$ rpki-client -vvf rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft File: E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft (raw, json) Hash identifier: J5Ru660EESUHzk8tk/vf/sI2rge7o8RtJ/tjxAs55JU= Subject key identifier: 45:6D:C7:54:A7:1E:B4:6C:16:EB:F0:2C:4C:44:25:FF:CB:97:9A:26 Authority key identifier: 13:E1:89:9C:23:FE:B0:7F:E1:31:62:EB:10:3C:C3:C0:38:D7:08:24 Certificate issuer: /CN=A9192B60/serialNumber=13E1899C23FEB07FE13162EB103CC3C038D70824 Certificate serial: 01CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft Manifest number: 01C9 Signing time: Tue 21 May 2024 04:25:40 +0000 Manifest this update: Tue 21 May 2024 04:25:39 +0000 Manifest next update: Tue 28 May 2024 04:25:39 +0000 Files and hashes: 1: E-GJnCP-sH_hMWLrEDzDwDjXCCQ.crl (hash: W4VVdyllbRdOqvfBuqNEGtK97mbSx4V+UqosbkR9pA8=) 2: 2475821008E611EDA969EC24C4F9AE02.roa (hash: s/PFH4sFKBMsDOi1l2qBULkXK8psSYn1pjwjF5Izh9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.crl rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 May 2024 04:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 462 (0x1ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192B60/serialNumber=13E1899C23FEB07FE13162EB103CC3C038D70824 Validity Not Before: May 21 04:25:39 2024 GMT Not After : May 28 04:25:39 2024 GMT Subject: CN=664c2243-afc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7b:2b:4b:b7:db:5f:cc:1b:83:d8:d0:d3:0e: 71:61:84:7a:43:77:5d:b0:72:38:cf:cf:0f:ec:27: 2a:3a:71:e6:76:72:b0:84:31:4d:a4:06:2c:86:19: af:e0:5a:f4:e4:9b:61:cd:a5:46:02:89:2b:01:57: 78:6f:01:5c:bd:ba:26:90:66:91:1a:11:e8:53:51: a7:e6:62:0d:0f:f7:fc:66:64:b4:0e:93:a6:4b:7a: 18:e8:a0:dc:94:5e:38:46:75:ab:ed:69:e0:29:55: 4b:2d:2e:75:6d:29:60:6b:97:77:cb:09:7a:5b:f7: a5:84:34:0d:51:d4:3f:ca:1f:5c:78:2e:cd:bf:71: 10:1b:89:05:10:ba:ac:3f:a7:0e:16:06:f7:f6:be: 5d:26:a5:fd:a4:8f:07:c2:bb:1d:51:ee:6a:19:98: f8:88:7a:a5:98:18:cf:aa:d3:36:f4:1a:af:ba:6c: f6:9f:d6:44:75:12:99:f8:ee:83:bf:e1:38:95:1c: 97:ec:05:e0:9c:03:2c:ac:46:38:20:d4:ec:b6:e3: 44:44:48:f5:c9:fe:5f:d3:fe:f3:98:ce:8e:1e:94: 6e:98:ec:54:6b:2f:30:93:97:d9:5d:e4:6d:71:db: 63:fe:44:1f:72:3a:c3:fa:6d:5c:a8:b9:23:93:f7: 4b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:6D:C7:54:A7:1E:B4:6C:16:EB:F0:2C:4C:44:25:FF:CB:97:9A:26 X509v3 Authority Key Identifier: keyid:13:E1:89:9C:23:FE:B0:7F:E1:31:62:EB:10:3C:C3:C0:38:D7:08:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e1:cb:44:3a:16:96:e0:43:f7:49:39:c0:d8:fc:c5:f5:31:56: f1:cb:79:ff:88:cd:d5:d4:ff:0c:ce:29:70:70:25:43:c5:4d: 55:1e:76:17:1c:90:94:6d:46:ee:02:13:9e:38:ff:c7:10:e1: 2f:3e:d2:ba:72:ce:ff:7d:b7:6f:7a:d8:e0:7d:a1:32:9b:b5: 61:a7:94:8c:ab:a3:c7:a5:77:c3:8c:cf:0b:73:b4:cf:6f:58: 26:0b:f9:51:5c:39:2b:ac:ee:bb:2a:eb:ae:02:42:a3:8e:7e: 30:2f:7e:52:75:fd:cd:68:a1:06:7a:d1:d4:42:eb:f6:87:e2: 31:93:f7:82:66:83:a7:d9:1f:17:e5:4d:8b:19:63:5b:0e:4e: 3d:2e:4e:b2:57:38:df:81:6f:ee:60:d6:4b:d6:cb:be:c4:65: 03:99:3a:ad:a7:e1:f1:e4:20:f4:31:77:b4:8b:ad:7b:f7:ee: 20:3c:63:ea:0a:5e:a7:09:f8:c9:0f:da:0d:c9:32:71:90:a2: 6a:80:c0:76:f3:8c:95:a3:a3:54:10:3c:e4:18:69:a7:7c:fe: e3:08:61:ae:6c:48:9d:e2:a3:a7:68:74:07:55:59:fa:c1:4c: f2:c9:ba:6c:e0:43:f2:b9:80:ae:dd:fe:6c:fd:83:8f:7e:04: 6f:07:d1:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJCNjAxMTAvBgNVBAUTKDEzRTE4OTlDMjNGRUIwN0ZFMTMxNjJFQjEwM0NDM0Mw MzhENzA4MjQwHhcNMjQwNTIxMDQyNTM5WhcNMjQwNTI4MDQyNTM5WjAYMRYwFAYD VQQDEw02NjRjMjI0My1hZmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHsrS7fbX8wbg9jQ0w5xYYR6Q3ddsHI4z88P7CcqOnHmdnKwhDFNpAYshhmv 4Fr05JthzaVGAokrAVd4bwFcvbomkGaRGhHoU1Gn5mIND/f8ZmS0DpOmS3oY6KDc lF44RnWr7WngKVVLLS51bSlga5d3ywl6W/elhDQNUdQ/yh9ceC7Nv3EQG4kFELqs P6cOFgb39r5dJqX9pI8HwrsdUe5qGZj4iHqlmBjPqtM29Bqvumz2n9ZEdRKZ+O6D v+E4lRyX7AXgnAMsrEY4INTstuNEREj1yf5f0/7zmM6OHpRumOxUay8wk5fZXeRt cdtj/kQfcjrD+m1cqLkjk/dL6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVtx1Sn HrRsFuvwLExEJf/Ll5omMB8GA1UdIwQYMBaAFBPhiZwj/rB/4TFi6xA8w8A41wgk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkI2MC9CMzJGM0U3MjA4 RTMxMUVEODM2NDBDMjFDNEY5QUUwMi9FLUdKbkNQLXNIX2hNV0xyRUR6RHdEalhD Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UtR0puQ1Atc0hfaE1XTHJFRHpEd0RqWENDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkI2MC9CMzJGM0U3MjA4RTMxMUVEODM2NDBDMjFDNEY5QUUwMi9FLUdKbkNQLXNI X2hNV0xyRUR6RHdEalhDQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDhy0Q6FpbgQ/dJOcDY/MX1MVbxy3n/iM3V1P8MzilwcCVDxU1VHnYX HJCUbUbuAhOeOP/HEOEvPtK6cs7/fbdvetjgfaEym7Vhp5SMq6PHpXfDjM8Lc7TP b1gmC/lRXDkrrO67KuuuAkKjjn4wL35Sdf3NaKEGetHUQuv2h+Ixk/eCZoOn2R8X 5U2LGWNbDk49Lk6yVzjfgW/uYNZL1su+xGUDmTqtp+Hx5CD0MXe0i6179+4gPGPq Cl6nCfjJD9oNyTJxkKJqgMB284yVo6NUEDzkGGmnfP7jCGGubEid4qOnaHQHVVn6 wUzyybps4EPyuYCu3f5s/YOPfgRvB9Gb -----END CERTIFICATE-----Generated at Tue May 21 05:35:43 2024 by rpki-client on console-ams.rpki-client.org