$ rpki-client -vvf rpki.apnic.net/member_repository/A91813D1/4AD0E336AB5511E6BF3AFB82C4F9AE02/eDhOWLEgNeBWzA2xN-RcJzfmRDo.mft File: eDhOWLEgNeBWzA2xN-RcJzfmRDo.mft (raw, json) Hash identifier: h+UDhNwQy5njDHKi9sRPmSU+AsKbNsZMvzZWP0LA9I0= Subject key identifier: A1:EE:97:28:2F:85:7F:E0:E7:25:8D:91:96:02:BE:DB:98:9B:50:8B Authority key identifier: 78:38:4E:58:B1:20:35:E0:56:CC:0D:B1:37:E4:5C:27:37:E6:44:3A Certificate issuer: /CN=A91813D1/serialNumber=78384E58B12035E056CC0DB137E45C2737E6443A Certificate serial: 1CB0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDhOWLEgNeBWzA2xN-RcJzfmRDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91813D1/4AD0E336AB5511E6BF3AFB82C4F9AE02/eDhOWLEgNeBWzA2xN-RcJzfmRDo.mft Manifest number: 1CA0 Signing time: Sat 18 May 2024 16:32:53 +0000 Manifest this update: Sat 18 May 2024 16:32:52 +0000 Manifest next update: Sat 25 May 2024 16:32:52 +0000 Files and hashes: 1: eDhOWLEgNeBWzA2xN-RcJzfmRDo.crl (hash: tHd4E21pOp/NnUiswFrrUEo2FNBs5kUu+cGKbFG5DKo=) 2: E07C87C432D911EEB708051EC4F9AE02.roa (hash: PWUkY2BuCui236wgapnzUVj+cXXk1T/TOIZoMgTLyV4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91813D1/4AD0E336AB5511E6BF3AFB82C4F9AE02/eDhOWLEgNeBWzA2xN-RcJzfmRDo.crl rsync://rpki.apnic.net/member_repository/A91813D1/4AD0E336AB5511E6BF3AFB82C4F9AE02/eDhOWLEgNeBWzA2xN-RcJzfmRDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDhOWLEgNeBWzA2xN-RcJzfmRDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7344 (0x1cb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91813D1/serialNumber=78384E58B12035E056CC0DB137E45C2737E6443A Validity Not Before: May 18 16:32:52 2024 GMT Not After : May 25 16:32:52 2024 GMT Subject: CN=6648d835-b994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cc:11:a1:da:9b:42:b2:57:67:9f:c5:4c:be: 82:b8:a5:7c:76:33:13:04:36:c5:f7:e0:42:13:6a: ec:38:4e:b8:7d:9d:cd:bb:c3:e2:f5:3d:69:d2:66: 04:c2:b1:da:15:5c:11:e7:89:8a:71:88:4b:8a:bb: 02:46:7d:53:e2:51:d4:d6:b9:91:2f:63:e6:40:76: 65:7e:3d:e3:fc:dc:b5:4e:94:c5:19:96:af:de:b0: 4d:43:7f:96:53:6a:37:88:59:4c:14:0a:19:0a:f6: 59:eb:71:62:20:29:8d:74:8e:e9:5c:7c:10:a0:5c: e9:12:54:c0:75:c5:3b:2f:f0:59:7f:0a:07:3f:d9: 00:f5:0a:47:85:74:15:8a:47:69:ef:00:76:20:50: 63:c1:fa:ac:12:10:26:07:d2:ce:6a:d1:56:1d:65: 85:89:4a:d2:7c:e4:a5:9d:a5:91:09:2a:cb:ac:f2: 1c:5c:4c:f6:a3:0a:34:59:94:be:b3:30:78:88:83: 89:74:79:1d:af:79:b1:e9:18:9d:76:60:e9:86:98: 5a:f2:24:31:d6:42:ce:18:e0:3d:f9:44:b8:d0:c4: a8:bb:f0:07:d1:a1:85:14:51:cd:b5:c3:22:b9:31: 4c:5f:08:e1:e8:17:1e:91:8c:1b:c3:10:da:32:b8: c4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:EE:97:28:2F:85:7F:E0:E7:25:8D:91:96:02:BE:DB:98:9B:50:8B X509v3 Authority Key Identifier: keyid:78:38:4E:58:B1:20:35:E0:56:CC:0D:B1:37:E4:5C:27:37:E6:44:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91813D1/4AD0E336AB5511E6BF3AFB82C4F9AE02/eDhOWLEgNeBWzA2xN-RcJzfmRDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDhOWLEgNeBWzA2xN-RcJzfmRDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813D1/4AD0E336AB5511E6BF3AFB82C4F9AE02/eDhOWLEgNeBWzA2xN-RcJzfmRDo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:ab:88:12:59:c9:97:f4:93:d9:4d:57:e8:33:f5:ab:1f:fe: ce:02:f4:98:d8:61:55:9e:2b:6a:06:01:64:03:01:e3:13:b3: 59:73:d1:61:71:f3:b7:74:05:03:30:3b:ca:aa:68:26:31:81: a0:73:e3:63:e7:d6:ca:00:97:04:45:a5:b7:b2:7d:9b:ed:ad: 38:cb:62:87:31:aa:4a:94:e5:b5:38:39:14:0b:96:4a:25:64: 9b:11:0e:8b:c6:d4:8f:fe:d4:69:b3:77:1a:73:09:8b:ba:2b: d4:b3:09:b0:b6:80:73:f0:09:46:b3:96:24:6c:bf:e8:05:ee: cf:c9:4e:ee:99:40:6d:c0:97:a8:ca:ea:dc:9c:d9:3d:69:3c: 3b:e7:33:38:33:35:3c:56:2e:4d:21:b3:4a:78:52:5b:ad:7e: fb:8f:a3:44:e3:aa:41:77:b1:13:35:0f:0b:68:db:7d:2c:e0: cb:19:58:46:36:88:b1:7b:c7:ca:df:60:1d:46:ab:76:41:8e: 8d:59:e2:c3:54:3f:57:5e:5d:50:c9:19:c4:a6:54:2c:66:e3: 70:a1:e0:9d:1b:db:1e:3a:52:f4:fe:16:a3:b7:1d:8f:76:1c: 3b:cf:c4:32:1f:6f:e7:03:12:ed:a8:7f:08:b8:5c:7c:8a:aa: 10:94:9c:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzRDExMTAvBgNVBAUTKDc4Mzg0RTU4QjEyMDM1RTA1NkNDMERCMTM3RTQ1QzI3 MzdFNjQ0M0EwHhcNMjQwNTE4MTYzMjUyWhcNMjQwNTI1MTYzMjUyWjAYMRYwFAYD VQQDEw02NjQ4ZDgzNS1iOTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqcwRodqbQrJXZ5/FTL6CuKV8djMTBDbF9+BCE2rsOE64fZ3Nu8Pi9T1p0mYE wrHaFVwR54mKcYhLirsCRn1T4lHU1rmRL2PmQHZlfj3j/Ny1TpTFGZav3rBNQ3+W U2o3iFlMFAoZCvZZ63FiICmNdI7pXHwQoFzpElTAdcU7L/BZfwoHP9kA9QpHhXQV ikdp7wB2IFBjwfqsEhAmB9LOatFWHWWFiUrSfOSlnaWRCSrLrPIcXEz2owo0WZS+ szB4iIOJdHkdr3mx6RiddmDphpha8iQx1kLOGOA9+US40MSou/AH0aGFFFHNtcMi uTFMXwjh6BcekYwbwxDaMrjE7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKHulygv hX/g5yWNkZYCvtuYm1CLMB8GA1UdIwQYMBaAFHg4TlixIDXgVswNsTfkXCc35kQ6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTNEMS80QUQwRTMzNkFC NTUxMUU2QkYzQUZCODJDNEY5QUUwMi9lRGhPV0xFZ05lQld6QTJ4Ti1SY0p6Zm1S RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VEaE9XTEVnTmVCV3pBMnhOLVJjSnpmbVJEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTNEMS80QUQwRTMzNkFCNTUxMUU2QkYzQUZCODJDNEY5QUUwMi9lRGhPV0xFZ05l Qld6QTJ4Ti1SY0p6Zm1SRG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsq4gSWcmX9JPZTVfoM/WrH/7OAvSY2GFVnitqBgFkAwHjE7NZc9Fh cfO3dAUDMDvKqmgmMYGgc+Nj59bKAJcERaW3sn2b7a04y2KHMapKlOW1ODkUC5ZK JWSbEQ6LxtSP/tRps3cacwmLuivUswmwtoBz8AlGs5YkbL/oBe7PyU7umUBtwJeo yurcnNk9aTw75zM4MzU8Vi5NIbNKeFJbrX77j6NE46pBd7ETNQ8LaNt9LODLGVhG Noixe8fK32AdRqt2QY6NWeLDVD9XXl1QyRnEplQsZuNwoeCdG9seOlL0/hajtx2P dhw7z8QyH2/nAxLtqH8IuFx8iqoQlJwe -----END CERTIFICATE-----Generated at Sat May 18 16:57:53 2024 by rpki-client on console-fra.rpki-client.org