$ rpki-client -vvf rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft File: EjJ9_J6Ig827bG7us5JfLIwPfl4.mft (raw, json) Hash identifier: 3L/qlH2HAWrcFD2NTsolaOQSMf+Dc5LuLN1iEBbY750= Subject key identifier: 75:C1:A9:16:F6:25:1B:30:F4:51:90:1C:CB:F6:BE:46:A8:B2:0D:51 Authority key identifier: 12:32:7D:FC:9E:88:83:CD:BB:6C:6E:EE:B3:92:5F:2C:8C:0F:7E:5E Certificate issuer: /CN=A91833FF/serialNumber=12327DFC9E8883CDBB6C6EEEB3925F2C8C0F7E5E Certificate serial: 1158 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EjJ9_J6Ig827bG7us5JfLIwPfl4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft Manifest number: 114D Signing time: Mon 06 May 2024 17:53:45 +0000 Manifest this update: Mon 06 May 2024 17:53:44 +0000 Manifest next update: Mon 13 May 2024 17:53:44 +0000 Files and hashes: 1: EjJ9_J6Ig827bG7us5JfLIwPfl4.crl (hash: +Zfa903OFrjDGJjvjY2vXlMYnlo7T24uasOgX0XaRao=) 2: 659F6E188F2211E98AC7590DC4F9AE02.roa (hash: KUVlMOoR1giZV/OiHZN1blNC34ENUmYVcEirlrIHi/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.crl rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EjJ9_J6Ig827bG7us5JfLIwPfl4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 17:53:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4440 (0x1158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91833FF/serialNumber=12327DFC9E8883CDBB6C6EEEB3925F2C8C0F7E5E Validity Not Before: May 6 17:53:44 2024 GMT Not After : May 13 17:53:44 2024 GMT Subject: CN=66391929-a6bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:04:f4:8b:6d:e6:57:d2:29:22:4a:c1:42:56: f5:6f:5a:9f:74:ab:a7:6c:ec:d1:f9:06:34:21:3a: a7:cc:07:df:52:ac:92:11:d8:9a:03:a6:ba:31:db: d8:d5:71:65:47:c0:26:a7:99:a6:a4:53:c5:69:3f: 82:25:0e:0b:a0:c5:9f:5a:40:bb:50:a5:06:16:2f: de:e0:cd:8b:96:15:28:82:d3:65:77:12:9b:27:91: 3e:f8:1b:1c:67:a3:e9:2c:4a:e9:05:49:89:82:0d: 82:ea:2b:fa:ed:de:1c:da:e8:d3:cb:ae:ab:bc:b3: 79:d5:a4:1e:43:06:3c:15:c0:c3:42:e7:28:b9:73: 4a:6d:5d:29:8e:3c:8e:9b:d2:55:6c:7f:79:0b:e1: a0:d0:13:9f:18:a5:ac:34:9f:b6:7c:c3:70:19:4b: 78:aa:28:ae:29:60:3e:50:42:a1:ae:0e:12:eb:3f: 26:1d:33:9c:d4:f6:15:ab:d9:20:c0:ec:0c:6a:06: a7:e7:8c:8d:4d:c6:b6:1a:a1:3c:cf:47:d1:d2:59: ab:ac:6a:f7:8b:49:94:d7:cb:8a:05:e5:11:7d:3a: ba:0d:9e:54:40:0b:5b:67:0b:6b:64:37:7b:e6:7b: 2f:44:94:12:42:f9:ae:1b:f3:4f:40:94:e1:78:17: 04:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:C1:A9:16:F6:25:1B:30:F4:51:90:1C:CB:F6:BE:46:A8:B2:0D:51 X509v3 Authority Key Identifier: keyid:12:32:7D:FC:9E:88:83:CD:BB:6C:6E:EE:B3:92:5F:2C:8C:0F:7E:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EjJ9_J6Ig827bG7us5JfLIwPfl4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:97:ea:d3:1b:e6:47:b6:16:5a:e6:d2:00:c0:59:c8:e3:b1: 80:ae:4e:8e:51:f6:96:87:58:a3:d4:01:06:f6:be:22:20:cc: e0:fe:27:60:e1:7c:c9:6c:0f:8d:65:c2:0a:d9:7b:a7:4d:de: a7:20:68:a4:83:11:a5:15:57:d7:65:7f:a6:41:60:61:7b:09: 48:e4:b5:ae:d4:8a:b8:df:2c:db:6a:d2:36:79:22:3d:b3:13: b3:37:e3:1c:83:c9:99:ea:90:d3:f4:05:cb:56:04:e4:40:da: 97:39:2e:31:c0:a4:8c:ee:cf:16:51:c5:3d:a3:db:e6:03:59: b5:2d:9a:d1:c2:87:c8:58:e3:1d:3a:d4:9f:48:31:8f:99:87: f3:58:4c:99:48:f3:a1:4b:b8:6c:ff:21:b8:ac:b8:98:bb:88: 77:2d:c8:37:30:86:90:b7:ad:d1:a6:ef:f6:1f:77:23:b8:63: 08:e9:fa:41:71:de:dc:9b:aa:72:27:63:ed:21:30:a7:a8:82: e1:06:d9:a9:71:93:3b:87:b9:0f:be:ff:8a:a8:87:94:7e:b7: 41:c8:11:77:07:19:4b:3a:aa:1f:c7:c0:de:36:7b:23:79:9f: df:87:76:1e:ac:8d:40:80:c1:20:50:80:96:34:6b:f4:a2:23: e7:12:cf:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODMzRkYxMTAvBgNVBAUTKDEyMzI3REZDOUU4ODgzQ0RCQjZDNkVFRUIzOTI1RjJD OEMwRjdFNUUwHhcNMjQwNTA2MTc1MzQ0WhcNMjQwNTEzMTc1MzQ0WjAYMRYwFAYD VQQDEw02NjM5MTkyOS1hNmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqQT0i23mV9IpIkrBQlb1b1qfdKunbOzR+QY0ITqnzAffUqySEdiaA6a6MdvY 1XFlR8Amp5mmpFPFaT+CJQ4LoMWfWkC7UKUGFi/e4M2LlhUogtNldxKbJ5E++Bsc Z6PpLErpBUmJgg2C6iv67d4c2ujTy66rvLN51aQeQwY8FcDDQucouXNKbV0pjjyO m9JVbH95C+Gg0BOfGKWsNJ+2fMNwGUt4qiiuKWA+UEKhrg4S6z8mHTOc1PYVq9kg wOwMagan54yNTca2GqE8z0fR0lmrrGr3i0mU18uKBeURfTq6DZ5UQAtbZwtrZDd7 5nsvRJQSQvmuG/NPQJTheBcE7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHXBqRb2 JRsw9FGQHMv2vkaosg1RMB8GA1UdIwQYMBaAFBIyffyeiIPNu2xu7rOSXyyMD35e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzNGRi8xNEVGRTdFNEUw N0QxMUU4QTVGMEZCMzVDNEY5QUUwMi9Fako5X0o2SWc4MjdiRzd1czVKZkxJd1Bm bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VqSjlfSjZJZzgyN2JHN3VzNUpmTEl3UGZsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzNGRi8xNEVGRTdFNEUwN0QxMUU4QTVGMEZCMzVDNEY5QUUwMi9Fako5X0o2SWc4 MjdiRzd1czVKZkxJd1BmbDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFl+rTG+ZHthZa5tIAwFnI47GArk6OUfaWh1ij1AEG9r4iIMzg/idg 4XzJbA+NZcIK2XunTd6nIGikgxGlFVfXZX+mQWBhewlI5LWu1Iq43yzbatI2eSI9 sxOzN+Mcg8mZ6pDT9AXLVgTkQNqXOS4xwKSM7s8WUcU9o9vmA1m1LZrRwofIWOMd OtSfSDGPmYfzWEyZSPOhS7hs/yG4rLiYu4h3Lcg3MIaQt63Rpu/2H3cjuGMI6fpB cd7cm6pyJ2PtITCnqILhBtmpcZM7h7kPvv+KqIeUfrdByBF3BxlLOqofx8DeNnsj eZ/fh3YerI1AgMEgUICWNGv0oiPnEs9J -----END CERTIFICATE-----Generated at Mon May 6 20:19:14 2024 by rpki-client on console-fra.rpki-client.org