$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft File: eFfRGlHcrpwuCIahDOBvVfW4QwA.mft (raw, json) Hash identifier: GwCM3/lfrUH1ldQtnL7xiI7pmXLztZJCyi+csnLuNic= Subject key identifier: D2:3B:66:84:AC:1D:B8:C2:D9:D8:3E:9A:C9:A1:D8:29:9A:9F:24:BB Authority key identifier: 78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00 Certificate issuer: /CN=A91A5D8A/serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300 Certificate serial: 04F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft Manifest number: 04EA Signing time: Sun 19 May 2024 01:17:14 +0000 Manifest this update: Sun 19 May 2024 01:17:13 +0000 Manifest next update: Sun 26 May 2024 01:17:13 +0000 Files and hashes: 1: eFfRGlHcrpwuCIahDOBvVfW4QwA.crl (hash: qWACloS6/1OgP22JJAt+MGyZzlhJ8Wdh0Xh4rjUe0QA=) 2: 8183B0FACAF111EBA40AF15BC4F9AE02.roa (hash: XwG0FHSlMJ0rTygHTL6/8gSgzUHSXejVg64oWEJojIA=) 3: 18981398329B11EDB9F09862C4F9AE02.roa (hash: va0dDvMjHYfQf8YH7iN9o7r8RUidDQZSikq8ZnL2A8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1265 (0x4f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5D8A/serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300 Validity Not Before: May 19 01:17:13 2024 GMT Not After : May 26 01:17:13 2024 GMT Subject: CN=6649531a-52b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ac:3b:df:5a:09:9f:19:54:b1:06:ca:9b:85: 2a:b2:b8:bb:45:eb:a5:ca:83:2a:b4:a6:48:00:6e: 63:85:b4:55:50:4c:31:73:4e:42:e8:f5:23:11:c2: 76:d2:10:19:14:66:9f:41:97:7f:ae:fc:bc:c3:d5: b8:32:f3:09:a1:1f:8b:26:2f:69:b8:04:79:4f:05: 6a:55:d7:3b:85:00:5d:f9:24:4b:df:df:57:f6:de: af:6f:af:6d:65:4a:0c:cc:6e:16:83:97:f4:3e:1d: c8:ca:33:47:ac:02:9c:ab:1a:b1:04:bd:30:8b:49: 1e:b3:4e:31:ab:0a:54:55:ce:21:d5:fe:a5:cd:d1: 09:82:9f:1b:ef:51:16:f0:b7:61:f9:8e:93:b9:3e: e6:6a:fd:a3:f3:32:a0:74:42:0b:fa:04:89:7e:93: 72:85:bb:49:84:8a:cd:16:ca:df:bf:26:6d:e3:76: c8:55:07:3d:2f:64:35:c8:16:88:57:9a:e3:8d:c9: e3:f4:5c:16:ca:ee:5f:a4:d5:da:66:03:33:43:f3: 18:18:24:9c:85:36:db:eb:b6:d7:0b:89:93:77:8a: 91:73:80:79:7b:82:0e:02:80:00:89:2d:e9:25:ac: 44:45:74:ea:35:8a:7a:19:f3:3b:0b:20:14:51:ea: e3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:3B:66:84:AC:1D:B8:C2:D9:D8:3E:9A:C9:A1:D8:29:9A:9F:24:BB X509v3 Authority Key Identifier: keyid:78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:3c:62:52:02:cf:e5:76:8d:19:b6:87:3c:da:e1:5a:cb:15: 48:ba:77:b1:8a:a6:b4:98:0e:d9:21:4c:b2:c0:9d:50:37:cc: 37:51:65:c6:e0:73:2f:80:8e:d1:93:bf:74:fe:6d:a7:2f:ae: 3a:74:28:d0:bb:ae:72:41:48:d6:c9:ca:8d:65:72:55:a5:86: 70:a3:c5:4d:a1:91:1f:e0:20:4b:3c:64:31:b1:8a:ea:97:60: c8:b7:88:1d:30:56:fd:5f:70:f7:52:65:89:26:2c:9e:e4:47: 23:8f:5a:e0:ed:59:08:72:ca:f8:da:d3:e1:b6:8d:16:64:da: 43:36:72:f8:0a:04:07:0b:08:34:84:a7:6e:ec:8d:96:5c:c3: 57:b5:af:41:8b:4d:8c:10:81:09:83:3d:9b:55:0c:d3:6d:e7: 16:57:55:c9:68:cf:53:08:46:c8:9b:a4:1c:26:bd:4f:66:f0: e2:43:0c:de:6b:e6:53:04:1a:a8:6f:09:b4:c6:e2:22:6d:55: 8c:db:f6:80:ca:20:fd:9e:57:f4:8d:b3:49:fd:08:fe:a0:e7: 4e:5f:b4:19:63:57:1f:2f:b5:65:e3:b9:4d:31:fa:3f:f8:05: b6:4f:63:f4:65:4e:4c:1d:51:47:c6:c6:55:32:2c:b0:ad:ac: 31:9e:e3:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVEOEExMTAvBgNVBAUTKDc4NTdEMTFBNTFEQ0FFOUMyRTA4ODZBMTBDRTA2RjU1 RjVCODQzMDAwHhcNMjQwNTE5MDExNzEzWhcNMjQwNTI2MDExNzEzWjAYMRYwFAYD VQQDEw02NjQ5NTMxYS01MmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp6w731oJnxlUsQbKm4Uqsri7ReulyoMqtKZIAG5jhbRVUEwxc05C6PUjEcJ2 0hAZFGafQZd/rvy8w9W4MvMJoR+LJi9puAR5TwVqVdc7hQBd+SRL399X9t6vb69t ZUoMzG4Wg5f0Ph3IyjNHrAKcqxqxBL0wi0kes04xqwpUVc4h1f6lzdEJgp8b71EW 8Ldh+Y6TuT7mav2j8zKgdEIL+gSJfpNyhbtJhIrNFsrfvyZt43bIVQc9L2Q1yBaI V5rjjcnj9FwWyu5fpNXaZgMzQ/MYGCSchTbb67bXC4mTd4qRc4B5e4IOAoAAiS3p JaxERXTqNYp6GfM7CyAUUerjIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNI7ZoSs HbjC2dg+msmh2CmanyS7MB8GA1UdIwQYMBaAFHhX0RpR3K6cLgiGoQzgb1X1uEMA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUQ4QS9CQTJGMUI5QUNB RUUxMUVCQTJGQkQwNTZDNEY5QUUwMi9lRmZSR2xIY3Jwd3VDSWFoRE9CdlZmVzRR d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VGZlJHbEhjcnB3dUNJYWhET0J2VmZXNFF3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUQ4QS9CQTJGMUI5QUNBRUUxMUVCQTJGQkQwNTZDNEY5QUUwMi9lRmZSR2xIY3Jw d3VDSWFoRE9CdlZmVzRRd0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaPGJSAs/ldo0Ztoc82uFayxVIunexiqa0mA7ZIUyywJ1QN8w3UWXG 4HMvgI7Rk790/m2nL646dCjQu65yQUjWycqNZXJVpYZwo8VNoZEf4CBLPGQxsYrq l2DIt4gdMFb9X3D3UmWJJiye5Ecjj1rg7VkIcsr42tPhto0WZNpDNnL4CgQHCwg0 hKdu7I2WXMNXta9Bi02MEIEJgz2bVQzTbecWV1XJaM9TCEbIm6QcJr1PZvDiQwze a+ZTBBqobwm0xuIibVWM2/aAyiD9nlf0jbNJ/Qj+oOdOX7QZY1cfL7Vl47lNMfo/ +AW2T2P0ZU5MHVFHxsZVMiywrawxnuMr -----END CERTIFICATE-----Generated at Sun May 19 01:47:14 2024 by rpki-client on console-fra.rpki-client.org