$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.mft File: ezWJ19jaa93mDzmOflK6heWuM1c.mft (raw, json) Hash identifier: Cz3ulgu0oLOMqm3fgFR+hMF9bl/vovdFw2bq7MnujXo= Subject key identifier: 1E:EA:90:57:E2:58:86:B4:84:09:3D:7D:40:96:29:1E:A8:4F:C7:AF Authority key identifier: 7B:35:89:D7:D8:DA:6B:DD:E6:0F:39:8E:7E:52:BA:85:E5:AE:33:57 Certificate issuer: /CN=A916EF76/serialNumber=7B3589D7D8DA6BDDE60F398E7E52BA85E5AE3357 Certificate serial: 1733 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezWJ19jaa93mDzmOflK6heWuM1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.mft Manifest number: 172C Signing time: Wed 08 May 2024 17:08:58 +0000 Manifest this update: Wed 08 May 2024 17:08:57 +0000 Manifest next update: Wed 15 May 2024 17:08:57 +0000 Files and hashes: 1: ezWJ19jaa93mDzmOflK6heWuM1c.crl (hash: AIzp+e7lzrlej58Bib+Wu6oAyYoRCvWrPbr9XnxBt80=) 2: B4F0A9F800A011E8B6C9E20AC4F9AE02.roa (hash: O++Vx92KavIvOn+xBQAI46zCuI/TBPZ1f39+eEbauLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.crl rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezWJ19jaa93mDzmOflK6heWuM1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5939 (0x1733) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EF76/serialNumber=7B3589D7D8DA6BDDE60F398E7E52BA85E5AE3357 Validity Not Before: May 8 17:08:57 2024 GMT Not After : May 15 17:08:57 2024 GMT Subject: CN=663bb1aa-c224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:13:7d:d4:b8:f7:bc:37:ec:4f:30:63:45:2c: 3d:b5:a3:f1:e8:7d:e7:f3:d0:dd:e1:4d:4a:f5:86: da:bf:c2:2a:60:e4:cf:61:fb:77:0e:d3:06:fa:06: 47:38:32:d6:d7:fc:5e:f4:ca:f1:53:42:98:c9:ab: 06:dd:ee:6f:c8:23:33:b0:2a:95:05:f2:2e:17:e8: 51:e4:7c:5d:16:6c:90:db:aa:63:d3:cb:0e:38:41: 9a:1a:24:76:87:80:dc:70:7d:fc:e6:6a:7b:04:06: 2c:97:bf:6b:b1:72:cb:b7:45:d8:05:b1:b2:ef:8c: e5:5f:9f:e0:21:65:98:41:11:f4:5b:22:77:48:98: 23:7f:1a:34:79:63:dd:c9:5f:bd:a2:fc:c4:19:90: 24:ec:cb:c1:e4:58:06:ef:81:9f:db:f5:d4:ae:e9: 24:f5:79:aa:d5:6a:44:d3:2f:a2:04:b0:be:5d:0f: 65:7f:83:8c:ef:22:e5:c9:e5:30:6e:e1:fe:06:05: d0:d9:ad:7e:76:e5:e0:f0:53:a2:b8:47:7f:95:95: f1:37:14:5e:fe:8d:ba:52:3f:31:ad:2f:5b:e6:1d: f3:2f:c7:94:ec:03:4f:aa:97:c7:ae:6d:9a:ba:a3: ff:e0:31:91:54:ab:bb:f7:07:6b:ad:c6:64:52:48: 48:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:EA:90:57:E2:58:86:B4:84:09:3D:7D:40:96:29:1E:A8:4F:C7:AF X509v3 Authority Key Identifier: keyid:7B:35:89:D7:D8:DA:6B:DD:E6:0F:39:8E:7E:52:BA:85:E5:AE:33:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezWJ19jaa93mDzmOflK6heWuM1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:a1:a8:65:56:66:01:e1:fc:f4:25:82:3a:d5:4e:36:95:c1: c9:17:59:7b:8a:34:15:e5:1b:66:cd:20:5d:15:e5:88:4c:a7: fa:a4:fa:f7:83:05:80:ce:38:53:cc:4b:2e:6c:21:af:ee:33: a9:de:35:88:f8:d4:89:be:e5:0a:51:14:05:37:ec:d5:e0:34: 55:7e:e9:42:9d:c7:dd:a6:d8:06:4e:0d:48:21:e9:63:a4:93: 0f:35:99:83:c5:65:73:8e:99:9f:f1:fd:81:4d:c3:a4:c4:48: ac:91:cb:27:01:c6:fc:1f:5e:ec:a2:cf:d1:2c:61:b7:0b:ba: 28:55:51:2a:52:d3:bc:72:91:19:13:b1:0f:48:85:f9:b4:2c: 7e:d1:2c:ba:14:34:5a:09:77:bf:ea:d2:ea:ee:8e:26:0e:ef: 32:a6:d0:7f:6a:76:1c:e9:76:31:7e:17:58:d3:1c:38:1c:fc: f8:7e:e6:46:fa:f4:80:fc:82:b3:9a:c6:cd:69:ce:1a:5f:65: 3f:e6:c9:57:31:b6:9b:9e:bb:49:1f:c0:bf:82:42:fe:19:38: 92:45:98:13:c2:66:cd:90:84:49:20:6a:ba:2f:31:8b:1b:41: 57:33:6e:c6:69:2a:ea:a9:e9:77:27:8f:80:52:65:39:59:9c: 8a:5a:45:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVGNzYxMTAvBgNVBAUTKDdCMzU4OUQ3RDhEQTZCRERFNjBGMzk4RTdFNTJCQTg1 RTVBRTMzNTcwHhcNMjQwNTA4MTcwODU3WhcNMjQwNTE1MTcwODU3WjAYMRYwFAYD VQQDEw02NjNiYjFhYS1jMjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArRN91Lj3vDfsTzBjRSw9taPx6H3n89Dd4U1K9Ybav8IqYOTPYft3DtMG+gZH ODLW1/xe9MrxU0KYyasG3e5vyCMzsCqVBfIuF+hR5HxdFmyQ26pj08sOOEGaGiR2 h4DccH385mp7BAYsl79rsXLLt0XYBbGy74zlX5/gIWWYQRH0WyJ3SJgjfxo0eWPd yV+9ovzEGZAk7MvB5FgG74Gf2/XUrukk9Xmq1WpE0y+iBLC+XQ9lf4OM7yLlyeUw buH+BgXQ2a1+duXg8FOiuEd/lZXxNxRe/o26Uj8xrS9b5h3zL8eU7ANPqpfHrm2a uqP/4DGRVKu79wdrrcZkUkhIgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB7qkFfi WIa0hAk9fUCWKR6oT8evMB8GA1UdIwQYMBaAFHs1idfY2mvd5g85jn5SuoXlrjNX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUY3Ni8yOUJFNThGMEI4 Q0QxMUU3OUU0MzE4NjFDNEY5QUUwMi9leldKMTlqYWE5M21Eem1PZmxLNmhlV3VN MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V6V0oxOWphYTkzbUR6bU9mbEs2aGVXdU0xYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUY3Ni8yOUJFNThGMEI4Q0QxMUU3OUU0MzE4NjFDNEY5QUUwMi9leldKMTlqYWE5 M21Eem1PZmxLNmhlV3VNMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmoahlVmYB4fz0JYI61U42lcHJF1l7ijQV5RtmzSBdFeWITKf6pPr3 gwWAzjhTzEsubCGv7jOp3jWI+NSJvuUKURQFN+zV4DRVfulCncfdptgGTg1IIelj pJMPNZmDxWVzjpmf8f2BTcOkxEiskcsnAcb8H17sos/RLGG3C7ooVVEqUtO8cpEZ E7EPSIX5tCx+0Sy6FDRaCXe/6tLq7o4mDu8yptB/anYc6XYxfhdY0xw4HPz4fuZG +vSA/IKzmsbNac4aX2U/5slXMbabnrtJH8C/gkL+GTiSRZgTwmbNkIRJIGq6LzGL G0FXM27GaSrqqel3J4+AUmU5WZyKWkU6 -----END CERTIFICATE-----Generated at Wed May 8 18:13:58 2024 by rpki-client on console-fra.rpki-client.org