$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft File: EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft (raw, json) Hash identifier: O9LUIxbblax7oYmShzHkdXd4rIEXTMKKlp6UXA0sLto= Subject key identifier: 3A:44:D3:F1:02:C9:67:72:B6:10:39:43:26:23:3C:59:CC:D3:71:60 Authority key identifier: 12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F Certificate issuer: /CN=A91F59FC/serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F Certificate serial: 146A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft Manifest number: 1433 Signing time: Sat 04 May 2024 17:33:27 +0000 Manifest this update: Sat 04 May 2024 17:33:26 +0000 Manifest next update: Sat 11 May 2024 17:33:26 +0000 Files and hashes: 1: EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl (hash: OFQz/votDnHcfd4xKAgwv1sPMKj0RxvWWT0xi6hsYus=) 2: F99707CEBAC511E9A77CDE7BC4F9AE02.roa (hash: iZLozjkQrVx5Rip88rCFEDljYu/qf4k+eN+MjfIimJg=) 3: E7084A18E1FF11ED8291C918C4F9AE02.roa (hash: 22WycCO2D6eQ7c9Ztptk+GoHCg5R5HirhILZQLigfu4=) 4: E80E94F8E1FF11ED8291C918C4F9AE02.roa (hash: kECSc2k2CaiRsvSFGXMs8HjoZv1f2IbszM5+85kIArk=) 5: 065737305C9511EDABB9FA49C4F9AE02.roa (hash: A8fyC9uXabeEBw+br5m/fOOprlHijT/2fFIlwKoMBqg=) 6: E5E5AB76E1FF11ED8291C918C4F9AE02.roa (hash: CiXjYFbJpNi1ITHCA0SILZGRQg5iqEkM1Bq1AJzf7WQ=) 7: E4C72AB2E1FF11ED8291C918C4F9AE02.roa (hash: w7JrosLb1zf7bhUbagql/3rcPRQ0GPFS/s48tA3r0tk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:33:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5226 (0x146a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59FC/serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F Validity Not Before: May 4 17:33:26 2024 GMT Not After : May 11 17:33:26 2024 GMT Subject: CN=66367166-51f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:93:f5:d0:50:24:c8:0f:fe:64:c7:75:4d:40: 5f:32:40:2f:cc:d1:6c:93:eb:fa:2d:61:0e:c0:d1: a0:d5:9d:de:0f:43:d4:4d:85:34:2a:98:bc:4b:b6: 1d:50:89:fe:df:0a:1d:d5:57:94:ba:aa:c2:6d:26: 27:f2:1d:fc:7a:3a:9e:41:71:90:02:a1:3c:d5:d7: c1:aa:65:2e:7d:36:e0:2a:c8:d7:74:16:54:f1:4e: 32:c6:24:b1:aa:e7:f8:87:b7:95:9b:b8:be:6c:32: 83:d5:af:13:0c:86:06:88:30:bf:5c:85:6a:b9:56: ca:c5:0c:3a:32:ba:f1:b2:dd:fd:a1:3a:98:9a:78: 6a:e3:2e:38:41:4b:bc:d8:b2:18:d3:b2:8f:91:1c: 9f:2e:88:2d:7e:4b:fd:7c:dc:e0:b0:0a:2a:9e:67: bd:cd:40:82:ce:b7:df:f6:3d:f0:ba:87:0a:2c:18: 1d:fa:67:fb:1c:61:23:31:06:cb:21:f0:99:87:5d: 80:36:25:b8:d2:87:9d:3e:fa:e6:0b:a1:78:21:9c: e2:5c:e7:3f:95:18:7d:b7:69:be:bb:be:18:84:bf: 49:f1:28:a2:db:34:9b:0a:a6:3b:d2:2e:ec:8b:ba: 61:ca:b8:5a:8e:2f:15:89:af:99:27:2d:71:fc:6c: ac:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:44:D3:F1:02:C9:67:72:B6:10:39:43:26:23:3C:59:CC:D3:71:60 X509v3 Authority Key Identifier: keyid:12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:7a:78:9c:b6:6b:d8:5d:3f:b3:10:14:fe:e3:ee:fd:85:56: 84:bc:6e:9c:ef:91:cd:fd:e7:a0:ce:f9:10:ed:a9:10:76:52: 0e:8d:f3:9f:9e:2b:c6:57:c6:b6:8b:a4:4f:e3:8d:50:a5:f9: 41:46:3c:85:15:3b:a8:65:ed:bb:50:1e:db:d8:47:c2:e2:78: d4:d4:61:78:a5:d4:4b:96:74:4a:1d:40:ff:ce:be:48:69:b8: fd:8c:49:0f:5d:96:28:1a:6c:cb:8c:c2:b2:25:2e:f7:c1:b3: ac:ea:6a:9e:2e:65:a3:91:88:3c:10:e4:6d:88:9f:9f:e9:14: 90:8f:8d:ca:f8:30:2a:76:84:ee:19:e0:c5:6f:bb:e0:7c:11: ee:41:9b:63:07:09:45:99:37:95:7d:24:54:7d:ca:bb:49:78: 4a:e9:1e:82:56:49:97:46:4b:d1:a1:5f:78:04:a7:98:46:c6: e6:cb:31:81:a3:75:3f:05:dd:d0:d2:31:3e:94:f5:62:11:99: ae:3a:d5:8f:6f:78:15:b5:8e:6f:94:bf:fb:c3:9d:e0:04:4c: f5:74:4b:7f:a7:72:5f:02:1f:83:2c:c3:ab:d3:75:c8:72:97: 45:8b:15:f1:46:d4:90:51:ce:33:3b:60:ee:bf:fe:f4:ab:cf: db:71:cf:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5RkMxMTAvBgNVBAUTKDEyRUE4MkFFMEE5NDMxMDlCMUY0RjM0OTg0RTlDMzZE NEM2RDU3MUYwHhcNMjQwNTA0MTczMzI2WhcNMjQwNTExMTczMzI2WjAYMRYwFAYD VQQDEw02NjM2NzE2Ni01MWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3pP10FAkyA/+ZMd1TUBfMkAvzNFsk+v6LWEOwNGg1Z3eD0PUTYU0Kpi8S7Yd UIn+3wod1VeUuqrCbSYn8h38ejqeQXGQAqE81dfBqmUufTbgKsjXdBZU8U4yxiSx quf4h7eVm7i+bDKD1a8TDIYGiDC/XIVquVbKxQw6Mrrxst39oTqYmnhq4y44QUu8 2LIY07KPkRyfLogtfkv9fNzgsAoqnme9zUCCzrff9j3wuocKLBgd+mf7HGEjMQbL IfCZh12ANiW40oedPvrmC6F4IZziXOc/lRh9t2m+u74YhL9J8Sii2zSbCqY70i7s i7phyrhaji8Via+ZJy1x/GyseQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDpE0/EC yWdythA5QyYjPFnM03FgMB8GA1UdIwQYMBaAFBLqgq4KlDEJsfTzSYTpw21MbVcf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlGQy84MTA0NUUzQTU2 NjAxMUU4QkYzRkQ1MjdDNEY5QUUwMi9FdXFDcmdxVU1RbXg5UE5KaE9uRGJVeHRW eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V1cUNyZ3FVTVFteDlQTkpoT25EYlV4dFZ4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTlGQy84MTA0NUUzQTU2NjAxMUU4QkYzRkQ1MjdDNEY5QUUwMi9FdXFDcmdxVU1R bXg5UE5KaE9uRGJVeHRWeDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJenictmvYXT+zEBT+4+79hVaEvG6c75HN/eegzvkQ7akQdlIOjfOf nivGV8a2i6RP441QpflBRjyFFTuoZe27UB7b2EfC4njU1GF4pdRLlnRKHUD/zr5I abj9jEkPXZYoGmzLjMKyJS73wbOs6mqeLmWjkYg8EORtiJ+f6RSQj43K+DAqdoTu GeDFb7vgfBHuQZtjBwlFmTeVfSRUfcq7SXhK6R6CVkmXRkvRoV94BKeYRsbmyzGB o3U/Bd3Q0jE+lPViEZmuOtWPb3gVtY5vlL/7w53gBEz1dEt/p3JfAh+DLMOr03XI cpdFixXxRtSQUc4zO2Duv/70q8/bcc/H -----END CERTIFICATE-----Generated at Sat May 4 20:37:20 2024 by rpki-client on console-fra.rpki-client.org