$ rpki-client -vvf rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft File: 7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft (raw, json) Hash identifier: fw79wNvuMvPD/L/nnObwpSlV+6OdCW9GyfdiT5wIpBY= Subject key identifier: 71:2B:74:86:4A:D3:87:F0:88:92:75:DB:A5:2D:3F:01:33:75:E9:09 Authority key identifier: EC:46:19:A3:47:8A:D3:BD:16:AB:56:68:DD:D3:31:1E:4D:2D:B2:2F Certificate issuer: /CN=A915E2CC/serialNumber=EC4619A3478AD3BD16AB5668DDD3311E4D2DB22F Certificate serial: 0224 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft Manifest number: 021D Signing time: Sun 05 May 2024 04:13:45 +0000 Manifest this update: Sun 05 May 2024 04:13:44 +0000 Manifest next update: Sun 12 May 2024 04:13:44 +0000 Files and hashes: 1: 7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl (hash: tf1UBGPKOveHZc9IH+yRaI4SvN81qtQNdLHbevK0bTw=) 2: 4D6093C2EAD711ECBF99921CC4F9AE02.roa (hash: Vn/fzSxNYBcG9m6DhIY95UR85EPTv20dVwua2iRhQdQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 548 (0x224) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E2CC/serialNumber=EC4619A3478AD3BD16AB5668DDD3311E4D2DB22F Validity Not Before: May 5 04:13:44 2024 GMT Not After : May 12 04:13:44 2024 GMT Subject: CN=66370779-79e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:87:fb:76:ba:17:97:b7:d1:5d:c6:0e:77:c2: cd:f5:05:d3:33:eb:f3:d5:8f:85:4e:76:f2:c3:7e: 31:b2:64:e5:5f:6d:a8:57:3f:30:e1:8b:8e:f6:18: a4:9a:a8:83:65:64:f8:43:29:f7:71:37:34:6f:a6: 3a:d5:6c:35:2f:03:3c:41:a1:66:de:55:0b:8a:0d: c1:99:a6:53:7e:c5:f3:c6:87:b2:8b:6d:4b:d7:c4: 1a:a3:60:0d:6a:41:84:92:aa:6e:2b:83:da:56:01: ba:ff:42:83:62:83:df:29:4f:9d:e5:34:92:7d:67: 1f:31:0f:77:3a:d9:3e:63:76:a7:e6:e9:ae:72:89: b0:25:78:f6:e4:7d:06:41:36:b2:e8:ab:e2:ab:f2: 6d:9d:b0:ef:75:fb:3a:3f:08:d5:72:27:57:7d:72: 18:92:de:60:93:84:da:7d:27:92:ac:8d:0e:38:da: 1b:1e:1b:23:ca:00:a7:c5:cb:15:ba:37:9a:22:39: 5e:9a:59:32:5d:2a:be:48:bc:bd:d5:2a:a9:d6:3c: 75:9d:21:8f:5b:b6:7d:5c:b7:61:7a:50:20:15:c0: e4:be:31:81:0f:ec:b3:25:9f:56:fa:bc:b3:f4:18: 3c:23:56:98:cd:0b:f2:f3:06:71:3c:fb:c0:b1:42: 78:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2B:74:86:4A:D3:87:F0:88:92:75:DB:A5:2D:3F:01:33:75:E9:09 X509v3 Authority Key Identifier: keyid:EC:46:19:A3:47:8A:D3:BD:16:AB:56:68:DD:D3:31:1E:4D:2D:B2:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:d0:d6:e4:d5:91:1e:b7:2a:4a:59:41:ba:fb:33:9f:b9:f6: 5c:11:20:3f:61:54:01:b8:1a:5e:7a:5e:21:83:ed:a4:8b:84: bd:17:a5:4c:72:8d:1b:5c:28:85:f4:44:5b:42:45:1b:1d:96: 59:27:bc:4b:0c:8b:89:c4:d9:0d:11:6d:09:c0:d0:53:bb:74: 90:30:ee:cb:58:1d:0d:6f:af:74:78:24:63:57:83:33:21:72: d3:19:80:fa:c6:0c:e4:86:fb:25:eb:42:66:ff:8d:77:8e:78: ff:c9:b2:f8:79:c1:75:f1:73:68:1b:76:5b:4d:3e:af:44:d3: 9e:fc:c2:9f:af:0d:8e:e7:2d:8d:9c:a3:e8:48:0e:4b:e3:d6: 01:93:7a:19:01:16:55:cb:87:b8:cf:73:30:82:a6:1e:11:57: 0f:6e:3c:c3:0c:cd:46:4a:6b:4c:c9:38:79:c7:80:95:cf:86: 4e:65:46:87:45:a3:5b:3c:88:9c:19:1c:86:93:7f:18:5b:3c: 70:ae:5f:39:82:b9:33:6d:50:54:9e:e6:ab:5e:66:8e:15:70: 41:ed:8b:3b:e5:6a:ed:ea:7a:fe:9b:67:a6:b0:f4:a7:5e:04: 43:3e:95:00:cb:71:4d:2e:99:79:fa:93:91:71:e2:28:de:2f: 5a:f0:fe:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUUyQ0MxMTAvBgNVBAUTKEVDNDYxOUEzNDc4QUQzQkQxNkFCNTY2OERERDMzMTFF NEQyREIyMkYwHhcNMjQwNTA1MDQxMzQ0WhcNMjQwNTEyMDQxMzQ0WjAYMRYwFAYD VQQDEw02NjM3MDc3OS03OWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuIf7droXl7fRXcYOd8LN9QXTM+vz1Y+FTnbyw34xsmTlX22oVz8w4YuO9hik mqiDZWT4Qyn3cTc0b6Y61Ww1LwM8QaFm3lULig3BmaZTfsXzxoeyi21L18Qao2AN akGEkqpuK4PaVgG6/0KDYoPfKU+d5TSSfWcfMQ93Otk+Y3an5umucomwJXj25H0G QTay6Kviq/JtnbDvdfs6PwjVcidXfXIYkt5gk4TafSeSrI0OONobHhsjygCnxcsV ujeaIjlemlkyXSq+SLy91Sqp1jx1nSGPW7Z9XLdhelAgFcDkvjGBD+yzJZ9W+ryz 9Bg8I1aYzQvy8wZxPPvAsUJ4+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHErdIZK 04fwiJJ126UtPwEzdekJMB8GA1UdIwQYMBaAFOxGGaNHitO9FqtWaN3TMR5NLbIv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTJDQy9BRjY3NjVGQ0U1 ODAxMUVDOUI5RDJCNjJDNEY5QUUwMi83RVlabzBlSzA3MFdxMVpvM2RNeEhrMHRz aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFWVpvMGVLMDcwV3ExWm8zZE14SGswdHNpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTJDQy9BRjY3NjVGQ0U1ODAxMUVDOUI5RDJCNjJDNEY5QUUwMi83RVlabzBlSzA3 MFdxMVpvM2RNeEhrMHRzaTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ0Nbk1ZEetypKWUG6+zOfufZcESA/YVQBuBpeel4hg+2ki4S9F6VM co0bXCiF9ERbQkUbHZZZJ7xLDIuJxNkNEW0JwNBTu3SQMO7LWB0Nb690eCRjV4Mz IXLTGYD6xgzkhvsl60Jm/413jnj/ybL4ecF18XNoG3ZbTT6vRNOe/MKfrw2O5y2N nKPoSA5L49YBk3oZARZVy4e4z3MwgqYeEVcPbjzDDM1GSmtMyTh5x4CVz4ZOZUaH RaNbPIicGRyGk38YWzxwrl85grkzbVBUnuarXmaOFXBB7Ys75Wrt6nr+m2emsPSn XgRDPpUAy3FNLpl5+pORceIo3i9a8P5r -----END CERTIFICATE-----Generated at Sun May 5 05:30:49 2024 by rpki-client on console-ams.rpki-client.org