$ rpki-client -vvf rpki.apnic.net/member_repository/A91530ED/4D8F8842400F11EEB6B3DB4AC4F9AE02/EU3kpq3-T6GGFcVHcV67T_WUbvY.mft File: EU3kpq3-T6GGFcVHcV67T_WUbvY.mft (raw, json) Hash identifier: NAKnIKp4FjkNE1taI6ruufnXyZxnjRQe1CqUgaHkZMw= Subject key identifier: 81:B9:0E:9A:E3:E9:C5:C7:93:ED:34:37:82:F9:CD:3D:D3:42:E1:AB Authority key identifier: 11:4D:E4:A6:AD:FE:4F:A1:86:15:C5:47:71:5E:BB:4F:F5:94:6E:F6 Certificate issuer: /CN=A91530ED/serialNumber=114DE4A6ADFE4FA18615C547715EBB4FF5946EF6 Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU3kpq3-T6GGFcVHcV67T_WUbvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91530ED/4D8F8842400F11EEB6B3DB4AC4F9AE02/EU3kpq3-T6GGFcVHcV67T_WUbvY.mft Manifest number: 8D Signing time: Sun 19 May 2024 07:01:26 +0000 Manifest this update: Sun 19 May 2024 07:01:25 +0000 Manifest next update: Sun 26 May 2024 07:01:25 +0000 Files and hashes: 1: EU3kpq3-T6GGFcVHcV67T_WUbvY.crl (hash: 7BO3jNmHNz9V56GaO9NrNCsAkuMi4a/C+xxEAAl2yjM=) 2: AA15C0AEE84311EE8683D32CC4F9AE02.roa (hash: smIi43BI+O+fak/LN2MJB2jQU0E28/YY9jrP2kFKLqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91530ED/4D8F8842400F11EEB6B3DB4AC4F9AE02/EU3kpq3-T6GGFcVHcV67T_WUbvY.crl rsync://rpki.apnic.net/member_repository/A91530ED/4D8F8842400F11EEB6B3DB4AC4F9AE02/EU3kpq3-T6GGFcVHcV67T_WUbvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU3kpq3-T6GGFcVHcV67T_WUbvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91530ED/serialNumber=114DE4A6ADFE4FA18615C547715EBB4FF5946EF6 Validity Not Before: May 19 07:01:25 2024 GMT Not After : May 26 07:01:25 2024 GMT Subject: CN=6649a3c5-bc95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bd:c8:2e:75:9f:d0:3a:c5:32:0f:64:71:3c: 9c:52:ae:a2:e6:01:93:ab:bd:af:2d:a1:68:37:bc: 7e:42:2b:85:46:e6:f4:19:bb:03:1e:ba:6b:87:74: f8:77:31:cd:59:b5:ab:18:24:67:95:6c:97:57:1c: bc:90:c3:51:fb:60:ce:89:9b:45:d4:47:5d:b5:34: a4:9a:c9:18:cd:55:64:09:cf:77:8a:59:02:38:a7: ea:ca:90:31:c2:d5:8d:75:01:ae:1d:04:eb:50:b3: d9:e4:1c:6f:98:ec:34:9d:f5:78:d0:eb:76:fc:c1: fa:ee:ec:a2:60:d4:b7:18:16:3a:2b:05:4a:31:84: a8:c0:31:d9:fb:ca:08:b2:f8:67:56:a6:aa:b2:33: 6e:af:b1:c2:4d:60:0f:33:8b:03:5c:69:bb:f8:57: e0:67:0e:c0:a9:57:1c:50:4b:6d:2b:69:c4:9d:5e: 56:a7:88:d3:57:a5:9f:ee:95:a6:b9:ae:60:83:d0: 8d:a1:77:6c:17:e3:f4:df:67:20:fe:1d:35:90:46: e3:3c:49:3e:20:dc:90:2f:79:db:c3:92:9f:98:82: 36:2e:f7:6d:cc:86:26:72:89:43:0a:ed:e8:de:58: a5:26:75:ef:dd:f3:99:0e:0e:5d:17:61:f4:9b:fe: 4a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:B9:0E:9A:E3:E9:C5:C7:93:ED:34:37:82:F9:CD:3D:D3:42:E1:AB X509v3 Authority Key Identifier: keyid:11:4D:E4:A6:AD:FE:4F:A1:86:15:C5:47:71:5E:BB:4F:F5:94:6E:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91530ED/4D8F8842400F11EEB6B3DB4AC4F9AE02/EU3kpq3-T6GGFcVHcV67T_WUbvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU3kpq3-T6GGFcVHcV67T_WUbvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91530ED/4D8F8842400F11EEB6B3DB4AC4F9AE02/EU3kpq3-T6GGFcVHcV67T_WUbvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:4f:d0:00:6b:c1:f8:db:db:2b:d2:85:3f:dd:c2:75:d3:36: 02:39:c5:0b:1f:38:8c:d7:01:52:88:bb:88:9f:a1:cd:53:36: 9c:ff:c0:e7:58:85:75:2f:2f:67:b7:5a:e3:fa:c5:02:7d:99: 12:2a:3a:3e:63:4c:a3:2a:59:8b:65:29:9d:85:a9:59:64:32: 30:37:b1:bf:a1:58:69:4f:7b:5c:49:00:46:ba:d4:33:b5:be: 04:6f:62:e1:53:27:26:24:18:ce:4e:30:dd:15:a7:f7:40:05: 63:53:c3:54:ee:23:9f:da:9a:f3:e6:a3:03:39:d6:dd:32:77: 24:84:c2:99:71:c5:fe:87:1e:2c:ad:7f:11:52:44:fc:04:c5: 88:a1:98:ae:3b:39:37:8f:e1:45:f4:bf:32:c2:6d:27:f7:13: 36:bc:f7:ec:c7:4d:26:eb:4f:bf:82:4b:4d:3f:51:7f:4c:1d: 35:de:87:0e:0b:fc:24:52:8e:10:f3:86:84:7d:6f:6d:3b:32: 29:fb:fe:c2:24:8b:74:da:6c:02:ed:21:61:69:06:dc:c4:bd: d4:4e:4d:39:3b:2a:21:39:fd:c8:bf:36:ea:ff:7d:31:5b:64: ef:3d:bf:9d:91:fe:df:e5:e4:0f:91:1a:1b:27:25:d7:f7:5a: c1:c6:ad:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTMwRUQxMTAvBgNVBAUTKDExNERFNEE2QURGRTRGQTE4NjE1QzU0NzcxNUVCQjRG RjU5NDZFRjYwHhcNMjQwNTE5MDcwMTI1WhcNMjQwNTI2MDcwMTI1WjAYMRYwFAYD VQQDEw02NjQ5YTNjNS1iYzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvL3ILnWf0DrFMg9kcTycUq6i5gGTq72vLaFoN7x+QiuFRub0GbsDHrprh3T4 dzHNWbWrGCRnlWyXVxy8kMNR+2DOiZtF1EddtTSkmskYzVVkCc93ilkCOKfqypAx wtWNdQGuHQTrULPZ5BxvmOw0nfV40Ot2/MH67uyiYNS3GBY6KwVKMYSowDHZ+8oI svhnVqaqsjNur7HCTWAPM4sDXGm7+FfgZw7AqVccUEttK2nEnV5Wp4jTV6Wf7pWm ua5gg9CNoXdsF+P032cg/h01kEbjPEk+INyQL3nbw5KfmII2LvdtzIYmcolDCu3o 3lilJnXv3fOZDg5dF2H0m/5KXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIG5Dprj 6cXHk+00N4L5zT3TQuGrMB8GA1UdIwQYMBaAFBFN5Kat/k+hhhXFR3Feu0/1lG72 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzBFRC80RDhGODg0MjQw MEYxMUVFQjZCM0RCNEFDNEY5QUUwMi9FVTNrcHEzLVQ2R0dGY1ZIY1Y2N1RfV1Vi dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VVM2twcTMtVDZHR0ZjVkhjVjY3VF9XVWJ2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzBFRC80RDhGODg0MjQwMEYxMUVFQjZCM0RCNEFDNEY5QUUwMi9FVTNrcHEzLVQ2 R0dGY1ZIY1Y2N1RfV1VidlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAT9AAa8H429sr0oU/3cJ10zYCOcULHziM1wFSiLuIn6HNUzac/8Dn WIV1Ly9nt1rj+sUCfZkSKjo+Y0yjKlmLZSmdhalZZDIwN7G/oVhpT3tcSQBGutQz tb4Eb2LhUycmJBjOTjDdFaf3QAVjU8NU7iOf2prz5qMDOdbdMnckhMKZccX+hx4s rX8RUkT8BMWIoZiuOzk3j+FF9L8ywm0n9xM2vPfsx00m60+/gktNP1F/TB013ocO C/wkUo4Q84aEfW9tOzIp+/7CJIt02mwC7SFhaQbcxL3UTk05OyohOf3Ivzbq/30x W2TvPb+dkf7f5eQPkRobJyXX91rBxq0j -----END CERTIFICATE-----Generated at Sun May 19 07:40:39 2024 by rpki-client on console-fra.rpki-client.org