$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft File: EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft (raw, json) Hash identifier: wR5FzLIy0wQOMHaeAIVbGj6IcwsjiqPxT8IpXtBhPCE= Subject key identifier: DC:3D:45:F1:50:5F:93:D4:AC:DC:32:12:80:41:A1:EA:A3:4E:7F:EB Authority key identifier: 11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17 Certificate issuer: /CN=A913B1DA/serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17 Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft Manifest number: 86 Signing time: Sat 18 May 2024 15:41:50 +0000 Manifest this update: Sat 18 May 2024 15:41:50 +0000 Manifest next update: Sat 25 May 2024 15:41:50 +0000 Files and hashes: 1: EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl (hash: yKQLv11YhqHtWsSEAYzaihz1YyK3hmEm3nhUjlyNSL8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B1DA/serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17 Validity Not Before: May 18 15:41:50 2024 GMT Not After : May 25 15:41:50 2024 GMT Subject: CN=6648cc3e-7aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:86:54:8e:be:35:2f:06:20:6d:e6:16:b7:e4: 65:75:92:92:1a:d5:a9:37:22:fc:9e:29:80:59:86: 29:61:be:e1:8f:15:9d:fe:a4:92:4e:d3:4d:02:69: 96:61:36:1a:59:2d:2f:c3:2a:e1:2b:52:37:e1:16: c7:ba:b1:2a:5a:14:3d:83:95:0c:80:da:3d:be:8c: 0f:6b:c3:91:e4:dc:16:55:94:a7:3c:56:68:f4:aa: 67:ed:22:ab:78:b4:d8:27:49:01:74:7b:94:6b:9a: a2:a9:62:a6:a5:38:f4:c1:eb:4d:9d:53:fd:5f:f3: 87:ec:7a:94:2a:2e:cb:ac:71:95:61:94:51:68:6d: de:c8:3f:2f:4c:c6:86:24:01:5e:2a:20:43:f1:df: 85:76:1c:84:f2:44:a4:b3:e5:37:6a:55:fc:8f:10: 4c:60:ff:61:1a:91:62:2f:82:e8:ed:07:24:36:34: 2a:90:dc:9d:3f:3d:ec:5f:43:72:85:5e:1b:07:ee: 91:1f:9d:35:c0:e9:a6:68:55:02:eb:bd:08:f1:ed: e2:6f:a1:0d:59:a4:21:09:07:bc:67:4d:3e:3a:13: 98:fe:5c:6b:30:af:1b:3f:d9:8b:96:84:ab:ab:12: c7:f1:e6:79:28:b3:4b:0a:4d:97:f8:b5:52:16:98: fd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:3D:45:F1:50:5F:93:D4:AC:DC:32:12:80:41:A1:EA:A3:4E:7F:EB X509v3 Authority Key Identifier: keyid:11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:e2:af:d7:79:4a:53:54:e0:1c:38:ed:db:e2:86:09:14:b9: 56:79:4b:e3:3a:2c:57:5a:81:5a:22:24:0d:00:cf:cf:ef:e5: 75:7c:d5:cf:16:ea:ab:8a:04:de:6c:b4:ca:80:53:eb:a1:3f: 03:b7:63:7a:39:32:8d:5c:0e:81:91:ff:a8:92:68:62:b3:3a: 79:d5:d5:56:e2:76:11:8e:34:e6:a7:e9:c0:b3:b2:77:e5:b6: bd:6f:d8:68:4b:f1:c9:44:ec:02:dd:f7:fc:b6:63:89:7b:02: 76:c6:74:4c:4c:27:f4:44:ce:13:70:f1:0a:46:46:9c:07:0b: 55:dd:48:d1:e1:e1:4d:45:96:64:09:d8:4c:6a:30:94:79:2f: 5c:fc:ac:b9:0a:c3:79:92:ec:5a:dd:33:72:a6:d4:61:1a:83: 78:62:d9:ff:07:c1:1f:74:df:f4:ac:70:60:0c:4d:f0:9b:ec: 21:37:ca:2b:d6:65:3c:86:cc:36:96:74:fe:e5:80:16:c4:e5: c2:f7:03:8d:d9:84:24:30:7a:a5:05:0b:16:a4:d5:68:5d:3e: 20:12:c2:61:4d:18:73:39:bb:39:aa:71:4b:05:da:7e:4b:15: 34:31:44:6f:f5:13:88:e1:90:c1:5c:cd:61:d1:fe:f2:dd:1d: b6:c9:97:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IxREExMTAvBgNVBAUTKDExMDlGQkM3M0ExODlCM0Q2NDcxM0ExRjZDNDg2QTA0 RTdCNDNCMTcwHhcNMjQwNTE4MTU0MTUwWhcNMjQwNTI1MTU0MTUwWjAYMRYwFAYD VQQDEw02NjQ4Y2MzZS03YWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+oZUjr41LwYgbeYWt+RldZKSGtWpNyL8nimAWYYpYb7hjxWd/qSSTtNNAmmW YTYaWS0vwyrhK1I34RbHurEqWhQ9g5UMgNo9vowPa8OR5NwWVZSnPFZo9Kpn7SKr eLTYJ0kBdHuUa5qiqWKmpTj0wetNnVP9X/OH7HqUKi7LrHGVYZRRaG3eyD8vTMaG JAFeKiBD8d+FdhyE8kSks+U3alX8jxBMYP9hGpFiL4Lo7QckNjQqkNydPz3sX0Ny hV4bB+6RH501wOmmaFUC670I8e3ib6ENWaQhCQe8Z00+OhOY/lxrMK8bP9mLloSr qxLH8eZ5KLNLCk2X+LVSFpj9gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNw9RfFQ X5PUrNwyEoBBoeqjTn/rMB8GA1UdIwQYMBaAFBEJ+8c6GJs9ZHE6H2xIagTntDsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjFEQS9BOTBGOERBNDRD NzkxMUVFQTc5RENEM0JDNEY5QUUwMi9FUW43eHpvWW16MWtjVG9mYkVocUJPZTBP eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VRbjd4em9ZbXoxa2NUb2ZiRWhxQk9lME94Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjFEQS9BOTBGOERBNDRDNzkxMUVFQTc5RENEM0JDNEY5QUUwMi9FUW43eHpvWW16 MWtjVG9mYkVocUJPZTBPeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB04q/XeUpTVOAcOO3b4oYJFLlWeUvjOixXWoFaIiQNAM/P7+V1fNXP FuqrigTebLTKgFProT8Dt2N6OTKNXA6Bkf+okmhiszp51dVW4nYRjjTmp+nAs7J3 5ba9b9hoS/HJROwC3ff8tmOJewJ2xnRMTCf0RM4TcPEKRkacBwtV3UjR4eFNRZZk CdhMajCUeS9c/Ky5CsN5kuxa3TNyptRhGoN4Ytn/B8EfdN/0rHBgDE3wm+whN8or 1mU8hsw2lnT+5YAWxOXC9wON2YQkMHqlBQsWpNVoXT4gEsJhTRhzObs5qnFLBdp+ SxU0MURv9ROI4ZDBXM1h0f7y3R22yZfN -----END CERTIFICATE-----Generated at Sat May 18 17:20:03 2024 by rpki-client on console-ams.rpki-client.org