$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft File: Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft (raw, json) Hash identifier: ycrBmapVAgL+gjiDHD2jltmWsTqGrtuly/fzsbAeWI4= Subject key identifier: F6:93:F1:74:21:E7:EF:68:68:7C:FA:C3:83:8B:6B:53:81:C8:3E:04 Authority key identifier: 11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86 Certificate issuer: /CN=A917E0BB/serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft Manifest number: 20 Signing time: Sun 19 May 2024 08:39:09 +0000 Manifest this update: Sun 19 May 2024 08:39:08 +0000 Manifest next update: Sun 26 May 2024 08:39:08 +0000 Files and hashes: 1: Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl (hash: rp5Ss/L9mbewi9ENsPIpotnl5P+ZJjkbmgLRJ3xaxrk=) 2: 2D08F32A110011EFBF50D06AC4F9AE02.roa (hash: EYuBGSt59mzabuux0r47h3t0WJIfTPPbhtSLivdtd1s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0BB/serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386 Validity Not Before: May 19 08:39:08 2024 GMT Not After : May 26 08:39:08 2024 GMT Subject: CN=6649baac-7fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f9:40:a6:7d:8b:bc:06:03:ff:27:2b:9a:60: 45:5e:ad:08:99:3e:90:c9:f3:0c:21:9f:eb:3d:88: f8:46:71:52:46:9f:01:2b:c2:2e:8a:8f:84:44:1e: 8d:30:a3:a0:c0:3f:e2:46:ee:62:df:85:bf:f1:79: 07:46:65:3c:96:d3:0a:f9:a4:ca:cd:50:ce:dd:43: df:48:d2:d8:a8:f0:47:0c:93:f4:96:a7:4f:ef:29: c1:a1:08:91:84:b6:d9:49:29:3e:74:39:9e:5e:97: 5b:e6:ea:1c:50:49:35:3e:9a:5d:c7:6a:8a:41:0f: 16:62:88:c2:15:66:e8:38:40:48:e4:f4:66:4a:5a: 45:c7:66:15:95:2a:5f:d1:75:67:5a:a2:31:3a:aa: 61:b8:93:a6:6d:bf:c4:1d:98:88:45:41:d8:90:57: 0a:54:31:2f:6d:13:2e:c6:b4:ec:73:29:1f:b8:d1: 82:2c:3d:c2:76:94:5d:80:8c:ff:2e:8b:eb:1b:89: 99:5d:96:50:a6:b4:e5:b9:a0:78:53:94:4d:71:cc: cb:6e:71:b6:91:64:23:fc:92:ed:85:82:7e:89:15: 2e:6e:06:a2:95:2f:b4:0b:9f:b0:b9:20:95:72:cd: be:65:12:0c:dd:cb:26:c2:5a:a2:9b:c5:d7:fa:c4: b3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:93:F1:74:21:E7:EF:68:68:7C:FA:C3:83:8B:6B:53:81:C8:3E:04 X509v3 Authority Key Identifier: keyid:11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:55:db:60:ea:d8:89:ff:d8:70:b5:78:fb:46:d6:6e:05:b5: d7:c0:2e:6b:a8:48:0a:c1:1a:2f:0b:68:4f:8c:9b:d9:9b:84: 33:35:fd:18:1a:15:50:df:a7:9e:cd:30:42:9b:34:0e:7d:ea: 95:41:d8:0b:04:85:8d:15:19:e7:0d:0a:c2:0b:52:be:d9:ea: 8a:f1:28:2e:3b:55:f2:32:37:65:5d:8d:ad:71:41:7f:31:36: 26:7d:d9:3a:6b:c4:67:7a:08:94:d9:8b:51:a4:f0:74:6d:63: 13:9f:7f:ff:5f:94:fc:32:a5:99:c3:3c:f6:93:c9:be:e1:7c: d8:7d:92:f6:66:6e:a0:b3:2c:f3:ae:3a:9e:c6:14:2e:c0:61: e8:97:e7:4e:0e:7a:82:10:9c:1d:5c:9f:14:0c:a3:a9:88:ab: f2:9b:4f:d3:92:65:49:49:6c:c0:38:25:55:1c:c4:1e:d9:1e: b2:16:1c:1e:e0:9d:1c:7e:84:89:44:59:05:45:c6:36:2e:91: b3:bc:a9:00:74:e4:83:c8:0a:de:de:07:64:bb:40:c3:b8:5e: 8f:2a:d3:b6:0d:50:63:97:5a:ec:94:29:81:11:a3:49:48:f8: 20:5b:fc:45:72:2f:81:2d:01:51:89:60:27:12:02:a9:76:be: 87:f5:00:5e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTBCQjExMC8GA1UEBRMoMTFBQjM3REM2NTQxNTBDNDkzQzhBRkM3RTg2RDY2OUMy MEFFNTM4NjAeFw0yNDA1MTkwODM5MDhaFw0yNDA1MjYwODM5MDhaMBgxFjAUBgNV BAMTDTY2NDliYWFjLTdmYTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDa+UCmfYu8BgP/JyuaYEVerQiZPpDJ8wwhn+s9iPhGcVJGnwErwi6Kj4REHo0w o6DAP+JG7mLfhb/xeQdGZTyW0wr5pMrNUM7dQ99I0tio8EcMk/SWp0/vKcGhCJGE ttlJKT50OZ5el1vm6hxQSTU+ml3HaopBDxZiiMIVZug4QEjk9GZKWkXHZhWVKl/R dWdaojE6qmG4k6Ztv8QdmIhFQdiQVwpUMS9tEy7GtOxzKR+40YIsPcJ2lF2AjP8u i+sbiZldllCmtOW5oHhTlE1xzMtucbaRZCP8ku2Fgn6JFS5uBqKVL7QLn7C5IJVy zb5lEgzdyybCWqKbxdf6xLOPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9pPxdCHn 72hofPrDg4trU4HIPgQwHwYDVR0jBBgwFoAUEas33GVBUMSTyK/H6G1mnCCuU4Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFMEJCLzY4NDMxRkEyRThF NjExRUU5Q0FCRTA2QUM0RjlBRTAyL0VhczMzR1ZCVU1TVHlLX0g2RzFtbkNDdVU0 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRWFzMzNHVkJVTVNUeUtfSDZHMW1uQ0N1VTRZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF MEJCLzY4NDMxRkEyRThFNjExRUU5Q0FCRTA2QUM0RjlBRTAyL0VhczMzR1ZCVU1T VHlLX0g2RzFtbkNDdVU0WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF1V22Dq2In/2HC1ePtG1m4FtdfALmuoSArBGi8LaE+Mm9mbhDM1/Rga FVDfp57NMEKbNA596pVB2AsEhY0VGecNCsILUr7Z6orxKC47VfIyN2Vdja1xQX8x NiZ92TprxGd6CJTZi1Gk8HRtYxOff/9flPwypZnDPPaTyb7hfNh9kvZmbqCzLPOu Op7GFC7AYeiX504OeoIQnB1cnxQMo6mIq/KbT9OSZUlJbMA4JVUcxB7ZHrIWHB7g nRx+hIlEWQVFxjYukbO8qQB05IPICt7eB2S7QMO4Xo8q07YNUGOXWuyUKYERo0lI +CBb/EVyL4EtAVGJYCcSAql2vof1AF4= -----END CERTIFICATE-----Generated at Sun May 19 09:04:13 2024 by rpki-client on console-fra.rpki-client.org