$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft File: EcBLr8HLQLBzED91iraOWH9b_gQ.mft (raw, json) Hash identifier: TheW9xa6H53LNHNyrEBJgJNa7ruWJEvQFOmoAaFq5rY= Subject key identifier: 8B:7D:CD:4B:19:99:69:CE:D5:D6:A6:6F:05:88:F9:F2:44:9D:F5:4B Authority key identifier: 11:C0:4B:AF:C1:CB:40:B0:73:10:3F:75:8A:B6:8E:58:7F:5B:FE:04 Certificate issuer: /CN=A91FE295/serialNumber=11C04BAFC1CB40B073103F758AB68E587F5BFE04 Certificate serial: 02C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft Manifest number: 02C4 Signing time: Fri 03 May 2024 03:33:27 +0000 Manifest this update: Fri 03 May 2024 03:33:26 +0000 Manifest next update: Fri 10 May 2024 03:33:26 +0000 Files and hashes: 1: EcBLr8HLQLBzED91iraOWH9b_gQ.crl (hash: V52vA+uhnlVCrwOko1A0/RtUHIQuZrRnxiBZRHVrFIs=) 2: 4153181E1D4211ED99608059C4F9AE02.roa (hash: bo3M0SHEmY6fxlknnF6CrnoZr8k2yntFb0qjHa/esME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.crl rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:33:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 710 (0x2c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE295/serialNumber=11C04BAFC1CB40B073103F758AB68E587F5BFE04 Validity Not Before: May 3 03:33:26 2024 GMT Not After : May 10 03:33:26 2024 GMT Subject: CN=66345b07-bbc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:da:7b:cd:91:70:3b:1d:f5:5f:7e:75:d7:18: 01:75:c6:a7:5c:37:2a:70:d6:35:d4:11:f2:c2:c8: 36:ac:9a:16:0f:32:fd:2e:d8:60:f5:7f:19:6f:45: 1b:76:32:1b:62:2c:50:bb:62:39:a6:21:df:c5:3f: f9:5e:98:df:bf:88:2e:36:f0:04:b0:4c:df:88:8d: 5e:fe:7c:eb:32:9b:89:26:f1:18:68:f7:7a:6d:96: fd:72:2d:5e:ce:3a:a1:e2:b1:04:5a:f3:bc:f6:27: 0f:9c:3f:91:ed:23:51:e7:f8:cc:4f:ba:a4:f5:df: 78:0e:d2:55:2f:8a:16:65:d1:57:1b:66:9a:96:19: 57:5b:56:07:52:0a:8e:93:8c:12:0e:a2:93:8f:38: 1d:5d:11:0d:36:91:de:72:78:fd:e7:35:41:31:ad: b9:3a:01:1b:9e:c8:3c:68:f7:06:f6:60:03:47:46: dc:7a:c7:65:00:fa:5a:3f:90:9f:cd:56:69:c8:c2: bd:3c:d0:91:07:15:93:b9:79:48:84:ab:e1:bf:82: eb:f3:c4:c9:3d:aa:d4:e2:bf:67:ee:ec:84:7f:81: a1:d5:fd:36:3e:f9:e7:47:77:9a:f1:29:75:eb:a3: 85:fb:63:74:51:d0:d0:1a:37:45:04:b2:5a:13:01: 3c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:7D:CD:4B:19:99:69:CE:D5:D6:A6:6F:05:88:F9:F2:44:9D:F5:4B X509v3 Authority Key Identifier: keyid:11:C0:4B:AF:C1:CB:40:B0:73:10:3F:75:8A:B6:8E:58:7F:5B:FE:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:3c:d5:94:60:22:79:58:2b:17:e9:95:08:96:27:e3:3c:20: bc:ea:59:da:20:6a:72:01:9d:1a:86:8c:cf:2f:15:8d:1c:7a: bd:aa:b2:2a:26:92:78:56:af:a3:ff:40:85:c1:d1:e6:c3:93: 7b:72:7c:d6:1e:1f:1e:ef:98:8f:65:ae:bd:0d:0e:27:f2:74: 5c:a3:48:fb:ab:36:ea:24:06:2e:34:3f:2d:ab:0e:86:2b:b7: 09:2d:8b:1f:d0:b2:fc:c6:15:7d:d0:1e:f3:0e:a7:df:fb:c7: 31:79:13:f7:a9:fd:4d:64:d9:99:4b:02:2d:f7:3b:e5:ee:d0: c7:ce:3d:19:c5:89:04:3d:5b:0e:32:ec:56:5b:a9:37:ad:6f: 95:07:c0:de:15:fe:33:6d:72:92:37:08:e9:23:3b:75:ac:08: 94:12:83:c2:01:8e:b8:73:e3:af:8b:1d:03:42:17:85:45:36: 1e:a4:d9:24:90:10:c9:e0:02:03:b3:d9:05:8e:fb:8b:93:14: 35:ae:f1:06:4c:c3:3a:28:09:c3:4a:6f:14:7a:27:82:ab:32: dd:fd:a2:76:8c:ff:0a:b0:a8:11:27:96:34:38:2e:91:95:b4: ed:93:d0:d6:a6:1f:8c:3b:75:2a:03:e1:a3:8d:0a:a4:ee:95: b5:b1:0a:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkUyOTUxMTAvBgNVBAUTKDExQzA0QkFGQzFDQjQwQjA3MzEwM0Y3NThBQjY4RTU4 N0Y1QkZFMDQwHhcNMjQwNTAzMDMzMzI2WhcNMjQwNTEwMDMzMzI2WjAYMRYwFAYD VQQDEw02NjM0NWIwNy1iYmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtp7zZFwOx31X3511xgBdcanXDcqcNY11BHywsg2rJoWDzL9Lthg9X8Zb0Ub djIbYixQu2I5piHfxT/5Xpjfv4guNvAEsEzfiI1e/nzrMpuJJvEYaPd6bZb9ci1e zjqh4rEEWvO89icPnD+R7SNR5/jMT7qk9d94DtJVL4oWZdFXG2aalhlXW1YHUgqO k4wSDqKTjzgdXRENNpHecnj95zVBMa25OgEbnsg8aPcG9mADR0bcesdlAPpaP5Cf zVZpyMK9PNCRBxWTuXlIhKvhv4Lr88TJParU4r9n7uyEf4Gh1f02PvnnR3ea8Sl1 66OF+2N0UdDQGjdFBLJaEwE8RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIt9zUsZ mWnO1dambwWI+fJEnfVLMB8GA1UdIwQYMBaAFBHAS6/By0CwcxA/dYq2jlh/W/4E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTI5NS82Rjk2QzBEQ0Ew MTkxMUVDOTQ4NEQxMkZDNEY5QUUwMi9FY0JMcjhITFFMQnpFRDkxaXJhT1dIOWJf Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VjQkxyOEhMUUxCekVEOTFpcmFPV0g5Yl9nUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTI5NS82Rjk2QzBEQ0EwMTkxMUVDOTQ4NEQxMkZDNEY5QUUwMi9FY0JMcjhITFFM QnpFRDkxaXJhT1dIOWJfZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6PNWUYCJ5WCsX6ZUIlifjPCC86lnaIGpyAZ0ahozPLxWNHHq9qrIq JpJ4Vq+j/0CFwdHmw5N7cnzWHh8e75iPZa69DQ4n8nRco0j7qzbqJAYuND8tqw6G K7cJLYsf0LL8xhV90B7zDqff+8cxeRP3qf1NZNmZSwIt9zvl7tDHzj0ZxYkEPVsO MuxWW6k3rW+VB8DeFf4zbXKSNwjpIzt1rAiUEoPCAY64c+Ovix0DQheFRTYepNkk kBDJ4AIDs9kFjvuLkxQ1rvEGTMM6KAnDSm8UeieCqzLd/aJ2jP8KsKgRJ5Y0OC6R lbTtk9DWph+MO3UqA+GjjQqk7pW1sQok -----END CERTIFICATE-----Generated at Fri May 3 04:36:55 2024 by rpki-client on console-ams.rpki-client.org