$ rpki-client -vvf rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft File: EA50kJn6U4BRdLz4MMPrIcUwMac.mft (raw, json) Hash identifier: qiipEeXRKbOb3QRpwfKolGOKtHjvniUtkKJ3W+TqOhE= Subject key identifier: 03:E9:62:CF:D5:D5:5C:7C:AE:E1:06:DC:8E:79:38:C7:D9:12:94:52 Authority key identifier: 10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7 Certificate issuer: /CN=A916A027/serialNumber=100E749099FA53805174BCF830C3EB21C53031A7 Certificate serial: 0389 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft Manifest number: 0386 Signing time: Sun 19 May 2024 02:41:50 +0000 Manifest this update: Sun 19 May 2024 02:41:49 +0000 Manifest next update: Sun 26 May 2024 02:41:49 +0000 Files and hashes: 1: EA50kJn6U4BRdLz4MMPrIcUwMac.crl (hash: ktzgfvbdfe/NU5jVelTWbbmrFAC6Gm5ZTGZudpmh67o=) 2: 385B6DAE577411ECBF021B66C4F9AE02.roa (hash: arsgowahneHYMjgnjJAZic0magoWYavaf10OiqRCmIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:41:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 905 (0x389) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A027/serialNumber=100E749099FA53805174BCF830C3EB21C53031A7 Validity Not Before: May 19 02:41:49 2024 GMT Not After : May 26 02:41:49 2024 GMT Subject: CN=664966ee-d2ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:8b:82:e2:15:f0:27:28:64:23:2a:1c:fe:66: b2:d4:f9:3d:fb:98:31:ab:a0:c2:ba:bb:7d:eb:cf: 33:14:d4:6e:16:19:a5:13:d2:4a:15:c4:f2:4c:b3: f6:35:d3:a7:48:c5:b2:a2:25:a2:ea:7d:1f:a7:e4: 89:35:25:d1:82:33:60:36:5a:4b:4a:75:93:d2:87: ae:ab:51:13:e8:7d:5c:fb:b6:8f:95:2d:b1:e0:60: 39:a6:d5:14:5f:d2:ee:fe:33:7f:e3:e8:ee:db:c7: 44:da:2c:bf:13:84:d7:fd:be:92:5a:be:0e:3c:26: 60:04:dc:64:42:f4:47:c9:a8:4b:7d:0c:5f:64:51: 9f:6b:2c:34:71:b7:97:b0:69:a5:94:7e:3e:ab:48: 00:6f:64:71:33:9f:2a:2b:75:90:52:52:3e:55:8f: 02:e3:c0:78:53:9c:2a:fa:6f:05:78:29:b9:e1:b9: e8:b6:13:4e:be:b4:25:3d:c8:ce:bc:3d:1d:21:e4: cd:a8:4e:54:44:0f:ee:24:49:a8:d8:88:74:1f:73: 13:63:63:16:5b:5e:36:e9:a8:18:31:46:03:b1:b8: 48:27:d7:87:2a:44:90:67:51:17:56:71:22:fe:81: bb:d0:e9:1e:30:c6:94:56:0f:b4:12:fe:d8:9d:64: 6c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E9:62:CF:D5:D5:5C:7C:AE:E1:06:DC:8E:79:38:C7:D9:12:94:52 X509v3 Authority Key Identifier: keyid:10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:46:9d:8f:f9:0f:06:44:cb:a7:09:13:06:5c:99:41:60:78: 20:30:35:ee:bf:20:3b:6b:71:a3:cd:70:04:f3:c8:f4:13:89: 00:1f:f0:2b:d2:fb:31:6a:25:2c:d0:17:86:b9:0b:eb:bc:a8: 2c:7f:10:f7:6f:e4:b3:63:54:0d:f6:13:83:86:df:8f:bc:67: ab:81:3c:d8:63:72:7e:7c:92:df:db:4e:ee:b0:b7:39:ef:f7: aa:6f:da:48:f3:13:34:95:25:4f:e9:2f:1a:3f:b8:af:3b:5c: 43:52:0d:f9:ce:46:46:9f:93:df:90:d6:dd:63:ed:9a:a3:2e: 4d:40:a1:23:41:52:03:8e:d2:61:b4:3b:6d:98:ce:60:95:0b: e5:34:44:a5:9e:1f:a5:34:d4:be:57:34:90:fd:d9:69:50:65: ca:30:25:cc:b9:e7:49:f3:24:70:52:db:3f:0e:6e:1a:54:79: 1b:44:47:95:de:c5:1c:bf:04:15:58:6c:4e:10:4b:04:e5:fe: 58:5a:92:a7:bd:8f:fe:cc:68:cd:f5:63:b5:00:c5:7f:e2:a1: 6c:a9:bf:e9:77:40:7d:79:0e:0b:9a:74:7f:cd:4c:bc:62:cb: 6c:58:f9:ca:5e:22:cc:00:8d:de:9b:b3:22:f6:bb:c7:e3:8d: 68:f6:dc:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwMjcxMTAvBgNVBAUTKDEwMEU3NDkwOTlGQTUzODA1MTc0QkNGODMwQzNFQjIx QzUzMDMxQTcwHhcNMjQwNTE5MDI0MTQ5WhcNMjQwNTI2MDI0MTQ5WjAYMRYwFAYD VQQDEw02NjQ5NjZlZS1kMmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA44uC4hXwJyhkIyoc/may1Pk9+5gxq6DCurt9688zFNRuFhmlE9JKFcTyTLP2 NdOnSMWyoiWi6n0fp+SJNSXRgjNgNlpLSnWT0oeuq1ET6H1c+7aPlS2x4GA5ptUU X9Lu/jN/4+ju28dE2iy/E4TX/b6SWr4OPCZgBNxkQvRHyahLfQxfZFGfayw0cbeX sGmllH4+q0gAb2RxM58qK3WQUlI+VY8C48B4U5wq+m8FeCm54bnothNOvrQlPcjO vD0dIeTNqE5URA/uJEmo2Ih0H3MTY2MWW1426agYMUYDsbhIJ9eHKkSQZ1EXVnEi /oG70OkeMMaUVg+0Ev7YnWRsSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAPpYs/V 1Vx8ruEG3I55OMfZEpRSMB8GA1UdIwQYMBaAFBAOdJCZ+lOAUXS8+DDD6yHFMDGn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTAyNy8wNDIwN0RGODU3 NzAxMUVDQjk1NzdBNUJDNEY5QUUwMi9FQTUwa0puNlU0QlJkTHo0TU1QckljVXdN YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBNTBrSm42VTRCUmRMejRNTVBySWNVd01hYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTAyNy8wNDIwN0RGODU3NzAxMUVDQjk1NzdBNUJDNEY5QUUwMi9FQTUwa0puNlU0 QlJkTHo0TU1QckljVXdNYWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRRp2P+Q8GRMunCRMGXJlBYHggMDXuvyA7a3GjzXAE88j0E4kAH/Ar 0vsxaiUs0BeGuQvrvKgsfxD3b+SzY1QN9hODht+PvGergTzYY3J+fJLf207usLc5 7/eqb9pI8xM0lSVP6S8aP7ivO1xDUg35zkZGn5PfkNbdY+2aoy5NQKEjQVIDjtJh tDttmM5glQvlNESlnh+lNNS+VzSQ/dlpUGXKMCXMuedJ8yRwUts/Dm4aVHkbREeV 3sUcvwQVWGxOEEsE5f5YWpKnvY/+zGjN9WO1AMV/4qFsqb/pd0B9eQ4LmnR/zUy8 YstsWPnKXiLMAI3em7Mi9rvH441o9tz0 -----END CERTIFICATE-----Generated at Sun May 19 03:14:49 2024 by rpki-client on console-fra.rpki-client.org