$ rpki-client -vvf rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft File: eOQpC8zJmRWAsnbcDCyXv7CGINg.mft (raw, json) Hash identifier: BUUTfEkYrrTFimgn2bE9O8mpOljx5kIf2+2nrmPqRFM= Subject key identifier: AE:82:F7:10:C6:ED:EB:22:54:F2:A4:EA:B8:76:E7:D5:4D:78:90:C6 Authority key identifier: 78:E4:29:0B:CC:C9:99:15:80:B2:76:DC:0C:2C:97:BF:B0:86:20:D8 Certificate issuer: /CN=A914B79F/serialNumber=78E4290BCCC9991580B276DC0C2C97BFB08620D8 Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft Manifest number: 84 Signing time: Sun 19 May 2024 07:09:26 +0000 Manifest this update: Sun 19 May 2024 07:09:25 +0000 Manifest next update: Sun 26 May 2024 07:09:25 +0000 Files and hashes: 1: eOQpC8zJmRWAsnbcDCyXv7CGINg.crl (hash: wH+umUvAzn9Ig2Lzce3uPJ3UrM3U1TqoGMiyD3DWrdw=) 2: 43CBDE7C4E2A11EE801FE54FC4F9AE02.roa (hash: icLxxg2kl08UEmVFymHkZWK7smbTqhptrFZgNnZKSiE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.crl rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B79F/serialNumber=78E4290BCCC9991580B276DC0C2C97BFB08620D8 Validity Not Before: May 19 07:09:25 2024 GMT Not After : May 26 07:09:25 2024 GMT Subject: CN=6649a5a6-4ef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b6:8a:cd:60:8b:72:39:f1:ea:7f:bf:2e:5d: 3d:14:0c:b0:48:f9:b6:cd:85:16:3d:de:4d:26:26: bb:21:6d:f0:d6:a5:97:87:54:c4:da:33:23:25:e7: 26:17:74:c2:b0:84:f6:6f:df:8f:70:bc:4d:17:21: bf:77:17:5e:81:d7:52:a4:6a:9d:0d:7f:5d:ea:9a: 5c:a0:42:2f:59:37:22:0e:72:39:07:a8:04:c2:5c: be:f4:92:b7:0f:46:a0:67:4a:77:04:a4:08:80:71: 23:b2:f4:cb:0d:4c:59:e8:83:8a:28:95:82:08:f1: 53:21:3e:2e:bd:7a:8a:3d:be:4a:d9:7f:2a:9b:38: 6f:d8:42:72:e3:7d:de:f2:e2:b0:0b:fb:a2:4c:1c: 12:17:1d:ae:5c:43:b1:e7:5e:d2:e9:70:1f:27:c4: 02:95:f0:b6:69:72:6f:31:23:99:37:81:d8:21:58: 70:46:cd:28:02:3c:64:3c:9d:32:3f:3e:97:0e:1b: 65:0e:b6:56:b6:49:82:e8:2c:ae:cb:61:7e:f8:3a: 65:e6:33:54:19:f8:f0:16:74:3f:12:eb:6f:0d:fa: 44:e9:ae:ec:5d:18:cc:ac:50:e6:9a:1d:59:b3:db: d9:fd:92:5b:43:01:bd:46:9f:ed:fc:01:ef:1e:52: 1c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:82:F7:10:C6:ED:EB:22:54:F2:A4:EA:B8:76:E7:D5:4D:78:90:C6 X509v3 Authority Key Identifier: keyid:78:E4:29:0B:CC:C9:99:15:80:B2:76:DC:0C:2C:97:BF:B0:86:20:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:c8:f8:6d:3d:99:4b:66:cd:78:31:de:1d:bd:b7:3e:73:66: 7d:07:2c:d7:40:75:04:49:5d:01:8a:21:2e:7b:25:48:33:06: a3:be:90:e9:a8:4b:a2:84:73:34:26:29:64:4b:ce:76:0d:34: fc:79:ca:a8:62:ee:ae:e9:aa:af:5f:4b:4b:50:26:df:59:ef: f2:f8:07:5f:c4:a8:c9:c3:6a:16:c4:a0:57:37:28:81:8e:79: 34:3f:bf:bd:b7:1e:30:ad:40:0f:94:4c:a8:31:07:e5:ed:d4: d8:f3:da:2c:16:71:57:95:be:17:fa:d0:51:1c:72:2a:56:3f: c6:b0:9a:0f:ac:1e:51:79:1f:10:0b:45:08:27:c9:69:75:fa: df:e2:50:62:56:0d:cb:bc:97:9f:0f:1c:c0:ff:0f:5b:25:fd: 30:09:f2:95:76:e8:9a:61:19:2e:f2:86:d5:ad:f2:ec:6a:92: 43:00:af:12:1e:2f:5d:14:2e:f3:3f:26:a5:7c:5b:b2:fa:ea: 51:ed:16:9a:07:d2:d9:a6:2c:38:a2:a5:c2:ea:94:0a:74:0b: e1:8f:71:50:2a:bd:18:9e:ef:86:34:91:43:f7:02:a6:0a:2d: f1:76:98:c1:61:ee:48:86:0e:d9:c4:20:af:38:80:c0:73:8e: 79:02:26:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI3OUYxMTAvBgNVBAUTKDc4RTQyOTBCQ0NDOTk5MTU4MEIyNzZEQzBDMkM5N0JG QjA4NjIwRDgwHhcNMjQwNTE5MDcwOTI1WhcNMjQwNTI2MDcwOTI1WjAYMRYwFAYD VQQDEw02NjQ5YTVhNi00ZWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4LaKzWCLcjnx6n+/Ll09FAywSPm2zYUWPd5NJia7IW3w1qWXh1TE2jMjJecm F3TCsIT2b9+PcLxNFyG/dxdegddSpGqdDX9d6ppcoEIvWTciDnI5B6gEwly+9JK3 D0agZ0p3BKQIgHEjsvTLDUxZ6IOKKJWCCPFTIT4uvXqKPb5K2X8qmzhv2EJy433e 8uKwC/uiTBwSFx2uXEOx517S6XAfJ8QClfC2aXJvMSOZN4HYIVhwRs0oAjxkPJ0y Pz6XDhtlDrZWtkmC6Cyuy2F++Dpl5jNUGfjwFnQ/EutvDfpE6a7sXRjMrFDmmh1Z s9vZ/ZJbQwG9Rp/t/AHvHlIc8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK6C9xDG 7esiVPKk6rh259VNeJDGMB8GA1UdIwQYMBaAFHjkKQvMyZkVgLJ23Awsl7+whiDY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Qjc5Ri9EQTY4MzdGMDRF MjkxMUVFOTQ1QzM5NEZDNEY5QUUwMi9lT1FwQzh6Sm1SV0FzbmJjREN5WHY3Q0dJ TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VPUXBDOHpKbVJXQXNuYmNEQ3lYdjdDR0lOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Qjc5Ri9EQTY4MzdGMDRFMjkxMUVFOTQ1QzM5NEZDNEY5QUUwMi9lT1FwQzh6Sm1S V0FzbmJjREN5WHY3Q0dJTmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQyPhtPZlLZs14Md4dvbc+c2Z9ByzXQHUESV0BiiEueyVIMwajvpDp qEuihHM0JilkS852DTT8ecqoYu6u6aqvX0tLUCbfWe/y+AdfxKjJw2oWxKBXNyiB jnk0P7+9tx4wrUAPlEyoMQfl7dTY89osFnFXlb4X+tBRHHIqVj/GsJoPrB5ReR8Q C0UIJ8lpdfrf4lBiVg3LvJefDxzA/w9bJf0wCfKVduiaYRku8obVrfLsapJDAK8S Hi9dFC7zPyalfFuy+upR7RaaB9LZpiw4oqXC6pQKdAvhj3FQKr0Ynu+GNJFD9wKm Ci3xdpjBYe5Ihg7ZxCCvOIDAc455AibW -----END CERTIFICATE-----Generated at Sun May 19 08:25:01 2024 by rpki-client on console-ams.rpki-client.org