$ rpki-client -vvf rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft File: eHZtYCpA71cBQmhKcj6KNAxv84I.mft (raw, json) Hash identifier: wlGdaUe6x+5MLCmoKaDmYDcNlsbyn3ownOAZuIvkcR0= Subject key identifier: EA:FF:AD:9D:7D:52:D7:74:1D:88:9D:4B:FF:1E:44:86:02:D9:85:09 Authority key identifier: 78:76:6D:60:2A:40:EF:57:01:42:68:4A:72:3E:8A:34:0C:6F:F3:82 Certificate issuer: /CN=A912A70D/serialNumber=78766D602A40EF570142684A723E8A340C6FF382 Certificate serial: 0386 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft Manifest number: 0383 Signing time: Sun 19 May 2024 02:43:20 +0000 Manifest this update: Sun 19 May 2024 02:43:20 +0000 Manifest next update: Sun 26 May 2024 02:43:20 +0000 Files and hashes: 1: eHZtYCpA71cBQmhKcj6KNAxv84I.crl (hash: PH2AJD6hfJJKKrPxGWP2SIubmLQQ5wYuC4DOQmqtMAU=) 2: 90AE61AC595711EC8761C361C4F9AE02.roa (hash: MHLkIrG8OE5UOit08v3EdsiD1KiljA4jon27VqLiskc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.crl rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:43:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 902 (0x386) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A70D/serialNumber=78766D602A40EF570142684A723E8A340C6FF382 Validity Not Before: May 19 02:43:20 2024 GMT Not After : May 26 02:43:20 2024 GMT Subject: CN=66496748-59c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:84:66:31:d9:94:3c:d0:f8:a7:de:be:6c:7b: 0c:ab:08:fe:03:f0:26:b2:b2:ef:20:64:5d:df:e0: 7f:77:10:ce:a5:2f:0f:72:53:93:6c:26:03:e8:cb: 02:71:e8:bb:40:30:a4:69:64:c2:9d:b1:11:b3:3d: f6:00:c9:88:d4:7a:5f:0f:22:fd:5e:32:1c:18:e6: ee:38:b9:a3:7c:12:7c:85:62:ee:86:da:d0:0b:f1: a7:e3:65:0b:fa:f9:60:53:75:fb:64:e2:b8:70:b3: 30:00:61:08:4f:67:f2:4f:13:88:39:58:c4:bc:79: 3d:86:52:98:42:eb:41:aa:50:62:30:5d:f2:f4:ca: 68:0f:02:ad:f4:23:95:5f:03:dc:91:8b:c8:f5:5e: fd:54:a4:25:ab:83:24:52:30:32:b0:3f:a7:38:fd: 46:86:a8:8d:5b:bf:55:b1:65:15:60:a8:69:0a:79: ad:db:34:f0:83:27:9f:df:3a:5b:4c:e9:ec:4b:93: 17:0f:c9:26:f1:24:78:cd:c0:ce:44:fc:a3:07:1d: 84:07:88:54:f3:e3:5a:6e:68:6b:0a:99:be:f5:b1: 90:fb:0a:dd:00:57:a0:dd:7a:4d:ae:0b:69:35:43: e5:6f:34:bd:44:5d:63:e4:7f:9f:93:ea:0f:9f:d9: 80:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:FF:AD:9D:7D:52:D7:74:1D:88:9D:4B:FF:1E:44:86:02:D9:85:09 X509v3 Authority Key Identifier: keyid:78:76:6D:60:2A:40:EF:57:01:42:68:4A:72:3E:8A:34:0C:6F:F3:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:e4:88:d2:d6:8f:81:11:41:64:56:8e:ed:b3:ca:b5:21:79: 00:eb:a1:07:df:92:9b:e0:11:f4:f5:03:95:dc:cd:17:c6:9f: 6d:fc:4c:a0:0b:8b:b1:82:d1:5c:7e:dd:75:7b:0c:95:ad:d4: 63:3c:bd:79:13:78:e9:a1:04:e1:8d:8f:9e:0e:69:87:e1:7c: 92:e9:37:07:6f:38:91:79:2c:f0:b5:5c:14:14:6e:98:de:d7: b4:c8:8f:bb:d7:20:e1:07:d5:0e:9b:95:31:02:ba:3a:63:1b: fe:28:4c:c1:96:df:20:70:9d:0c:96:22:2f:ee:24:8f:40:0d: 02:4c:ed:a6:d0:ea:74:77:8a:ba:46:6b:17:fb:77:20:1b:81: 84:4e:d0:e7:41:4b:57:a3:e8:68:29:f4:97:d2:1b:2a:51:96: f6:46:3a:ec:22:a2:b4:72:b3:93:08:39:75:14:01:b9:36:29: 8b:f3:39:cf:58:58:45:74:df:15:af:b0:ad:a9:fb:c8:e6:85: fd:8c:f2:4c:76:29:16:df:31:72:15:b4:29:65:9e:78:4b:aa: 57:df:c7:66:67:70:04:0c:09:d2:20:a5:dd:8d:c5:08:4e:2f: af:46:4f:7e:95:c2:dc:dc:7f:71:e2:eb:dc:70:0c:d0:c0:25: 0c:1d:aa:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE3MEQxMTAvBgNVBAUTKDc4NzY2RDYwMkE0MEVGNTcwMTQyNjg0QTcyM0U4QTM0 MEM2RkYzODIwHhcNMjQwNTE5MDI0MzIwWhcNMjQwNTI2MDI0MzIwWjAYMRYwFAYD VQQDEw02NjQ5Njc0OC01OWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYRmMdmUPND4p96+bHsMqwj+A/AmsrLvIGRd3+B/dxDOpS8PclOTbCYD6MsC cei7QDCkaWTCnbERsz32AMmI1HpfDyL9XjIcGObuOLmjfBJ8hWLuhtrQC/Gn42UL +vlgU3X7ZOK4cLMwAGEIT2fyTxOIOVjEvHk9hlKYQutBqlBiMF3y9MpoDwKt9COV XwPckYvI9V79VKQlq4MkUjAysD+nOP1GhqiNW79VsWUVYKhpCnmt2zTwgyef3zpb TOnsS5MXD8km8SR4zcDORPyjBx2EB4hU8+NabmhrCpm+9bGQ+wrdAFeg3XpNrgtp NUPlbzS9RF1j5H+fk+oPn9mAvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOr/rZ19 Utd0HYidS/8eRIYC2YUJMB8GA1UdIwQYMBaAFHh2bWAqQO9XAUJoSnI+ijQMb/OC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTcwRC8xMTE0QzlCQTU5 NTAxMUVDQUUwOTMyODJDNEY5QUUwMi9lSFp0WUNwQTcxY0JRbWhLY2o2S05BeHY4 NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VIWnRZQ3BBNzFjQlFtaEtjajZLTkF4djg0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTcwRC8xMTE0QzlCQTU5NTAxMUVDQUUwOTMyODJDNEY5QUUwMi9lSFp0WUNwQTcx Y0JRbWhLY2o2S05BeHY4NEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDb5IjS1o+BEUFkVo7ts8q1IXkA66EH35Kb4BH09QOV3M0Xxp9t/Eyg C4uxgtFcft11ewyVrdRjPL15E3jpoQThjY+eDmmH4XyS6TcHbziReSzwtVwUFG6Y 3te0yI+71yDhB9UOm5UxAro6Yxv+KEzBlt8gcJ0MliIv7iSPQA0CTO2m0Op0d4q6 RmsX+3cgG4GETtDnQUtXo+hoKfSX0hsqUZb2RjrsIqK0crOTCDl1FAG5NimL8znP WFhFdN8Vr7CtqfvI5oX9jPJMdikW3zFyFbQpZZ54S6pX38dmZ3AEDAnSIKXdjcUI Ti+vRk9+lcLc3H9x4uvccAzQwCUMHaq/ -----END CERTIFICATE-----Generated at Sun May 19 03:14:48 2024 by rpki-client on console-fra.rpki-client.org