$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft File: E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft (raw, json) Hash identifier: Pv1NX8j78Ci3A5LrM7FA7aBRB+dgz+huOpwY/EF8GpU= Subject key identifier: C1:45:34:C3:AF:81:4D:2D:F7:58:AC:59:81:61:73:10:88:5E:D4:34 Authority key identifier: 13:D6:4D:5D:8F:B7:B1:CF:89:38:77:01:1B:80:CF:40:16:F6:16:38 Certificate issuer: /CN=A91A8CB9/serialNumber=13D64D5D8FB7B1CF893877011B80CF4016F61638 Certificate serial: 04A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft Manifest number: 049C Signing time: Tue 07 May 2024 01:35:01 +0000 Manifest this update: Tue 07 May 2024 01:35:01 +0000 Manifest next update: Tue 14 May 2024 01:35:01 +0000 Files and hashes: 1: E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.crl (hash: 3mSnpgcbIMw8aXn7fmA1k+gsfVYV/qjS9FovdNdebK8=) 2: BC009860E65811EBA233DC2DC4F9AE02.roa (hash: CRLW/v275CUlaeWr5oEQBrUTv3O40NRfAD7Vi/IYlCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.crl rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 01:35:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1184 (0x4a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8CB9/serialNumber=13D64D5D8FB7B1CF893877011B80CF4016F61638 Validity Not Before: May 7 01:35:01 2024 GMT Not After : May 14 01:35:01 2024 GMT Subject: CN=66398545-2da7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:26:0c:0d:c2:1a:d1:77:99:39:b5:03:00:83: c6:14:ac:66:a9:64:b2:b1:e1:fb:43:de:8f:8e:e9: 03:a5:e2:33:c0:f1:fb:00:ff:5e:33:ff:36:4c:b0: ae:b9:dd:bc:fd:71:2f:93:5b:e5:e8:26:98:99:f1: 35:da:f3:d4:ad:7c:a0:6a:c5:27:95:9a:f8:4e:19: 2f:57:5e:5c:b1:39:94:5d:71:75:57:ef:f6:4b:d5: ae:ff:73:c0:2c:04:e0:ed:29:48:98:7a:0c:5a:d8: 05:3c:54:ac:67:9e:b3:a4:0d:d0:80:d3:01:fd:34: 5f:44:5d:9b:90:c6:03:4d:21:0c:42:bf:5b:41:1f: 10:8f:00:34:ba:ad:81:f7:cf:3d:df:d1:93:2f:6a: 3d:69:f1:fe:25:a6:16:92:d0:a9:67:79:5c:e1:96: 2b:ec:0b:de:7b:31:7b:2b:59:93:72:9f:84:8a:7f: 17:27:7c:72:6c:5b:27:99:3f:54:e4:2c:ee:df:9b: f5:1b:6c:37:15:93:cf:a2:ae:ff:07:ea:96:5b:29: 93:08:35:63:5f:cd:30:10:ab:eb:41:1c:17:ba:08: 5f:99:e4:85:ba:06:70:38:c2:94:31:cb:79:1b:fc: 9d:71:a9:b4:4b:aa:c0:4b:20:3f:6f:95:2b:c3:68: 60:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:45:34:C3:AF:81:4D:2D:F7:58:AC:59:81:61:73:10:88:5E:D4:34 X509v3 Authority Key Identifier: keyid:13:D6:4D:5D:8F:B7:B1:CF:89:38:77:01:1B:80:CF:40:16:F6:16:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:7e:6e:8c:68:f3:aa:24:4d:dd:e4:bb:d2:b4:41:1a:c4:bc: 63:2f:49:28:fa:1d:12:0d:3f:52:c1:a9:77:00:63:b9:1d:49: 0b:72:7b:ec:a3:cf:52:ab:ef:81:8e:e5:16:94:f7:2c:3e:d1: 95:56:88:ff:62:f7:57:fe:cf:44:5d:2b:78:02:a9:ab:c4:ea: 58:ec:c9:ca:32:1d:41:29:d4:c6:5b:06:a5:66:eb:a9:fd:a3: 6e:d9:70:34:3b:10:6b:59:55:47:df:17:6d:49:bb:fd:36:b6: a7:44:c9:05:08:43:04:71:6f:96:8a:77:2d:7e:1a:ed:17:4d: 1e:b7:6a:a5:96:1e:8e:63:bd:f4:8a:40:27:6e:96:eb:0e:85: 72:38:04:33:c1:96:e0:74:18:94:74:31:30:b3:d2:fe:1c:b0: 8f:d8:af:73:22:6e:c9:f5:61:e6:44:6d:60:7c:2c:c4:33:95: d8:08:96:5b:5e:62:17:e2:a9:0c:ce:7a:21:65:c2:03:39:64: 83:3d:e6:c9:87:e0:5a:77:3a:7b:e5:a6:78:f1:37:15:7d:4d: 20:c3:22:b4:95:94:01:93:42:3a:dd:be:e9:58:ff:8e:52:e9: 91:a6:03:23:68:eb:cb:55:49:02:64:ad:12:77:f9:66:ed:a9: de:b2:b2:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThDQjkxMTAvBgNVBAUTKDEzRDY0RDVEOEZCN0IxQ0Y4OTM4NzcwMTFCODBDRjQw MTZGNjE2MzgwHhcNMjQwNTA3MDEzNTAxWhcNMjQwNTE0MDEzNTAxWjAYMRYwFAYD VQQDEw02NjM5ODU0NS0yZGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCYMDcIa0XeZObUDAIPGFKxmqWSyseH7Q96PjukDpeIzwPH7AP9eM/82TLCu ud28/XEvk1vl6CaYmfE12vPUrXygasUnlZr4ThkvV15csTmUXXF1V+/2S9Wu/3PA LATg7SlImHoMWtgFPFSsZ56zpA3QgNMB/TRfRF2bkMYDTSEMQr9bQR8QjwA0uq2B 988939GTL2o9afH+JaYWktCpZ3lc4ZYr7AveezF7K1mTcp+Ein8XJ3xybFsnmT9U 5Czu35v1G2w3FZPPoq7/B+qWWymTCDVjX80wEKvrQRwXughfmeSFugZwOMKUMct5 G/ydcam0S6rASyA/b5Urw2hgVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFFNMOv gU0t91isWYFhcxCIXtQ0MB8GA1UdIwQYMBaAFBPWTV2Pt7HPiTh3ARuAz0AW9hY4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOENCOS9DMEQ1MDBGNEU2 NTUxMUVCQjBGMjkwMjdDNEY5QUUwMi9FOVpOWFktM3NjLUpPSGNCRzREUFFCYjJG amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U5Wk5YWS0zc2MtSk9IY0JHNERQUUJiMkZqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OENCOS9DMEQ1MDBGNEU2NTUxMUVCQjBGMjkwMjdDNEY5QUUwMi9FOVpOWFktM3Nj LUpPSGNCRzREUFFCYjJGamcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIfm6MaPOqJE3d5LvStEEaxLxjL0ko+h0SDT9Swal3AGO5HUkLcnvs o89Sq++BjuUWlPcsPtGVVoj/YvdX/s9EXSt4AqmrxOpY7MnKMh1BKdTGWwalZuup /aNu2XA0OxBrWVVH3xdtSbv9NranRMkFCEMEcW+WinctfhrtF00et2qllh6OY730 ikAnbpbrDoVyOAQzwZbgdBiUdDEws9L+HLCP2K9zIm7J9WHmRG1gfCzEM5XYCJZb XmIX4qkMznohZcIDOWSDPebJh+Badzp75aZ48TcVfU0gwyK0lZQBk0I63b7pWP+O UumRpgMjaOvLVUkCZK0Sd/lm7anesrLJ -----END CERTIFICATE-----Generated at Tue May 7 03:12:21 2024 by rpki-client on console-fra.rpki-client.org