$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft File: EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft (raw, json) Hash identifier: hwBdVKNZqjLEAqUQCsTbl/qCCV7Z8tG7F4yCsN5SKsk= Subject key identifier: EC:A6:90:43:AC:41:8B:CF:B9:FE:3D:E9:B0:B2:2C:70:1E:8B:6B:F3 Authority key identifier: 11:96:CD:DF:DA:3E:BD:C5:AD:A8:FF:C5:BC:B3:84:91:21:47:D5:44 Certificate issuer: /CN=A91FD4A1/serialNumber=1196CDDFDA3EBDC5ADA8FFC5BCB384912147D544 Certificate serial: 0112 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft Manifest number: 010F Signing time: Wed 01 May 2024 05:39:06 +0000 Manifest this update: Wed 01 May 2024 05:39:06 +0000 Manifest next update: Wed 08 May 2024 05:39:06 +0000 Files and hashes: 1: EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl (hash: 26POlgNN/BDmp4ETOXQzghTbdGXPSZIMKWpBbPVu7M8=) 2: 16E990CA6B0411ED849E0957C4F9AE02.roa (hash: XS4cBomwJydCViEX8k9en57hjtg5yxLCq/AljVtOZxg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 274 (0x112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4A1/serialNumber=1196CDDFDA3EBDC5ADA8FFC5BCB384912147D544 Validity Not Before: May 1 05:39:06 2024 GMT Not After : May 8 05:39:06 2024 GMT Subject: CN=6631d57a-b634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7d:bb:b4:7d:2f:91:e0:b9:bc:40:f2:3f:03: 15:5b:f5:2e:32:1a:4c:4b:c3:61:51:a2:ec:8d:99: 08:86:9c:b9:fa:0e:fd:05:b0:c9:97:47:5e:55:cc: 6e:36:61:3c:3a:03:01:ab:00:82:99:4f:91:b7:2c: 7b:06:98:f4:c8:46:54:17:df:e8:67:9b:8d:28:1c: 5f:f3:20:7b:3f:66:d3:42:8b:75:d3:15:f4:4e:a9: cc:7e:cc:ce:f3:87:64:03:fa:8a:b1:82:ad:57:f3: 1b:e5:86:8d:5a:a0:24:b5:ab:54:c6:2d:83:9d:1e: 25:33:6e:6c:87:11:53:39:eb:f9:2d:02:3d:c7:13: a9:c6:d0:8b:3d:3c:ff:cc:e4:5d:53:97:16:97:b8: 27:87:23:e6:b3:c6:22:2c:30:70:b4:21:46:26:86: 2c:8a:51:f5:e9:2d:9d:2f:d0:1b:3c:99:14:34:7a: b2:07:69:4c:db:9b:bb:ce:26:0a:03:ee:70:f0:98: 29:26:e3:82:07:2d:cd:fe:ba:41:f7:55:bf:88:d3: b6:61:6f:07:37:53:4e:a0:93:a9:07:6d:5d:22:37: 9d:5f:84:25:79:0f:0a:1d:e2:f1:03:78:83:76:70: 96:5a:09:9b:13:e0:15:6f:4b:85:0d:8e:1b:6d:f0: f1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A6:90:43:AC:41:8B:CF:B9:FE:3D:E9:B0:B2:2C:70:1E:8B:6B:F3 X509v3 Authority Key Identifier: keyid:11:96:CD:DF:DA:3E:BD:C5:AD:A8:FF:C5:BC:B3:84:91:21:47:D5:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:11:88:f0:db:e0:c8:3a:44:c4:d8:bd:59:7f:ad:13:a3:a7: 64:31:c4:9b:07:7b:45:e8:21:bb:74:f6:37:c2:59:ee:38:e4: 81:09:9b:f0:62:01:1a:29:81:2f:9b:35:19:16:19:75:3a:b1: 2f:f8:cc:2d:df:aa:c7:57:8e:30:f5:3b:7d:12:e6:89:0c:4a: fc:55:55:e1:aa:20:91:7d:0a:72:d3:35:c3:51:8e:ad:3c:de: b2:02:b6:d2:d7:b0:29:f6:d0:d7:1b:0b:3b:ab:f7:95:86:20: b0:66:37:04:b3:ec:b7:6a:22:10:91:57:18:eb:72:2e:24:58: 92:97:1a:2c:1e:55:19:cd:43:7f:5b:79:69:36:65:30:c4:09: 0f:bc:a7:27:80:70:2f:8f:f3:89:09:20:b5:27:df:2c:c5:aa: 31:67:e5:52:b3:15:e2:47:f6:df:ff:38:3d:54:ed:91:02:a6: 91:17:32:18:88:5f:9e:90:67:0d:e1:51:9d:77:df:87:67:80: 34:a3:77:50:86:1e:eb:68:a9:2b:89:64:68:a5:73:c6:c6:7e: ae:ad:13:e1:ee:1e:29:54:39:6b:01:c6:94:f1:2c:06:b3:3b: b0:87:75:1e:82:b2:17:62:09:58:f4:be:8a:77:cc:92:36:9f: 4b:e3:24:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ0QTExMTAvBgNVBAUTKDExOTZDRERGREEzRUJEQzVBREE4RkZDNUJDQjM4NDkx MjE0N0Q1NDQwHhcNMjQwNTAxMDUzOTA2WhcNMjQwNTA4MDUzOTA2WjAYMRYwFAYD VQQDEw02NjMxZDU3YS1iNjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyX27tH0vkeC5vEDyPwMVW/UuMhpMS8NhUaLsjZkIhpy5+g79BbDJl0deVcxu NmE8OgMBqwCCmU+Rtyx7Bpj0yEZUF9/oZ5uNKBxf8yB7P2bTQot10xX0TqnMfszO 84dkA/qKsYKtV/Mb5YaNWqAktatUxi2DnR4lM25shxFTOev5LQI9xxOpxtCLPTz/ zORdU5cWl7gnhyPms8YiLDBwtCFGJoYsilH16S2dL9AbPJkUNHqyB2lM25u7ziYK A+5w8JgpJuOCBy3N/rpB91W/iNO2YW8HN1NOoJOpB21dIjedX4QleQ8KHeLxA3iD dnCWWgmbE+AVb0uFDY4bbfDx1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOymkEOs QYvPuf496bCyLHAei2vzMB8GA1UdIwQYMBaAFBGWzd/aPr3Fraj/xbyzhJEhR9VE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDRBMS82MkI0MjNCQTZC MDExMUVEOUEzMEYxNTVDNEY5QUUwMi9FWmJOMzlvLXZjV3RxUF9GdkxPRWtTRkgx VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VaYk4zOW8tdmNXdHFQX0Z2TE9Fa1NGSDFVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDRBMS82MkI0MjNCQTZCMDExMUVEOUEzMEYxNTVDNEY5QUUwMi9FWmJOMzlvLXZj V3RxUF9GdkxPRWtTRkgxVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfEYjw2+DIOkTE2L1Zf60To6dkMcSbB3tF6CG7dPY3wlnuOOSBCZvw YgEaKYEvmzUZFhl1OrEv+Mwt36rHV44w9Tt9EuaJDEr8VVXhqiCRfQpy0zXDUY6t PN6yArbS17Ap9tDXGws7q/eVhiCwZjcEs+y3aiIQkVcY63IuJFiSlxosHlUZzUN/ W3lpNmUwxAkPvKcngHAvj/OJCSC1J98sxaoxZ+VSsxXiR/bf/zg9VO2RAqaRFzIY iF+ekGcN4VGdd9+HZ4A0o3dQhh7raKkriWRopXPGxn6urRPh7h4pVDlrAcaU8SwG szuwh3UegrIXYglY9L6Kd8ySNp9L4yTY -----END CERTIFICATE-----Generated at Wed May 1 06:34:29 2024 by rpki-client on console-ams.rpki-client.org