$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft File: EBEGw3VRsRR1-6qyOQEVt6zygC0.mft (raw, json) Hash identifier: mov4KIzUxQ0nYginDYDO0B/B0OHPFPqmBtNPyoxedAQ= Subject key identifier: 7E:7E:14:3C:1F:B3:8D:4F:EB:78:1A:8F:41:D9:D4:AF:09:AA:A2:92 Authority key identifier: 10:11:06:C3:75:51:B1:14:75:FB:AA:B2:39:01:15:B7:AC:F2:80:2D Certificate issuer: /CN=A91BF286/serialNumber=101106C37551B11475FBAAB2390115B7ACF2802D Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft Manifest number: 76 Signing time: Sun 19 May 2024 07:23:54 +0000 Manifest this update: Sun 19 May 2024 07:23:53 +0000 Manifest next update: Sun 26 May 2024 07:23:53 +0000 Files and hashes: 1: EBEGw3VRsRR1-6qyOQEVt6zygC0.crl (hash: 6ytTn6sJvgX5L6S3yjLmL5jxUktZ9I35RFBNW2qLTUo=) 2: 44BA2B8C671011EEB41FB227C4F9AE02.roa (hash: K0k0e9gheoS9Qbdr5+8PO7ypfn8xYG5X2qYnDLr7XOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.crl rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF286/serialNumber=101106C37551B11475FBAAB2390115B7ACF2802D Validity Not Before: May 19 07:23:53 2024 GMT Not After : May 26 07:23:53 2024 GMT Subject: CN=6649a909-e118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ae:12:6c:41:8e:f1:94:ec:ea:44:70:fe:5f: 36:07:e8:11:d3:e2:7c:42:41:5e:90:ea:d9:a4:ea: c6:4a:b9:24:52:28:e8:f0:fa:bf:32:9f:4a:23:14: 0b:c7:65:d9:20:5b:1d:35:9a:4b:93:f9:9e:53:07: ee:95:44:cd:8b:a3:46:56:3e:f0:ee:17:53:a2:46: 1d:c4:51:c7:99:4d:ea:5c:9b:79:c0:dd:6d:9f:13: 85:43:f2:68:30:4b:04:b4:b3:e0:01:5d:ff:d9:2c: d7:b5:e1:ce:af:d0:a2:5d:79:58:ba:46:7f:26:b4: 67:69:b3:5e:7e:04:3f:48:9f:69:99:68:d9:86:27: 06:c7:52:5c:56:6f:cb:8d:eb:93:37:e8:dc:65:c5: 09:5c:74:67:8e:3e:2f:72:14:8f:08:27:12:ff:2a: 4d:68:10:05:48:f1:7a:4d:5f:18:04:aa:5e:4f:e3: 42:e2:bb:87:ae:c2:40:79:5b:19:b7:78:4a:5a:6c: 69:3c:30:41:d8:0a:5d:f1:1d:00:c3:ca:80:1f:2b: 09:69:4e:32:fb:12:3f:b9:e2:2c:89:96:d2:3f:0f: 3c:ad:4a:44:be:da:d3:fa:18:94:44:62:1a:c8:0a: ec:1f:d2:28:26:b3:20:a1:a1:7e:e7:f2:45:36:ab: c0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:7E:14:3C:1F:B3:8D:4F:EB:78:1A:8F:41:D9:D4:AF:09:AA:A2:92 X509v3 Authority Key Identifier: keyid:10:11:06:C3:75:51:B1:14:75:FB:AA:B2:39:01:15:B7:AC:F2:80:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:c6:1d:1c:d2:62:e1:eb:17:a8:83:73:1f:21:26:c2:07:51: 9a:d4:6d:e3:35:f4:99:17:1f:4f:3b:89:7b:34:77:e4:ab:48: a9:6f:82:16:6a:c5:b3:0b:b1:a4:bd:c8:f7:47:52:c5:5e:1c: 80:6a:7d:38:e4:33:4b:c9:bd:67:92:e9:17:fe:09:66:fa:41: 31:d9:9d:64:38:4f:05:d9:9a:13:c9:8f:a5:77:b1:04:5d:75: 08:3c:0c:b4:5c:1a:0c:2e:56:16:0c:e0:91:05:7d:a1:47:bb: 51:47:1a:84:90:12:43:3d:e1:d6:af:0a:9e:8c:84:c5:82:99: fc:4e:af:d1:52:b2:ce:9c:f4:83:cf:6a:80:3c:95:2d:78:a2: 79:83:23:79:01:e1:77:eb:e2:d0:15:f4:c1:5a:a2:6e:10:2c: 23:49:77:d0:68:cf:1b:4b:fd:19:46:1b:6f:e6:1a:16:2c:b7: 15:2a:a7:ee:d1:11:9e:5a:69:2b:69:0a:ae:9e:9a:21:e0:01: d4:73:5c:8c:24:33:66:7f:ff:2d:66:38:27:61:46:64:74:00: f3:ea:d4:ac:17:d3:2a:29:bf:a7:4b:04:e5:33:0a:59:e5:02: 47:38:6a:8c:81:cf:0f:d5:18:0f:18:57:e4:44:b1:12:b6:bf: 20:4c:34:1c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RjI4NjExMC8GA1UEBRMoMTAxMTA2QzM3NTUxQjExNDc1RkJBQUIyMzkwMTE1QjdB Q0YyODAyRDAeFw0yNDA1MTkwNzIzNTNaFw0yNDA1MjYwNzIzNTNaMBgxFjAUBgNV BAMTDTY2NDlhOTA5LWUxMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDerhJsQY7xlOzqRHD+XzYH6BHT4nxCQV6Q6tmk6sZKuSRSKOjw+r8yn0ojFAvH ZdkgWx01mkuT+Z5TB+6VRM2Lo0ZWPvDuF1OiRh3EUceZTepcm3nA3W2fE4VD8mgw SwS0s+ABXf/ZLNe14c6v0KJdeVi6Rn8mtGdps15+BD9In2mZaNmGJwbHUlxWb8uN 65M36NxlxQlcdGeOPi9yFI8IJxL/Kk1oEAVI8XpNXxgEql5P40Liu4euwkB5Wxm3 eEpabGk8MEHYCl3xHQDDyoAfKwlpTjL7Ej+54iyJltI/DzytSkS+2tP6GJREYhrI Cuwf0igmsyChoX7n8kU2q8BVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfn4UPB+z jU/reBqPQdnUrwmqopIwHwYDVR0jBBgwFoAUEBEGw3VRsRR1+6qyOQEVt6zygC0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGMjg2LzFDRTJCMEM0NjY5 NDExRUVBMDQ1Mjk1MUM0RjlBRTAyL0VCRUd3M1ZSc1JSMS02cXlPUUVWdDZ6eWdD MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRUJFR3czVlJzUlIxLTZxeU9RRVZ0Nnp5Z0MwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJG Mjg2LzFDRTJCMEM0NjY5NDExRUVBMDQ1Mjk1MUM0RjlBRTAyL0VCRUd3M1ZSc1JS MS02cXlPUUVWdDZ6eWdDMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADnGHRzSYuHrF6iDcx8hJsIHUZrUbeM19JkXH087iXs0d+SrSKlvghZq xbMLsaS9yPdHUsVeHIBqfTjkM0vJvWeS6Rf+CWb6QTHZnWQ4TwXZmhPJj6V3sQRd dQg8DLRcGgwuVhYM4JEFfaFHu1FHGoSQEkM94davCp6MhMWCmfxOr9FSss6c9IPP aoA8lS14onmDI3kB4Xfr4tAV9MFaom4QLCNJd9BozxtL/RlGG2/mGhYstxUqp+7R EZ5aaStpCq6emiHgAdRzXIwkM2Z//y1mOCdhRmR0APPq1KwX0yopv6dLBOUzClnl Akc4aoyBzw/VGA8YV+REsRK2vyBMNBw= -----END CERTIFICATE-----Generated at Sun May 19 08:26:44 2024 by rpki-client on console-fra.rpki-client.org