$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft File: Epbn674wET_h0_KXMDOkyzEUSB0.mft (raw, json) Hash identifier: FbNS2eXQwxx+L8pIZNrxxThkcOtvYBCZ/wY2QOnuf1M= Subject key identifier: 11:85:EF:C6:25:43:F8:DD:50:79:1A:5B:53:9F:73:51:2C:66:E4:38 Authority key identifier: 12:96:E7:EB:BE:30:11:3F:E1:D3:F2:97:30:33:A4:CB:31:14:48:1D Certificate issuer: /CN=A9160DEB/serialNumber=1296E7EBBE30113FE1D3F2973033A4CB3114481D Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft Manifest number: 6B Signing time: Wed 15 May 2024 07:38:07 +0000 Manifest this update: Wed 15 May 2024 07:38:07 +0000 Manifest next update: Wed 22 May 2024 07:38:07 +0000 Files and hashes: 1: Epbn674wET_h0_KXMDOkyzEUSB0.crl (hash: dPuzZZP1hxMILjZZbN3WxhizFNFSxwEfoKEsYWkA0P0=) 2: F0E06498748B11EE92D55F6AC4F9AE02.roa (hash: G4RtexKo9ny4TbYwCN/1w5r6cBVLkFOvhnsprKO6E3E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.crl rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160DEB/serialNumber=1296E7EBBE30113FE1D3F2973033A4CB3114481D Validity Not Before: May 15 07:38:07 2024 GMT Not After : May 22 07:38:07 2024 GMT Subject: CN=6644665f-b6fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1b:bd:5e:86:2c:18:5a:10:c9:f3:93:b6:61: f5:f7:71:49:c3:00:8e:65:66:a1:a9:36:5d:40:e1: c6:c8:8c:a1:c6:e1:32:e8:e1:eb:1a:1e:e9:51:aa: 31:c8:07:0b:64:16:f3:46:7c:58:d1:ef:20:78:ec: 6a:6e:c1:7c:13:d4:92:ee:f4:74:83:f4:b3:db:3c: 21:e6:64:4d:a0:4f:df:5b:f0:b0:12:a8:83:f3:40: 58:2c:13:72:52:80:ca:31:f8:a5:ef:b3:df:58:0d: 66:52:7a:21:78:5a:64:64:f9:b5:8f:66:63:80:01: c0:b2:95:38:1c:32:26:0c:9b:ab:39:ef:56:64:0b: 51:06:7e:db:54:64:98:05:d8:2d:51:76:5a:ca:49: b7:05:3b:92:b5:e2:94:af:70:fa:0a:13:9d:19:20: 1a:b9:0e:9b:50:64:64:dc:67:aa:1c:9e:a3:5b:b7: aa:ec:8f:19:ff:39:fb:2b:d3:42:a6:38:76:c4:74: a3:40:96:7e:31:e1:ae:b1:aa:76:08:16:de:6a:5e: 3e:7c:d7:a6:f6:4a:d0:fb:1e:2a:ad:94:67:cf:56: 0f:0d:b3:59:4d:fc:2b:1d:6e:dd:c8:5d:45:df:7a: 37:74:55:0e:e4:49:5f:ba:67:c7:0e:2d:1b:3d:af: ed:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:85:EF:C6:25:43:F8:DD:50:79:1A:5B:53:9F:73:51:2C:66:E4:38 X509v3 Authority Key Identifier: keyid:12:96:E7:EB:BE:30:11:3F:E1:D3:F2:97:30:33:A4:CB:31:14:48:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:00:cb:b3:cf:e8:db:bd:e5:24:20:ed:21:fd:ee:1c:1e:49: 4a:4f:0e:69:f6:9b:65:62:18:c5:83:d7:a6:08:ee:a0:d9:eb: c2:8c:2f:fd:01:27:76:0c:fa:7c:2c:57:de:2c:34:cc:2d:42: fc:90:48:1a:bc:05:62:13:7c:89:a0:d6:f7:ca:ab:39:73:30: 12:6d:8f:e9:2a:16:ec:ed:05:08:8a:dc:7b:b4:f9:c9:3b:27: a5:db:ef:76:96:df:71:2f:9d:1c:db:28:ed:1d:39:50:47:be: 12:44:a0:89:cd:88:c8:8d:8a:d2:5a:02:dc:10:79:0f:4b:20: c9:cf:69:71:bb:fb:87:5a:af:23:e6:0f:5d:c3:10:ed:5a:48: 88:48:bf:04:c0:ee:45:77:71:9a:9e:5d:30:b9:d2:de:55:1a: 5b:6f:2b:13:c2:65:5a:b3:d1:8a:3f:b3:b9:0d:26:6e:bb:72: 4c:23:cf:dc:d8:a2:4e:b1:20:18:ed:10:78:4a:d9:05:15:c4: 18:d2:65:90:16:64:82:e9:95:f6:97:78:65:d5:8d:01:16:30: 77:6a:c8:de:8f:5d:eb:15:cd:ad:e8:36:c4:77:82:19:a4:41: f7:7c:e2:d6:06:fd:d2:18:70:84:b6:d4:7f:fa:b2:33:d9:5f: 41:b9:69:1d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MERFQjExMC8GA1UEBRMoMTI5NkU3RUJCRTMwMTEzRkUxRDNGMjk3MzAzM0E0Q0Iz MTE0NDgxRDAeFw0yNDA1MTUwNzM4MDdaFw0yNDA1MjIwNzM4MDdaMBgxFjAUBgNV BAMTDTY2NDQ2NjVmLWI2ZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQG71ehiwYWhDJ85O2YfX3cUnDAI5lZqGpNl1A4cbIjKHG4TLo4esaHulRqjHI BwtkFvNGfFjR7yB47GpuwXwT1JLu9HSD9LPbPCHmZE2gT99b8LASqIPzQFgsE3JS gMox+KXvs99YDWZSeiF4WmRk+bWPZmOAAcCylTgcMiYMm6s571ZkC1EGfttUZJgF 2C1RdlrKSbcFO5K14pSvcPoKE50ZIBq5DptQZGTcZ6ocnqNbt6rsjxn/Ofsr00Km OHbEdKNAln4x4a6xqnYIFt5qXj5816b2StD7HiqtlGfPVg8Ns1lN/Csdbt3IXUXf ejd0VQ7kSV+6Z8cOLRs9r+07AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEYXvxiVD +N1QeRpbU59zUSxm5DgwHwYDVR0jBBgwFoAUEpbn674wET/h0/KXMDOkyzEUSB0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwREVCL0EzMzFGNDc0NzI2 OTExRUVBM0Y4RTc1N0M0RjlBRTAyL0VwYm42NzR3RVRfaDBfS1hNRE9reXpFVVNC MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRXBibjY3NHdFVF9oMF9LWE1ET2t5ekVVU0IwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw REVCL0EzMzFGNDc0NzI2OTExRUVBM0Y4RTc1N0M0RjlBRTAyL0VwYm42NzR3RVRf aDBfS1hNRE9reXpFVVNCMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABQAy7PP6Nu95SQg7SH97hweSUpPDmn2m2ViGMWD16YI7qDZ68KML/0B J3YM+nwsV94sNMwtQvyQSBq8BWITfImg1vfKqzlzMBJtj+kqFuztBQiK3Hu0+ck7 J6Xb73aW33EvnRzbKO0dOVBHvhJEoInNiMiNitJaAtwQeQ9LIMnPaXG7+4daryPm D13DEO1aSIhIvwTA7kV3cZqeXTC50t5VGltvKxPCZVqz0Yo/s7kNJm67ckwjz9zY ok6xIBjtEHhK2QUVxBjSZZAWZILplfaXeGXVjQEWMHdqyN6PXesVza3oNsR3ghmk Qfd84tYG/dIYcIS21H/6sjPZX0G5aR0= -----END CERTIFICATE-----Generated at Wed May 15 09:04:12 2024 by rpki-client on console-ams.rpki-client.org