$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft File: eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft (raw, json) Hash identifier: 5oO3FNgGGtrsDybelM0H1+gziHM+TQ7YjZygVLDU12E= Subject key identifier: 89:C0:8A:2D:9D:DB:78:98:BE:2A:DC:DA:CA:7C:59:F0:AF:7F:51:19 Authority key identifier: 79:75:03:3D:C5:D4:54:0F:16:AE:C1:21:28:6E:C4:14:CA:78:7D:6F Certificate issuer: /CN=A91BC5BC/serialNumber=7975033DC5D4540F16AEC121286EC414CA787D6F Certificate serial: 08EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft Manifest number: 08E9 Signing time: Sat 18 May 2024 21:20:56 +0000 Manifest this update: Sat 18 May 2024 21:20:56 +0000 Manifest next update: Sat 25 May 2024 21:20:56 +0000 Files and hashes: 1: eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl (hash: sDN3f8/Mhz5lQC1zItIP9+hTsp3xvWUl6krkOGMUzM0=) 2: B1AF1C9C862311EA9052C281C4F9AE02.roa (hash: N8Vk5zZaWRTvflF+2/lryaHyKmyI/XNtYw9UmagiQc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2286 (0x8ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC5BC/serialNumber=7975033DC5D4540F16AEC121286EC414CA787D6F Validity Not Before: May 18 21:20:56 2024 GMT Not After : May 25 21:20:56 2024 GMT Subject: CN=66491bb8-d120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3a:36:35:30:84:53:58:74:69:63:87:16:3f: 9f:10:01:12:ad:92:8f:ef:fe:e1:63:92:de:52:fb: 10:82:98:6a:6f:c5:21:65:91:40:f0:fa:e5:eb:89: 24:a1:5a:6a:ea:71:df:a3:37:65:ac:f4:a8:ea:19: a0:59:27:8b:d5:5d:be:f2:59:6d:df:05:4b:f4:26: 3e:0f:67:66:48:14:db:5d:48:04:a5:79:f7:b7:af: 0d:18:21:52:5d:5c:f7:b7:ee:1e:2c:64:42:2f:b5: ee:b3:5c:34:c6:cd:8f:ad:31:b9:76:be:26:cb:2d: 9a:0c:42:29:d9:0d:86:f5:f0:c3:76:2a:41:53:b0: fa:54:5c:1b:55:fa:ce:14:72:1b:26:37:7e:a6:12: be:ac:e6:7e:8b:54:13:90:cf:2e:79:68:c7:0f:94: 94:70:71:04:83:a5:98:b8:dd:19:85:78:45:f8:5a: b6:a1:67:43:f2:35:db:83:b1:98:b4:3c:e2:39:22: e0:b4:ed:2f:d3:71:ba:3e:23:d4:99:48:73:06:fa: 6a:05:f0:65:69:84:7c:98:da:05:71:ab:3e:73:39: bf:cf:bb:bf:7f:1a:16:0f:72:06:d7:6f:73:e1:2a: 45:46:08:a0:5c:bd:2f:91:af:23:a5:11:94:81:5a: 01:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C0:8A:2D:9D:DB:78:98:BE:2A:DC:DA:CA:7C:59:F0:AF:7F:51:19 X509v3 Authority Key Identifier: keyid:79:75:03:3D:C5:D4:54:0F:16:AE:C1:21:28:6E:C4:14:CA:78:7D:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:bb:10:c6:7c:e4:b6:50:19:24:ba:e2:27:36:8a:8e:d7:02: e1:90:04:d4:74:ff:b8:fd:07:93:ee:95:13:33:9b:e0:43:c8: 3b:2c:c7:62:3e:87:7a:e5:dc:4f:79:bb:83:ac:e7:2a:c9:f1: 67:15:71:ab:1e:47:9a:67:e6:3a:6d:39:72:bb:f3:7e:bb:30: b6:53:ae:57:9d:df:50:ee:0e:4d:ca:f7:81:ef:69:82:ed:48: d8:d3:74:cb:35:8e:ea:0a:11:1b:00:b6:1e:15:26:d6:9e:ba: 8b:25:54:16:e9:f2:db:54:e8:12:1a:98:c5:66:73:c0:77:77: 2a:f4:33:80:dd:cf:8d:01:10:6e:79:d3:96:a9:6f:9b:a7:ef: c8:58:5e:e0:5b:19:8f:78:ac:79:a6:ce:a8:ae:65:d1:57:6f: 42:41:67:4c:db:08:70:72:24:d5:39:25:e4:ec:62:2a:e0:cc: 14:48:b7:4e:c2:53:e7:3d:fa:71:ba:98:1d:ac:fd:85:f4:a1: 2c:20:43:f7:dc:e3:60:6a:70:77:a0:21:a4:b9:50:0f:cf:54: 77:ba:d2:0b:62:67:74:32:fc:f0:e2:39:96:13:57:96:31:0d: cf:ff:19:50:8e:7a:8a:71:f4:9b:86:43:a5:32:5d:5f:77:f7: 6c:f4:71:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM1QkMxMTAvBgNVBAUTKDc5NzUwMzNEQzVENDU0MEYxNkFFQzEyMTI4NkVDNDE0 Q0E3ODdENkYwHhcNMjQwNTE4MjEyMDU2WhcNMjQwNTI1MjEyMDU2WjAYMRYwFAYD VQQDEw02NjQ5MWJiOC1kMTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtzo2NTCEU1h0aWOHFj+fEAESrZKP7/7hY5LeUvsQgphqb8UhZZFA8Prl64kk oVpq6nHfozdlrPSo6hmgWSeL1V2+8llt3wVL9CY+D2dmSBTbXUgEpXn3t68NGCFS XVz3t+4eLGRCL7Xus1w0xs2PrTG5dr4myy2aDEIp2Q2G9fDDdipBU7D6VFwbVfrO FHIbJjd+phK+rOZ+i1QTkM8ueWjHD5SUcHEEg6WYuN0ZhXhF+Fq2oWdD8jXbg7GY tDziOSLgtO0v03G6PiPUmUhzBvpqBfBlaYR8mNoFcas+czm/z7u/fxoWD3IG129z 4SpFRgigXL0vka8jpRGUgVoBjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFInAii2d 23iYvirc2sp8WfCvf1EZMB8GA1UdIwQYMBaAFHl1Az3F1FQPFq7BIShuxBTKeH1v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzVCQy8xM0VBQTQ3Qzg2 MjMxMUVBQTAwNTk4ODFDNEY5QUUwMi9lWFVEUGNYVVZBOFdyc0VoS0c3RUZNcDRm VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VYVURQY1hVVkE4V3JzRWhLRzdFRk1wNGZXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzVCQy8xM0VBQTQ3Qzg2MjMxMUVBQTAwNTk4ODFDNEY5QUUwMi9lWFVEUGNYVVZB OFdyc0VoS0c3RUZNcDRmVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBuxDGfOS2UBkkuuInNoqO1wLhkATUdP+4/QeT7pUTM5vgQ8g7LMdi Pod65dxPebuDrOcqyfFnFXGrHkeaZ+Y6bTlyu/N+uzC2U65Xnd9Q7g5NyveB72mC 7UjY03TLNY7qChEbALYeFSbWnrqLJVQW6fLbVOgSGpjFZnPAd3cq9DOA3c+NARBu edOWqW+bp+/IWF7gWxmPeKx5ps6ormXRV29CQWdM2whwciTVOSXk7GIq4MwUSLdO wlPnPfpxupgdrP2F9KEsIEP33ONganB3oCGkuVAPz1R3utILYmd0Mvzw4jmWE1eW MQ3P/xlQjnqKcfSbhkOlMl1fd/ds9HHV -----END CERTIFICATE-----Generated at Sat May 18 22:14:04 2024 by rpki-client on console-fra.rpki-client.org