$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.mft File: ezWJ19jaa93mDzmOflK6heWuM1c.mft (raw, json) Hash identifier: bZtV8N2nHjLH0pYXGlzdw5/Wc/ABFLVCaq0fgVdBJiA= Subject key identifier: 05:6F:6F:40:25:6E:29:97:AA:97:4A:B7:6C:31:36:C8:EB:BE:14:E0 Authority key identifier: 7B:35:89:D7:D8:DA:6B:DD:E6:0F:39:8E:7E:52:BA:85:E5:AE:33:57 Certificate issuer: /CN=A916EF76/serialNumber=7B3589D7D8DA6BDDE60F398E7E52BA85E5AE3357 Certificate serial: 1738 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezWJ19jaa93mDzmOflK6heWuM1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.mft Manifest number: 1731 Signing time: Sat 18 May 2024 17:03:30 +0000 Manifest this update: Sat 18 May 2024 17:03:29 +0000 Manifest next update: Sat 25 May 2024 17:03:29 +0000 Files and hashes: 1: ezWJ19jaa93mDzmOflK6heWuM1c.crl (hash: 8TRWfrO39YW0VPvvObHLhkjZngCg+q7+Qfn2/SQXxHk=) 2: B4F0A9F800A011E8B6C9E20AC4F9AE02.roa (hash: O++Vx92KavIvOn+xBQAI46zCuI/TBPZ1f39+eEbauLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.crl rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezWJ19jaa93mDzmOflK6heWuM1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5944 (0x1738) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EF76/serialNumber=7B3589D7D8DA6BDDE60F398E7E52BA85E5AE3357 Validity Not Before: May 18 17:03:29 2024 GMT Not After : May 25 17:03:29 2024 GMT Subject: CN=6648df61-dea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:99:0f:32:f8:ef:21:8c:6f:47:0a:f7:46:f1: 5d:d2:ec:0a:26:a2:a2:89:cf:3c:70:37:e2:b4:fd: d3:96:31:82:fd:23:15:54:a7:97:3c:e2:8d:cb:e6: 2e:13:50:84:ef:d4:a4:f0:86:66:42:fb:f8:34:e4: 2a:d2:2f:72:b4:dd:78:33:5d:18:76:29:e0:c5:51: 37:ad:7f:50:da:29:29:59:83:e1:d9:53:e8:b1:ca: 8e:1a:83:2c:40:45:12:67:0c:a1:a2:c4:a9:eb:c9: 74:92:02:68:32:82:65:68:11:8a:9b:db:e7:70:8c: 07:33:17:9f:64:56:c4:b9:b8:ba:f6:71:88:08:4b: ab:d0:9d:1a:a3:02:a7:48:37:49:1f:4d:d5:35:5b: 05:b0:6a:82:19:14:bb:a6:21:37:70:34:3e:b4:45: 8b:99:c7:0b:79:f8:38:32:ce:50:a2:b6:21:d3:29: 02:df:c7:ec:b9:96:9b:4b:63:2f:b7:10:88:4f:50: e3:8c:6e:68:4c:fd:6d:be:83:42:4c:1b:02:c4:51: f9:18:80:03:aa:2a:9b:f6:1c:9d:38:26:fb:b9:a9: fb:44:74:e6:18:a6:3d:7f:eb:6f:fc:24:bc:6b:6d: b4:81:90:84:dc:68:18:4e:55:2b:f5:37:44:bd:1f: 46:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:6F:6F:40:25:6E:29:97:AA:97:4A:B7:6C:31:36:C8:EB:BE:14:E0 X509v3 Authority Key Identifier: keyid:7B:35:89:D7:D8:DA:6B:DD:E6:0F:39:8E:7E:52:BA:85:E5:AE:33:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezWJ19jaa93mDzmOflK6heWuM1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:a4:f1:16:8c:1a:67:b1:4a:0e:8d:83:3e:f5:9c:e1:f5:fd: ae:90:80:35:4f:21:10:5a:9f:35:4a:6e:a6:a3:c7:2c:70:b6: fe:da:32:23:19:21:97:17:f7:33:52:bd:72:fe:08:ff:ff:de: 5f:87:4f:5a:95:97:18:b2:b1:58:40:a3:41:49:8e:98:48:0f: 0f:97:a4:fc:0d:d1:fd:0f:3a:9b:fb:6f:c3:0b:c9:ac:dd:cd: a7:5b:04:77:6c:ff:fc:4f:87:50:ad:90:ee:1c:76:cc:ee:ff: 75:b6:ec:05:66:8a:b6:fa:12:8b:8e:74:6e:15:ec:a8:bc:c5: c6:33:c1:83:ef:81:46:5f:11:52:87:dc:84:a6:4d:de:34:28: 5f:44:b7:4f:cf:f8:17:2f:b9:18:00:d1:ef:a1:c3:9d:2d:99: e8:6c:47:2a:33:26:fa:4c:0c:59:c3:3c:bb:de:24:57:e7:17: 74:1d:8e:a0:d5:ee:36:7f:a5:01:36:be:7c:78:93:ab:cc:0d: 38:46:f6:40:45:e4:38:e8:da:92:36:d3:18:94:86:50:ea:4d: 2d:f1:9b:6e:19:bb:6b:f6:d4:f3:e8:94:8e:c0:16:fb:a5:19: 57:47:ac:19:e6:af:16:76:90:fe:02:d5:3d:5f:36:7e:e7:d5: 03:bb:8a:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVGNzYxMTAvBgNVBAUTKDdCMzU4OUQ3RDhEQTZCRERFNjBGMzk4RTdFNTJCQTg1 RTVBRTMzNTcwHhcNMjQwNTE4MTcwMzI5WhcNMjQwNTI1MTcwMzI5WjAYMRYwFAYD VQQDEw02NjQ4ZGY2MS1kZWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA35kPMvjvIYxvRwr3RvFd0uwKJqKiic88cDfitP3TljGC/SMVVKeXPOKNy+Yu E1CE79Sk8IZmQvv4NOQq0i9ytN14M10YdingxVE3rX9Q2ikpWYPh2VPoscqOGoMs QEUSZwyhosSp68l0kgJoMoJlaBGKm9vncIwHMxefZFbEubi69nGICEur0J0aowKn SDdJH03VNVsFsGqCGRS7piE3cDQ+tEWLmccLefg4Ms5QorYh0ykC38fsuZabS2Mv txCIT1DjjG5oTP1tvoNCTBsCxFH5GIADqiqb9hydOCb7uan7RHTmGKY9f+tv/CS8 a220gZCE3GgYTlUr9TdEvR9GIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAVvb0Al bimXqpdKt2wxNsjrvhTgMB8GA1UdIwQYMBaAFHs1idfY2mvd5g85jn5SuoXlrjNX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUY3Ni8yOUJFNThGMEI4 Q0QxMUU3OUU0MzE4NjFDNEY5QUUwMi9leldKMTlqYWE5M21Eem1PZmxLNmhlV3VN MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V6V0oxOWphYTkzbUR6bU9mbEs2aGVXdU0xYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUY3Ni8yOUJFNThGMEI4Q0QxMUU3OUU0MzE4NjFDNEY5QUUwMi9leldKMTlqYWE5 M21Eem1PZmxLNmhlV3VNMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChpPEWjBpnsUoOjYM+9Zzh9f2ukIA1TyEQWp81Sm6mo8cscLb+2jIj GSGXF/czUr1y/gj//95fh09alZcYsrFYQKNBSY6YSA8Pl6T8DdH9Dzqb+2/DC8ms 3c2nWwR3bP/8T4dQrZDuHHbM7v91tuwFZoq2+hKLjnRuFeyovMXGM8GD74FGXxFS h9yEpk3eNChfRLdPz/gXL7kYANHvocOdLZnobEcqMyb6TAxZwzy73iRX5xd0HY6g 1e42f6UBNr58eJOrzA04RvZAReQ46NqSNtMYlIZQ6k0t8ZtuGbtr9tTz6JSOwBb7 pRlXR6wZ5q8WdpD+AtU9XzZ+59UDu4o3 -----END CERTIFICATE-----Generated at Sat May 18 17:37:33 2024 by rpki-client on console-fra.rpki-client.org