$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft File: eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft (raw, json) Hash identifier: HpQ+9M1S/8M90RdxdnHjKzCx9JoSqZcHYy1Dc6ahfkg= Subject key identifier: 4A:0D:46:38:06:A7:91:D3:BA:2F:A1:8C:05:FE:6C:2C:22:83:16:5A Authority key identifier: 78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71 Certificate issuer: /CN=A91A55C9/serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft Manifest number: 32 Signing time: Sun 19 May 2024 08:21:15 +0000 Manifest this update: Sun 19 May 2024 08:21:14 +0000 Manifest next update: Sun 26 May 2024 08:21:14 +0000 Files and hashes: 1: eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl (hash: CnmK1Wjn2TE0+hPlN4CKZNVL/M+vT6x8rbR2Vv1axNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A55C9/serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71 Validity Not Before: May 19 08:21:14 2024 GMT Not After : May 26 08:21:14 2024 GMT Subject: CN=6649b67a-5472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:66:99:a7:d3:a7:44:4e:86:0b:07:00:91:f8: 2d:7d:60:1e:03:91:8a:a1:d6:bc:29:16:42:3e:5d: 1f:6f:d8:74:e1:53:58:66:00:d4:90:1f:e3:0c:29: 57:37:84:23:fb:cd:ca:e3:e5:9d:94:63:0b:3c:b4: a6:d2:f0:5e:ef:38:5d:bb:01:ef:11:48:1c:a8:ea: 02:2f:16:d3:a0:75:db:c0:1d:ea:a2:82:ce:92:89: bb:9e:2b:29:2b:4f:b6:e8:9d:ef:4d:eb:72:80:d0: 86:4c:76:3f:a3:5f:e3:33:5c:eb:5c:95:86:b2:c8: 63:9d:47:50:12:fb:e2:46:5c:ab:c6:e6:c0:f5:9a: 59:86:b4:45:70:33:5f:5d:84:3a:25:ad:ed:01:e7: 41:ae:9d:51:8a:73:32:b1:cf:c8:4e:f8:9f:3a:20: 0c:4f:82:3b:45:bd:fb:c7:d7:77:bd:9a:b5:db:83: ae:7c:74:34:7d:1c:7c:ea:e1:16:e8:fe:5b:98:4d: 93:3d:ba:74:20:c1:7c:d2:ab:a3:9b:e8:10:1c:df: 6f:45:32:e1:e8:1b:7f:cd:7a:02:5a:3b:dc:79:04: 26:1e:fc:de:33:87:a0:6f:77:50:a7:c9:fb:6d:6f: e3:14:50:07:97:1d:37:a7:ef:c8:e6:86:54:b8:d2: 12:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:0D:46:38:06:A7:91:D3:BA:2F:A1:8C:05:FE:6C:2C:22:83:16:5A X509v3 Authority Key Identifier: keyid:78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:bb:7e:ee:70:b0:6d:ba:6f:5e:3e:61:2c:26:c9:19:ff:ea: 11:d4:af:f1:96:42:e3:25:95:b4:5c:b6:ca:98:8a:b6:b5:6b: aa:1b:aa:e5:02:ba:c9:ae:1b:5b:e1:17:fd:22:70:28:74:b2: d0:f9:3b:a4:a2:55:5e:e1:d3:18:2e:6f:c3:d4:c4:b3:14:8c: 03:ad:14:8e:dd:8e:1b:0f:0e:07:5d:db:1a:52:24:7f:1b:ea: 3b:a5:20:38:cc:eb:75:d2:60:ca:b8:40:ad:05:3d:67:1f:40: 42:6b:ad:b2:9e:5d:94:d8:99:1b:07:6b:c4:c4:6e:f5:f0:d8: aa:72:a2:4a:a7:b2:88:63:95:b5:ac:8f:8a:98:1b:39:97:cb: 9d:8f:83:9b:33:f6:9d:44:5c:38:e9:f8:ee:d3:19:3c:31:20: 5d:c5:76:07:30:d1:75:96:84:33:f9:da:4d:bb:64:6a:3c:8f: bc:91:11:b8:5a:79:27:a6:fb:a3:f2:e7:ed:22:a4:36:35:f2: 89:ee:5b:73:5f:45:bf:40:6b:80:97:05:22:0c:97:a7:90:37: 6b:47:79:ae:a2:c0:83:14:48:df:09:d3:fe:37:a3:0b:8c:1a: fc:c1:b6:74:e4:4f:a2:a6:63:48:ec:ef:8d:56:57:7f:6c:aa: d8:1b:47:dc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NTVDOTExMC8GA1UEBRMoNzgzOUExRkMwMTc0MDI0QkNCQTg0RDAxMkQzRUM0Q0E0 Njc5QUM3MTAeFw0yNDA1MTkwODIxMTRaFw0yNDA1MjYwODIxMTRaMBgxFjAUBgNV BAMTDTY2NDliNjdhLTU0NzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDzZpmn06dEToYLBwCR+C19YB4DkYqh1rwpFkI+XR9v2HThU1hmANSQH+MMKVc3 hCP7zcrj5Z2UYws8tKbS8F7vOF27Ae8RSByo6gIvFtOgddvAHeqigs6SibueKykr T7bone9N63KA0IZMdj+jX+MzXOtclYayyGOdR1AS++JGXKvG5sD1mlmGtEVwM19d hDolre0B50GunVGKczKxz8hO+J86IAxPgjtFvfvH13e9mrXbg658dDR9HHzq4Rbo /luYTZM9unQgwXzSq6Ob6BAc329FMuHoG3/NegJaO9x5BCYe/N4zh6Bvd1Cnyftt b+MUUAeXHTen78jmhlS40hLvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSg1GOAan kdO6L6GMBf5sLCKDFlowHwYDVR0jBBgwFoAUeDmh/AF0AkvLqE0BLT7EykZ5rHEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1NUM5Lzg4MkYyMzIwQzlF QjExRUU4Qjg1N0IwQ0M0RjlBRTAyL2VEbWhfQUYwQWt2THFFMEJMVDdFeWtaNXJI RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZURtaF9BRjBBa3ZMcUUwQkxUN0V5a1o1ckhFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1 NUM5Lzg4MkYyMzIwQzlFQjExRUU4Qjg1N0IwQ0M0RjlBRTAyL2VEbWhfQUYwQWt2 THFFMEJMVDdFeWtaNXJIRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGy7fu5wsG26b14+YSwmyRn/6hHUr/GWQuMllbRctsqYira1a6obquUC usmuG1vhF/0icCh0stD5O6SiVV7h0xgub8PUxLMUjAOtFI7djhsPDgdd2xpSJH8b 6julIDjM63XSYMq4QK0FPWcfQEJrrbKeXZTYmRsHa8TEbvXw2KpyokqnsohjlbWs j4qYGzmXy52Pg5sz9p1EXDjp+O7TGTwxIF3Fdgcw0XWWhDP52k27ZGo8j7yREbha eSem+6Py5+0ipDY18onuW3NfRb9Aa4CXBSIMl6eQN2tHea6iwIMUSN8J0/43owuM GvzBtnTkT6KmY0js741WV39sqtgbR9w= -----END CERTIFICATE-----Generated at Sun May 19 09:32:17 2024 by rpki-client on console-ams.rpki-client.org