$ rpki-client -vvf rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/EEETzo9eAXUa9NDySWjYOSSmyAc.mft File: EEETzo9eAXUa9NDySWjYOSSmyAc.mft (raw, json) Hash identifier: Td+mPJeKlPTtbb4m5AT3ADZTsK3cP7XFrEecvE1ZEvY= Subject key identifier: D3:EA:B9:D6:94:D5:91:3E:F3:FD:0A:82:E5:A9:E8:52:5E:5A:4F:99 Authority key identifier: 10:41:13:CE:8F:5E:01:75:1A:F4:D0:F2:49:68:D8:39:24:A6:C8:07 Certificate issuer: /CN=A912A517/serialNumber=104113CE8F5E01751AF4D0F24968D83924A6C807 Certificate serial: 1125 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEETzo9eAXUa9NDySWjYOSSmyAc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/EEETzo9eAXUa9NDySWjYOSSmyAc.mft Manifest number: 110D Signing time: Sat 18 May 2024 17:52:24 +0000 Manifest this update: Sat 18 May 2024 17:52:24 +0000 Manifest next update: Sat 25 May 2024 17:52:24 +0000 Files and hashes: 1: EEETzo9eAXUa9NDySWjYOSSmyAc.crl (hash: PiwFbIyUm5kY5OzDtZ1oMlpw8PRP1R0D9bJhBlLkm24=) 2: 414227D6F03711EBB93D0345C4F9AE02.roa (hash: 80iuuI50VNY/a4o0mS9hka3b7TzbayzUIVpAAfHB8as=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/EEETzo9eAXUa9NDySWjYOSSmyAc.crl rsync://rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/EEETzo9eAXUa9NDySWjYOSSmyAc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEETzo9eAXUa9NDySWjYOSSmyAc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4389 (0x1125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A517/serialNumber=104113CE8F5E01751AF4D0F24968D83924A6C807 Validity Not Before: May 18 17:52:24 2024 GMT Not After : May 25 17:52:24 2024 GMT Subject: CN=6648ead8-f07d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f0:fa:14:7c:cb:80:b0:9c:31:eb:5d:5b:7c: 6d:cb:e6:07:1b:dc:42:c0:5f:92:02:1d:9b:5c:3f: 3c:f3:91:93:41:68:f8:59:ff:e0:54:24:d9:6a:ae: 9a:4d:1a:8e:52:f3:57:3f:cf:a3:92:c3:59:f0:71: 1c:ac:ec:2b:e2:08:4e:9d:ba:1e:6e:0f:5c:d5:b4: fa:f8:02:be:7c:4e:38:22:48:ed:b3:2b:17:8d:22: f0:be:d4:57:9b:bd:a5:ca:5c:74:58:e6:cf:f8:c7: bc:7c:dc:82:c9:1e:05:52:56:92:9d:4e:82:1f:ab: f4:9c:54:7f:55:cb:26:73:75:0c:57:f7:7d:a1:9e: c2:35:e7:16:47:94:63:57:91:5a:98:a6:ce:74:86: bf:37:84:c7:05:ef:32:e9:ce:6e:b2:6d:a9:34:da: fd:02:57:92:5a:62:92:cf:ea:b8:57:4f:7f:f0:6f: 69:77:a9:af:47:07:6c:f7:b5:69:21:96:79:2c:54: 14:a8:27:5c:d0:5f:b9:f1:f7:ad:47:d2:02:f1:4d: 92:80:e8:24:10:cb:ce:5f:5a:63:54:9d:b7:34:c1: d1:33:e3:b9:00:95:83:85:0c:fb:27:17:a5:d7:1f: 03:78:4c:c9:83:f0:ba:f9:3f:46:68:79:f6:e4:da: a8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:EA:B9:D6:94:D5:91:3E:F3:FD:0A:82:E5:A9:E8:52:5E:5A:4F:99 X509v3 Authority Key Identifier: keyid:10:41:13:CE:8F:5E:01:75:1A:F4:D0:F2:49:68:D8:39:24:A6:C8:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/EEETzo9eAXUa9NDySWjYOSSmyAc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEETzo9eAXUa9NDySWjYOSSmyAc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/EEETzo9eAXUa9NDySWjYOSSmyAc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:3e:cd:1d:07:40:e4:11:4d:e3:3d:05:83:ba:ee:fc:74:b6: 21:36:e8:78:cb:30:ee:bb:9c:75:7f:c6:97:1d:55:9f:51:7c: 48:df:a4:3d:26:74:9c:fc:48:ab:8e:5e:d2:e6:49:3c:49:fa: 8a:5a:a5:3f:66:94:26:5b:1c:dd:fc:c0:19:c8:d5:c3:26:af: a2:7a:c2:3d:bd:8e:c5:a3:0c:cc:29:01:06:19:9d:e8:30:e1: d2:61:44:a8:78:44:18:92:4c:ee:10:ec:5f:64:12:4b:75:88: 40:92:ed:8a:7d:8b:07:4e:2e:06:e2:b5:14:b1:4e:73:14:32: 45:ca:f2:af:07:f1:62:bd:38:fc:c8:a9:93:d9:9c:e2:4d:77: 9f:ca:ee:61:89:a8:78:bb:e5:67:e5:6a:aa:52:05:a2:8e:84: 34:80:6b:38:46:07:8d:ae:1f:87:e3:44:87:35:47:28:8e:f4: b7:68:bc:91:bb:c8:32:8f:b6:13:ab:07:f2:dc:f6:ab:60:1b: 57:c4:fe:bb:50:47:50:76:e3:f1:b2:83:63:6a:06:64:a1:1a: 82:56:9a:1c:37:0d:23:59:dd:24:aa:5f:28:0a:ba:de:20:bc: 87:b5:3a:3c:0d:03:9d:4f:f8:c0:ab:3f:16:df:8f:c8:66:ba: ea:96:ff:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICESUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE1MTcxMTAvBgNVBAUTKDEwNDExM0NFOEY1RTAxNzUxQUY0RDBGMjQ5NjhEODM5 MjRBNkM4MDcwHhcNMjQwNTE4MTc1MjI0WhcNMjQwNTI1MTc1MjI0WjAYMRYwFAYD VQQDEw02NjQ4ZWFkOC1mMDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/D6FHzLgLCcMetdW3xty+YHG9xCwF+SAh2bXD8885GTQWj4Wf/gVCTZaq6a TRqOUvNXP8+jksNZ8HEcrOwr4ghOnboebg9c1bT6+AK+fE44IkjtsysXjSLwvtRX m72lylx0WObP+Me8fNyCyR4FUlaSnU6CH6v0nFR/Vcsmc3UMV/d9oZ7CNecWR5Rj V5FamKbOdIa/N4THBe8y6c5usm2pNNr9AleSWmKSz+q4V09/8G9pd6mvRwds97Vp IZZ5LFQUqCdc0F+58fetR9IC8U2SgOgkEMvOX1pjVJ23NMHRM+O5AJWDhQz7Jxel 1x8DeEzJg/C6+T9GaHn25NqoBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNPqudaU 1ZE+8/0KguWp6FJeWk+ZMB8GA1UdIwQYMBaAFBBBE86PXgF1GvTQ8klo2DkkpsgH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTUxNy8yQjE5RkZCOEY1 MDAxMUU4QTkzQThFNjNDNEY5QUUwMi9FRUVUem85ZUFYVWE5TkR5U1dqWU9TU215 QWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VFRVR6bzllQVhVYTlORHlTV2pZT1NTbXlBYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTUxNy8yQjE5RkZCOEY1MDAxMUU4QTkzQThFNjNDNEY5QUUwMi9FRUVUem85ZUFY VWE5TkR5U1dqWU9TU215QWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAPs0dB0DkEU3jPQWDuu78dLYhNuh4yzDuu5x1f8aXHVWfUXxI36Q9 JnSc/Eirjl7S5kk8SfqKWqU/ZpQmWxzd/MAZyNXDJq+iesI9vY7FowzMKQEGGZ3o MOHSYUSoeEQYkkzuEOxfZBJLdYhAku2KfYsHTi4G4rUUsU5zFDJFyvKvB/FivTj8 yKmT2ZziTXefyu5hiah4u+Vn5WqqUgWijoQ0gGs4RgeNrh+H40SHNUcojvS3aLyR u8gyj7YTqwfy3ParYBtXxP67UEdQduPxsoNjagZkoRqCVpocNw0jWd0kql8oCrre ILyHtTo8DQOdT/jAqz8W34/IZrrqlv9B -----END CERTIFICATE-----Generated at Sat May 18 19:15:24 2024 by rpki-client on console-ams.rpki-client.org