$ rpki-client -vvf rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.mft File: esbv-wTCtYD1pWtqdGzf4FOvap4.mft (raw, json) Hash identifier: hCLgigrAamqcaOQiSkWJAa3S6WF74LUVWZrACDvfRvk= Subject key identifier: 9A:77:10:D7:25:BF:76:D2:3C:8A:D5:A1:71:E6:83:71:83:6A:AE:02 Authority key identifier: 7A:C6:EF:FB:04:C2:B5:80:F5:A5:6B:6A:74:6C:DF:E0:53:AF:6A:9E Certificate issuer: /CN=A91747E1/serialNumber=7AC6EFFB04C2B580F5A56B6A746CDFE053AF6A9E Certificate serial: 0A37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esbv-wTCtYD1pWtqdGzf4FOvap4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.mft Manifest number: 0A24 Signing time: Thu 30 May 2024 21:00:54 +0000 Manifest this update: Thu 30 May 2024 21:00:53 +0000 Manifest next update: Thu 06 Jun 2024 21:00:53 +0000 Files and hashes: 1: esbv-wTCtYD1pWtqdGzf4FOvap4.crl (hash: nKtPUn6kebT1c8yDt7F2MYr1u9qZNVIv4/S4u3L3O/8=) 2: D9C33050560B11EDA1636E52C4F9AE02.roa (hash: 5uItF1PWro7l/4uqHKd7fDysBHF7zA/EdD/kv2SXBuQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.crl rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esbv-wTCtYD1pWtqdGzf4FOvap4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 20:43:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2615 (0xa37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91747E1/serialNumber=7AC6EFFB04C2B580F5A56B6A746CDFE053AF6A9E Validity Not Before: May 30 21:00:53 2024 GMT Not After : Jun 6 21:00:53 2024 GMT Subject: CN=6658e906-fa05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:63:2c:4a:06:e5:c4:49:ac:08:96:6e:11:45: 7b:f2:2a:cf:92:55:64:3d:4b:08:8f:5c:82:c9:82: d1:2b:7d:89:e8:80:db:39:8f:7d:1b:ca:24:fb:11: 47:0f:e7:16:80:a9:b9:86:85:b7:38:57:08:e7:67: 37:d7:ce:dc:16:aa:1b:19:45:ab:a0:23:88:e2:fe: 0b:85:57:c1:6d:e6:2a:c4:07:a5:76:93:29:5b:62: f4:1f:dd:37:1b:95:09:11:cb:08:93:4a:7a:c7:e5: 97:bb:d9:b9:b7:b0:ce:01:23:1c:4c:6f:8a:2b:77: 7a:5b:f0:42:9c:6b:59:d3:71:52:47:1f:85:b9:ef: 6b:ed:83:1b:0b:0f:4f:3d:41:90:2d:8b:1d:71:a1: 0c:8f:68:c3:40:ad:c6:99:f0:e2:c7:a1:e1:55:8e: 6d:36:a2:9c:27:22:fd:11:54:70:04:33:82:b8:fa: ee:d1:24:1b:b3:c6:a4:26:96:19:3a:ab:f9:72:34: c8:b9:54:6e:80:28:91:31:81:15:a0:8c:49:80:9c: da:16:6b:8d:79:5f:70:f1:59:d9:b2:a8:38:b2:64: 3e:e0:27:d1:51:7d:6c:e6:2d:b8:74:dd:be:db:02: f5:d2:5d:bc:fd:7f:a8:90:87:ca:2f:0c:26:05:db: 7e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:77:10:D7:25:BF:76:D2:3C:8A:D5:A1:71:E6:83:71:83:6A:AE:02 X509v3 Authority Key Identifier: keyid:7A:C6:EF:FB:04:C2:B5:80:F5:A5:6B:6A:74:6C:DF:E0:53:AF:6A:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esbv-wTCtYD1pWtqdGzf4FOvap4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:0b:40:5e:65:d3:87:72:93:04:6b:eb:16:5a:88:8a:53:41: e4:93:03:83:06:f6:e9:a9:b6:98:41:b6:4c:c4:38:1b:81:7f: 55:e5:0d:1c:b4:15:26:8c:ff:f3:0b:90:17:f5:6f:be:1e:7f: 82:37:99:6c:0e:33:70:85:c2:07:76:19:06:c9:d7:18:f8:b2: b2:7e:83:32:10:2d:f7:5c:e0:a0:1f:93:aa:80:eb:25:4f:e5: 80:35:6b:fd:10:aa:6d:ba:6e:7b:bc:3e:ff:b4:ef:0f:3b:53: 07:f9:7b:5f:48:6d:a9:cd:14:1f:fa:34:c7:0a:1f:d0:8b:ae: 2c:01:a0:d5:01:15:27:ad:d3:42:1d:76:70:7c:9d:7d:ca:c9: 17:77:52:12:b3:0e:b2:0d:46:71:5f:98:37:c8:4a:75:03:1e: 5a:aa:6a:d0:66:4e:21:94:07:0a:40:c4:4e:68:1e:6b:77:b8: 1f:7e:f9:74:79:1d:3d:86:b0:05:7b:b9:67:54:34:09:06:b3: 00:37:7b:fc:3a:9b:90:aa:fa:05:32:06:dc:43:1b:25:5a:9c: 18:d3:84:7f:bd:3a:70:fc:85:4b:cf:41:dc:36:63:2c:a1:5b: 5a:1b:63:10:77:45:65:09:d3:e8:9a:0d:59:59:91:45:49:50: a0:7b:d5:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ3RTExMTAvBgNVBAUTKDdBQzZFRkZCMDRDMkI1ODBGNUE1NkI2QTc0NkNERkUw NTNBRjZBOUUwHhcNMjQwNTMwMjEwMDUzWhcNMjQwNjA2MjEwMDUzWjAYMRYwFAYD VQQDEw02NjU4ZTkwNi1mYTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmGMsSgblxEmsCJZuEUV78irPklVkPUsIj1yCyYLRK32J6IDbOY99G8ok+xFH D+cWgKm5hoW3OFcI52c3187cFqobGUWroCOI4v4LhVfBbeYqxAeldpMpW2L0H903 G5UJEcsIk0p6x+WXu9m5t7DOASMcTG+KK3d6W/BCnGtZ03FSRx+Fue9r7YMbCw9P PUGQLYsdcaEMj2jDQK3GmfDix6HhVY5tNqKcJyL9EVRwBDOCuPru0SQbs8akJpYZ Oqv5cjTIuVRugCiRMYEVoIxJgJzaFmuNeV9w8VnZsqg4smQ+4CfRUX1s5i24dN2+ 2wL10l28/X+okIfKLwwmBdt+XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJp3ENcl v3bSPIrVoXHmg3GDaq4CMB8GA1UdIwQYMBaAFHrG7/sEwrWA9aVranRs3+BTr2qe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDdFMS9DRTM0NzJERTRD QzgxMUVBQTA1OEVDMTRDNEY5QUUwMi9lc2J2LXdUQ3RZRDFwV3RxZEd6ZjRGT3Zh cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VzYnYtd1RDdFlEMXBXdHFkR3pmNEZPdmFwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDdFMS9DRTM0NzJERTRDQzgxMUVBQTA1OEVDMTRDNEY5QUUwMi9lc2J2LXdUQ3RZ RDFwV3RxZEd6ZjRGT3ZhcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbC0BeZdOHcpMEa+sWWoiKU0HkkwODBvbpqbaYQbZMxDgbgX9V5Q0c tBUmjP/zC5AX9W++Hn+CN5lsDjNwhcIHdhkGydcY+LKyfoMyEC33XOCgH5OqgOsl T+WANWv9EKptum57vD7/tO8PO1MH+XtfSG2pzRQf+jTHCh/Qi64sAaDVARUnrdNC HXZwfJ19yskXd1ISsw6yDUZxX5g3yEp1Ax5aqmrQZk4hlAcKQMROaB5rd7gffvl0 eR09hrAFe7lnVDQJBrMAN3v8OpuQqvoFMgbcQxslWpwY04R/vTpw/IVLz0HcNmMs oVtaG2MQd0VlCdPomg1ZWZFFSVCge9X9 -----END CERTIFICATE-----Generated at Thu May 30 21:49:34 2024 by rpki-client on console-ams.rpki-client.org