$ rpki-client -vvf rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft File: EPSBzyjc51gajMuOUN4Jj3yLyRU.mft (raw, json) Hash identifier: WLfegdRvx6fJjaMBZXzMuiAKRoUCmyYwBWxRxIj7N1I= Subject key identifier: 38:C3:6E:84:87:B9:DE:75:83:99:77:54:59:FF:D5:D0:48:BB:75:E3 Authority key identifier: 10:F4:81:CF:28:DC:E7:58:1A:8C:CB:8E:50:DE:09:8F:7C:8B:C9:15 Certificate issuer: /CN=A9122134/serialNumber=10F481CF28DCE7581A8CCB8E50DE098F7C8BC915 Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPSBzyjc51gajMuOUN4Jj3yLyRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft Manifest number: 47 Signing time: Wed 15 May 2024 08:09:07 +0000 Manifest this update: Wed 15 May 2024 08:09:06 +0000 Manifest next update: Wed 22 May 2024 08:09:06 +0000 Files and hashes: 1: EPSBzyjc51gajMuOUN4Jj3yLyRU.crl (hash: s3RhRk14nyo3MpRRjBKgZeTbHyKeBVIS/uBp/3evGCo=) 2: E070CA0CAA2E11EEA404D421C4F9AE02.roa (hash: uBqzGKrfuMGOhZ9ZF4kXFZz6O4TN4ouo1AuPwbgyPno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.crl rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPSBzyjc51gajMuOUN4Jj3yLyRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:09:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122134/serialNumber=10F481CF28DCE7581A8CCB8E50DE098F7C8BC915 Validity Not Before: May 15 08:09:06 2024 GMT Not After : May 22 08:09:06 2024 GMT Subject: CN=66446da2-35ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:89:a1:3d:a0:f6:58:7b:ee:b4:77:bc:42:60: 35:bd:2f:6e:ed:cb:c2:f4:79:34:62:5b:cd:5a:af: a3:1f:60:5a:b5:fa:41:23:a3:d7:6e:6a:fc:e3:ca: bf:92:fa:40:1d:8e:37:c9:08:1f:5e:13:04:1f:51: c4:ca:d7:e1:8c:0d:95:56:2a:f7:a3:f1:f5:49:f4: 6c:a0:29:d5:f4:a4:bb:53:de:df:fa:49:41:9c:c5: 8c:0a:0e:de:26:2b:6a:db:55:7b:f5:db:44:25:a3: 3c:5e:2b:f2:52:77:2f:e0:8c:d0:99:f2:a7:d6:58: 26:fc:94:a1:01:13:36:d5:18:c7:6a:33:0b:7b:41: ab:28:d8:bf:f5:96:e2:22:2d:b1:69:0b:c0:9e:bc: 75:05:0d:6b:60:39:f9:e5:dd:3a:81:cd:0c:7d:67: 84:12:30:e3:a0:fd:a8:51:a4:35:d7:be:ac:f4:43: 52:26:48:9e:28:9b:03:07:27:62:3b:f8:9e:c2:1a: f5:2c:70:6e:22:16:ae:8d:12:9c:3e:84:4a:4b:a6: 3e:8d:92:c4:e2:09:76:aa:93:84:54:a4:8d:a5:b2: c4:e9:d0:ef:e6:14:73:8c:3f:d8:32:4d:27:ed:34: 2a:c4:ae:d8:33:de:55:63:07:9c:bf:b0:a9:f1:58: 22:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C3:6E:84:87:B9:DE:75:83:99:77:54:59:FF:D5:D0:48:BB:75:E3 X509v3 Authority Key Identifier: keyid:10:F4:81:CF:28:DC:E7:58:1A:8C:CB:8E:50:DE:09:8F:7C:8B:C9:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPSBzyjc51gajMuOUN4Jj3yLyRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:ab:2d:34:eb:fc:d3:22:3b:93:ab:85:c2:84:b2:84:21:0e: 7b:f0:3e:f5:38:0b:e2:19:13:77:99:c9:d9:5e:67:b1:91:9d: 8a:a1:ff:e1:0a:1a:ba:d4:78:9b:c5:d5:56:ec:88:19:db:97: 13:2b:5d:81:16:98:5d:82:b5:c3:4e:6e:ac:8c:f3:ae:49:d4: 50:73:17:00:38:1b:2d:02:e5:c7:31:8a:73:b1:fd:f7:4d:07: 4a:12:66:75:84:14:b4:5b:fc:51:83:ff:bd:12:ff:80:07:a9: a0:02:a9:96:4d:fd:98:f7:33:56:95:e7:d1:d2:22:af:f9:ff: dc:eb:7f:8f:85:27:fd:cf:45:97:76:2a:38:74:ce:5b:0e:26: b5:b6:fb:48:da:bb:53:27:e0:0c:72:6f:e4:09:c7:f9:39:54: 41:6e:a9:91:43:bf:21:c9:c9:7c:01:26:cf:52:7a:f1:33:40: 4e:d1:cb:16:e5:f2:49:06:a0:aa:b7:ca:5a:0f:2f:2b:3c:c1: a1:8a:c2:9d:36:64:f7:9c:f7:9b:b5:55:56:8c:e8:62:b6:05: b4:c1:49:ec:54:4e:ae:35:ae:8c:82:d4:ee:02:70:bc:32:aa: 6e:18:8e:f3:c3:71:28:12:a0:29:0f:9f:e4:c3:bb:6e:20:38: 5c:8b:34:73 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MjEzNDExMC8GA1UEBRMoMTBGNDgxQ0YyOERDRTc1ODFBOENDQjhFNTBERTA5OEY3 QzhCQzkxNTAeFw0yNDA1MTUwODA5MDZaFw0yNDA1MjIwODA5MDZaMBgxFjAUBgNV BAMTDTY2NDQ2ZGEyLTM1ZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAiaE9oPZYe+60d7xCYDW9L27ty8L0eTRiW81ar6MfYFq1+kEjo9duavzjyr+S +kAdjjfJCB9eEwQfUcTK1+GMDZVWKvej8fVJ9GygKdX0pLtT3t/6SUGcxYwKDt4m K2rbVXv120QlozxeK/JSdy/gjNCZ8qfWWCb8lKEBEzbVGMdqMwt7Qaso2L/1luIi LbFpC8CevHUFDWtgOfnl3TqBzQx9Z4QSMOOg/ahRpDXXvqz0Q1ImSJ4omwMHJ2I7 +J7CGvUscG4iFq6NEpw+hEpLpj6NksTiCXaqk4RUpI2lssTp0O/mFHOMP9gyTSft NCrErtgz3lVjB5y/sKnxWCIjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOMNuhIe5 3nWDmXdUWf/V0Ei7deMwHwYDVR0jBBgwFoAUEPSBzyjc51gajMuOUN4Jj3yLyRUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIyMTM0Lzc5QTMzNTc2QUEy RTExRUU4OEJBMkUyMUM0RjlBRTAyL0VQU0J6eWpjNTFnYWpNdU9VTjRKajN5THlS VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRVBTQnp5amM1MWdhak11T1VONEpqM3lMeVJVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIy MTM0Lzc5QTMzNTc2QUEyRTExRUU4OEJBMkUyMUM0RjlBRTAyL0VQU0J6eWpjNTFn YWpNdU9VTjRKajN5THlSVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFmrLTTr/NMiO5OrhcKEsoQhDnvwPvU4C+IZE3eZydleZ7GRnYqh/+EK GrrUeJvF1VbsiBnblxMrXYEWmF2CtcNObqyM865J1FBzFwA4Gy0C5ccxinOx/fdN B0oSZnWEFLRb/FGD/70S/4AHqaACqZZN/Zj3M1aV59HSIq/5/9zrf4+FJ/3PRZd2 Kjh0zlsOJrW2+0jau1Mn4Axyb+QJx/k5VEFuqZFDvyHJyXwBJs9SevEzQE7Ryxbl 8kkGoKq3yloPLys8waGKwp02ZPec95u1VVaM6GK2BbTBSexUTq41royC1O4CcLwy qm4YjvPDcSgSoCkPn+TDu24gOFyLNHM= -----END CERTIFICATE-----Generated at Wed May 15 09:04:07 2024 by rpki-client on console-ams.rpki-client.org