$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft File: Ed9s5Nq5aE7fbPXgPf3shvFc174.mft (raw, json) Hash identifier: m/5VF8tDjgN1wwydmVruGcppBHPpsdu5oiGbSyLxO+Q= Subject key identifier: F2:20:40:84:21:EB:29:5F:65:5D:B7:B8:AD:2C:D5:FE:E0:7D:A4:70 Authority key identifier: 11:DF:6C:E4:DA:B9:68:4E:DF:6C:F5:E0:3D:FD:EC:86:F1:5C:D7:BE Certificate issuer: /CN=A9165DEE/serialNumber=11DF6CE4DAB9684EDF6CF5E03DFDEC86F15CD7BE Certificate serial: 0A26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft Manifest number: 0A1E Signing time: Fri 31 May 2024 21:14:28 +0000 Manifest this update: Fri 31 May 2024 21:14:28 +0000 Manifest next update: Fri 07 Jun 2024 21:14:28 +0000 Files and hashes: 1: Ed9s5Nq5aE7fbPXgPf3shvFc174.crl (hash: p75NMxAk7mpsfRkff1cfOWkuI42cdrxpGP6bNdtFn5E=) 2: C66770F24B9111EA9A72503CC4F9AE02.roa (hash: xL/igmGv/tHvkJn5yKoATONH6AHHS5dqWF72gorDIBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.crl rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 21:14:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2598 (0xa26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165DEE/serialNumber=11DF6CE4DAB9684EDF6CF5E03DFDEC86F15CD7BE Validity Not Before: May 31 21:14:28 2024 GMT Not After : Jun 7 21:14:28 2024 GMT Subject: CN=665a3db4-2155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:7e:38:99:e7:a6:17:aa:f7:ac:3a:bd:60:60: f0:5e:f6:5f:3c:ca:cb:4e:89:f8:b1:7b:35:01:b2: 2b:21:26:a3:03:6b:63:22:6a:61:6e:54:e5:51:e8: 99:11:3a:a8:87:22:2e:f6:8b:31:83:86:9c:22:68: c5:55:68:70:79:24:15:07:db:21:11:35:cf:e2:88: 46:cd:6e:dc:4a:1a:e0:cb:8c:39:83:61:a7:9e:66: fb:f2:15:73:56:71:39:9a:5a:c4:d2:d9:48:df:b7: d0:a1:85:40:6f:ca:40:68:9a:66:64:55:d0:a1:34: 77:ef:71:9b:32:c0:25:82:e8:65:9b:5a:f7:f3:12: aa:31:16:5c:a4:5b:65:8f:71:f2:dc:15:f8:39:e6: 19:36:a2:4b:0e:63:80:56:b5:d1:fa:b0:e3:60:9e: 36:33:b9:50:e7:38:f6:71:71:61:a9:c8:4e:30:23: 10:dc:fe:17:2c:ef:38:89:f6:10:2a:95:66:16:24: aa:e1:ed:26:2e:ad:a2:3c:4d:2c:c6:d7:84:20:3f: 10:0b:04:49:8e:95:d4:89:b8:9c:be:59:72:77:8b: 71:78:6b:74:b8:aa:73:15:79:8a:24:c1:b0:2a:c8: 2e:c4:75:64:d6:05:10:e8:a0:79:3c:61:56:d8:1a: 64:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:20:40:84:21:EB:29:5F:65:5D:B7:B8:AD:2C:D5:FE:E0:7D:A4:70 X509v3 Authority Key Identifier: keyid:11:DF:6C:E4:DA:B9:68:4E:DF:6C:F5:E0:3D:FD:EC:86:F1:5C:D7:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:31:c1:ab:dc:f2:20:b1:c8:26:1e:0d:75:76:c3:63:45:bd: 2f:5d:98:24:91:55:84:68:f2:cb:b9:4a:66:e4:4a:f1:b6:78: 9a:e8:d2:81:91:bd:96:5e:ef:d0:40:c1:3e:d4:e2:2c:15:46: d9:36:fb:a9:2f:66:df:23:2c:1f:8d:9b:72:d3:ec:ea:7c:6a: 3a:ef:0f:7a:87:f6:c7:78:f9:12:18:18:6a:6b:4c:eb:81:b2: 39:1b:0c:0d:c3:f1:3d:06:13:3b:37:69:0a:b8:0b:8b:a1:f6: c0:6f:3c:e5:dd:63:93:33:fe:91:a4:bf:db:a2:86:70:36:40: 09:04:22:54:b7:4e:1d:64:3b:31:76:3e:9d:41:9b:52:14:25: ca:21:26:dd:9b:fc:2f:1d:6e:8d:73:79:cb:78:52:64:df:29: a6:ed:a2:1f:ca:76:5a:d8:b7:a0:e2:4e:96:9e:77:e5:64:3f: 36:ee:fb:1d:7b:37:1b:0b:a5:1f:bf:7e:61:0e:a6:63:73:dd: 6d:aa:63:58:99:79:56:f9:29:31:d1:2f:16:5b:f6:93:9d:82: f5:3e:af:a4:f5:2b:7c:2f:d5:d3:4b:80:03:eb:ee:29:c7:c6: ed:cb:fb:95:de:41:5b:91:fa:e6:5c:62:c1:73:85:8c:f2:62: 8f:e7:70:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVERUUxMTAvBgNVBAUTKDExREY2Q0U0REFCOTY4NEVERjZDRjVFMDNERkRFQzg2 RjE1Q0Q3QkUwHhcNMjQwNTMxMjExNDI4WhcNMjQwNjA3MjExNDI4WjAYMRYwFAYD VQQDEw02NjVhM2RiNC0yMTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5n44meemF6r3rDq9YGDwXvZfPMrLTon4sXs1AbIrISajA2tjImphblTlUeiZ ETqohyIu9osxg4acImjFVWhweSQVB9shETXP4ohGzW7cShrgy4w5g2Gnnmb78hVz VnE5mlrE0tlI37fQoYVAb8pAaJpmZFXQoTR373GbMsAlguhlm1r38xKqMRZcpFtl j3Hy3BX4OeYZNqJLDmOAVrXR+rDjYJ42M7lQ5zj2cXFhqchOMCMQ3P4XLO84ifYQ KpVmFiSq4e0mLq2iPE0sxteEID8QCwRJjpXUibicvllyd4txeGt0uKpzFXmKJMGw KsguxHVk1gUQ6KB5PGFW2BpkKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPIgQIQh 6ylfZV23uK0s1f7gfaRwMB8GA1UdIwQYMBaAFBHfbOTauWhO32z14D397IbxXNe+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NURFRS9BREQ2NUUyODRC OTAxMUVBOTVCRUE2MzlDNEY5QUUwMi9FZDlzNU5xNWFFN2ZiUFhnUGYzc2h2RmMx NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VkOXM1TnE1YUU3ZmJQWGdQZjNzaHZGYzE3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NURFRS9BREQ2NUUyODRCOTAxMUVBOTVCRUE2MzlDNEY5QUUwMi9FZDlzNU5xNWFF N2ZiUFhnUGYzc2h2RmMxNzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaMcGr3PIgscgmHg11dsNjRb0vXZgkkVWEaPLLuUpm5Erxtnia6NKB kb2WXu/QQME+1OIsFUbZNvupL2bfIywfjZty0+zqfGo67w96h/bHePkSGBhqa0zr gbI5GwwNw/E9BhM7N2kKuAuLofbAbzzl3WOTM/6RpL/booZwNkAJBCJUt04dZDsx dj6dQZtSFCXKISbdm/wvHW6Nc3nLeFJk3ymm7aIfynZa2Leg4k6WnnflZD827vsd ezcbC6Ufv35hDqZjc91tqmNYmXlW+Skx0S8WW/aTnYL1Pq+k9St8L9XTS4AD6+4p x8bty/uV3kFbkfrmXGLBc4WM8mKP53D/ -----END CERTIFICATE-----Generated at Fri May 31 22:13:05 2024 by rpki-client on console-fra.rpki-client.org