8: b5:a4:56:4c:07:08:c4:61:38:2a:74:f3:6d:46:e6: 0a:66:ef:db:3a:f4:9b:9e:09:89:55:10:5c:8b:eb: 69:7a:40:1f:16:88:2e:5e:66:8c:f7:e4:c9:09:ba: 81:1b:fe:76:98:c4:9c:4c:76:2f:5b:20:78:89:bd: 12:08:da:be:de:dc:d1:3a:8d:54:77:72:15:8e:86: 4e:4d:de:2a:f7:93:72:4c:d8:cb:d5:94:13:e3:6a: 09:3a:65:55:d9:b9:d7:b1:c4:6a:27:71:47:8c:e4: c6:35:74:e7:f8:8d:57:83:59:0b:31:db:f0:05:ca: e5:4e:8f:a3:47:40:7c:f4:9c:8b:73:9a:f8:08:80: 98:e1:86:33:7f:a4:25:ca:3a:ea:f6:89:c0:7e:78: 9e:55:e7:60:cf:ff:af:5a:ab:ab:fb:8d:87:17:04: a1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:F0:6B:72:68:DE:73:BE:83:F5:C4:B0:4D:8F:35:B8:64:37:A7:02 X509v3 Authority Key Identifier: keyid:12:32:7D:FC:9E:88:83:CD:BB:6C:6E:EE:B3:92:5F:2C:8C:0F:7E:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EjJ9_J6Ig827bG7us5JfLIwPfl4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:a7:6e:e5:c2:74:d3:f1:cf:ec:cc:d9:69:6e:fd:4f:e1:ec: 71:36:09:85:a1:85:13:0b:06:e1:bc:d7:33:88:26:b2:93:aa: 8d:15:08:dd:73:10:3d:e5:65:37:72:ec:01:bb:ec:17:16:d4: b1:a5:7a:31:1f:e0:df:9c:75:3a:cf:f9:c6:28:55:45:10:87: 21:87:70:c5:98:b0:5d:b0:34:a9:39:a9:3f:4b:85:1d:32:16: bc:33:30:e2:48:12:f9:ea:3e:5a:b4:f8:0c:ce:de:8c:94:60: 7b:d5:96:01:dd:92:18:d8:e8:6a:98:04:c6:9c:4e:37:53:20: 9f:8c:98:fd:7a:9e:bb:93:db:d1:69:f3:c8:30:46:16:e3:14: fc:2b:2a:b8:c1:01:6d:2a:70:72:1d:df:ae:ba:2e:aa:e4:ef: 4b:2c:8b:11:f0:54:d4:1c:94:07:b2:c4:61:ab:74:4c:bb:4b: 8a:ed:09:bc:55:16:e0:97:d2:4e:7b:05:bf:66:5a:95:7f:7a: 46:76:5c:05:6d:f8:b9:f2:e4:91:6a:19:aa:be:e0:b8:c1:64: bd:0e:49:0d:03:71:d6:09:5a:4c:8b:da:1e:a3:d8:a4:24:72: c7:46:8f:0d:83:a6:86:29:ec:4b:c7:aa:cc:3b:80:a5:6f:1e: 31:01:99:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODMzRkYxMTAvBgNVBAUTKDEyMzI3REZDOUU4ODgzQ0RCQjZDNkVFRUIzOTI1RjJD OEMwRjdFNUUwHhcNMjQwNDI2MTc0ODQ2WhcNMjQwNTAzMTc0ODQ2WjAYMRYwFAYD VQQDEw02NjJiZThmZS1mOWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA17SX/q5WVeHL2Tq40oD6SoNWISq+cHYPuDte0b5/6Esa4Alc/qDYksb7NmqL 0yJmDZszgMnw8+xXiyhmdEQohog/bUNlfDtqAPYtYedqWgp8iG7zX9pY+fi1pFZM BwjEYTgqdPNtRuYKZu/bOvSbngmJVRBci+tpekAfFoguXmaM9+TJCbqBG/52mMSc THYvWyB4ib0SCNq+3tzROo1Ud3IVjoZOTd4q95NyTNjL1ZQT42oJOmVV2bnXscRq J3FHjOTGNXTn+I1Xg1kLMdvwBcrlTo+jR0B89JyLc5r4CICY4YYzf6Qlyjrq9onA fnieVedgz/+vWqur+42HFwShlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBPwa3Jo 3nO+g/XEsE2PNbhkN6cCMB8GA1UdIwQYMBaAFBIyffyeiIPNu2xu7rOSXyyMD35e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzNGRi8xNEVGRTdFNEUw N0QxMUU4QTVGMEZCMzVDNEY5QUUwMi9Fako5X0o2SWc4MjdiRzd1czVKZkxJd1Bm bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VqSjlfSjZJZzgyN2JHN3VzNUpmTEl3UGZsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzNGRi8xNEVGRTdFNEUwN0QxMUU4QTVGMEZCMzVDNEY5QUUwMi9Fako5X0o2SWc4 MjdiRzd1czVKZkxJd1BmbDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGp27lwnTT8c/szNlpbv1P4exxNgmFoYUTCwbhvNcziCayk6qNFQjd cxA95WU3cuwBu+wXFtSxpXoxH+DfnHU6z/nGKFVFEIchh3DFmLBdsDSpOak/S4Ud Mha8MzDiSBL56j5atPgMzt6MlGB71ZYB3ZIY2OhqmATGnE43UyCfjJj9ep67k9vR afPIMEYW4xT8Kyq4wQFtKnByHd+uui6q5O9LLIsR8FTUHJQHssRhq3RMu0uK7Qm8 VRbgl9JOewW/ZlqVf3pGdlwFbfi58uSRahmqvuC4wWS9DkkNA3HWCVpMi9oeo9ik JHLHRo8Ng6aGKexLx6rMO4Clbx4xAZng -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:17 2024 by rpki-client on console-ams.rpki-client.org