$ rpki-client -vvf rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft File: EEjCfhFLkRMVXq68kL7G3YD4xss.mft (raw, json) Hash identifier: wwz44Oh3Bv3qAUWVrb0aVwy2B9l+Ji/Z+FRCCDrf62c= Subject key identifier: F8:5D:37:39:27:97:13:50:11:73:E0:EA:3C:41:94:AD:EF:E4:3F:7C Authority key identifier: 10:48:C2:7E:11:4B:91:13:15:5E:AE:BC:90:BE:C6:DD:80:F8:C6:CB Certificate issuer: /CN=A919E08E/serialNumber=1048C27E114B9113155EAEBC90BEC6DD80F8C6CB Certificate serial: 0590 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEjCfhFLkRMVXq68kL7G3YD4xss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft Manifest number: 058C Signing time: Fri 31 May 2024 01:03:32 +0000 Manifest this update: Fri 31 May 2024 01:03:32 +0000 Manifest next update: Fri 07 Jun 2024 01:03:32 +0000 Files and hashes: 1: EEjCfhFLkRMVXq68kL7G3YD4xss.crl (hash: Hd4RdkkezsT0Vb3bRRXJMw20ll2CRfUkb+zjxVgDXak=) 2: 5F506D7C8C7911EBB7E88620C4F9AE02.roa (hash: pJ8Q6VSAm/7OV0oYIwdLwufm1ts8Sapm0z7tUd9ygLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.crl rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEjCfhFLkRMVXq68kL7G3YD4xss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:03:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1424 (0x590) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E08E/serialNumber=1048C27E114B9113155EAEBC90BEC6DD80F8C6CB Validity Not Before: May 31 01:03:32 2024 GMT Not After : Jun 7 01:03:32 2024 GMT Subject: CN=665921e4-b90b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f4:75:64:ab:40:40:b8:69:d3:17:5d:6f:58: 3a:82:8b:a8:48:fe:2e:0a:93:44:d9:d7:59:92:c5: fa:00:62:62:47:46:d6:4c:5a:2f:ab:71:19:40:7d: ff:44:4b:f6:ca:99:f7:9f:01:1e:95:7c:b1:88:fa: e6:7d:58:ce:ce:cb:d5:65:99:02:17:54:e6:85:01: bf:49:00:b0:1b:ae:b9:86:21:d2:ef:d8:ff:02:49: c9:75:38:71:3e:27:6d:c8:b1:5b:3f:43:83:53:b7: b7:d6:59:6e:7e:1b:f0:84:6b:a9:20:7e:23:8e:29: f9:c6:30:ff:41:d1:30:17:df:82:02:54:a6:69:0f: 6a:a2:d1:15:63:f8:d1:29:31:a6:18:9a:55:29:70: a3:10:9e:bd:33:d5:1a:d3:ea:36:6c:5e:4d:eb:7d: bf:4c:ca:0b:73:3a:d3:b9:f0:38:81:f7:91:eb:e6: 23:bd:40:9c:5a:84:00:3a:ec:17:b4:44:f8:b5:64: 19:81:fb:61:14:00:72:15:4b:3e:da:6d:ed:9e:8b: 70:1b:82:2f:32:73:33:0a:b1:0a:f9:1f:51:fc:6b: 9c:84:f0:44:5f:f8:55:fe:83:bc:50:28:48:a2:56: 3d:3b:90:65:0d:23:f0:55:0b:95:8b:37:e6:a5:6d: ef:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:5D:37:39:27:97:13:50:11:73:E0:EA:3C:41:94:AD:EF:E4:3F:7C X509v3 Authority Key Identifier: keyid:10:48:C2:7E:11:4B:91:13:15:5E:AE:BC:90:BE:C6:DD:80:F8:C6:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEjCfhFLkRMVXq68kL7G3YD4xss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e2:b4:de:48:ce:ac:c1:f0:ab:75:23:9d:90:e4:55:61:3c:86: 7d:51:82:eb:88:ba:07:df:3e:a4:a1:4a:01:89:57:3a:d8:fe: 95:30:dc:58:7b:3b:0c:ee:1b:60:a1:3a:7f:55:43:bd:69:02: cc:06:66:a0:9e:a0:52:59:ca:b4:a7:44:f8:6f:90:3c:14:1e: 73:3a:f1:11:6a:b6:f0:9e:07:f5:40:61:d1:6a:d8:03:42:f5: 4a:46:39:ed:64:63:20:40:9c:c8:d7:37:61:5c:a0:ee:44:04: 3e:e9:6f:3a:f9:83:1c:9e:b5:5a:55:b2:a2:d9:dd:ad:55:5a: ce:b5:90:f0:dc:d6:5c:58:cb:04:d2:4a:02:45:a9:c1:43:7d: dc:99:26:ab:e0:e2:7d:30:bd:00:7b:c8:c1:13:98:ce:ef:cc: 72:cf:94:17:81:d2:d7:c5:3c:cd:9a:bf:93:45:55:e8:92:8a: 99:9d:40:49:ed:66:40:6d:be:15:64:e2:33:f2:32:39:47:44: e8:1f:ab:a0:ca:07:91:1d:83:95:00:65:ee:7b:23:0a:b2:67: 45:63:f9:8c:c6:32:47:39:cc:81:9d:e4:2b:af:58:33:e0:04: d3:77:65:0f:26:7f:3e:e5:a5:a7:b2:35:ae:91:51:3d:23:70: eb:fc:ce:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUUwOEUxMTAvBgNVBAUTKDEwNDhDMjdFMTE0QjkxMTMxNTVFQUVCQzkwQkVDNkRE ODBGOEM2Q0IwHhcNMjQwNTMxMDEwMzMyWhcNMjQwNjA3MDEwMzMyWjAYMRYwFAYD VQQDEw02NjU5MjFlNC1iOTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3vR1ZKtAQLhp0xddb1g6gouoSP4uCpNE2ddZksX6AGJiR0bWTFovq3EZQH3/ REv2ypn3nwEelXyxiPrmfVjOzsvVZZkCF1TmhQG/SQCwG665hiHS79j/AknJdThx PidtyLFbP0ODU7e31llufhvwhGupIH4jjin5xjD/QdEwF9+CAlSmaQ9qotEVY/jR KTGmGJpVKXCjEJ69M9Ua0+o2bF5N632/TMoLczrTufA4gfeR6+YjvUCcWoQAOuwX tET4tWQZgfthFAByFUs+2m3tnotwG4IvMnMzCrEK+R9R/GuchPBEX/hV/oO8UChI olY9O5BlDSPwVQuVizfmpW3vvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPhdNzkn lxNQEXPg6jxBlK3v5D98MB8GA1UdIwQYMBaAFBBIwn4RS5ETFV6uvJC+xt2A+MbL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTA4RS9FMUNBNTg0NjhD NzcxMUVCODg1QjMxMUZDNEY5QUUwMi9FRWpDZmhGTGtSTVZYcTY4a0w3RzNZRDR4 c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VFakNmaEZMa1JNVlhxNjhrTDdHM1lENHhzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTA4RS9FMUNBNTg0NjhDNzcxMUVCODg1QjMxMUZDNEY5QUUwMi9FRWpDZmhGTGtS TVZYcTY4a0w3RzNZRDR4c3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDitN5IzqzB8Kt1I52Q5FVhPIZ9UYLriLoH3z6koUoBiVc62P6VMNxY ezsM7htgoTp/VUO9aQLMBmagnqBSWcq0p0T4b5A8FB5zOvERarbwngf1QGHRatgD QvVKRjntZGMgQJzI1zdhXKDuRAQ+6W86+YMcnrVaVbKi2d2tVVrOtZDw3NZcWMsE 0koCRanBQ33cmSar4OJ9ML0Ae8jBE5jO78xyz5QXgdLXxTzNmr+TRVXokoqZnUBJ 7WZAbb4VZOIz8jI5R0ToH6ugygeRHYOVAGXueyMKsmdFY/mMxjJHOcyBneQrr1gz 4ATTd2UPJn8+5aWnsjWukVE9I3Dr/M72 -----END CERTIFICATE-----Generated at Fri May 31 03:15:02 2024 by rpki-client on console-ams.rpki-client.org