$ rpki-client -vvf rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft File: eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft (raw, json) Hash identifier: ExPDU02wkbfixVIUUllD9D5aqk3PnV4KKK1QNLWAFII= Subject key identifier: 11:A1:B7:28:E0:66:22:9E:95:77:AD:92:A3:30:B1:F7:AD:F9:76:71 Authority key identifier: 78:9F:8B:78:7E:D3:DD:35:20:33:32:CE:B3:B5:32:E1:FA:F0:B6:C6 Certificate issuer: /CN=A914CF73/serialNumber=789F8B787ED3DD35203332CEB3B532E1FAF0B6C6 Certificate serial: 3393 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft Manifest number: 338C Signing time: Sat 18 May 2024 15:35:29 +0000 Manifest this update: Sat 18 May 2024 15:35:28 +0000 Manifest next update: Sat 25 May 2024 15:35:28 +0000 Files and hashes: 1: eJ-LeH7T3TUgMzLOs7Uy4frwtsY.crl (hash: /spv/i9sd04aepe+n8ygAc0cvxFoQjeBZMkx/spCRqM=) 2: 5007D8DECAB411E889484D32C4F9AE02.roa (hash: yH9ArofJ+tRfmo2FFuv4f0Cn+G4EX/rNPyc9NB/teQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.crl rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13203 (0x3393) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CF73/serialNumber=789F8B787ED3DD35203332CEB3B532E1FAF0B6C6 Validity Not Before: May 18 15:35:28 2024 GMT Not After : May 25 15:35:28 2024 GMT Subject: CN=6648cac1-6e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1e:97:e2:73:fc:9b:5f:20:a5:44:59:19:6d: a4:f8:b1:37:e5:33:c4:df:43:16:c4:7d:76:18:04: 9b:1b:1f:ba:af:87:cf:ca:26:b1:22:be:7c:da:ee: f8:c0:6b:37:a9:80:4d:b1:4a:6e:d2:6c:ef:66:3c: 1e:d2:85:58:07:29:93:72:e2:f0:b6:81:1f:c4:42: e2:22:a0:f2:b7:53:0f:89:b8:0d:4c:20:b2:39:3b: 3d:17:52:4e:16:95:c7:a2:ca:8f:c7:ff:41:01:de: 15:f2:a7:ca:44:45:33:22:27:77:57:73:3b:fd:35: b6:78:77:72:04:fa:4f:eb:ee:80:51:60:69:1e:8c: 65:91:6c:84:f1:18:52:bd:5c:e2:d8:10:75:05:25: 9b:4d:49:fb:b8:df:4a:49:e7:fa:27:28:6c:18:7a: 18:0f:f1:eb:f3:14:72:f4:a7:27:f2:69:29:ac:af: 23:61:b7:0f:66:5e:b6:f1:c5:f3:eb:b0:c1:c5:d6: 19:40:4a:e9:96:ba:91:b2:ca:b0:a6:8f:78:07:ea: 6f:2e:d5:88:9b:8d:75:be:ca:b9:93:b6:fd:7d:7b: 55:a4:1e:c9:1f:a7:d2:c5:14:d4:f0:4d:4b:58:0c: df:56:17:2a:f3:31:57:2d:93:7b:8c:3c:25:18:5d: 2c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A1:B7:28:E0:66:22:9E:95:77:AD:92:A3:30:B1:F7:AD:F9:76:71 X509v3 Authority Key Identifier: keyid:78:9F:8B:78:7E:D3:DD:35:20:33:32:CE:B3:B5:32:E1:FA:F0:B6:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:fe:f1:7a:d5:ca:e7:b4:71:8f:03:b1:10:b1:64:66:20:67: 1d:16:4f:9a:d4:be:75:f8:e1:c6:fe:9a:b5:0c:00:72:d9:b3: 3b:29:34:ee:ed:b9:d8:a3:7a:0c:ac:c7:91:51:6c:40:d6:96: 9f:7b:92:ea:91:85:a6:66:ed:fa:4c:38:26:32:d3:b0:88:25: 1f:99:dd:7e:5d:42:72:bf:6c:05:00:cc:58:1f:1a:14:fe:b6: f1:04:d4:19:48:ba:68:3e:12:a9:4c:b0:2b:ef:2d:9c:42:6e: f0:ca:4c:18:ed:c1:c3:7c:8e:ba:ae:62:94:73:e0:0a:89:9b: c7:d0:f7:90:b8:34:4f:25:22:4e:11:b3:9e:6c:b1:68:d2:31: ba:66:22:10:c7:4c:97:32:98:6d:e3:40:13:f0:04:25:8f:da: 8c:84:0c:ed:08:0a:a7:dd:31:83:9c:59:32:f6:3b:3f:fb:84: 87:d1:3d:b5:55:f7:43:c4:4d:0f:e7:51:c0:6c:ab:f2:75:2e: 4e:04:b7:0e:e1:dd:84:68:0a:b7:38:5b:a9:df:da:20:67:06: 5f:62:c8:43:06:04:8e:ac:64:18:09:85:93:1c:fb:99:ab:d7: 5e:c0:68:dd:4e:76:8b:aa:ad:2d:9a:df:06:2f:83:b9:90:83: 50:e3:9f:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENGNzMxMTAvBgNVBAUTKDc4OUY4Qjc4N0VEM0REMzUyMDMzMzJDRUIzQjUzMkUx RkFGMEI2QzYwHhcNMjQwNTE4MTUzNTI4WhcNMjQwNTI1MTUzNTI4WjAYMRYwFAYD VQQDEw02NjQ4Y2FjMS02ZTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyR6X4nP8m18gpURZGW2k+LE35TPE30MWxH12GASbGx+6r4fPyiaxIr582u74 wGs3qYBNsUpu0mzvZjwe0oVYBymTcuLwtoEfxELiIqDyt1MPibgNTCCyOTs9F1JO FpXHosqPx/9BAd4V8qfKREUzIid3V3M7/TW2eHdyBPpP6+6AUWBpHoxlkWyE8RhS vVzi2BB1BSWbTUn7uN9KSef6JyhsGHoYD/Hr8xRy9Kcn8mkprK8jYbcPZl628cXz 67DBxdYZQErplrqRssqwpo94B+pvLtWIm411vsq5k7b9fXtVpB7JH6fSxRTU8E1L WAzfVhcq8zFXLZN7jDwlGF0s2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBGhtyjg ZiKelXetkqMwsfet+XZxMB8GA1UdIwQYMBaAFHifi3h+0901IDMyzrO1MuH68LbG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0Y3My9BNjg0NzU1MDJB MDExMUUyODE3MjNDQTYwOEIwMkNEMi9lSi1MZUg3VDNUVWdNekxPczdVeTRmcnd0 c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VKLUxlSDdUM1RVZ016TE9zN1V5NGZyd3RzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0Y3My9BNjg0NzU1MDJBMDExMUUyODE3MjNDQTYwOEIwMkNEMi9lSi1MZUg3VDNU VWdNekxPczdVeTRmcnd0c1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA//vF61crntHGPA7EQsWRmIGcdFk+a1L51+OHG/pq1DABy2bM7KTTu 7bnYo3oMrMeRUWxA1pafe5LqkYWmZu36TDgmMtOwiCUfmd1+XUJyv2wFAMxYHxoU /rbxBNQZSLpoPhKpTLAr7y2cQm7wykwY7cHDfI66rmKUc+AKiZvH0PeQuDRPJSJO EbOebLFo0jG6ZiIQx0yXMpht40AT8AQlj9qMhAztCAqn3TGDnFky9js/+4SH0T21 VfdDxE0P51HAbKvydS5OBLcO4d2EaAq3OFup39ogZwZfYshDBgSOrGQYCYWTHPuZ q9dewGjdTnaLqq0tmt8GL4O5kINQ458g -----END CERTIFICATE-----Generated at Sat May 18 16:19:52 2024 by rpki-client on console-fra.rpki-client.org