$ rpki-client -vvf rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.mft File: EYuDYeRNUFJcthNQslJrWfbeLc0.mft (raw, json) Hash identifier: K9NJjB61BZFtbgzrh/Avod7z1DFYAj2SEj7DNYUq1ig= Subject key identifier: BE:64:CC:06:54:6A:8A:0C:45:4B:B8:E7:90:FB:43:41:C2:10:D7:FC Authority key identifier: 11:8B:83:61:E4:4D:50:52:5C:B6:13:50:B2:52:6B:59:F6:DE:2D:CD Certificate issuer: /CN=A912F76A/serialNumber=118B8361E44D50525CB61350B2526B59F6DE2DCD Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EYuDYeRNUFJcthNQslJrWfbeLc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.mft Manifest number: A4 Signing time: Sun 19 May 2024 06:41:23 +0000 Manifest this update: Sun 19 May 2024 06:41:23 +0000 Manifest next update: Sun 26 May 2024 06:41:23 +0000 Files and hashes: 1: EYuDYeRNUFJcthNQslJrWfbeLc0.crl (hash: gaiGXje6oGfIjn3q8gEsy2BcOIGZeq/BMeeSfekg4+0=) 2: 38D5D8D0197111EE86688756C4F9AE02.roa (hash: S+GM/hI5DIbUGtBZ9+vBFOwWsIkF8lcgs3bgRA+/mHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.crl rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EYuDYeRNUFJcthNQslJrWfbeLc0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F76A/serialNumber=118B8361E44D50525CB61350B2526B59F6DE2DCD Validity Not Before: May 19 06:41:23 2024 GMT Not After : May 26 06:41:23 2024 GMT Subject: CN=66499f13-4cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0a:f8:b3:79:1a:9a:76:d5:85:7a:c5:32:e9: 90:0c:ea:91:52:be:8c:d7:af:f4:3d:18:99:f3:65: af:67:8a:ff:3a:4a:b5:73:27:e0:61:c9:ea:8f:0f: f8:51:a7:2e:bf:b3:5f:42:85:c7:c0:8b:5f:1c:f2: 71:94:d2:3d:eb:fd:35:a0:24:87:6d:2a:19:11:d4: 17:5c:61:fd:f0:8c:b0:1b:ce:b5:84:df:30:c2:d8: f9:64:80:1e:4b:82:b8:e2:bf:30:76:5b:75:5a:ab: 80:8d:b9:9f:45:3d:b8:79:b8:8d:31:9f:8d:ef:51: 48:d4:6f:3e:e0:b0:34:e9:43:3a:74:1a:c5:ef:81: c5:2c:31:91:e6:0f:0b:86:71:42:f7:e2:b2:88:12: 2e:09:7c:90:4c:13:32:fe:6b:2a:92:3c:fb:85:3f: 8e:3a:6f:9b:4c:bc:3b:a5:61:8d:e2:46:48:0d:64: 33:e1:96:5a:e3:8f:8b:dd:7b:1e:90:71:67:b5:3e: 08:fe:8e:6d:02:25:b1:b0:a1:06:e1:41:1f:2f:09: db:7b:88:15:4b:77:6d:fe:09:15:cf:78:3b:2c:49: 49:fa:97:f6:c9:26:56:29:52:d4:28:60:11:3d:ed: 72:97:f4:e1:2b:bb:2b:17:32:a0:8e:43:50:74:38: c8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:64:CC:06:54:6A:8A:0C:45:4B:B8:E7:90:FB:43:41:C2:10:D7:FC X509v3 Authority Key Identifier: keyid:11:8B:83:61:E4:4D:50:52:5C:B6:13:50:B2:52:6B:59:F6:DE:2D:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EYuDYeRNUFJcthNQslJrWfbeLc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:1c:c4:b0:a4:19:5d:6e:80:60:5d:08:ce:e2:ea:2e:cb:d9: 5c:88:be:99:53:61:b3:a2:1e:8a:ef:6f:1f:5b:a6:d6:c5:6a: 40:81:d7:e6:90:ca:9b:a5:68:65:b2:5a:9a:02:f9:d9:a9:2a: 4e:df:57:7b:94:9a:99:6d:cb:67:23:56:03:a1:5c:9b:62:62: 89:4b:69:6b:92:e9:63:38:a3:fa:45:ee:be:a2:e3:b4:26:6e: a5:30:73:1a:c8:a0:c0:56:2c:47:0f:ef:44:c9:ce:8c:a5:bb: 00:79:a6:30:f3:9e:35:58:3b:91:50:df:b7:b3:e0:6b:b3:80: 5b:b7:49:63:d5:c4:9a:37:27:84:d1:db:93:d0:45:7e:40:5f: 66:a9:fd:d4:3d:0b:61:19:77:42:2e:87:65:34:cb:1e:3d:0c: a1:5b:6c:b1:e8:ff:48:50:8d:2e:30:2d:69:64:59:ca:26:00: 44:38:21:97:26:a6:bf:ea:5f:8a:90:05:bb:c0:6d:55:7d:a4: fb:7f:c0:56:e4:74:12:15:15:fb:01:fa:63:f5:98:5c:56:1d: ca:8f:3b:12:7c:f8:24:43:77:2d:33:cc:df:0f:91:7e:65:63: 13:fd:63:2a:73:16:ac:f3:5d:4a:3f:45:24:86:69:4a:6e:f9: 92:10:09:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY3NkExMTAvBgNVBAUTKDExOEI4MzYxRTQ0RDUwNTI1Q0I2MTM1MEIyNTI2QjU5 RjZERTJEQ0QwHhcNMjQwNTE5MDY0MTIzWhcNMjQwNTI2MDY0MTIzWjAYMRYwFAYD VQQDEw02NjQ5OWYxMy00Y2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlwr4s3kamnbVhXrFMumQDOqRUr6M16/0PRiZ82WvZ4r/Okq1cyfgYcnqjw/4 Uacuv7NfQoXHwItfHPJxlNI96/01oCSHbSoZEdQXXGH98IywG861hN8wwtj5ZIAe S4K44r8wdlt1WquAjbmfRT24ebiNMZ+N71FI1G8+4LA06UM6dBrF74HFLDGR5g8L hnFC9+KyiBIuCXyQTBMy/msqkjz7hT+OOm+bTLw7pWGN4kZIDWQz4ZZa44+L3Xse kHFntT4I/o5tAiWxsKEG4UEfLwnbe4gVS3dt/gkVz3g7LElJ+pf2ySZWKVLUKGAR Pe1yl/ThK7srFzKgjkNQdDjISQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5kzAZU aooMRUu455D7Q0HCENf8MB8GA1UdIwQYMBaAFBGLg2HkTVBSXLYTULJSa1n23i3N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjc2QS8yRkJBOEJGRTE5 NkUxMUVFQUI0NURCNTRDNEY5QUUwMi9FWXVEWWVSTlVGSmN0aE5Rc2xKcldmYmVM YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VZdURZZVJOVUZKY3RoTlFzbEpyV2ZiZUxjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Rjc2QS8yRkJBOEJGRTE5NkUxMUVFQUI0NURCNTRDNEY5QUUwMi9FWXVEWWVSTlVG SmN0aE5Rc2xKcldmYmVMYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRHMSwpBldboBgXQjO4uouy9lciL6ZU2Gzoh6K728fW6bWxWpAgdfm kMqbpWhlslqaAvnZqSpO31d7lJqZbctnI1YDoVybYmKJS2lrkuljOKP6Re6+ouO0 Jm6lMHMayKDAVixHD+9Eyc6MpbsAeaYw8541WDuRUN+3s+Brs4Bbt0lj1cSaNyeE 0duT0EV+QF9mqf3UPQthGXdCLodlNMsePQyhW2yx6P9IUI0uMC1pZFnKJgBEOCGX Jqa/6l+KkAW7wG1VfaT7f8BW5HQSFRX7Afpj9ZhcVh3KjzsSfPgkQ3ctM8zfD5F+ ZWMT/WMqcxas811KP0UkhmlKbvmSEAk/ -----END CERTIFICATE-----Generated at Sun May 19 07:40:38 2024 by rpki-client on console-fra.rpki-client.org