$ rpki-client -vvf rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/e3dUqC3QY6R-jsNdFj72skSNEts.mft File: e3dUqC3QY6R-jsNdFj72skSNEts.mft (raw, json) Hash identifier: 05QKcNLqWIBrU9xg8hBNJArjSu3iaZfhp5YL7dJA+j8= Subject key identifier: C8:8A:D0:05:B1:80:17:75:A4:DA:FA:9C:C2:90:4C:53:94:21:65:42 Authority key identifier: 7B:77:54:A8:2D:D0:63:A4:7E:8E:C3:5D:16:3E:F6:B2:44:8D:12:DB Certificate issuer: /CN=A9189311/serialNumber=7B7754A82DD063A47E8EC35D163EF6B2448D12DB Certificate serial: 26C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3dUqC3QY6R-jsNdFj72skSNEts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/e3dUqC3QY6R-jsNdFj72skSNEts.mft Manifest number: 26B0 Signing time: Sat 04 May 2024 15:58:58 +0000 Manifest this update: Sat 04 May 2024 15:58:57 +0000 Manifest next update: Sat 11 May 2024 15:58:57 +0000 Files and hashes: 1: e3dUqC3QY6R-jsNdFj72skSNEts.crl (hash: RK6bXtiuH+GoZcPakq0Opd1ExFg5UeRitWgBjsyBXqU=) 2: F5BBEA5AF6A611E7B40C7427C4F9AE02.roa (hash: jZ94Uq8FHCXXnitnDn5/qXCMyoMAkxZffV3TIDmL9po=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/e3dUqC3QY6R-jsNdFj72skSNEts.crl rsync://rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/e3dUqC3QY6R-jsNdFj72skSNEts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3dUqC3QY6R-jsNdFj72skSNEts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 15:58:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9922 (0x26c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189311/serialNumber=7B7754A82DD063A47E8EC35D163EF6B2448D12DB Validity Not Before: May 4 15:58:57 2024 GMT Not After : May 11 15:58:57 2024 GMT Subject: CN=66365b42-aaf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4c:f8:9d:b6:4f:3e:1d:8a:aa:d3:f1:3b:0a: 4b:f5:41:5a:aa:e2:65:6e:0d:be:21:8f:d1:fa:d9: e7:ee:9d:12:28:13:1e:ad:80:ee:d9:07:91:9d:f5: a4:dd:21:07:bc:ce:39:cb:2b:79:bb:e3:79:73:81: 9b:a5:45:72:dd:08:78:63:71:9f:50:48:29:71:30: 4c:46:f2:8d:c3:79:6d:ce:f0:1f:f5:d8:72:64:97: 2e:60:18:93:2c:62:20:1f:a7:0a:7e:8b:d8:fc:5f: d4:c8:e9:a5:4f:5c:3e:4a:7a:9c:79:f9:32:e3:e7: af:65:90:9f:38:aa:bc:2c:0d:35:31:5a:9f:34:60: 75:11:7c:fd:45:e6:4b:1b:74:05:db:a3:a1:4b:2a: 5a:ec:b7:0b:26:86:50:87:bc:db:53:63:e6:e0:d4: 0e:27:9d:f9:a0:3b:16:d3:8d:7e:b3:a5:d9:a4:2f: fe:59:fd:e0:1d:07:e5:a9:db:a1:a7:69:29:f5:1e: 24:ea:7b:60:8a:81:12:59:8d:cc:40:f3:88:9b:05: 4a:3a:9a:00:93:46:46:ec:4c:83:ac:4e:0a:b7:2b: d3:83:50:96:0b:fb:be:a9:8e:76:a1:39:84:61:3c: f1:d2:c1:79:e7:00:c8:ba:e0:26:01:bd:cc:11:40: 52:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:8A:D0:05:B1:80:17:75:A4:DA:FA:9C:C2:90:4C:53:94:21:65:42 X509v3 Authority Key Identifier: keyid:7B:77:54:A8:2D:D0:63:A4:7E:8E:C3:5D:16:3E:F6:B2:44:8D:12:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/e3dUqC3QY6R-jsNdFj72skSNEts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3dUqC3QY6R-jsNdFj72skSNEts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/e3dUqC3QY6R-jsNdFj72skSNEts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:a3:b1:3d:ba:4c:22:e9:bf:05:f2:0d:b8:84:d6:1c:0b:f5: bd:2f:ab:0b:30:ed:64:b4:1f:69:2f:ef:be:46:f1:69:73:9e: 2f:2e:10:64:cd:84:c7:60:b7:e7:fd:eb:56:b9:25:53:6a:86: 6d:85:4a:33:d5:f7:f8:36:c8:3c:30:da:61:40:72:84:ae:5c: cd:16:6d:27:89:cc:62:a0:16:bd:3f:82:29:0d:67:13:f5:ed: 3e:72:14:b3:4c:6b:61:41:ad:76:3a:f6:6d:77:bf:34:1c:33: 15:7b:60:46:5c:ff:d7:64:dc:97:8c:2b:d9:4b:92:bb:c9:04: f5:be:2d:a7:48:23:d2:31:77:1f:18:a3:cc:e1:72:51:52:b4: 29:0b:9d:89:f3:52:d0:7c:c1:31:1f:4e:58:65:af:19:ed:d5: d3:6b:35:44:d4:65:d7:cd:0e:3f:1c:b4:39:7d:15:a2:2e:02: e2:cd:ee:a6:ca:f0:7c:cf:e5:59:c6:e4:3d:7e:65:53:a3:6a: bf:6d:53:5f:ca:65:24:5e:d2:66:0f:a4:78:59:d1:b5:c4:2d: 86:19:b9:3a:aa:08:a7:29:18:08:cb:0f:3c:93:c8:e8:b8:3b: 28:28:2c:de:8b:53:12:ec:9b:00:22:0a:ec:00:44:79:ac:22: d7:86:3b:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkzMTExMTAvBgNVBAUTKDdCNzc1NEE4MkREMDYzQTQ3RThFQzM1RDE2M0VGNkIy NDQ4RDEyREIwHhcNMjQwNTA0MTU1ODU3WhcNMjQwNTExMTU1ODU3WjAYMRYwFAYD VQQDEw02NjM2NWI0Mi1hYWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsUz4nbZPPh2KqtPxOwpL9UFaquJlbg2+IY/R+tnn7p0SKBMerYDu2QeRnfWk 3SEHvM45yyt5u+N5c4GbpUVy3Qh4Y3GfUEgpcTBMRvKNw3ltzvAf9dhyZJcuYBiT LGIgH6cKfovY/F/UyOmlT1w+Snqcefky4+evZZCfOKq8LA01MVqfNGB1EXz9ReZL G3QF26OhSypa7LcLJoZQh7zbU2Pm4NQOJ535oDsW041+s6XZpC/+Wf3gHQflqduh p2kp9R4k6ntgioESWY3MQPOImwVKOpoAk0ZG7EyDrE4KtyvTg1CWC/u+qY52oTmE YTzx0sF55wDIuuAmAb3MEUBSHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMiK0AWx gBd1pNr6nMKQTFOUIWVCMB8GA1UdIwQYMBaAFHt3VKgt0GOkfo7DXRY+9rJEjRLb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTMxMS8xM0FGRjZGNkIy NEQxMUU0QjY3RjE4NUZDNEY5QUUwMi9lM2RVcUMzUVk2Ui1qc05kRmo3MnNrU05F dHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UzZFVxQzNRWTZSLWpzTmRGajcyc2tTTkV0cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTMxMS8xM0FGRjZGNkIyNEQxMUU0QjY3RjE4NUZDNEY5QUUwMi9lM2RVcUMzUVk2 Ui1qc05kRmo3MnNrU05FdHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBro7E9ukwi6b8F8g24hNYcC/W9L6sLMO1ktB9pL+++RvFpc54vLhBk zYTHYLfn/etWuSVTaoZthUoz1ff4Nsg8MNphQHKErlzNFm0nicxioBa9P4IpDWcT 9e0+chSzTGthQa12OvZtd780HDMVe2BGXP/XZNyXjCvZS5K7yQT1vi2nSCPSMXcf GKPM4XJRUrQpC52J81LQfMExH05YZa8Z7dXTazVE1GXXzQ4/HLQ5fRWiLgLize6m yvB8z+VZxuQ9fmVTo2q/bVNfymUkXtJmD6R4WdG1xC2GGbk6qginKRgIyw88k8jo uDsoKCzei1MS7JsAIgrsAER5rCLXhjtD -----END CERTIFICATE-----Generated at Sat May 4 16:48:41 2024 by rpki-client on console-ams.rpki-client.org