$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft File: epirabcrqsZmDlTdHG2KBi4s0v4.mft (raw, json) Hash identifier: g4L9HxYodp8pEkYGxcF0JB1h04c74aq//aCYsz3NJtQ= Subject key identifier: A4:D6:8F:53:44:2A:03:57:03:76:DD:4A:8E:B2:4A:D1:97:19:A8:BA Authority key identifier: 7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE Certificate issuer: /CN=A91E6038/serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE Certificate serial: 02AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft Manifest number: 02A7 Signing time: Sun 19 May 2024 03:34:20 +0000 Manifest this update: Sun 19 May 2024 03:34:20 +0000 Manifest next update: Sun 26 May 2024 03:34:20 +0000 Files and hashes: 1: epirabcrqsZmDlTdHG2KBi4s0v4.crl (hash: Q32Q27Llhyeimyzk6ciMQLo/K0hBgG604WkBWqtbhjE=) 2: 7ABCBB70AFFE11ECA52DBA5DC4F9AE02.roa (hash: GdhDO8CP9YhBJBGV8fIc+KXsGLLVbxk4WQm2nhWfMew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 683 (0x2ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6038/serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE Validity Not Before: May 19 03:34:20 2024 GMT Not After : May 26 03:34:20 2024 GMT Subject: CN=6649733c-e9bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d6:48:a5:97:24:ea:50:b6:42:51:6b:fd:7b: 28:5a:9a:40:4f:11:00:d4:05:72:ea:d7:4b:65:b5: b7:ab:8a:0f:73:b3:c8:67:a3:e5:cc:d0:e7:d8:2f: 6d:b7:5b:de:a4:72:47:b0:52:f7:58:86:33:be:43: e9:10:36:d8:f2:03:63:1d:ed:a8:77:a9:fa:7e:29: 9d:7f:6d:8b:86:38:b0:94:ec:64:61:99:22:99:53: 60:69:9a:c3:85:9b:25:4c:1d:71:73:ed:a4:4b:9c: b7:5c:32:9e:25:4a:c3:6c:b2:0a:95:c9:19:b7:54: 5c:a0:f1:e6:b3:05:23:dd:6a:73:0b:bc:e3:b3:c3: 3a:f5:d2:db:4d:d1:a1:86:77:3d:ad:14:80:90:5f: a1:34:10:f5:20:7d:c6:d5:69:76:28:42:b7:9b:b7: b9:3c:0b:12:14:8d:ac:43:96:35:87:29:66:d9:58: 28:fe:83:c6:96:76:d9:69:b7:02:96:f9:6f:ae:7a: 16:00:ba:56:61:90:07:b9:04:b3:e2:be:66:58:f9: 8a:f7:b6:8d:73:e8:6d:6c:f4:e5:f6:20:44:73:c0: 55:37:ef:cb:c0:15:e6:f0:c7:e5:73:27:50:c1:22: 19:5c:65:64:bd:eb:25:88:67:82:9c:dc:59:1c:b4: bc:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D6:8F:53:44:2A:03:57:03:76:DD:4A:8E:B2:4A:D1:97:19:A8:BA X509v3 Authority Key Identifier: keyid:7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:b8:ac:52:03:b5:62:92:cc:5a:cf:00:da:b6:7e:29:34:cf: 64:17:ba:af:38:fc:4b:8d:a0:ea:75:1a:ff:4b:99:74:e1:4e: 14:57:35:e3:86:c1:16:98:3a:5f:f0:47:d3:0f:14:64:1c:02: e3:43:43:01:e9:e3:e1:83:71:8a:2b:94:c8:48:ce:9d:e4:eb: d0:4b:ad:29:d9:ae:67:1b:1a:b7:8e:ab:0d:8f:23:c8:d7:e1: 1e:99:83:05:90:bd:77:b9:4c:32:ca:7d:16:cd:29:76:d5:bb: cd:91:51:6e:33:10:85:9b:63:a2:b1:03:0b:85:dd:26:32:d9: 92:59:03:c4:f6:0b:1e:3a:9e:c2:76:93:e1:93:19:07:f8:66: 78:7c:34:58:e8:37:13:63:bd:1d:7d:72:2f:a8:e4:3c:8b:67: bb:83:72:ee:75:d1:54:f7:1e:ad:e0:05:81:10:9b:20:68:84: d7:bc:48:81:9e:4d:90:7c:83:9e:72:3d:39:70:01:55:95:22: 11:8c:77:4f:b2:76:f8:bd:e2:7c:92:bf:8a:11:50:1b:d6:26: 3a:9c:50:f5:1d:58:42:6c:48:b1:ee:80:cb:5e:9f:84:0e:e0: 0f:0d:fc:82:38:e8:6c:e7:1a:04:16:40:b4:9c:5b:25:b1:c1: 38:ed:7f:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYwMzgxMTAvBgNVBAUTKDdBOThBQjY5QjcyQkFBQzY2NjBFNTRERDFDNkQ4QTA2 MkUyQ0QyRkUwHhcNMjQwNTE5MDMzNDIwWhcNMjQwNTI2MDMzNDIwWjAYMRYwFAYD VQQDEw02NjQ5NzMzYy1lOWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9ZIpZck6lC2QlFr/XsoWppATxEA1AVy6tdLZbW3q4oPc7PIZ6PlzNDn2C9t t1vepHJHsFL3WIYzvkPpEDbY8gNjHe2od6n6fimdf22LhjiwlOxkYZkimVNgaZrD hZslTB1xc+2kS5y3XDKeJUrDbLIKlckZt1RcoPHmswUj3WpzC7zjs8M69dLbTdGh hnc9rRSAkF+hNBD1IH3G1Wl2KEK3m7e5PAsSFI2sQ5Y1hylm2Vgo/oPGlnbZabcC lvlvrnoWALpWYZAHuQSz4r5mWPmK97aNc+htbPTl9iBEc8BVN+/LwBXm8MflcydQ wSIZXGVkvesliGeCnNxZHLS82wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKTWj1NE KgNXA3bdSo6yStGXGai6MB8GA1UdIwQYMBaAFHqYq2m3K6rGZg5U3RxtigYuLNL+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjAzOC85MUUwQzg1MkFG RkMxMUVDQjBDMzg4NURDNEY5QUUwMi9lcGlyYWJjcnFzWm1EbFRkSEcyS0JpNHMw djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwaXJhYmNycXNabURsVGRIRzJLQmk0czB2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjAzOC85MUUwQzg1MkFGRkMxMUVDQjBDMzg4NURDNEY5QUUwMi9lcGlyYWJjcnFz Wm1EbFRkSEcyS0JpNHMwdjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4uKxSA7ViksxazwDatn4pNM9kF7qvOPxLjaDqdRr/S5l04U4UVzXj hsEWmDpf8EfTDxRkHALjQ0MB6ePhg3GKK5TISM6d5OvQS60p2a5nGxq3jqsNjyPI 1+EemYMFkL13uUwyyn0WzSl21bvNkVFuMxCFm2OisQMLhd0mMtmSWQPE9gseOp7C dpPhkxkH+GZ4fDRY6DcTY70dfXIvqOQ8i2e7g3LuddFU9x6t4AWBEJsgaITXvEiB nk2QfIOecj05cAFVlSIRjHdPsnb4veJ8kr+KEVAb1iY6nFD1HVhCbEix7oDLXp+E DuAPDfyCOOhs5xoEFkC0nFslscE47X+9 -----END CERTIFICATE-----Generated at Sun May 19 04:22:05 2024 by rpki-client on console-fra.rpki-client.org