$ rpki-client -vvf rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft File: eqxn28Hrko4pUTYuC8asdnfi3Hs.mft (raw, json) Hash identifier: EvyeErQfWx9wHd7jvCjOppV/PiMdvZIbR57w5CkupVo= Subject key identifier: C6:94:1C:2F:19:7D:B9:4C:82:00:D7:80:1D:E6:24:D7:D0:BE:59:DD Authority key identifier: 7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B Certificate issuer: /CN=A919E9A5/serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B Certificate serial: 340D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft Manifest number: 33ED Signing time: Fri 31 May 2024 14:35:30 +0000 Manifest this update: Fri 31 May 2024 14:35:30 +0000 Manifest next update: Fri 07 Jun 2024 14:35:30 +0000 Files and hashes: 1: eqxn28Hrko4pUTYuC8asdnfi3Hs.crl (hash: Q6xeqJOCHJyeDjlVc0pA1F9DD1by4XTiAbyXknQVelU=) 2: 07B66286E24A11EEA3478879C4F9AE02.roa (hash: qF4EEK/eOx7T8Rcy1eoQDalCeAmsHD6meK0KtySTD1g=) 3: 3BC5B9F8B53311EE9D8D774EC4F9AE02.roa (hash: Zat3lfoJd7wHrgdR1LUW98aWngZsNPzvM6G1u6eboFc=) 4: 40525F82E24A11EE95367C17C4F9AE02.roa (hash: 4VjqCsZjVzs/xvrnyWHQDyl6GpzYXXfDRpmWkVkj15E=) 5: 3733FB76AA4211EEBB038B40C4F9AE02.roa (hash: U5tEexppSnLuHH6oSC7bnwCzRAe4KJ1WOTvOCz1NRvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13325 (0x340d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E9A5/serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B Validity Not Before: May 31 14:35:30 2024 GMT Not After : Jun 7 14:35:30 2024 GMT Subject: CN=6659e032-1524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:68:f1:f6:f2:ff:9c:1c:91:9c:15:17:fb:fa: 91:63:56:7f:d7:ac:f9:df:b3:31:36:b1:08:4c:5c: cb:66:b1:ab:09:c1:eb:fb:92:68:e3:3c:c1:e5:59: fa:4d:18:fe:56:c4:62:26:e3:2f:d4:5a:5a:69:14: 2f:b9:90:79:2f:d0:0a:29:4f:e0:f4:dd:3a:e4:e9: d8:1d:5d:a8:f1:c0:e9:22:f4:67:36:22:8e:d4:e3: 69:95:a9:42:44:c2:e7:6a:11:13:ea:e2:0b:74:8d: f8:99:f6:f7:77:08:a5:96:86:2c:ed:f1:da:06:03: 6c:2b:33:45:9d:78:da:29:0a:4d:bf:e7:1f:2e:fa: 76:31:b0:c3:a8:27:38:a8:e5:37:85:9e:04:c3:ec: 63:ff:1e:70:4e:3c:05:3d:61:6d:10:2d:76:19:09: d1:c6:35:59:4d:79:c1:3a:ad:de:fd:7c:60:8f:3a: eb:63:a1:3c:64:2a:78:48:9f:d7:ac:67:d6:37:f8: 9c:36:b2:38:1c:c0:0b:10:f7:9c:5e:85:08:f3:61: 4a:3b:ce:29:9d:c3:0f:1f:e8:e2:0f:bd:fd:bd:a9: 17:31:eb:4c:75:e6:92:20:c6:ae:a1:e1:58:2f:94: bc:50:ac:b7:66:a3:df:21:f4:4c:c2:52:49:15:e1: 42:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:94:1C:2F:19:7D:B9:4C:82:00:D7:80:1D:E6:24:D7:D0:BE:59:DD X509v3 Authority Key Identifier: keyid:7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:9b:bc:42:1c:99:00:f4:c7:c9:1b:c9:bc:29:7c:c7:df:2a: 62:6f:fd:b5:24:79:ac:5b:d2:b9:93:7e:ed:09:74:8a:7f:ea: 5a:eb:be:19:90:04:c8:1f:f4:14:f9:e7:70:71:b6:d4:16:27: fa:82:c4:a4:4c:da:b7:6c:9a:8c:9c:7e:68:05:14:14:20:50: 06:fc:a6:0f:e0:3a:89:6f:fa:f4:ed:e1:0e:81:ab:c2:c7:72: b5:0a:a1:53:07:be:9a:e2:99:c3:c2:73:f8:d0:2c:99:09:44: 1e:6c:76:88:40:14:a3:4f:5d:90:49:05:ec:c9:70:c4:a0:14: 59:b3:1e:38:3e:21:d8:0b:e7:d0:bd:e2:41:34:b7:5b:9f:a7: 33:07:0f:9e:e0:2c:06:1c:45:23:cf:2b:d8:d3:08:f3:bb:e1: 5d:20:18:16:0c:55:7b:3a:df:54:0d:ad:4f:e5:ee:f9:70:d5: d3:42:4e:b5:9f:0c:1c:7b:db:d1:67:f3:e4:85:60:c4:6b:0d: 8e:5a:12:00:f6:25:b6:af:9b:21:ae:30:40:87:da:95:fb:9d: f6:80:4d:be:05:e5:76:7c:85:d0:0a:6f:29:ca:5f:5d:ab:b4: 96:25:88:d0:12:97:cf:40:78:57:49:08:5f:08:9e:f9:43:fc: 31:7f:3f:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNA0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUU5QTUxMTAvBgNVBAUTKDdBQUM2N0RCQzFFQjkyOEUyOTUxMzYyRTBCQzZBQzc2 NzdFMkRDN0IwHhcNMjQwNTMxMTQzNTMwWhcNMjQwNjA3MTQzNTMwWjAYMRYwFAYD VQQDEw02NjU5ZTAzMi0xNTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWjx9vL/nByRnBUX+/qRY1Z/16z537MxNrEITFzLZrGrCcHr+5Jo4zzB5Vn6 TRj+VsRiJuMv1FpaaRQvuZB5L9AKKU/g9N065OnYHV2o8cDpIvRnNiKO1ONplalC RMLnahET6uILdI34mfb3dwilloYs7fHaBgNsKzNFnXjaKQpNv+cfLvp2MbDDqCc4 qOU3hZ4Ew+xj/x5wTjwFPWFtEC12GQnRxjVZTXnBOq3e/XxgjzrrY6E8ZCp4SJ/X rGfWN/icNrI4HMALEPecXoUI82FKO84pncMPH+jiD739vakXMetMdeaSIMauoeFY L5S8UKy3ZqPfIfRMwlJJFeFCIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMaUHC8Z fblMggDXgB3mJNfQvlndMB8GA1UdIwQYMBaAFHqsZ9vB65KOKVE2LgvGrHZ34tx7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTlBNS9BMzJFRkVCODFE ODkxMUUyOTJFNEZERTIwOEIwMkNEMi9lcXhuMjhIcmtvNHBVVFl1Qzhhc2RuZmkz SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VxeG4yOEhya280cFVUWXVDOGFzZG5maTNIcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTlBNS9BMzJFRkVCODFEODkxMUUyOTJFNEZERTIwOEIwMkNEMi9lcXhuMjhIcmtv NHBVVFl1Qzhhc2RuZmkzSHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhm7xCHJkA9MfJG8m8KXzH3ypib/21JHmsW9K5k37tCXSKf+pa674Z kATIH/QU+edwcbbUFif6gsSkTNq3bJqMnH5oBRQUIFAG/KYP4DqJb/r07eEOgavC x3K1CqFTB76a4pnDwnP40CyZCUQebHaIQBSjT12QSQXsyXDEoBRZsx44PiHYC+fQ veJBNLdbn6czBw+e4CwGHEUjzyvY0wjzu+FdIBgWDFV7Ot9UDa1P5e75cNXTQk61 nwwce9vRZ/PkhWDEaw2OWhIA9iW2r5shrjBAh9qV+532gE2+BeV2fIXQCm8pyl9d q7SWJYjQEpfPQHhXSQhfCJ75Q/wxfz8l -----END CERTIFICATE-----Generated at Fri May 31 15:08:32 2024 by rpki-client on console-fra.rpki-client.org