$ rpki-client -vvf rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.mft File: evqYcujQ_5IpleWJO1nDIUdnsfw.mft (raw, json) Hash identifier: GH5v782Xr0zl/SiKL3Y8WV+gp2UWcRiU3M9lssOQuxA= Subject key identifier: 38:15:91:CE:32:31:42:10:D0:63:EC:35:6C:C9:C0:4F:3C:F3:B8:41 Authority key identifier: 7A:FA:98:72:E8:D0:FF:92:29:95:E5:89:3B:59:C3:21:47:67:B1:FC Certificate issuer: /CN=A9154AA5/serialNumber=7AFA9872E8D0FF922995E5893B59C3214767B1FC Certificate serial: 0864 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evqYcujQ_5IpleWJO1nDIUdnsfw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.mft Manifest number: 085E Signing time: Mon 06 May 2024 21:45:17 +0000 Manifest this update: Mon 06 May 2024 21:45:16 +0000 Manifest next update: Mon 13 May 2024 21:45:16 +0000 Files and hashes: 1: evqYcujQ_5IpleWJO1nDIUdnsfw.crl (hash: IU/GZ2XHMSQJgxhfYE7F7wYGDpGRieu0PzvWwqePC8A=) 2: 8F1FBA54B0AA11EA9603E729C4F9AE02.roa (hash: UMwiR2L9VXOr6ScGLzsQIu6U32dxJ+D+797akxgUPkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.crl rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evqYcujQ_5IpleWJO1nDIUdnsfw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 21:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2148 (0x864) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154AA5/serialNumber=7AFA9872E8D0FF922995E5893B59C3214767B1FC Validity Not Before: May 6 21:45:16 2024 GMT Not After : May 13 21:45:16 2024 GMT Subject: CN=66394f6d-63c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7b:a4:a9:de:1e:8a:45:58:63:77:04:40:65: cd:30:2c:08:f8:f4:9c:7b:66:40:7b:ca:5d:ab:15: 59:49:f3:a6:e8:42:a9:ab:94:eb:de:4f:0b:7d:28: 3f:52:5a:ce:e1:29:18:03:80:f1:84:6c:10:25:99: 5f:60:ab:eb:aa:25:d6:d3:a5:b0:b8:8d:63:4c:08: e5:cc:e0:7d:58:49:ef:07:f4:2e:0d:89:f7:98:fd: 6f:85:3d:90:be:50:94:4b:17:d9:10:d1:a2:75:1b: 2d:d6:a7:8b:0d:84:43:8c:5c:ee:70:76:16:91:ab: b8:06:86:a9:45:9b:0d:6f:4c:fe:09:06:98:84:bb: 63:97:97:3e:9a:bf:3e:84:e3:28:fa:de:b7:69:33: 7c:a7:c8:33:e2:88:97:18:47:64:cf:d4:39:ae:15: ba:1d:59:0f:78:4d:7e:f7:71:ba:59:d2:0e:54:1b: 48:9d:3e:af:f5:c0:f4:ec:81:72:83:76:f7:71:bc: 74:38:80:23:83:0a:6c:e3:27:ac:72:9c:67:2b:eb: ed:e0:af:ac:fa:fc:04:8a:2e:17:12:bc:54:71:39: c1:95:3c:f9:48:6f:f4:f8:9d:29:0d:97:25:7c:8e: ef:c0:c0:c5:b3:56:d4:94:18:69:f6:8d:8f:bd:fd: 0f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:15:91:CE:32:31:42:10:D0:63:EC:35:6C:C9:C0:4F:3C:F3:B8:41 X509v3 Authority Key Identifier: keyid:7A:FA:98:72:E8:D0:FF:92:29:95:E5:89:3B:59:C3:21:47:67:B1:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evqYcujQ_5IpleWJO1nDIUdnsfw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:83:a7:1b:76:00:68:c2:24:6d:4a:69:41:ca:67:be:11:06: 2b:5a:bd:d7:6f:61:3e:d5:03:8e:8c:6c:de:8d:dd:00:0c:1b: 8e:ad:70:6c:81:11:62:39:d8:8c:20:6b:70:2c:98:9d:5e:15: 97:ae:ab:11:bf:f9:e0:37:1f:18:23:e2:96:78:d3:a7:1f:85: 48:f8:93:b2:52:fc:e4:13:e6:9d:cb:ea:b2:7f:25:30:44:b5: d7:62:fc:8f:12:6b:70:f3:c5:d7:28:38:6e:fa:14:bf:ba:4e: 64:d2:d9:0c:6b:e6:0f:3b:1b:61:b8:86:d7:3d:ce:17:ee:26: 9d:70:9a:80:ca:93:ef:41:cc:ef:f0:aa:b3:ba:c0:66:c2:4d: 3d:4e:57:32:be:1d:a0:cd:53:29:28:d3:d4:f3:de:8b:13:31: c1:4a:07:2a:e7:bc:d2:71:cc:0e:e3:95:c7:93:c6:cb:10:c6: d7:15:41:4a:50:95:e5:fd:ca:c3:31:b4:28:7d:3b:1f:21:ea: 21:e7:d0:0f:c6:e6:dc:d2:7c:0d:7d:91:80:5a:95:31:38:25: 38:d8:30:b8:08:dd:42:5e:c5:3b:42:bd:eb:2f:13:02:2b:a6: 37:59:54:1c:29:4f:48:7c:e5:51:cc:86:dd:b2:b2:95:a5:73: 89:c7:d8:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRBQTUxMTAvBgNVBAUTKDdBRkE5ODcyRThEMEZGOTIyOTk1RTU4OTNCNTlDMzIx NDc2N0IxRkMwHhcNMjQwNTA2MjE0NTE2WhcNMjQwNTEzMjE0NTE2WjAYMRYwFAYD VQQDEw02NjM5NGY2ZC02M2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqXukqd4eikVYY3cEQGXNMCwI+PSce2ZAe8pdqxVZSfOm6EKpq5Tr3k8LfSg/ UlrO4SkYA4DxhGwQJZlfYKvrqiXW06WwuI1jTAjlzOB9WEnvB/QuDYn3mP1vhT2Q vlCUSxfZENGidRst1qeLDYRDjFzucHYWkau4BoapRZsNb0z+CQaYhLtjl5c+mr8+ hOMo+t63aTN8p8gz4oiXGEdkz9Q5rhW6HVkPeE1+93G6WdIOVBtInT6v9cD07IFy g3b3cbx0OIAjgwps4yescpxnK+vt4K+s+vwEii4XErxUcTnBlTz5SG/0+J0pDZcl fI7vwMDFs1bUlBhp9o2Pvf0PjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDgVkc4y MUIQ0GPsNWzJwE8887hBMB8GA1UdIwQYMBaAFHr6mHLo0P+SKZXliTtZwyFHZ7H8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEFBNS84MzBFMjY5NEEw QTkxMUVBQUYyRUYyMTFDNEY5QUUwMi9ldnFZY3VqUV81SXBsZVdKTzFuRElVZG5z ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V2cVljdWpRXzVJcGxlV0pPMW5ESVVkbnNmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEFBNS84MzBFMjY5NEEwQTkxMUVBQUYyRUYyMTFDNEY5QUUwMi9ldnFZY3VqUV81 SXBsZVdKTzFuRElVZG5zZncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCg6cbdgBowiRtSmlByme+EQYrWr3Xb2E+1QOOjGzejd0ADBuOrXBs gRFiOdiMIGtwLJidXhWXrqsRv/ngNx8YI+KWeNOnH4VI+JOyUvzkE+ady+qyfyUw RLXXYvyPEmtw88XXKDhu+hS/uk5k0tkMa+YPOxthuIbXPc4X7iadcJqAypPvQczv 8KqzusBmwk09Tlcyvh2gzVMpKNPU896LEzHBSgcq57zSccwO45XHk8bLEMbXFUFK UJXl/crDMbQofTsfIeoh59APxubc0nwNfZGAWpUxOCU42DC4CN1CXsU7Qr3rLxMC K6Y3WVQcKU9IfOVRzIbdsrKVpXOJx9iB -----END CERTIFICATE-----Generated at Mon May 6 23:05:39 2024 by rpki-client on console-fra.rpki-client.org