$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft File: 0eKZ-egsk3yysqaQYegXNB-FCPU.mft (raw, json) Hash identifier: 15XGpFjn67QjjdbI15WfXEg0I8tQXpjlWg88u47TX6s= Subject key identifier: 98:BF:CF:7C:5C:B9:83:A0:63:E2:92:0E:E7:CA:7A:D8:5C:E1:4E:A9 Authority key identifier: D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5 Certificate issuer: /CN=A91886CC/serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5 Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft Manifest number: C8 Signing time: Sun 19 May 2024 06:17:09 +0000 Manifest this update: Sun 19 May 2024 06:17:09 +0000 Manifest next update: Sun 26 May 2024 06:17:09 +0000 Files and hashes: 1: 0eKZ-egsk3yysqaQYegXNB-FCPU.crl (hash: 9mZEs2b0F+ujdHJklg1pZRuLPGo7WIql69PF+7UjpOU=) 2: 71F97AC0560E11EEA8088470C4F9AE02.roa (hash: 7jSZSFpSDDtwFLUt1mNxKP+WquGsT1Ew+n5wbH4fj+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886CC/serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5 Validity Not Before: May 19 06:17:09 2024 GMT Not After : May 26 06:17:09 2024 GMT Subject: CN=66499965-553d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:19:55:10:02:8a:94:37:52:0e:24:85:dc:11: 21:db:7a:46:6a:b6:dd:8d:3b:98:b6:31:51:2c:64: f9:77:da:08:39:a3:7f:37:83:b1:a5:c7:e9:aa:8f: e0:6d:10:c6:35:55:c1:64:09:cf:ee:7d:22:c3:4a: d7:01:85:c6:90:a3:e1:48:05:f3:85:fe:55:67:ca: 50:7b:02:0a:8d:da:2f:7b:34:84:e9:60:d8:51:1f: 31:e8:f5:8d:a5:45:2f:60:be:23:fc:36:30:3c:58: e8:cf:ea:66:2d:2e:8a:47:d2:3a:51:d9:6e:f2:37: 00:4b:97:e7:c6:34:07:6e:fe:65:4e:71:4f:d6:b2: 0f:ed:33:43:6b:4e:d6:b7:98:ca:9e:76:3d:82:d8: a5:dd:ca:3f:56:d1:00:4f:78:03:46:c4:59:1f:c2: 8a:0c:88:a8:cf:e7:a3:76:82:f2:e0:12:96:2f:f7: cc:e4:26:c9:dc:6b:23:80:14:e5:e9:ac:2f:44:43: 8d:a5:b6:08:a9:c3:66:64:0a:90:d7:94:51:51:6e: 1c:89:4d:5c:92:61:2e:da:30:98:c7:bc:a1:98:5f: 7d:1b:0a:01:bf:da:61:b7:58:9b:37:7e:5b:3a:a4: e0:20:45:49:e2:6f:34:01:c8:14:3e:e8:73:b6:e3: 54:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:BF:CF:7C:5C:B9:83:A0:63:E2:92:0E:E7:CA:7A:D8:5C:E1:4E:A9 X509v3 Authority Key Identifier: keyid:D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:d6:4f:61:35:f5:00:37:ac:e8:f5:a9:8c:00:ac:f3:35:01: ca:e9:fb:4b:5f:f4:b3:1e:d6:3b:fc:6f:16:de:14:0d:63:11: cb:d4:5f:33:5d:7c:b9:42:92:33:4d:d0:ac:60:8d:8d:d6:03: 22:5a:92:2b:9a:7b:97:06:ec:43:12:d9:4c:24:d5:76:30:28: 30:74:80:7e:f0:fb:3a:b0:b5:53:ab:6c:29:60:5a:46:b3:64: 52:94:15:f5:66:a4:93:0e:f2:79:78:d0:86:18:65:77:a6:a3: c4:84:0f:c1:4b:33:3b:c2:6f:74:4e:54:12:4a:5a:f4:22:61: 25:6f:ea:d6:0b:3f:3d:d6:27:02:e2:b7:f0:d8:a9:57:99:9a: 2c:46:27:96:93:a0:5f:93:6b:cf:dd:74:d8:76:84:84:76:0b: eb:a4:55:45:f8:ef:73:ae:fa:32:53:3c:25:db:dc:07:40:d0: b1:59:76:c8:a7:bc:47:d0:6b:6f:79:64:71:2c:c5:54:21:54: c9:13:c7:0a:31:3e:d7:c2:39:ad:e1:ec:1b:6a:f5:09:fb:bd: b5:07:9e:8b:c9:43:23:82:67:8e:3c:2d:1b:34:4b:0e:47:05: 24:a1:2a:0c:ab:b6:11:83:4a:7b:16:2e:c9:37:a6:30:43:90: 1c:11:25:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg2Q0MxMTAvBgNVBAUTKEQxRTI5OUY5RTgyQzkzN0NCMkIyQTY5MDYxRTgxNzM0 MUY4NTA4RjUwHhcNMjQwNTE5MDYxNzA5WhcNMjQwNTI2MDYxNzA5WjAYMRYwFAYD VQQDEw02NjQ5OTk2NS01NTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqhlVEAKKlDdSDiSF3BEh23pGarbdjTuYtjFRLGT5d9oIOaN/N4Oxpcfpqo/g bRDGNVXBZAnP7n0iw0rXAYXGkKPhSAXzhf5VZ8pQewIKjdovezSE6WDYUR8x6PWN pUUvYL4j/DYwPFjoz+pmLS6KR9I6Udlu8jcAS5fnxjQHbv5lTnFP1rIP7TNDa07W t5jKnnY9gtil3co/VtEAT3gDRsRZH8KKDIioz+ejdoLy4BKWL/fM5CbJ3GsjgBTl 6awvREONpbYIqcNmZAqQ15RRUW4ciU1ckmEu2jCYx7yhmF99GwoBv9pht1ibN35b OqTgIEVJ4m80AcgUPuhztuNUPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJi/z3xc uYOgY+KSDufKethc4U6pMB8GA1UdIwQYMBaAFNHimfnoLJN8srKmkGHoFzQfhQj1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZDQy80RUE2QzYxOEU4 QkQxMUVEOEI4OTI1MjJDNEY5QUUwMi8wZUtaLWVnc2szeXlzcWFRWWVnWE5CLUZD UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBlS1otZWdzazN5eXNxYVFZZWdYTkItRkNQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODZDQy80RUE2QzYxOEU4QkQxMUVEOEI4OTI1MjJDNEY5QUUwMi8wZUtaLWVnc2sz eXlzcWFRWWVnWE5CLUZDUFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU1k9hNfUAN6zo9amMAKzzNQHK6ftLX/SzHtY7/G8W3hQNYxHL1F8z XXy5QpIzTdCsYI2N1gMiWpIrmnuXBuxDEtlMJNV2MCgwdIB+8Ps6sLVTq2wpYFpG s2RSlBX1ZqSTDvJ5eNCGGGV3pqPEhA/BSzM7wm90TlQSSlr0ImElb+rWCz891icC 4rfw2KlXmZosRieWk6Bfk2vP3XTYdoSEdgvrpFVF+O9zrvoyUzwl29wHQNCxWXbI p7xH0GtveWRxLMVUIVTJE8cKMT7Xwjmt4ewbavUJ+721B56LyUMjgmeOPC0bNEsO RwUkoSoMq7YRg0p7Fi7JN6YwQ5AcESXs -----END CERTIFICATE-----Generated at Sun May 19 07:40:41 2024 by rpki-client on console-fra.rpki-client.org