$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft File: EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft (raw, json) Hash identifier: hnv1+qawMiG7AaDbkwS1nBIFKkAzyU0jbB/GjJ77KIE= Subject key identifier: 1F:6A:8C:34:A4:14:1C:B6:75:73:28:50:99:F3:8F:7B:53:CB:18:CE Authority key identifier: 11:96:CD:DF:DA:3E:BD:C5:AD:A8:FF:C5:BC:B3:84:91:21:47:D5:44 Certificate issuer: /CN=A91FD4A1/serialNumber=1196CDDFDA3EBDC5ADA8FFC5BCB384912147D544 Certificate serial: 011A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft Manifest number: 0117 Signing time: Sun 19 May 2024 05:17:41 +0000 Manifest this update: Sun 19 May 2024 05:17:41 +0000 Manifest next update: Sun 26 May 2024 05:17:41 +0000 Files and hashes: 1: EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl (hash: DXIW2DcCFv3GgoLpapB39OZCBNzcVMFgGZLubrKdUkk=) 2: 16E990CA6B0411ED849E0957C4F9AE02.roa (hash: XS4cBomwJydCViEX8k9en57hjtg5yxLCq/AljVtOZxg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 282 (0x11a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4A1/serialNumber=1196CDDFDA3EBDC5ADA8FFC5BCB384912147D544 Validity Not Before: May 19 05:17:41 2024 GMT Not After : May 26 05:17:41 2024 GMT Subject: CN=66498b75-4af4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:dd:fd:03:b8:82:47:7a:d2:10:d3:a8:2b:97: 0e:c8:9e:74:15:27:62:5e:85:f5:32:67:d2:ac:ca: 8b:69:e3:54:0e:aa:e0:2a:66:83:b8:45:33:f3:86: 52:35:b2:2a:8f:9d:f6:7d:94:8c:b4:54:41:b6:6a: 59:f0:0f:12:d3:4f:6d:81:9f:a8:9d:14:8f:45:46: 9a:df:be:68:32:e5:76:67:62:a9:91:34:f4:5a:6e: c6:16:b8:19:2f:95:fe:13:cb:bd:dc:a6:c4:6d:21: 44:95:07:7f:88:39:8c:33:54:42:8b:96:2e:e4:53: 3e:bb:51:47:ff:6f:3e:88:8e:05:d3:40:20:64:5e: 1a:ef:67:29:04:30:25:c7:0f:57:b3:42:85:47:97: 2c:7e:53:cb:b5:63:84:2b:7f:6f:ea:d1:61:ad:e3: 41:fe:5f:19:6b:86:6a:54:5c:9c:14:7f:59:1b:93: 8b:98:c1:e2:a4:10:c9:f8:bf:c6:b8:e4:36:d4:e9: d5:63:17:df:c4:f1:f8:1d:88:b4:7b:93:9d:c0:be: 53:06:0b:0f:b1:bb:4e:69:3b:aa:5c:0a:f5:b7:49: 76:93:a2:5d:14:f1:4a:41:96:ed:00:84:f9:fc:d6: a4:08:d3:6c:8b:87:c1:5a:d2:b2:97:41:4c:38:1d: 1f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:6A:8C:34:A4:14:1C:B6:75:73:28:50:99:F3:8F:7B:53:CB:18:CE X509v3 Authority Key Identifier: keyid:11:96:CD:DF:DA:3E:BD:C5:AD:A8:FF:C5:BC:B3:84:91:21:47:D5:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:6a:30:85:d8:80:2d:0f:10:e7:aa:bf:83:db:7a:e4:6b:e8: cf:b2:4b:09:5f:19:78:9c:e4:6e:15:31:1d:50:b9:27:4b:d6: 88:66:2d:10:d2:96:6c:b2:b2:2b:cc:ed:4d:70:2e:c4:4d:d4: ba:d7:d2:e4:d9:40:08:06:0b:00:75:4b:71:08:e4:8a:cc:77: f3:b2:ce:02:5b:2c:ca:71:63:f5:87:57:b3:81:fe:19:b3:fa: e1:aa:d4:26:c5:6e:a6:f5:67:9c:3e:12:e0:6e:e4:2a:74:1d: 19:8e:4d:7a:97:e3:dc:5e:61:1e:4c:b4:47:cb:7c:26:0a:48: 25:04:cd:61:ff:49:13:b4:6a:7a:c9:58:c1:3b:04:57:4a:c0: 8b:c9:a7:ba:d7:62:5b:cc:68:60:d6:f0:2f:d9:aa:95:78:a3: c9:84:59:39:a3:ad:ae:58:e5:8d:fd:94:1f:c9:d2:6e:ad:c3: 77:fa:87:74:d6:5a:7c:85:04:17:f5:e5:99:65:1c:2f:8c:15: be:e8:47:4b:7b:67:44:69:c9:42:9e:bf:61:09:23:04:b7:a4: 7e:8a:91:60:40:f6:f0:9b:a7:af:a3:5a:fa:14:26:0b:3f:83: fe:55:14:ec:e5:f7:ae:76:f6:64:1f:d4:43:17:c2:ba:f3:aa: 3d:6c:46:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ0QTExMTAvBgNVBAUTKDExOTZDRERGREEzRUJEQzVBREE4RkZDNUJDQjM4NDkx MjE0N0Q1NDQwHhcNMjQwNTE5MDUxNzQxWhcNMjQwNTI2MDUxNzQxWjAYMRYwFAYD VQQDEw02NjQ5OGI3NS00YWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8N39A7iCR3rSENOoK5cOyJ50FSdiXoX1MmfSrMqLaeNUDqrgKmaDuEUz84ZS NbIqj532fZSMtFRBtmpZ8A8S009tgZ+onRSPRUaa375oMuV2Z2KpkTT0Wm7GFrgZ L5X+E8u93KbEbSFElQd/iDmMM1RCi5Yu5FM+u1FH/28+iI4F00AgZF4a72cpBDAl xw9Xs0KFR5csflPLtWOEK39v6tFhreNB/l8Za4ZqVFycFH9ZG5OLmMHipBDJ+L/G uOQ21OnVYxffxPH4HYi0e5OdwL5TBgsPsbtOaTuqXAr1t0l2k6JdFPFKQZbtAIT5 /NakCNNsi4fBWtKyl0FMOB0fYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9qjDSk FBy2dXMoUJnzj3tTyxjOMB8GA1UdIwQYMBaAFBGWzd/aPr3Fraj/xbyzhJEhR9VE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDRBMS82MkI0MjNCQTZC MDExMUVEOUEzMEYxNTVDNEY5QUUwMi9FWmJOMzlvLXZjV3RxUF9GdkxPRWtTRkgx VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VaYk4zOW8tdmNXdHFQX0Z2TE9Fa1NGSDFVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDRBMS82MkI0MjNCQTZCMDExMUVEOUEzMEYxNTVDNEY5QUUwMi9FWmJOMzlvLXZj V3RxUF9GdkxPRWtTRkgxVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0ajCF2IAtDxDnqr+D23rka+jPsksJXxl4nORuFTEdULknS9aIZi0Q 0pZssrIrzO1NcC7ETdS619Lk2UAIBgsAdUtxCOSKzHfzss4CWyzKcWP1h1ezgf4Z s/rhqtQmxW6m9WecPhLgbuQqdB0Zjk16l+PcXmEeTLRHy3wmCkglBM1h/0kTtGp6 yVjBOwRXSsCLyae612JbzGhg1vAv2aqVeKPJhFk5o62uWOWN/ZQfydJurcN3+od0 1lp8hQQX9eWZZRwvjBW+6EdLe2dEaclCnr9hCSMEt6R+ipFgQPbwm6evo1r6FCYL P4P+VRTs5feudvZkH9RDF8K686o9bEab -----END CERTIFICATE-----Generated at Sun May 19 06:14:37 2024 by rpki-client on console-ams.rpki-client.org