$ rpki-client -vvf rpki.apnic.net/member_repository/A915E18D/70015C422AE211EBBBFC4F0AC4F9AE02/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.mft File: ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.mft (raw, json) Hash identifier: 5he8z8xj/XEbFuMiXFAo0MopAwn4PoIBBcWgxFvUuMI= Subject key identifier: DD:D7:36:A2:AA:54:B6:7D:EF:6D:3A:CA:15:2E:01:99:16:FA:00:A0 Authority key identifier: 7B:2F:95:CE:6F:DC:25:31:BB:CA:3E:53:C1:D6:ED:1B:A2:AA:36:04 Certificate issuer: /CN=A915E18D/serialNumber=7B2F95CE6FDC2531BBCA3E53C1D6ED1BA2AA3604 Certificate serial: 068E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E18D/70015C422AE211EBBBFC4F0AC4F9AE02/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.mft Manifest number: 0688 Signing time: Fri 24 May 2024 23:35:36 +0000 Manifest this update: Fri 24 May 2024 23:35:35 +0000 Manifest next update: Fri 31 May 2024 23:35:35 +0000 Files and hashes: 1: ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.crl (hash: /CyHQpOIykzy8XOjGefdorYEqfdakwMagtS1VLlnZIk=) 2: FFCBC5B4819B11EBA2616775C4F9AE02.roa (hash: y4wdYQxL3+/JBU+hlA/z6ECaUqlQLW0+pWnE4ACl1B4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E18D/70015C422AE211EBBBFC4F0AC4F9AE02/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.crl rsync://rpki.apnic.net/member_repository/A915E18D/70015C422AE211EBBBFC4F0AC4F9AE02/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 23:35:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1678 (0x68e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E18D/serialNumber=7B2F95CE6FDC2531BBCA3E53C1D6ED1BA2AA3604 Validity Not Before: May 24 23:35:35 2024 GMT Not After : May 31 23:35:35 2024 GMT Subject: CN=66512448-28ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6b:e6:91:4f:70:a1:ed:dd:78:78:f7:f0:62: 46:82:df:32:c6:77:1a:2c:ff:10:0d:54:0c:39:b2: d5:0e:44:11:f8:91:d6:ad:80:92:2d:38:79:16:b3: 8b:f1:dd:95:81:e4:2a:fe:3d:14:19:86:f7:dd:3c: 86:20:39:42:9e:4b:45:e5:94:6e:e4:15:b6:56:7c: 49:04:13:fc:6a:ca:e1:d1:b0:71:6d:74:6e:ba:82: bd:fe:63:88:b4:b5:e0:d8:a0:77:52:78:63:e8:70: aa:44:bc:2b:7c:1d:27:80:01:f9:7b:85:e6:b7:68: 7b:93:cf:a7:92:28:ea:00:f7:10:49:e9:c5:a6:89: c5:12:45:5f:ef:2b:09:73:db:44:7d:0b:2c:8e:78: 3a:ba:c4:00:3c:1c:3f:13:eb:37:8b:a1:24:b4:a3: ce:c4:ac:07:c8:a7:17:33:66:3e:f0:7b:b1:1b:0d: 73:70:03:9d:a4:f2:6d:7f:8a:70:a6:cd:9a:72:8c: d2:eb:dd:12:a6:f4:0d:85:b9:0c:62:71:bd:f2:25: 0f:cb:40:38:10:62:15:48:b0:89:aa:a7:20:d5:b9: a8:b8:36:7d:6c:9f:86:5f:8e:f5:c4:d6:92:23:7d: 35:74:35:7b:24:63:c0:1c:0c:b7:94:e6:f7:84:e7: dc:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D7:36:A2:AA:54:B6:7D:EF:6D:3A:CA:15:2E:01:99:16:FA:00:A0 X509v3 Authority Key Identifier: keyid:7B:2F:95:CE:6F:DC:25:31:BB:CA:3E:53:C1:D6:ED:1B:A2:AA:36:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E18D/70015C422AE211EBBBFC4F0AC4F9AE02/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E18D/70015C422AE211EBBBFC4F0AC4F9AE02/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:c5:88:70:39:60:2d:fa:98:ea:ff:cd:c1:04:d3:84:9b:e3: 24:4c:d8:db:fb:ea:69:85:11:03:68:b0:97:e4:f1:13:99:48: fa:b9:f6:e3:48:45:8e:df:b8:d8:86:37:58:b8:46:be:79:ef: 37:96:0d:29:ba:0a:09:26:3d:6e:1a:b3:36:70:f4:18:d9:b9: a4:e8:f3:88:90:fe:77:07:ea:86:64:ba:93:4a:cc:f1:5f:94: 71:7b:89:23:dd:69:ce:c7:c6:95:b4:5b:4a:be:f9:14:8d:1c: 58:d6:d8:03:41:bc:c1:14:ca:61:dc:ce:25:87:b2:59:13:7e: fc:31:85:c7:fe:33:2d:b1:54:46:f3:22:0f:70:ba:73:73:b3: 2c:bb:90:6c:c5:e6:d8:c1:95:4a:47:37:ca:d7:0c:a0:9b:2f: ab:2c:df:ec:a7:61:ec:c5:2d:08:8d:75:5d:71:d1:59:93:67: f2:83:c2:75:1d:aa:73:9f:2d:0a:5f:06:98:04:ce:66:79:dc: f9:c0:52:8c:07:c6:d2:c1:0f:08:02:1b:aa:1c:b4:f0:cc:ee: f6:76:0c:61:a7:88:05:9e:be:7a:05:2c:81:2f:c7:d4:53:0e: f7:d9:be:55:53:31:2c:89:c7:13:b5:62:77:4b:04:c1:ba:25: c2:8e:bd:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUUxOEQxMTAvBgNVBAUTKDdCMkY5NUNFNkZEQzI1MzFCQkNBM0U1M0MxRDZFRDFC QTJBQTM2MDQwHhcNMjQwNTI0MjMzNTM1WhcNMjQwNTMxMjMzNTM1WjAYMRYwFAYD VQQDEw02NjUxMjQ0OC0yOGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGvmkU9woe3deHj38GJGgt8yxncaLP8QDVQMObLVDkQR+JHWrYCSLTh5FrOL 8d2VgeQq/j0UGYb33TyGIDlCnktF5ZRu5BW2VnxJBBP8asrh0bBxbXRuuoK9/mOI tLXg2KB3Unhj6HCqRLwrfB0ngAH5e4Xmt2h7k8+nkijqAPcQSenFponFEkVf7ysJ c9tEfQssjng6usQAPBw/E+s3i6EktKPOxKwHyKcXM2Y+8HuxGw1zcAOdpPJtf4pw ps2acozS690SpvQNhbkMYnG98iUPy0A4EGIVSLCJqqcg1bmouDZ9bJ+GX471xNaS I301dDV7JGPAHAy3lOb3hOfcpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN3XNqKq VLZ97206yhUuAZkW+gCgMB8GA1UdIwQYMBaAFHsvlc5v3CUxu8o+U8HW7RuiqjYE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTE4RC83MDAxNUM0MjJB RTIxMUVCQkJGQzRGMEFDNEY5QUUwMi9leS1Wem1fY0pURzd5ajVUd2RidEc2S3FO Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2V5LVZ6bV9jSlRHN3lqNVR3ZGJ0RzZLcU5nUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTE4RC83MDAxNUM0MjJBRTIxMUVCQkJGQzRGMEFDNEY5QUUwMi9leS1Wem1fY0pU Rzd5ajVUd2RidEc2S3FOZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvxYhwOWAt+pjq/83BBNOEm+MkTNjb++pphREDaLCX5PETmUj6ufbj SEWO37jYhjdYuEa+ee83lg0pugoJJj1uGrM2cPQY2bmk6POIkP53B+qGZLqTSszx X5Rxe4kj3WnOx8aVtFtKvvkUjRxY1tgDQbzBFMph3M4lh7JZE378MYXH/jMtsVRG 8yIPcLpzc7Msu5BsxebYwZVKRzfK1wygmy+rLN/sp2HsxS0IjXVdcdFZk2fyg8J1 Hapzny0KXwaYBM5medz5wFKMB8bSwQ8IAhuqHLTwzO72dgxhp4gFnr56BSyBL8fU Uw732b5VUzEsiccTtWJ3SwTBuiXCjr3X -----END CERTIFICATE-----Generated at Sat May 25 01:24:49 2024 by rpki-client on console-fra.rpki-client.org