$ rpki-client -vvf rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.mft File: eWpEzxtw9Kn55qX_sAm7eGDzVYA.mft (raw, json) Hash identifier: uedGYwwm+5RPcIcdnBy7kqtFyizQBc5gjwf+FxrYZ0A= Subject key identifier: DD:A7:10:3A:FE:E8:B4:40:9C:D9:55:14:51:21:CE:6F:6E:19:86:65 Authority key identifier: 79:6A:44:CF:1B:70:F4:A9:F9:E6:A5:FF:B0:09:BB:78:60:F3:55:80 Certificate issuer: /CN=A9182B6F/serialNumber=796A44CF1B70F4A9F9E6A5FFB009BB7860F35580 Certificate serial: 026E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eWpEzxtw9Kn55qX_sAm7eGDzVYA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.mft Manifest number: 0268 Signing time: Sun 19 May 2024 03:49:00 +0000 Manifest this update: Sun 19 May 2024 03:49:00 +0000 Manifest next update: Sun 26 May 2024 03:49:00 +0000 Files and hashes: 1: eWpEzxtw9Kn55qX_sAm7eGDzVYA.crl (hash: /ApBzIYIpAUQ6C8N0zmx4PeKk7NzBWOpfNHeBAJfWlI=) 2: 681E9EECCAC111ECA0AC3E32C4F9AE02.roa (hash: A/XsmWmS2Fzl2w/pads2BI35cg5AkCMUce4iVb/sJsY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.crl rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eWpEzxtw9Kn55qX_sAm7eGDzVYA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 622 (0x26e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182B6F/serialNumber=796A44CF1B70F4A9F9E6A5FFB009BB7860F35580 Validity Not Before: May 19 03:49:00 2024 GMT Not After : May 26 03:49:00 2024 GMT Subject: CN=664976ac-2a5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:72:9f:38:52:be:39:3b:ed:ee:db:09:e1:c8: c1:8a:53:a6:ce:4c:0b:54:c8:c0:1e:12:2a:2e:d6: 9d:14:f8:3f:5a:a7:ad:0f:18:36:fb:f8:21:b2:50: 16:26:01:59:05:59:a9:4c:a5:91:4f:34:76:28:28: 80:47:a3:0a:4a:0f:0b:59:68:dd:ea:06:58:3a:97: f5:00:31:10:93:90:20:56:f7:15:e3:db:82:64:69: 16:c3:5c:fe:e3:ea:da:c5:cb:89:d7:42:74:64:f2: f4:0f:01:1e:6f:e8:82:92:8a:67:82:d5:aa:93:9d: 6d:9a:a3:70:27:39:d5:50:31:be:66:06:8e:f2:2a: 44:c1:5c:fd:78:4e:07:52:0a:f1:68:21:12:94:22: ed:90:90:3d:c7:e9:e5:a9:fb:21:6f:54:f4:ae:df: 5a:ad:63:1f:0d:f0:54:84:35:dc:6e:92:11:bf:ab: 49:6c:99:13:87:ed:b9:34:7f:a6:b1:e0:bf:9f:ac: 8d:3f:8a:6d:1a:3a:c6:b4:82:4d:47:f8:42:0e:38: 23:98:c4:9d:dc:7a:99:bb:54:7f:cc:b2:cf:40:82: 46:99:1c:0f:89:88:f4:40:cc:a4:e3:bd:fa:cc:13: 2f:8f:41:2c:1f:2b:ff:38:3f:19:f3:c2:87:36:cd: 5f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A7:10:3A:FE:E8:B4:40:9C:D9:55:14:51:21:CE:6F:6E:19:86:65 X509v3 Authority Key Identifier: keyid:79:6A:44:CF:1B:70:F4:A9:F9:E6:A5:FF:B0:09:BB:78:60:F3:55:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eWpEzxtw9Kn55qX_sAm7eGDzVYA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:b4:bf:27:d8:2c:69:eb:f0:86:ba:77:d0:6a:28:27:bc:8b: de:78:82:08:e0:ad:0a:33:ad:00:50:1c:34:6d:7e:00:00:ed: a0:ed:87:8c:f0:fe:67:d8:df:a6:ab:0b:bd:96:41:e1:18:53: 75:2b:37:26:f0:c4:ee:ff:9a:f3:b6:76:a4:4a:e3:2a:d6:d0: e3:e7:90:ae:a3:03:43:ae:5e:6e:4f:a3:5a:0c:1e:e4:2b:cd: f5:42:f8:8d:a9:af:1e:06:b2:36:69:d8:2f:c3:dd:d3:a3:2e: f7:36:4d:75:48:a5:a9:33:2a:71:24:ab:7b:4b:cd:65:9b:76: 33:fe:55:69:9f:d6:28:89:38:9d:72:ca:fe:d4:1f:90:2a:62: 75:26:d3:ab:ef:45:fe:91:03:43:42:c8:28:2f:e5:c0:2b:4a: 8b:ab:26:19:2a:9c:3c:12:26:78:b6:27:a4:9f:5c:93:2b:4f: d3:70:6c:f2:ab:09:c7:6c:08:bb:83:f3:96:fd:c9:59:88:37: cd:1e:21:f7:29:96:40:1d:ec:45:29:4b:cc:7e:4d:1d:80:94: 52:67:ee:f8:0d:41:f2:4b:a7:ad:62:3d:a7:29:aa:30:e1:ff: 3f:b3:c2:df:2c:51:7b:7a:55:11:31:40:9b:bd:c7:db:00:3e: 3f:5b:59:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODJCNkYxMTAvBgNVBAUTKDc5NkE0NENGMUI3MEY0QTlGOUU2QTVGRkIwMDlCQjc4 NjBGMzU1ODAwHhcNMjQwNTE5MDM0OTAwWhcNMjQwNTI2MDM0OTAwWjAYMRYwFAYD VQQDEw02NjQ5NzZhYy0yYTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHKfOFK+OTvt7tsJ4cjBilOmzkwLVMjAHhIqLtadFPg/WqetDxg2+/ghslAW JgFZBVmpTKWRTzR2KCiAR6MKSg8LWWjd6gZYOpf1ADEQk5AgVvcV49uCZGkWw1z+ 4+raxcuJ10J0ZPL0DwEeb+iCkopngtWqk51tmqNwJznVUDG+ZgaO8ipEwVz9eE4H UgrxaCESlCLtkJA9x+nlqfshb1T0rt9arWMfDfBUhDXcbpIRv6tJbJkTh+25NH+m seC/n6yNP4ptGjrGtIJNR/hCDjgjmMSd3HqZu1R/zLLPQIJGmRwPiYj0QMyk4736 zBMvj0EsHyv/OD8Z88KHNs1fdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2nEDr+ 6LRAnNlVFFEhzm9uGYZlMB8GA1UdIwQYMBaAFHlqRM8bcPSp+eal/7AJu3hg81WA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkI2Ri9GN0Y5NDc2RUM4 QjAxMUVDQTg4NDc5NDlDNEY5QUUwMi9lV3BFenh0dzlLbjU1cVhfc0FtN2VHRHpW WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VXcEV6eHR3OUtuNTVxWF9zQW03ZUdEelZZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MkI2Ri9GN0Y5NDc2RUM4QjAxMUVDQTg4NDc5NDlDNEY5QUUwMi9lV3BFenh0dzlL bjU1cVhfc0FtN2VHRHpWWUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6tL8n2Cxp6/CGunfQaignvIveeIII4K0KM60AUBw0bX4AAO2g7YeM 8P5n2N+mqwu9lkHhGFN1Kzcm8MTu/5rztnakSuMq1tDj55CuowNDrl5uT6NaDB7k K831QviNqa8eBrI2adgvw93Toy73Nk11SKWpMypxJKt7S81lm3Yz/lVpn9YoiTid csr+1B+QKmJ1JtOr70X+kQNDQsgoL+XAK0qLqyYZKpw8EiZ4tiekn1yTK0/TcGzy qwnHbAi7g/OW/clZiDfNHiH3KZZAHexFKUvMfk0dgJRSZ+74DUHyS6etYj2nKaow 4f8/s8LfLFF7elURMUCbvcfbAD4/W1kL -----END CERTIFICATE-----Generated at Sun May 19 04:22:05 2024 by rpki-client on console-fra.rpki-client.org