$ rpki-client -vvf rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft File: EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft (raw, json) Hash identifier: A8CNcUgP942SNa3Mq/M9qG9ce4KBOF8276WBOON48Bc= Subject key identifier: DD:D8:FB:19:83:CF:5F:C4:62:31:76:AB:AF:FB:AF:54:55:7B:AC:F5 Authority key identifier: 12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13 Certificate issuer: /CN=A91250FA/serialNumber=1283A2F4C7BA11706C66E17BF1BD3E99627A1813 Certificate serial: 0A87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft Manifest number: 0A7B Signing time: Thu 02 May 2024 20:22:08 +0000 Manifest this update: Thu 02 May 2024 20:22:08 +0000 Manifest next update: Thu 09 May 2024 20:22:08 +0000 Files and hashes: 1: EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl (hash: mJhfCnhzukvaFlp3nbzWSQmRn3Y/iWeet9N/YrDwMuQ=) 2: 2A08F1A4369211EAA64E320BC4F9AE02.roa (hash: yecxmZJ2o707h7+hNgkkRsPn4agz7cxDO6ZHpKPANQY=) 3: 5D822954368F11EAB3D4CE7FC4F9AE02.roa (hash: go5b9JQLRtmjb3/gk281iNywfXjdvNyFGIICk9aPtfw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 20:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2695 (0xa87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91250FA/serialNumber=1283A2F4C7BA11706C66E17BF1BD3E99627A1813 Validity Not Before: May 2 20:22:08 2024 GMT Not After : May 9 20:22:08 2024 GMT Subject: CN=6633f5f0-2ba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:07:0f:ef:a7:ab:de:32:e2:57:aa:50:3d:76: dc:55:5b:7a:3f:c6:df:eb:e0:1b:98:3e:1b:e1:d1: 84:85:eb:09:e7:3c:50:46:8a:eb:8d:c7:8b:09:51: 2f:d2:8a:2c:65:0b:d0:da:42:d1:92:6b:65:97:b6: 14:0e:02:d9:48:be:c4:b8:42:52:a1:92:95:75:62: 5c:77:de:4b:0c:d6:df:1d:49:32:3a:2d:6d:7f:8a: 9d:11:24:05:22:06:5e:f0:7b:b9:a3:94:d7:42:83: 94:ef:55:e3:3e:20:a2:d8:ae:a1:b1:22:f3:a1:d3: 01:ff:a9:64:a8:0a:5f:39:ba:8e:85:fa:02:25:bf: b2:16:8e:de:bd:f6:38:e8:19:49:dc:c9:a2:d0:2c: 54:0e:85:48:9e:7c:4d:61:bf:0a:40:36:0e:37:13: 26:41:56:00:f7:e6:73:d6:57:9d:11:85:e9:0f:c8: 2c:24:ca:8b:cb:cf:8b:ee:83:55:0b:2b:29:61:f2: 74:27:ca:a8:5a:e1:82:0c:6f:51:c5:0f:72:29:11: d4:38:a0:0a:1a:5a:bf:e9:9c:bc:54:fd:c3:b4:60: ac:72:03:fd:b9:8d:93:2b:c6:48:cb:fd:b2:a2:07: ac:66:9f:97:9f:d6:66:ac:e2:a9:e1:21:2b:fc:b1: 26:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D8:FB:19:83:CF:5F:C4:62:31:76:AB:AF:FB:AF:54:55:7B:AC:F5 X509v3 Authority Key Identifier: keyid:12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:18:55:2d:c0:f7:9f:58:a9:f2:5c:46:03:6f:92:82:77:2d: 7f:9b:69:3c:2c:6c:e5:6d:1a:cd:d9:36:ef:28:5f:a3:08:52: 82:63:7c:23:b3:f6:79:0a:e1:6f:5d:a4:23:d6:58:87:a4:41: c4:63:1e:14:7f:b4:16:9b:24:c0:9b:35:4b:00:38:3d:f7:e0: ab:fa:e9:7e:0f:57:82:67:90:c0:9c:11:98:17:95:80:18:b1: b2:6e:30:d6:32:74:e9:b4:96:01:de:3e:98:71:71:2e:94:79: 18:41:06:ee:67:18:cf:17:bc:1d:2f:f3:49:cc:b0:34:0b:13: 3a:6f:84:b1:a2:74:3e:69:0e:03:c1:7c:86:70:f2:66:6b:4c: ef:9f:dd:b4:15:6b:10:a3:36:ef:a7:07:d5:2a:a6:8d:72:67: 7f:aa:bc:66:4f:84:3f:66:ad:e7:57:82:8d:f0:b4:f7:9a:81: 89:25:d1:74:e1:10:d2:9e:32:af:9b:3a:f1:64:37:1c:9a:16: 52:ec:b9:3b:45:ce:59:7c:e8:e1:c0:0b:b1:10:b4:ed:dc:ae: cf:e9:f8:7c:17:7a:a8:76:09:9b:ff:6b:6b:42:d2:95:16:53: b9:2a:0c:0a:0f:b3:0b:44:76:4b:32:f2:fa:cf:a0:bd:63:f8: 2c:87:06:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUwRkExMTAvBgNVBAUTKDEyODNBMkY0QzdCQTExNzA2QzY2RTE3QkYxQkQzRTk5 NjI3QTE4MTMwHhcNMjQwNTAyMjAyMjA4WhcNMjQwNTA5MjAyMjA4WjAYMRYwFAYD VQQDEw02NjMzZjVmMC0yYmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArwcP76er3jLiV6pQPXbcVVt6P8bf6+AbmD4b4dGEhesJ5zxQRorrjceLCVEv 0oosZQvQ2kLRkmtll7YUDgLZSL7EuEJSoZKVdWJcd95LDNbfHUkyOi1tf4qdESQF IgZe8Hu5o5TXQoOU71XjPiCi2K6hsSLzodMB/6lkqApfObqOhfoCJb+yFo7evfY4 6BlJ3Mmi0CxUDoVInnxNYb8KQDYONxMmQVYA9+Zz1ledEYXpD8gsJMqLy8+L7oNV CyspYfJ0J8qoWuGCDG9RxQ9yKRHUOKAKGlq/6Zy8VP3DtGCscgP9uY2TK8ZIy/2y ogesZp+Xn9ZmrOKp4SEr/LEmqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN3Y+xmD z1/EYjF2q6/7r1RVe6z1MB8GA1UdIwQYMBaAFBKDovTHuhFwbGbhe/G9PpliehgT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTBGQS9BQUEwRUJFMDM2 OEUxMUVBQTc2OEZDN0VDNEY5QUUwMi9Fb09pOU1lNkVYQnNadUY3OGIwLW1XSjZH Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VvT2k5TWU2RVhCc1p1Rjc4YjAtbVdKNkdCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTBGQS9BQUEwRUJFMDM2OEUxMUVBQTc2OEZDN0VDNEY5QUUwMi9Fb09pOU1lNkVY QnNadUY3OGIwLW1XSjZHQk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7GFUtwPefWKnyXEYDb5KCdy1/m2k8LGzlbRrN2TbvKF+jCFKCY3wj s/Z5CuFvXaQj1liHpEHEYx4Uf7QWmyTAmzVLADg99+Cr+ul+D1eCZ5DAnBGYF5WA GLGybjDWMnTptJYB3j6YcXEulHkYQQbuZxjPF7wdL/NJzLA0CxM6b4SxonQ+aQ4D wXyGcPJma0zvn920FWsQozbvpwfVKqaNcmd/qrxmT4Q/Zq3nV4KN8LT3moGJJdF0 4RDSnjKvmzrxZDccmhZS7Lk7Rc5ZfOjhwAuxELTt3K7P6fh8F3qodgmb/2trQtKV FlO5KgwKD7MLRHZLMvL6z6C9Y/gshwZQ -----END CERTIFICATE-----Generated at Thu May 2 22:28:48 2024 by rpki-client on console-ams.rpki-client.org