$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft File: eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft (raw, json) Hash identifier: QM8iltmBXblW6QTaUSC7kz092/3iiQyeoaHGhEIk6+M= Subject key identifier: CD:D2:87:6D:E4:00:4F:1C:0D:E9:A7:0B:A7:98:AF:EC:49:AB:D2:E9 Authority key identifier: 79:E5:63:2A:F2:9B:AE:64:E5:F9:F1:9C:57:5B:C5:A9:95:E2:05:50 Certificate issuer: /CN=A91FEB27/serialNumber=79E5632AF29BAE64E5F9F19C575BC5A995E20550 Certificate serial: 2C5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft Manifest number: 2C44 Signing time: Sat 18 May 2024 15:47:45 +0000 Manifest this update: Sat 18 May 2024 15:47:44 +0000 Manifest next update: Sat 25 May 2024 15:47:44 +0000 Files and hashes: 1: eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl (hash: YE0qct6wJWlW6XV9aucPJrQ+ZjzVvOwJXB1RaoMTx9o=) 2: 6CB78E8E967811EA92E45A27C4F9AE02.roa (hash: yiBFuvz0wowXTsPwdEFLgJjJDBfixilogFNMg4CpnLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11359 (0x2c5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEB27/serialNumber=79E5632AF29BAE64E5F9F19C575BC5A995E20550 Validity Not Before: May 18 15:47:44 2024 GMT Not After : May 25 15:47:44 2024 GMT Subject: CN=6648cda1-de36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:03:a4:d5:59:82:f6:fe:80:7f:e7:4e:74:2a: 5a:06:f8:47:3c:c8:37:95:21:f9:9e:c5:bb:cf:67: 4a:4c:f2:ea:b1:fa:11:82:4a:91:13:fe:01:c1:ed: 70:49:03:e9:01:e0:bb:12:dc:9d:52:0f:6c:b8:ec: 81:d7:c6:b4:8b:e3:e6:1b:eb:ee:39:17:58:07:c9: 26:98:f3:90:49:bf:42:e3:eb:e6:93:e9:07:3d:1d: c6:b5:19:76:5d:2e:5b:43:c0:ae:bd:d0:c5:4f:80: f9:50:df:18:f9:fc:7e:f6:b2:4e:87:29:08:f2:c1: 1f:ed:59:82:53:94:e7:21:2a:26:07:7f:a0:7e:be: ec:1b:12:2c:91:3c:ff:4c:2b:69:03:85:0a:af:c1: 32:c5:4a:15:92:8d:8c:10:cb:4e:c8:81:03:de:aa: ed:37:ca:e3:a0:de:26:1d:7f:21:c0:11:de:06:2f: bb:17:e7:38:b0:11:fa:56:96:cc:1c:89:94:3d:e1: 32:1c:91:c5:fb:b1:1a:ed:11:d4:ae:95:df:20:4c: d1:1d:1e:ca:80:af:bd:b8:6d:bc:40:96:62:dc:00: 65:43:86:8d:58:ec:ed:1a:80:e4:94:0c:a6:3b:f9: 0a:99:a0:e8:f0:35:ae:3e:0e:7b:1e:f3:fe:86:b9: 10:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:D2:87:6D:E4:00:4F:1C:0D:E9:A7:0B:A7:98:AF:EC:49:AB:D2:E9 X509v3 Authority Key Identifier: keyid:79:E5:63:2A:F2:9B:AE:64:E5:F9:F1:9C:57:5B:C5:A9:95:E2:05:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:f4:ed:17:56:f1:00:d4:5b:11:10:c3:44:21:2d:25:7d:f2: 28:0d:26:c7:0d:ff:fc:20:54:ed:00:9a:3d:4b:5f:98:43:fc: 87:28:07:c1:1e:78:0f:a4:ee:c9:7c:2c:d3:6e:c2:17:8f:57: 6c:bb:1a:86:fd:de:a8:1e:e2:3a:27:64:c1:0e:c8:e0:03:4e: 8f:bb:94:09:ad:4b:5a:89:38:f8:a8:7e:3f:c8:e3:d1:ef:94: bd:8b:7b:11:92:78:5f:55:5b:80:5f:4c:90:4b:97:0f:c6:38: a8:52:b6:ad:db:85:68:6a:3d:bd:63:96:b0:17:8f:e8:fa:c8: 46:c6:ba:b0:25:78:e1:dd:42:a5:1e:58:e5:a7:0f:5e:0b:87: b5:eb:59:19:a7:42:6c:a3:cf:c0:c0:de:9c:11:10:17:90:b2: 1e:29:3a:b6:83:2a:de:70:b8:bc:00:bb:cc:9a:b5:a4:aa:89: 3b:03:1d:dc:e1:6f:b5:5a:9e:42:64:8e:9f:5b:d1:bf:37:43: d5:58:49:42:1f:12:d0:6e:a2:5c:30:9f:3f:a5:e0:78:06:17: 3f:52:f5:d9:2d:30:4d:96:6a:f0:f3:dc:dc:40:cf:10:1d:4c: e0:4f:4c:90:cc:66:e2:f6:86:67:94:c1:19:0e:c7:cc:04:6d: 61:e4:81:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVCMjcxMTAvBgNVBAUTKDc5RTU2MzJBRjI5QkFFNjRFNUY5RjE5QzU3NUJDNUE5 OTVFMjA1NTAwHhcNMjQwNTE4MTU0NzQ0WhcNMjQwNTI1MTU0NzQ0WjAYMRYwFAYD VQQDEw02NjQ4Y2RhMS1kZTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2AOk1VmC9v6Af+dOdCpaBvhHPMg3lSH5nsW7z2dKTPLqsfoRgkqRE/4Bwe1w SQPpAeC7EtydUg9suOyB18a0i+PmG+vuORdYB8kmmPOQSb9C4+vmk+kHPR3GtRl2 XS5bQ8CuvdDFT4D5UN8Y+fx+9rJOhykI8sEf7VmCU5TnISomB3+gfr7sGxIskTz/ TCtpA4UKr8EyxUoVko2MEMtOyIED3qrtN8rjoN4mHX8hwBHeBi+7F+c4sBH6VpbM HImUPeEyHJHF+7Ea7RHUrpXfIEzRHR7KgK+9uG28QJZi3ABlQ4aNWOztGoDklAym O/kKmaDo8DWuPg57HvP+hrkQQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM3Sh23k AE8cDemnC6eYr+xJq9LpMB8GA1UdIwQYMBaAFHnlYyrym65k5fnxnFdbxamV4gVQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUIyNy8xNjdBOTdFQzlB RTMxMUUzQTVBMjU3QTc1OTExRUEzMi9lZVZqS3ZLYnJtVGwtZkdjVjF2RnFaWGlC VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VlVmpLdkticm1UbC1mR2NWMXZGcVpYaUJWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUIyNy8xNjdBOTdFQzlBRTMxMUUzQTVBMjU3QTc1OTExRUEzMi9lZVZqS3ZLYnJt VGwtZkdjVjF2RnFaWGlCVkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAv9O0XVvEA1FsREMNEIS0lffIoDSbHDf/8IFTtAJo9S1+YQ/yHKAfB HngPpO7JfCzTbsIXj1dsuxqG/d6oHuI6J2TBDsjgA06Pu5QJrUtaiTj4qH4/yOPR 75S9i3sRknhfVVuAX0yQS5cPxjioUrat24Voaj29Y5awF4/o+shGxrqwJXjh3UKl Hljlpw9eC4e161kZp0Jso8/AwN6cERAXkLIeKTq2gyrecLi8ALvMmrWkqok7Ax3c 4W+1Wp5CZI6fW9G/N0PVWElCHxLQbqJcMJ8/peB4Bhc/UvXZLTBNlmrw89zcQM8Q HUzgT0yQzGbi9oZnlMEZDsfMBG1h5IF9 -----END CERTIFICATE-----Generated at Sat May 18 16:20:16 2024 by rpki-client on console-fra.rpki-client.org