$ rpki-client -vvf rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/E3xUsCE1C4OHmX0BWUrINodrRGw.mft File: E3xUsCE1C4OHmX0BWUrINodrRGw.mft (raw, json) Hash identifier: B3HXsfW2TCbwSASs8bb7KEDtw+2r2PlbpNEqSCej2x4= Subject key identifier: 54:4E:3C:EF:B3:9D:21:71:D3:FE:CC:CC:C1:41:EE:56:CC:C2:C3:52 Authority key identifier: 13:7C:54:B0:21:35:0B:83:87:99:7D:01:59:4A:C8:36:87:6B:44:6C Certificate issuer: /CN=A9193235/serialNumber=137C54B021350B8387997D01594AC836876B446C Certificate serial: 0570 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3xUsCE1C4OHmX0BWUrINodrRGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/E3xUsCE1C4OHmX0BWUrINodrRGw.mft Manifest number: 05DC Signing time: Fri 07 Jun 2024 01:23:06 +0000 Manifest this update: Fri 07 Jun 2024 01:23:06 +0000 Manifest next update: Fri 14 Jun 2024 01:23:06 +0000 Files and hashes: 1: E3xUsCE1C4OHmX0BWUrINodrRGw.crl (hash: mndDa5/650BEiTsR55pSZhKX/uASh+oLWZZrGDymSHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/E3xUsCE1C4OHmX0BWUrINodrRGw.crl rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/E3xUsCE1C4OHmX0BWUrINodrRGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3xUsCE1C4OHmX0BWUrINodrRGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Jun 2024 01:23:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1392 (0x570) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193235/serialNumber=137C54B021350B8387997D01594AC836876B446C Validity Not Before: Jun 7 01:23:06 2024 GMT Not After : Jun 14 01:23:06 2024 GMT Subject: CN=666260fa-8322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:59:87:49:21:c7:45:c5:e1:66:55:5d:e1:b1: 9d:0a:7e:74:c4:b0:a4:e3:ec:a6:7e:d9:75:72:70: ec:b0:cd:c8:55:82:0a:98:72:a4:51:c3:8d:f0:2d: 77:0e:a7:37:c2:92:f8:b5:db:39:ed:5a:e1:26:ff: 75:a0:6e:e8:0d:9f:a1:c0:9b:fa:dc:ce:97:c5:98: ab:7d:f2:81:66:2d:9e:9a:98:4d:de:02:c7:0e:53: bd:95:fe:c6:d9:1f:a2:f9:bb:d7:cc:2d:69:61:5a: 0b:36:3e:e5:c5:74:22:05:e9:16:b0:01:9f:44:49: 04:47:c9:2d:40:7b:ed:09:2a:79:b0:d4:37:7f:b3: 64:b0:d8:39:9b:af:a2:05:ff:c4:a1:12:0c:cf:f3: fb:2f:67:12:6c:89:23:92:98:12:54:56:74:b9:1d: 3b:d0:81:6e:81:0f:8f:23:56:0b:45:df:1a:95:be: 43:73:e0:34:40:a5:7f:91:05:f7:d7:83:a1:cd:3e: 0c:86:5a:58:2a:b4:a0:fb:ec:5f:52:83:ff:c1:00: 95:4c:4b:e3:0e:84:a2:c4:d9:40:04:d5:fe:f1:5c: 77:05:b9:29:f4:91:5c:5c:a1:83:97:a5:cf:c1:7b: b3:4c:d7:b2:71:ca:b8:33:1f:25:fb:ba:2a:0b:ba: 92:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:4E:3C:EF:B3:9D:21:71:D3:FE:CC:CC:C1:41:EE:56:CC:C2:C3:52 X509v3 Authority Key Identifier: keyid:13:7C:54:B0:21:35:0B:83:87:99:7D:01:59:4A:C8:36:87:6B:44:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/E3xUsCE1C4OHmX0BWUrINodrRGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3xUsCE1C4OHmX0BWUrINodrRGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/E3xUsCE1C4OHmX0BWUrINodrRGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:4e:f3:75:83:f8:99:2d:45:b6:76:c1:33:82:a2:b6:5e:5f: 73:5f:8d:68:de:55:7d:5b:a7:a1:90:5c:ce:84:65:d9:63:45: 4c:31:cc:18:bb:ff:57:e8:a3:40:8c:ab:df:3d:66:4c:77:8e: c7:a1:33:e9:ec:59:d6:a1:1d:cf:7b:8b:e9:48:3f:85:74:77: 6b:c4:ed:68:a5:42:01:62:cc:05:ef:77:c1:a0:72:80:71:b7: 78:b9:47:20:b1:d2:b2:92:89:cc:33:57:b7:e0:8c:e1:54:f8: bd:cd:f3:44:99:18:39:d6:23:59:0a:98:0e:45:9f:9b:ee:6b: e8:c2:85:53:9f:87:fa:b0:d0:5d:91:53:fe:b2:55:16:e5:1d: e2:25:3c:6b:eb:48:e8:c9:85:74:fd:b6:2f:93:9c:73:9c:79: 3c:4f:d5:dc:bf:2c:b9:d7:77:6d:c3:f7:ba:b9:2e:8f:dd:85: 19:45:84:e8:c9:ef:20:91:d5:a5:9c:c6:44:a3:14:b4:3d:96: e4:6c:10:0a:ac:e3:15:eb:52:d7:4e:ce:0e:ce:33:48:cc:a9: f1:9e:ff:e3:71:c3:bc:a8:7d:d6:ca:e0:54:fa:47:06:50:2a: 07:fa:bf:a1:91:4b:e8:19:79:f6:94:e3:99:23:e2:bd:5d:4c: 4a:7a:8c:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMyMzUxMTAvBgNVBAUTKDEzN0M1NEIwMjEzNTBCODM4Nzk5N0QwMTU5NEFDODM2 ODc2QjQ0NkMwHhcNMjQwNjA3MDEyMzA2WhcNMjQwNjE0MDEyMzA2WjAYMRYwFAYD VQQDEw02NjYyNjBmYS04MzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl1mHSSHHRcXhZlVd4bGdCn50xLCk4+ymftl1cnDssM3IVYIKmHKkUcON8C13 Dqc3wpL4tds57VrhJv91oG7oDZ+hwJv63M6XxZirffKBZi2emphN3gLHDlO9lf7G 2R+i+bvXzC1pYVoLNj7lxXQiBekWsAGfREkER8ktQHvtCSp5sNQ3f7NksNg5m6+i Bf/EoRIMz/P7L2cSbIkjkpgSVFZ0uR070IFugQ+PI1YLRd8alb5Dc+A0QKV/kQX3 14OhzT4MhlpYKrSg++xfUoP/wQCVTEvjDoSixNlABNX+8Vx3Bbkp9JFcXKGDl6XP wXuzTNeyccq4Mx8l+7oqC7qS9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFROPO+z nSFx0/7MzMFB7lbMwsNSMB8GA1UdIwQYMBaAFBN8VLAhNQuDh5l9AVlKyDaHa0Rs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzIzNS9BNEZDM0I1QTlG QTAxMUVCODA0MkQ1MzdDNEY5QUUwMi9FM3hVc0NFMUM0T0htWDBCV1VySU5vZHJS R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UzeFVzQ0UxQzRPSG1YMEJXVXJJTm9kclJHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzIzNS9BNEZDM0I1QTlGQTAxMUVCODA0MkQ1MzdDNEY5QUUwMi9FM3hVc0NFMUM0 T0htWDBCV1VySU5vZHJSR3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiTvN1g/iZLUW2dsEzgqK2Xl9zX41o3lV9W6ehkFzOhGXZY0VMMcwY u/9X6KNAjKvfPWZMd47HoTPp7FnWoR3Pe4vpSD+FdHdrxO1opUIBYswF73fBoHKA cbd4uUcgsdKykonMM1e34IzhVPi9zfNEmRg51iNZCpgORZ+b7mvowoVTn4f6sNBd kVP+slUW5R3iJTxr60joyYV0/bYvk5xznHk8T9Xcvyy513dtw/e6uS6P3YUZRYTo ye8gkdWlnMZEoxS0PZbkbBAKrOMV61LXTs4OzjNIzKnxnv/jccO8qH3WyuBU+kcG UCoH+r+hkUvoGXn2lOOZI+K9XUxKeoxa -----END CERTIFICATE-----Generated at Fri Jun 7 03:19:07 2024 by rpki-client on console-ams.rpki-client.org