$ rpki-client -vvf rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft File: EPSBzyjc51gajMuOUN4Jj3yLyRU.mft (raw, json) Hash identifier: 9nhnhp2pAfGLnkA4WhrLf/CVGfMp4H/pOrkVPfUIzsg= Subject key identifier: A6:1A:DB:CA:59:2F:BA:12:DD:39:F9:11:66:CE:DE:C8:D3:80:5A:B0 Authority key identifier: 10:F4:81:CF:28:DC:E7:58:1A:8C:CB:8E:50:DE:09:8F:7C:8B:C9:15 Certificate issuer: /CN=A9122134/serialNumber=10F481CF28DCE7581A8CCB8E50DE098F7C8BC915 Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPSBzyjc51gajMuOUN4Jj3yLyRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft Manifest number: A8 Signing time: Sat 23 Nov 2024 04:13:12 +0000 Manifest this update: Sat 23 Nov 2024 04:13:11 +0000 Manifest next update: Sat 30 Nov 2024 04:13:11 +0000 Files and hashes: 1: EPSBzyjc51gajMuOUN4Jj3yLyRU.crl (hash: XL1HXMVnmnohrPWh25KXLC3e9cC7RIYfl4OgKc/BTec=) 2: E070CA0CAA2E11EEA404D421C4F9AE02.roa (hash: uBqzGKrfuMGOhZ9ZF4kXFZz6O4TN4ouo1AuPwbgyPno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.crl rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPSBzyjc51gajMuOUN4Jj3yLyRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122134/serialNumber=10F481CF28DCE7581A8CCB8E50DE098F7C8BC915 Validity Not Before: Nov 23 04:13:11 2024 GMT Not After : Nov 30 04:13:11 2024 GMT Subject: CN=67415657-a9a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ed:cf:50:b5:11:45:20:e6:33:a0:9b:68:46: 95:31:b5:f1:7b:85:f9:b4:6b:f9:fb:fd:d9:1d:51: f6:f1:1c:92:37:b0:97:2a:fb:ad:73:8f:76:09:f8: 11:c2:4c:b8:82:e0:1b:03:94:79:3b:89:8f:c0:45: 31:5d:1b:ab:a9:28:f0:6d:49:c1:d5:2e:7d:6d:13: f9:3b:81:e3:8e:6c:2c:92:ce:38:d7:96:37:d9:a3: c7:4f:d2:4e:ae:7c:2f:f4:1e:aa:03:6f:94:e0:a3: 62:c2:bb:0b:c0:90:f9:1c:f1:1d:35:ca:45:8c:cb: 84:dd:7e:41:b6:3a:a2:22:3f:0d:84:7c:4e:36:13: 16:1b:70:51:38:73:a9:b0:42:87:52:d6:64:70:bf: 51:e7:fc:f6:db:4d:05:c1:02:28:ec:d0:c7:0e:78: e4:92:25:9a:f0:61:3f:9c:20:b2:c3:39:f8:a5:9d: 2d:08:40:e1:22:d0:0a:bf:e4:bd:6d:f3:0a:fe:d6: b5:2f:cf:88:de:52:95:68:f9:2c:68:bf:4f:b4:53: 1b:1c:7b:6d:ba:94:d7:30:a5:81:1f:7e:20:b3:5f: c8:0e:13:ed:25:30:e4:ba:8c:e2:00:81:b5:41:73: 23:5b:d6:4f:86:1d:dc:b8:51:2e:07:8e:ad:8c:02: 37:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:1A:DB:CA:59:2F:BA:12:DD:39:F9:11:66:CE:DE:C8:D3:80:5A:B0 X509v3 Authority Key Identifier: keyid:10:F4:81:CF:28:DC:E7:58:1A:8C:CB:8E:50:DE:09:8F:7C:8B:C9:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPSBzyjc51gajMuOUN4Jj3yLyRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:62:bd:11:67:2b:fb:72:1c:79:5f:fb:7f:ce:23:16:98:2d: 64:ce:f6:22:10:2f:74:df:d4:eb:33:c9:1f:e5:bb:61:2a:90: b7:fe:49:f5:3c:ff:88:3c:99:89:e9:64:41:34:96:31:ee:f9: d9:5d:49:0e:6e:a0:99:a1:88:7a:b8:1f:52:41:f2:5e:c4:d0: c8:d4:6f:0e:8c:11:16:c6:e9:70:72:f4:54:d8:1e:3b:34:bc: aa:c9:9d:7d:7d:55:e8:c4:f9:dc:cc:9a:ee:b4:87:4a:88:c6: 02:05:cd:46:bb:ab:65:84:93:d3:48:61:e7:c5:a5:f1:30:a7: 39:6c:d9:2b:1e:52:7f:bf:90:b1:d2:90:e9:84:04:ea:bd:c7: 6c:57:bc:67:b0:d0:63:66:ef:29:85:48:0d:70:9e:25:51:1d: da:5d:b6:e8:d4:5f:96:b9:ff:f0:d0:43:db:f4:1b:0c:7b:a7: 4a:18:f0:69:70:cf:27:6a:61:ea:46:a4:eb:0d:9b:75:62:a3: ee:f5:32:71:19:9c:f7:80:d3:e4:37:6c:51:47:ce:6a:26:f0: 61:d4:1d:a3:7a:c7:f8:0d:d7:24:80:c9:1c:5b:ad:f1:77:c4: fb:a6:23:14:df:1f:79:3e:a1:73:21:6a:13:e4:de:f8:50:e3: 98:e6:ed:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIxMzQxMTAvBgNVBAUTKDEwRjQ4MUNGMjhEQ0U3NTgxQThDQ0I4RTUwREUwOThG N0M4QkM5MTUwHhcNMjQxMTIzMDQxMzExWhcNMjQxMTMwMDQxMzExWjAYMRYwFAYD VQQDEw02NzQxNTY1Ny1hOWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqO3PULURRSDmM6CbaEaVMbXxe4X5tGv5+/3ZHVH28RySN7CXKvutc492CfgR wky4guAbA5R5O4mPwEUxXRurqSjwbUnB1S59bRP5O4Hjjmwsks4415Y32aPHT9JO rnwv9B6qA2+U4KNiwrsLwJD5HPEdNcpFjMuE3X5BtjqiIj8NhHxONhMWG3BROHOp sEKHUtZkcL9R5/z2200FwQIo7NDHDnjkkiWa8GE/nCCywzn4pZ0tCEDhItAKv+S9 bfMK/ta1L8+I3lKVaPksaL9PtFMbHHttupTXMKWBH34gs1/IDhPtJTDkuoziAIG1 QXMjW9ZPhh3cuFEuB46tjAI3FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKYa28pZ L7oS3Tn5EWbO3sjTgFqwMB8GA1UdIwQYMBaAFBD0gc8o3OdYGozLjlDeCY98i8kV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjEzNC83OUEzMzU3NkFB MkUxMUVFODhCQTJFMjFDNEY5QUUwMi9FUFNCenlqYzUxZ2FqTXVPVU40SmozeUx5 UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VQU0J6eWpjNTFnYWpNdU9VTjRKajN5THlSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjEzNC83OUEzMzU3NkFBMkUxMUVFODhCQTJFMjFDNEY5QUUwMi9FUFNCenlqYzUx Z2FqTXVPVU40SmozeUx5UlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2Yr0RZyv7chx5X/t/ziMWmC1kzvYiEC9039TrM8kf5bthKpC3/kn1 PP+IPJmJ6WRBNJYx7vnZXUkObqCZoYh6uB9SQfJexNDI1G8OjBEWxulwcvRU2B47 NLyqyZ19fVXoxPnczJrutIdKiMYCBc1Gu6tlhJPTSGHnxaXxMKc5bNkrHlJ/v5Cx 0pDphATqvcdsV7xnsNBjZu8phUgNcJ4lUR3aXbbo1F+Wuf/w0EPb9BsMe6dKGPBp cM8namHqRqTrDZt1YqPu9TJxGZz3gNPkN2xRR85qJvBh1B2jesf4DdckgMkcW63x d8T7piMU3x95PqFzIWoT5N74UOOY5u0c -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:44 2024 by rpki-client on console-fra.rpki-client.org