$ rpki-client -vvf rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft File: eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft (raw, json) Hash identifier: 6KrBqnVemcQAUkl8BcaLfoS51Lfa3HZvZBxKQvTqkBA= Subject key identifier: 07:C3:77:0D:2B:82:C3:63:BD:E1:C4:72:12:7E:CA:72:AB:FB:85:EF Authority key identifier: 78:A9:92:67:D7:EE:F1:27:F5:FB:45:24:F7:9C:59:AF:0A:BB:C1:F4 Certificate issuer: /CN=A9163824/serialNumber=78A99267D7EEF127F5FB4524F79C59AF0ABBC1F4 Certificate serial: 253A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft Manifest number: 2B68 Signing time: Thu 02 May 2024 16:03:59 +0000 Manifest this update: Thu 02 May 2024 16:03:58 +0000 Manifest next update: Thu 09 May 2024 16:03:58 +0000 Files and hashes: 1: eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.crl (hash: 4v10WtVARtjE8HO1zSpkzUfGUiPCuRt/1bfM4Ockyfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.crl rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 16:03:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9530 (0x253a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163824/serialNumber=78A99267D7EEF127F5FB4524F79C59AF0ABBC1F4 Validity Not Before: May 2 16:03:58 2024 GMT Not After : May 9 16:03:58 2024 GMT Subject: CN=6633b96f-4891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:94:0a:3d:db:3f:e3:53:92:89:f6:a0:3a:ea: 87:a8:aa:93:da:88:55:43:4f:bd:61:08:b6:61:2a: a1:a7:4a:1d:48:ed:35:37:d0:e2:16:55:29:1e:78: 5c:5f:63:e8:98:25:65:65:44:51:aa:8c:2d:7c:2e: b7:ad:4f:0e:52:71:03:c8:f3:01:dd:12:05:e3:19: 82:e0:93:75:64:5f:47:5f:58:07:d2:cc:18:c9:4f: cc:84:51:33:a5:0b:1a:97:a0:38:54:9d:40:6f:33: 78:07:14:31:d4:cf:70:df:ae:df:af:e7:73:15:cd: 08:c6:39:0a:7a:c7:b7:47:19:4f:e9:71:24:1d:3c: 33:eb:a8:df:03:19:bb:6c:1e:12:0f:75:75:72:e7: f3:c1:7c:bb:df:70:96:4d:08:d5:a8:70:81:14:f9: 52:76:97:6a:72:4e:98:10:a2:80:84:11:2a:64:79: 56:13:c9:26:d9:89:b0:e5:c6:97:87:b6:92:dd:1f: f4:35:7d:f0:f3:d4:48:43:41:69:55:e2:b0:08:d3: 32:da:07:ea:c4:5c:e1:f4:d4:67:dd:36:8c:ed:ae: a9:43:c7:64:c9:a1:0c:6f:59:45:cd:8f:d7:da:43: b3:36:b0:d8:ea:75:04:7c:80:b5:86:e3:cd:00:87: 7a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C3:77:0D:2B:82:C3:63:BD:E1:C4:72:12:7E:CA:72:AB:FB:85:EF X509v3 Authority Key Identifier: keyid:78:A9:92:67:D7:EE:F1:27:F5:FB:45:24:F7:9C:59:AF:0A:BB:C1:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:c4:cb:f4:b0:f7:6e:ad:ae:06:07:2b:47:55:b1:27:1d:1d: 8b:f6:c1:fd:54:b7:d9:ee:ab:ff:c9:af:a5:0d:92:e1:21:81: e3:e1:27:63:a8:06:bc:30:b9:ff:f3:61:42:64:32:5d:88:2e: 22:c5:1e:15:48:38:1f:09:11:a5:82:7b:50:84:e4:1b:9f:06: 7e:a7:dc:7a:22:76:f3:2a:2f:af:f5:71:f0:07:0a:f7:1c:f7: f5:2d:db:de:d8:f3:d8:4d:f1:1e:d7:cb:ba:b2:82:58:ab:12: a4:a4:fb:9e:de:b0:95:40:eb:7f:18:b2:b9:f2:cc:f9:82:0f: f9:e8:6d:c0:5c:ca:61:50:81:bc:a2:78:53:ae:2d:bf:73:79: cd:7d:32:69:76:8d:96:22:b8:4e:6b:f6:9a:db:02:ac:05:79: fd:46:d0:13:78:84:96:b0:f6:19:7f:ab:5f:f1:44:62:8b:2e: 10:05:16:8e:eb:a3:90:13:4e:a7:87:65:9c:55:5f:c6:d0:c5: 9c:56:6a:fb:f6:35:a9:1f:36:e0:1f:34:8f:06:99:90:0f:e9: 4b:02:16:9c:0b:7e:fb:06:be:cc:b6:e4:9d:73:43:53:65:fb: 5c:5f:08:70:12:9c:84:a9:ed:f7:db:2a:0d:62:03:8c:a0:4b: 8b:e4:4d:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM4MjQxMTAvBgNVBAUTKDc4QTk5MjY3RDdFRUYxMjdGNUZCNDUyNEY3OUM1OUFG MEFCQkMxRjQwHhcNMjQwNTAyMTYwMzU4WhcNMjQwNTA5MTYwMzU4WjAYMRYwFAYD VQQDEw02NjMzYjk2Zi00ODkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ZQKPds/41OSifagOuqHqKqT2ohVQ0+9YQi2YSqhp0odSO01N9DiFlUpHnhc X2PomCVlZURRqowtfC63rU8OUnEDyPMB3RIF4xmC4JN1ZF9HX1gH0swYyU/MhFEz pQsal6A4VJ1AbzN4BxQx1M9w367fr+dzFc0IxjkKese3RxlP6XEkHTwz66jfAxm7 bB4SD3V1cufzwXy733CWTQjVqHCBFPlSdpdqck6YEKKAhBEqZHlWE8km2Ymw5caX h7aS3R/0NX3w89RIQ0FpVeKwCNMy2gfqxFzh9NRn3TaM7a6pQ8dkyaEMb1lFzY/X 2kOzNrDY6nUEfIC1huPNAId6SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAfDdw0r gsNjveHEchJ+ynKr+4XvMB8GA1UdIwQYMBaAFHipkmfX7vEn9ftFJPecWa8Ku8H0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzgyNC9CQTBFRkU1MkZE MjUxMUU0OUQ5MzI3M0JDNEY5QUUwMi9lS21TWjlmdThTZjEtMFVrOTV4WnJ3cTd3 ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VLbVNaOWZ1OFNmMS0wVWs5NXhacndxN3dmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzgyNC9CQTBFRkU1MkZEMjUxMUU0OUQ5MzI3M0JDNEY5QUUwMi9lS21TWjlmdThT ZjEtMFVrOTV4WnJ3cTd3ZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoxMv0sPdura4GBytHVbEnHR2L9sH9VLfZ7qv/ya+lDZLhIYHj4Sdj qAa8MLn/82FCZDJdiC4ixR4VSDgfCRGlgntQhOQbnwZ+p9x6InbzKi+v9XHwBwr3 HPf1Ldve2PPYTfEe18u6soJYqxKkpPue3rCVQOt/GLK58sz5gg/56G3AXMphUIG8 onhTri2/c3nNfTJpdo2WIrhOa/aa2wKsBXn9RtATeISWsPYZf6tf8URiiy4QBRaO 66OQE06nh2WcVV/G0MWcVmr79jWpHzbgHzSPBpmQD+lLAhacC377Br7MtuSdc0NT ZftcXwhwEpyEqe332yoNYgOMoEuL5E2c -----END CERTIFICATE-----Generated at Thu May 2 17:43:08 2024 by rpki-client on console-fra.rpki-client.org