$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft File: E3PX27MxtT_PfCjcDfs-n9p-9JA.mft (raw, json) Hash identifier: uiXUMbOEwcylRJ6wR35Ha8n+XpGqFZzfhGOsqbuBHlw= Subject key identifier: CA:D1:3D:FD:D5:35:DA:2D:13:C5:9F:58:83:B2:4E:BF:05:C1:E5:FC Authority key identifier: 13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90 Certificate issuer: /CN=A91B9288/serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490 Certificate serial: 03F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft Manifest number: 03F1 Signing time: Tue 07 May 2024 02:11:44 +0000 Manifest this update: Tue 07 May 2024 02:11:43 +0000 Manifest next update: Tue 14 May 2024 02:11:43 +0000 Files and hashes: 1: E3PX27MxtT_PfCjcDfs-n9p-9JA.crl (hash: aXJKQqqCxpaThbaq05/kNhLgcTRJ7zJrEWZaTD6ORdY=) 2: BC0960102C5A11ECAB4C276BC4F9AE02.roa (hash: fOG6E1uEMWBMMvid+cOfH446mAotQFl/kKBSOr9l7sE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 02:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1013 (0x3f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9288/serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490 Validity Not Before: May 7 02:11:43 2024 GMT Not After : May 14 02:11:43 2024 GMT Subject: CN=66398ddf-6263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:63:fd:e8:49:e7:92:6d:56:1b:41:b4:31:71: b0:18:ee:01:52:90:70:c4:a0:f7:0c:ea:b0:78:b3: a6:3d:20:18:86:73:7f:5b:1e:07:99:9e:ea:38:8e: 67:93:ff:0c:77:cb:8b:21:c4:93:51:af:82:65:98: 11:6a:9f:5f:b4:a6:a0:a2:bf:74:09:b2:a0:b4:ae: f1:63:e2:30:5a:cb:f5:6a:a3:3a:93:9a:74:c0:a9: f0:45:cb:ee:ce:50:f1:65:5f:5d:bb:3c:b9:a8:8c: e0:ce:55:af:10:2c:52:9d:33:f4:ef:ad:d4:0c:fb: 5c:46:b3:de:72:74:84:7a:54:51:63:a5:aa:e1:11: 01:2e:32:ce:47:36:ae:f4:c4:5e:9d:c4:2b:7f:19: 3b:83:00:eb:6b:c2:a3:e4:05:44:3a:5b:68:ae:f8: 42:c0:47:5c:18:bb:60:e6:49:5c:ee:43:a6:21:f8: 0a:0e:8d:cb:22:ce:12:09:cb:33:c1:b7:4d:54:6c: 7e:f7:61:d9:3c:bd:f8:3d:02:bb:00:f3:f0:ad:cf: 40:1e:a4:af:22:e7:ac:7f:17:b1:76:28:c1:3f:ed: d3:8c:e5:74:e7:5e:36:f2:82:46:6f:7b:29:b8:df: 30:34:46:7f:4d:aa:80:06:cb:c7:d8:97:74:85:0d: bc:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D1:3D:FD:D5:35:DA:2D:13:C5:9F:58:83:B2:4E:BF:05:C1:E5:FC X509v3 Authority Key Identifier: keyid:13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:39:c8:ed:53:f8:cd:1e:92:ff:b1:a9:73:39:a9:cb:d7:3c: 9c:57:b7:97:63:d9:9d:a7:c0:1f:6d:14:19:84:b1:a8:a6:94: af:a6:90:da:a9:dd:a9:bd:a5:36:e5:a0:a9:a8:98:70:7c:a8: 0f:95:87:f0:71:6d:81:4b:44:b7:02:a4:f7:79:ba:b2:ae:0f: ad:4e:93:15:43:7b:91:28:d5:40:88:e3:db:66:52:f1:44:9a: 4e:c8:ad:5f:25:68:e6:fb:d6:c8:9c:fa:e8:4a:3d:a1:af:6c: 9f:b9:e9:59:40:7a:7a:36:63:98:1f:f2:95:c8:68:b7:9c:1a: e1:35:27:6d:e2:12:a4:a5:4e:ba:2e:63:ec:67:70:7d:9f:ab: 5c:6d:89:22:f0:bf:d4:ee:e2:b4:52:1f:e6:52:40:8c:79:0c: 7e:74:1b:d6:58:09:66:58:fb:b5:c7:e4:e7:e9:d1:15:80:01: 79:56:d6:37:39:70:a1:00:99:3a:5e:fb:d5:ed:92:1b:43:56: c3:38:4e:38:59:dc:22:a0:2d:72:92:53:b1:7e:26:13:cd:02: df:01:7f:7a:b3:4e:54:2c:5e:0a:93:68:f0:94:6e:e5:29:a0: 62:c4:29:29:34:34:ca:54:ad:cd:17:2d:fe:09:08:d0:d5:a7: 2b:8b:fa:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyODgxMTAvBgNVBAUTKDEzNzNEN0RCQjMzMUI1M0ZDRjdDMjhEQzBERkIzRTlG REE3RUY0OTAwHhcNMjQwNTA3MDIxMTQzWhcNMjQwNTE0MDIxMTQzWjAYMRYwFAYD VQQDEw02NjM5OGRkZi02MjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2P96Ennkm1WG0G0MXGwGO4BUpBwxKD3DOqweLOmPSAYhnN/Wx4HmZ7qOI5n k/8Md8uLIcSTUa+CZZgRap9ftKagor90CbKgtK7xY+IwWsv1aqM6k5p0wKnwRcvu zlDxZV9duzy5qIzgzlWvECxSnTP0763UDPtcRrPecnSEelRRY6Wq4REBLjLORzau 9MRencQrfxk7gwDra8Kj5AVEOltorvhCwEdcGLtg5klc7kOmIfgKDo3LIs4SCcsz wbdNVGx+92HZPL34PQK7APPwrc9AHqSvIuesfxexdijBP+3TjOV051428oJGb3sp uN8wNEZ/TaqABsvH2Jd0hQ28CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMrRPf3V NdotE8WfWIOyTr8FweX8MB8GA1UdIwQYMBaAFBNz19uzMbU/z3wo3A37Pp/afvSQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI4OC8xRkREQTdCMDJD NTkxMUVDQkFGNUY4NkFDNEY5QUUwMi9FM1BYMjdNeHRUX1BmQ2pjRGZzLW45cC05 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UzUFgyN014dFRfUGZDamNEZnMtbjlwLTlKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTI4OC8xRkREQTdCMDJDNTkxMUVDQkFGNUY4NkFDNEY5QUUwMi9FM1BYMjdNeHRU X1BmQ2pjRGZzLW45cC05SkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVOcjtU/jNHpL/salzOanL1zycV7eXY9mdp8AfbRQZhLGoppSvppDa qd2pvaU25aCpqJhwfKgPlYfwcW2BS0S3AqT3ebqyrg+tTpMVQ3uRKNVAiOPbZlLx RJpOyK1fJWjm+9bInProSj2hr2yfuelZQHp6NmOYH/KVyGi3nBrhNSdt4hKkpU66 LmPsZ3B9n6tcbYki8L/U7uK0Uh/mUkCMeQx+dBvWWAlmWPu1x+Tn6dEVgAF5VtY3 OXChAJk6XvvV7ZIbQ1bDOE44WdwioC1yklOxfiYTzQLfAX96s05ULF4Kk2jwlG7l KaBixCkpNDTKVK3NFy3+CQjQ1acri/oO -----END CERTIFICATE-----Generated at Tue May 7 03:10:22 2024 by rpki-client on console-ams.rpki-client.org