$ rpki-client -vvf rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft File: EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft (raw, json) Hash identifier: xPCPMjQ73FrsTTj3WC/nGNQhtFaEU62dWKQrA4/NikM= Subject key identifier: AA:38:18:55:64:55:AA:77:BB:EB:BF:98:07:5A:F8:E9:55:45:F0:28 Authority key identifier: 12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0 Certificate issuer: /CN=A913C07A/serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft Manifest number: 3B Signing time: Fri 17 May 2024 08:22:13 +0000 Manifest this update: Fri 17 May 2024 08:22:13 +0000 Manifest next update: Fri 24 May 2024 08:22:13 +0000 Files and hashes: 1: EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl (hash: AT4cC3wjN0pm+9FZ0BcdijoRiuO9A1YG4XJLQq4uekY=) 2: A1456A4CBE6811EEBFF35870C4F9AE02.roa (hash: CjxRg39aI7jD87uaeYFFLkgQIwYNzaclB622xN60+Qg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C07A/serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0 Validity Not Before: May 17 08:22:13 2024 GMT Not After : May 24 08:22:13 2024 GMT Subject: CN=664713b5-03c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ab:7b:37:2f:61:29:42:ed:82:77:d7:b3:00: 06:28:0b:ea:fa:0b:f8:ea:d3:4d:fd:9a:4a:69:54: 45:e7:22:64:6b:e4:21:94:68:85:e6:eb:22:40:0c: ad:4e:a5:26:8d:f9:0e:3b:1f:46:4c:9f:7c:2b:be: 89:f6:e6:f3:8a:38:96:16:9a:49:0d:91:66:eb:86: 09:16:c7:5d:1e:4c:a2:b5:cc:43:13:12:f4:aa:aa: 3a:74:d8:ac:42:7c:26:a6:0b:da:03:b3:e7:1e:21: ab:bd:f6:5a:4c:3f:59:e6:87:2e:5d:38:43:66:cb: 35:96:1b:ad:a7:9b:61:42:02:3a:6a:dc:bf:6d:14: 69:1e:44:9e:09:79:a6:96:4e:d6:53:99:f5:db:90: b6:97:5c:58:9c:a6:f9:62:22:bb:74:54:8e:3e:3b: 62:a2:95:48:cc:d0:4b:5e:b4:74:d8:bf:09:68:d3: 02:7b:f9:b0:5a:57:2d:58:2f:9e:b0:02:12:cf:90: 5f:22:d7:ec:9c:2d:a8:0e:42:8b:2e:18:23:30:35: 47:d3:9a:b8:ca:77:ec:21:93:5c:99:c4:69:8f:10: df:67:e6:1b:08:10:88:1b:b5:68:75:89:7b:7c:35: e8:dd:52:f0:10:0f:68:64:67:c0:e7:30:a4:26:17: 83:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:38:18:55:64:55:AA:77:BB:EB:BF:98:07:5A:F8:E9:55:45:F0:28 X509v3 Authority Key Identifier: keyid:12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:8e:02:58:0b:e3:f7:29:40:18:2a:ec:40:34:86:45:25:5c: fd:c7:7b:6f:1a:65:05:60:13:58:ea:f3:14:7d:f1:d3:25:ee: d7:4c:66:ad:ac:88:e8:71:35:e8:99:d0:53:49:ab:a1:0f:a7: 24:31:bd:f0:d6:92:ac:3d:0f:4e:93:89:8f:5d:18:2f:73:de: 18:bd:c0:00:ab:ee:bb:34:d7:23:d7:8a:82:82:02:3d:5a:0f: b9:95:70:f0:12:a7:dd:61:12:11:b3:a7:87:7c:4b:1d:5d:62: f3:f5:48:ca:56:d4:48:26:46:f2:17:d7:03:d2:70:4f:d8:5f: 05:d1:18:6b:c0:f3:3a:c9:16:28:9f:c0:54:1d:75:5b:4b:fa: 92:2c:8d:46:6d:63:f2:e5:39:5e:a7:52:ff:88:02:79:17:74: 0f:64:1a:08:da:27:67:54:15:40:13:77:50:5e:cd:66:98:c7: f6:49:02:5f:83:57:45:a4:ba:67:73:20:2b:c8:94:2a:d7:11: 59:f6:a4:62:76:f6:c9:c1:1d:2f:01:be:4a:9e:3f:fa:1e:b3: 2b:bc:77:20:c9:ad:95:25:06:74:ba:38:7f:4e:c3:dd:ea:bb: 09:5b:01:ee:9c:e5:a9:23:1d:da:ef:8b:b2:48:9d:d9:7f:0c: 83:99:fd:ef -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QzA3QTExMC8GA1UEBRMoMTIxOERFNzVCMjU4OEI2NjMzQTZCRjg4Q0QzODhGMzFD NDNBQzlDMDAeFw0yNDA1MTcwODIyMTNaFw0yNDA1MjQwODIyMTNaMBgxFjAUBgNV BAMTDTY2NDcxM2I1LTAzYzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8q3s3L2EpQu2Cd9ezAAYoC+r6C/jq0039mkppVEXnImRr5CGUaIXm6yJADK1O pSaN+Q47H0ZMn3wrvon25vOKOJYWmkkNkWbrhgkWx10eTKK1zEMTEvSqqjp02KxC fCamC9oDs+ceIau99lpMP1nmhy5dOENmyzWWG62nm2FCAjpq3L9tFGkeRJ4JeaaW TtZTmfXbkLaXXFicpvliIrt0VI4+O2KilUjM0EtetHTYvwlo0wJ7+bBaVy1YL56w AhLPkF8i1+ycLagOQosuGCMwNUfTmrjKd+whk1yZxGmPEN9n5hsIEIgbtWh1iXt8 NejdUvAQD2hkZ8DnMKQmF4M1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqjgYVWRV qne767+YB1r46VVF8CgwHwYDVR0jBBgwFoAUEhjedbJYi2Yzpr+IzTiPMcQ6ycAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNDMDdBL0YxNDI2MTRBQkU2 NzExRUVCMzNDNkQ2RUM0RjlBRTAyL0VoamVkYkpZaTJZenByLUl6VGlQTWNRNnlj QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRWhqZWRiSllpMll6cHItSXpUaVBNY1E2eWNBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTND MDdBL0YxNDI2MTRBQkU2NzExRUVCMzNDNkQ2RUM0RjlBRTAyL0VoamVkYkpZaTJZ enByLUl6VGlQTWNRNnljQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADaOAlgL4/cpQBgq7EA0hkUlXP3He28aZQVgE1jq8xR98dMl7tdMZq2s iOhxNeiZ0FNJq6EPpyQxvfDWkqw9D06TiY9dGC9z3hi9wACr7rs01yPXioKCAj1a D7mVcPASp91hEhGzp4d8Sx1dYvP1SMpW1EgmRvIX1wPScE/YXwXRGGvA8zrJFiif wFQddVtL+pIsjUZtY/LlOV6nUv+IAnkXdA9kGgjaJ2dUFUATd1BezWaYx/ZJAl+D V0WkumdzICvIlCrXEVn2pGJ29snBHS8BvkqeP/oesyu8dyDJrZUlBnS6OH9Ow93q uwlbAe6c5akjHdrvi7JIndl/DIOZ/e8= -----END CERTIFICATE-----Generated at Fri May 17 10:10:49 2024 by rpki-client on console-fra.rpki-client.org