$ rpki-client -vvf rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.mft File: eiygmoVxKbGAQoJJIxJDPat15sI.mft (raw, json) Hash identifier: vE97L2oS/SubnMFQWFysktN+Pbp5DycaTW7rBqVqcOw= Subject key identifier: 15:54:C5:24:64:A5:12:B8:36:79:47:3A:77:67:A9:64:F4:0F:34:C7 Authority key identifier: 7A:2C:A0:9A:85:71:29:B1:80:42:82:49:23:12:43:3D:AB:75:E6:C2 Certificate issuer: /CN=A9112571/serialNumber=7A2CA09A857129B1804282492312433DAB75E6C2 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eiygmoVxKbGAQoJJIxJDPat15sI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.mft Manifest number: 011B Signing time: Sun 05 May 2024 05:20:59 +0000 Manifest this update: Sun 05 May 2024 05:20:59 +0000 Manifest next update: Sun 12 May 2024 05:20:59 +0000 Files and hashes: 1: eiygmoVxKbGAQoJJIxJDPat15sI.crl (hash: qPqg7W/1GfczTyjBjAqgXCdtVJezMWTEODSzaF/+G6A=) 2: ECDFCD86656711EDBED7F511C4F9AE02.roa (hash: YExmn8CoOt/3b0HOemDGXbkRHpmn5xVH/e/sdoTs7EM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.crl rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eiygmoVxKbGAQoJJIxJDPat15sI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112571/serialNumber=7A2CA09A857129B1804282492312433DAB75E6C2 Validity Not Before: May 5 05:20:59 2024 GMT Not After : May 12 05:20:59 2024 GMT Subject: CN=6637173b-b64b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2e:e9:37:1d:6b:a0:95:0e:86:9e:02:dc:e3: 19:c7:61:0d:e6:e7:28:8a:ad:8d:66:fc:a9:fc:ad: 6b:a3:a5:54:1d:1d:71:7a:60:8b:cd:e7:7b:f2:ae: 54:4b:f5:f2:e1:22:c9:17:3a:76:79:38:7c:cb:62: 80:6d:86:9e:62:c0:6c:0a:0f:fa:74:d7:8f:69:60: 24:e5:61:a5:45:0e:60:14:c9:2e:32:a3:8e:4c:d3: 4d:48:13:f2:4c:05:27:22:c5:3a:24:f4:cd:d9:49: ac:e6:63:5d:4d:f1:46:b4:e8:41:b8:3e:2e:02:46: e3:07:28:e2:f5:b0:96:ad:9c:39:ea:6c:60:e7:43: 48:12:b8:07:b7:d8:76:f2:6c:68:ff:a0:62:b1:87: 5f:bf:cd:3f:2e:1c:e7:49:af:97:12:6b:30:50:97: d2:88:e2:a9:59:cf:8f:0c:b8:8a:56:7e:e8:86:07: 5b:09:c1:56:08:0c:c5:4f:b8:1d:15:ff:05:b2:f6: e9:a2:a7:1b:5b:a4:9c:93:ab:6d:63:27:85:26:3f: 08:4c:fc:be:37:86:da:d7:99:03:56:97:a3:8e:b9: fa:6a:c5:8a:bf:27:7f:cc:cb:ed:9f:01:cc:8a:24: 0c:d9:51:2e:3d:76:9d:9d:45:9a:ac:70:d4:97:d3: eb:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:54:C5:24:64:A5:12:B8:36:79:47:3A:77:67:A9:64:F4:0F:34:C7 X509v3 Authority Key Identifier: keyid:7A:2C:A0:9A:85:71:29:B1:80:42:82:49:23:12:43:3D:AB:75:E6:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eiygmoVxKbGAQoJJIxJDPat15sI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:64:64:be:ad:79:33:94:23:03:91:c7:e3:70:31:73:60:6b: ee:8d:14:cf:d1:f0:f4:4f:a5:b0:e7:e4:b6:ba:1a:60:c5:d2: 6b:6d:8f:04:06:fb:15:ae:ad:22:43:0b:0d:e7:18:dd:d1:aa: 9c:d8:a8:84:b8:32:ba:9b:65:34:3d:20:b7:fc:6e:a6:b2:fa: 8e:4d:b9:69:22:16:4d:d4:27:d8:10:5d:de:dc:04:6d:86:2b: d6:48:8c:c1:6e:93:8e:1e:bd:ee:11:4c:26:1b:9c:b0:7f:32: 35:1c:f4:50:9d:20:30:76:fb:b0:f9:b3:1d:82:b5:72:30:11: d1:c8:3c:5e:28:ee:d2:8a:9b:be:06:bd:4b:de:91:73:b4:66: ca:a2:b5:b0:a2:32:f2:48:67:cc:3f:82:41:f2:ba:6b:8e:7b: 20:7d:3f:97:47:73:94:a5:b3:5d:97:b0:9e:1d:d6:b2:76:15: 11:ea:85:28:ff:c1:c6:e9:d7:67:88:a8:3e:b5:9f:be:db:4a: ca:3e:fa:a6:99:66:40:7b:79:e5:b8:f6:d4:d9:da:07:1b:23: 05:d5:c7:5a:b1:92:87:02:0d:d2:00:5f:7f:e4:5c:26:e6:4e: a3:18:31:04:ec:a2:be:0c:19:fd:c6:ca:74:f2:87:34:91:f1: cd:3c:fe:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI1NzExMTAvBgNVBAUTKDdBMkNBMDlBODU3MTI5QjE4MDQyODI0OTIzMTI0MzNE QUI3NUU2QzIwHhcNMjQwNTA1MDUyMDU5WhcNMjQwNTEyMDUyMDU5WjAYMRYwFAYD VQQDEw02NjM3MTczYi1iNjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0S7pNx1roJUOhp4C3OMZx2EN5ucoiq2NZvyp/K1ro6VUHR1xemCLzed78q5U S/Xy4SLJFzp2eTh8y2KAbYaeYsBsCg/6dNePaWAk5WGlRQ5gFMkuMqOOTNNNSBPy TAUnIsU6JPTN2Ums5mNdTfFGtOhBuD4uAkbjByji9bCWrZw56mxg50NIErgHt9h2 8mxo/6BisYdfv80/LhznSa+XEmswUJfSiOKpWc+PDLiKVn7ohgdbCcFWCAzFT7gd Ff8FsvbpoqcbW6Sck6ttYyeFJj8ITPy+N4ba15kDVpejjrn6asWKvyd/zMvtnwHM iiQM2VEuPXadnUWarHDUl9PrnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBVUxSRk pRK4NnlHOndnqWT0DzTHMB8GA1UdIwQYMBaAFHosoJqFcSmxgEKCSSMSQz2rdebC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjU3MS8yMDk5NDlFNDYx RUYxMUVEQTc2OEE5NjdDNEY5QUUwMi9laXlnbW9WeEtiR0FRb0pKSXhKRFBhdDE1 c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VpeWdtb1Z4S2JHQVFvSkpJeEpEUGF0MTVzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjU3MS8yMDk5NDlFNDYxRUYxMUVEQTc2OEE5NjdDNEY5QUUwMi9laXlnbW9WeEti R0FRb0pKSXhKRFBhdDE1c0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUZGS+rXkzlCMDkcfjcDFzYGvujRTP0fD0T6Ww5+S2uhpgxdJrbY8E BvsVrq0iQwsN5xjd0aqc2KiEuDK6m2U0PSC3/G6msvqOTblpIhZN1CfYEF3e3ARt hivWSIzBbpOOHr3uEUwmG5ywfzI1HPRQnSAwdvuw+bMdgrVyMBHRyDxeKO7Sipu+ Br1L3pFztGbKorWwojLySGfMP4JB8rprjnsgfT+XR3OUpbNdl7CeHdaydhUR6oUo /8HG6ddniKg+tZ++20rKPvqmmWZAe3nluPbU2doHGyMF1cdasZKHAg3SAF9/5Fwm 5k6jGDEE7KK+DBn9xsp08oc0kfHNPP7S -----END CERTIFICATE-----Generated at Sun May 5 06:01:17 2024 by rpki-client on console-fra.rpki-client.org