$ rpki-client -vvf rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft File: EOBQLz04LowVZuzMKhIbbEOd6Xc.mft (raw, json) Hash identifier: e6rqa7+JUaJHFsdSth3XZnnvRCO+/fDzFLF92JdRqF8= Subject key identifier: 11:8B:E9:0A:E4:82:2B:E0:EE:14:4A:B3:56:1E:4C:5B:32:8E:8D:CA Authority key identifier: 10:E0:50:2F:3D:38:2E:8C:15:66:EC:CC:2A:12:1B:6C:43:9D:E9:77 Certificate issuer: /CN=A9168949/serialNumber=10E0502F3D382E8C1566ECCC2A121B6C439DE977 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft Manifest number: 31 Signing time: Sun 19 May 2024 08:34:51 +0000 Manifest this update: Sun 19 May 2024 08:34:50 +0000 Manifest next update: Sun 26 May 2024 08:34:50 +0000 Files and hashes: 1: EOBQLz04LowVZuzMKhIbbEOd6Xc.crl (hash: iQ7X9t2hrWM+0Xw/RRkAP8xWzxh221JJM/1q0xsbWbY=) 2: 93CAF586E8E211EEB8DF8C56C4F9AE02.roa (hash: 4W1eqwL5w21+QHmWRxtzZ390UrbWfM75t3gARvEGxcw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.crl rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168949/serialNumber=10E0502F3D382E8C1566ECCC2A121B6C439DE977 Validity Not Before: May 19 08:34:50 2024 GMT Not After : May 26 08:34:50 2024 GMT Subject: CN=6649b9aa-9402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:62:31:1a:f5:2d:ac:1d:32:6c:9a:c1:f5:d8: 1c:4b:cb:30:77:5e:5e:f6:a5:1d:6f:fd:f8:a2:44: e3:35:1d:d6:6f:0b:54:a4:71:25:ae:25:43:d0:35: f5:4b:e1:b2:c9:97:f7:dc:37:89:7f:e0:88:ad:a8: 0d:a0:73:a5:94:13:97:ff:8e:9d:ac:10:ab:a8:67: 44:36:54:26:65:d5:d9:dc:3d:ae:6d:eb:f4:a2:bb: 0c:b5:44:74:04:60:77:30:77:05:c1:07:21:62:3e: f2:e5:bf:3b:ce:4a:0e:d6:f3:dc:44:c0:5c:0d:99: 02:4a:44:7a:88:ba:23:2e:8c:2b:de:3f:cd:0b:8a: 54:53:f5:d8:38:94:3c:c9:b1:08:c1:cd:ed:24:c9: c5:c0:35:e9:da:f7:62:80:62:e6:b1:f2:d0:f5:0d: dc:29:e4:15:2f:a6:89:60:2d:d0:43:6e:c2:a8:f9: 6d:1f:9b:4b:56:2e:6b:ca:4b:af:22:86:5c:1e:32: 67:f6:13:20:56:87:54:b3:f8:36:73:5f:5f:58:fe: 22:2a:24:56:56:0a:b3:32:8f:f0:ab:76:3a:b1:49: 0b:d9:74:78:9e:47:f9:ff:89:a5:2b:b0:f6:b3:43: 4c:8f:26:07:1a:24:f4:ba:1d:ff:b2:7b:20:c5:93: 2a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:8B:E9:0A:E4:82:2B:E0:EE:14:4A:B3:56:1E:4C:5B:32:8E:8D:CA X509v3 Authority Key Identifier: keyid:10:E0:50:2F:3D:38:2E:8C:15:66:EC:CC:2A:12:1B:6C:43:9D:E9:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:a0:5c:1c:a9:d0:1b:31:32:3b:91:af:f8:e9:f7:89:f3:a0: 82:23:56:b0:70:15:6e:c1:52:26:29:76:f6:f0:91:8b:98:dd: 37:ee:5c:76:11:be:c1:70:20:8d:fd:fe:99:88:ac:ff:9c:dd: 26:45:ac:e7:a0:73:48:a7:2a:80:bf:d4:30:14:30:fa:ab:5a: 11:83:4b:8e:c0:01:db:7e:00:56:d3:e8:38:43:91:e9:66:b5: a6:e9:e3:89:4a:35:6f:03:1d:11:72:d3:d6:72:94:90:f5:fa: 90:c8:14:54:42:0d:f8:fd:5a:e0:02:d4:cc:c7:30:71:db:93: 8e:64:0b:1f:f2:e6:c6:4c:77:23:7b:fb:cf:a1:6c:b4:92:56: 20:bb:fa:23:fa:70:3a:bb:f1:1e:55:0b:fd:28:5c:5a:a7:a4: 32:3b:88:7f:95:22:44:2e:30:17:ed:af:25:b0:93:4d:cd:24: ee:5f:9c:19:86:8c:ae:f5:ad:60:58:d0:3e:63:78:26:0f:bc: f4:79:e0:e1:49:0b:31:a0:78:fb:74:33:c9:f2:33:fb:fa:81: 28:b4:98:f7:16:f3:9e:dd:fc:b9:fd:ff:38:b0:0d:5c:4c:2f: b0:6f:b5:81:39:84:6b:1a:ea:54:21:cf:4d:bb:68:c4:19:17: b8:6b:77:a1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 ODk0OTExMC8GA1UEBRMoMTBFMDUwMkYzRDM4MkU4QzE1NjZFQ0NDMkExMjFCNkM0 MzlERTk3NzAeFw0yNDA1MTkwODM0NTBaFw0yNDA1MjYwODM0NTBaMBgxFjAUBgNV BAMTDTY2NDliOWFhLTk0MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHYjEa9S2sHTJsmsH12BxLyzB3Xl72pR1v/fiiROM1HdZvC1SkcSWuJUPQNfVL 4bLJl/fcN4l/4IitqA2gc6WUE5f/jp2sEKuoZ0Q2VCZl1dncPa5t6/Siuwy1RHQE YHcwdwXBByFiPvLlvzvOSg7W89xEwFwNmQJKRHqIuiMujCveP80LilRT9dg4lDzJ sQjBze0kycXANena92KAYuax8tD1Ddwp5BUvpolgLdBDbsKo+W0fm0tWLmvKS68i hlweMmf2EyBWh1Sz+DZzX19Y/iIqJFZWCrMyj/CrdjqxSQvZdHieR/n/iaUrsPaz Q0yPJgcaJPS6Hf+yeyDFkypRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEYvpCuSC K+DuFEqzVh5MWzKOjcowHwYDVR0jBBgwFoAUEOBQLz04LowVZuzMKhIbbEOd6Xcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4OTQ5LzNGMjQyQUMyRTRG MzExRUU5OTEwMTQzOEM0RjlBRTAyL0VPQlFMejA0TG93Vlp1ek1LaEliYkVPZDZY Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRU9CUUx6MDRMb3dWWnV6TUtoSWJiRU9kNlhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4 OTQ5LzNGMjQyQUMyRTRGMzExRUU5OTEwMTQzOEM0RjlBRTAyL0VPQlFMejA0TG93 Vlp1ek1LaEliYkVPZDZYYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA+gXByp0BsxMjuRr/jp94nzoIIjVrBwFW7BUiYpdvbwkYuY3TfuXHYR vsFwII39/pmIrP+c3SZFrOegc0inKoC/1DAUMPqrWhGDS47AAdt+AFbT6DhDkelm tabp44lKNW8DHRFy09ZylJD1+pDIFFRCDfj9WuAC1MzHMHHbk45kCx/y5sZMdyN7 +8+hbLSSViC7+iP6cDq78R5VC/0oXFqnpDI7iH+VIkQuMBftryWwk03NJO5fnBmG jK71rWBY0D5jeCYPvPR54OFJCzGgePt0M8nyM/v6gSi0mPcW857d/Ln9/ziwDVxM L7BvtYE5hGsa6lQhz027aMQZF7hrd6E= -----END CERTIFICATE-----Generated at Sun May 19 09:04:13 2024 by rpki-client on console-fra.rpki-client.org