$ rpki-client -vvf rpki.apnic.net/member_repository/A911C257/10397984E0CD11EAA5012521C4F9AE02/EhyoroJF561rsoWvqOXU1-F8Nao.mft File: EhyoroJF561rsoWvqOXU1-F8Nao.mft (raw, json) Hash identifier: lwPKbRFss9MUCen1ZkhiQq4AfhtOR815sYRK1fdAfIE= Subject key identifier: 13:78:D9:19:BF:B6:3E:B4:14:DC:51:7A:C1:8D:54:64:9B:01:32:84 Authority key identifier: 12:1C:A8:AE:82:45:E7:AD:6B:B2:85:AF:A8:E5:D4:D7:E1:7C:35:AA Certificate issuer: /CN=A911C257/serialNumber=121CA8AE8245E7AD6BB285AFA8E5D4D7E17C35AA Certificate serial: 075B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhyoroJF561rsoWvqOXU1-F8Nao.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C257/10397984E0CD11EAA5012521C4F9AE02/EhyoroJF561rsoWvqOXU1-F8Nao.mft Manifest number: 074B Signing time: Sat 18 May 2024 22:24:51 +0000 Manifest this update: Sat 18 May 2024 22:24:50 +0000 Manifest next update: Sat 25 May 2024 22:24:50 +0000 Files and hashes: 1: EhyoroJF561rsoWvqOXU1-F8Nao.crl (hash: poHTELmjV3f5En15ih2BgZsLplPMi9HtJDY7QVU82b0=) 2: D583D3427FEB11ECBEBB344CC4F9AE02.roa (hash: CsOkmCm/NgGoSDsLngAWCRQiA1pie3KU4f0DehT/8Hk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C257/10397984E0CD11EAA5012521C4F9AE02/EhyoroJF561rsoWvqOXU1-F8Nao.crl rsync://rpki.apnic.net/member_repository/A911C257/10397984E0CD11EAA5012521C4F9AE02/EhyoroJF561rsoWvqOXU1-F8Nao.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhyoroJF561rsoWvqOXU1-F8Nao.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1883 (0x75b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C257/serialNumber=121CA8AE8245E7AD6BB285AFA8E5D4D7E17C35AA Validity Not Before: May 18 22:24:50 2024 GMT Not After : May 25 22:24:50 2024 GMT Subject: CN=66492ab2-4552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:63:9f:51:b6:7b:d4:6f:8f:cc:5e:26:1d:ca: 0f:42:7c:e2:b6:55:57:86:02:ca:8c:32:f9:2c:d1: c1:94:e5:bf:d9:9d:d0:a3:36:39:26:61:0e:09:16: 9b:c0:31:8c:e6:30:cc:37:4e:67:6b:11:8c:e9:ef: 98:c6:f5:d5:2e:45:71:6a:86:f1:c9:38:5e:6f:1a: 48:a2:1d:a4:8c:15:45:e8:d0:3b:69:c4:db:25:a6: 9e:13:d0:21:ea:c6:1e:55:03:c3:5e:77:99:6a:a1: 2b:a3:7e:89:06:20:7c:d7:58:0c:ba:ea:4a:7f:29: 79:46:f0:9d:ef:72:74:31:86:d2:01:f6:2b:84:5d: 5b:02:5b:ce:78:7c:9d:94:34:21:99:6d:83:d6:16: 71:49:91:f4:c1:30:a4:a6:29:68:10:09:42:d0:00: bd:3d:4f:99:5a:cd:71:c7:f8:bb:c1:64:dc:1d:08: b6:b0:8f:3a:5b:6c:bc:d5:04:95:1a:5a:e9:e9:a0: f9:01:87:3f:c3:98:df:8b:ab:be:a0:3c:6a:5a:d4: 8f:ab:c8:34:62:fa:99:a3:56:60:1c:c4:cb:3c:76: 32:c0:b0:a4:be:c4:d2:f0:10:dd:cd:d6:77:19:fa: 3b:ef:2f:43:4f:66:71:ee:14:be:b6:7d:ce:a9:92: c3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:78:D9:19:BF:B6:3E:B4:14:DC:51:7A:C1:8D:54:64:9B:01:32:84 X509v3 Authority Key Identifier: keyid:12:1C:A8:AE:82:45:E7:AD:6B:B2:85:AF:A8:E5:D4:D7:E1:7C:35:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C257/10397984E0CD11EAA5012521C4F9AE02/EhyoroJF561rsoWvqOXU1-F8Nao.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhyoroJF561rsoWvqOXU1-F8Nao.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C257/10397984E0CD11EAA5012521C4F9AE02/EhyoroJF561rsoWvqOXU1-F8Nao.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:c8:7e:31:32:0a:1e:2a:d4:d2:aa:05:f5:b3:62:df:da:78: ea:1d:52:d4:da:52:c5:e1:b8:96:e3:de:cb:0c:ed:c6:85:32: db:2d:cc:43:08:f9:d0:0a:36:f9:df:6e:e3:a4:d1:7d:26:b3: 0e:61:4c:ee:6e:2c:90:7f:62:74:0a:b1:87:56:0e:17:2e:09: 07:de:0a:14:5f:2a:eb:a7:86:30:f4:e3:93:88:e6:a8:ab:ef: a0:41:f0:6d:f2:c3:c1:a6:2a:3f:38:ec:c2:65:39:82:ef:2b: e0:da:47:ce:29:52:72:d8:7a:f7:72:4a:1d:a3:b7:4e:0a:fe: 5e:13:03:87:db:48:27:21:62:74:8b:a1:dd:5d:01:27:15:03: 45:62:10:ff:bb:e1:fc:46:fe:7c:be:b4:3b:97:b0:4e:90:62: 59:fe:25:62:48:61:37:71:dd:02:57:0d:a4:68:af:b0:b2:2e: 3a:7b:fa:41:b1:6c:bc:1c:7d:5b:11:f3:de:8a:5e:a3:1c:3f: d5:f8:96:a5:09:f8:7e:43:17:1b:33:de:49:06:96:0d:e2:d5: 19:4b:47:cb:80:4e:5f:3c:89:2b:9d:6a:7b:8b:3b:fb:09:7e: 0d:ed:b8:ba:c9:41:dd:3b:f1:1b:6e:87:87:40:24:aa:5d:51: 53:2f:0e:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyNTcxMTAvBgNVBAUTKDEyMUNBOEFFODI0NUU3QUQ2QkIyODVBRkE4RTVENEQ3 RTE3QzM1QUEwHhcNMjQwNTE4MjIyNDUwWhcNMjQwNTI1MjIyNDUwWjAYMRYwFAYD VQQDEw02NjQ5MmFiMi00NTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmWOfUbZ71G+PzF4mHcoPQnzitlVXhgLKjDL5LNHBlOW/2Z3QozY5JmEOCRab wDGM5jDMN05naxGM6e+YxvXVLkVxaobxyThebxpIoh2kjBVF6NA7acTbJaaeE9Ah 6sYeVQPDXneZaqEro36JBiB811gMuupKfyl5RvCd73J0MYbSAfYrhF1bAlvOeHyd lDQhmW2D1hZxSZH0wTCkpiloEAlC0AC9PU+ZWs1xx/i7wWTcHQi2sI86W2y81QSV Glrp6aD5AYc/w5jfi6u+oDxqWtSPq8g0YvqZo1ZgHMTLPHYywLCkvsTS8BDdzdZ3 Gfo77y9DT2Zx7hS+tn3OqZLDywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBN42Rm/ tj60FNxResGNVGSbATKEMB8GA1UdIwQYMBaAFBIcqK6CReeta7KFr6jl1NfhfDWq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI1Ny8xMDM5Nzk4NEUw Q0QxMUVBQTUwMTI1MjFDNEY5QUUwMi9FaHlvcm9KRjU2MXJzb1d2cU9YVTEtRjhO YW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VoeW9yb0pGNTYxcnNvV3ZxT1hVMS1GOE5hby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzI1Ny8xMDM5Nzk4NEUwQ0QxMUVBQTUwMTI1MjFDNEY5QUUwMi9FaHlvcm9KRjU2 MXJzb1d2cU9YVTEtRjhOYW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGyH4xMgoeKtTSqgX1s2Lf2njqHVLU2lLF4biW497LDO3GhTLbLcxD CPnQCjb5327jpNF9JrMOYUzubiyQf2J0CrGHVg4XLgkH3goUXyrrp4Yw9OOTiOao q++gQfBt8sPBpio/OOzCZTmC7yvg2kfOKVJy2Hr3ckodo7dOCv5eEwOH20gnIWJ0 i6HdXQEnFQNFYhD/u+H8Rv58vrQ7l7BOkGJZ/iViSGE3cd0CVw2kaK+wsi46e/pB sWy8HH1bEfPeil6jHD/V+JalCfh+QxcbM95JBpYN4tUZS0fLgE5fPIkrnWp7izv7 CX4N7bi6yUHdO/EbboeHQCSqXVFTLw5p -----END CERTIFICATE-----Generated at Sun May 19 00:16:11 2024 by rpki-client on console-fra.rpki-client.org