$ rpki-client -vvf rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft File: EW8KKmpLkkLXeiULcXAIFdKY3bk.mft (raw, json) Hash identifier: fJssbF1E2D+mExGVtIi3usWe98jpAlaQGUNOOmH8SQk= Subject key identifier: F2:A4:91:A6:C1:E2:4E:23:D0:38:22:2C:A1:6E:A8:13:BC:D6:B0:34 Authority key identifier: 11:6F:0A:2A:6A:4B:92:42:D7:7A:25:0B:71:70:08:15:D2:98:DD:B9 Certificate issuer: /CN=A9175964/serialNumber=116F0A2A6A4B9242D77A250B71700815D298DDB9 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft Manifest number: 25 Signing time: Wed 23 Oct 2024 06:25:09 +0000 Manifest this update: Wed 23 Oct 2024 06:25:09 +0000 Manifest next update: Wed 30 Oct 2024 06:25:09 +0000 Files and hashes: 1: EW8KKmpLkkLXeiULcXAIFdKY3bk.crl (hash: LFX7vamL8HqZSBPFdR/OOZLpm+E+Nfg0aY22B+vbSFA=) 2: 426E71C25B1511EF95122A62C4F9AE02.roa (hash: iVgLpNzw9WvLZDCrNCeZKcdKAVuHQLIqgkettJkRmpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.crl rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175964/serialNumber=116F0A2A6A4B9242D77A250B71700815D298DDB9 Validity Not Before: Oct 23 06:25:09 2024 GMT Not After : Oct 30 06:25:09 2024 GMT Subject: CN=671896c5-0867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:54:66:84:b9:c7:0f:b4:a9:ab:a0:5b:f6:38: 75:d0:a1:08:d5:36:ee:20:82:75:74:b7:e3:36:20: b0:69:eb:a5:ad:32:13:3a:a2:6d:d7:21:24:92:d4: be:67:c3:cd:7b:0a:01:10:7c:ce:59:17:b1:da:77: fe:4c:31:69:b7:b9:cc:48:ae:8c:db:ff:68:15:07: 09:1a:c4:15:c6:c2:6b:e6:d2:f6:0d:77:5e:c6:ba: 1e:e7:4c:b3:ed:35:ee:f2:da:2a:c8:80:98:55:cd: b3:a7:23:c0:fd:59:f9:d2:47:f1:ff:89:76:67:cd: 6a:e5:a9:3f:a5:df:1e:e6:61:65:b7:52:c1:33:38: 67:13:c1:d3:43:b3:12:e9:ba:ff:c0:fd:57:0b:88: b0:29:8d:68:98:e0:96:ab:25:05:40:54:f5:45:ef: 9a:b9:bf:a2:8e:59:73:80:41:f8:e3:b0:ba:0d:42: 6d:ed:db:58:5f:10:98:45:5f:96:5f:52:f9:f3:a9: 84:bc:e5:f8:78:bc:23:ed:ba:11:d5:41:c0:39:04: e9:ba:6f:32:5f:34:20:66:03:c8:1a:fb:4a:e9:ba: ca:1a:c6:bb:80:3d:e6:13:d8:f3:c5:ba:7d:cc:af: 38:01:e7:53:d8:60:dc:c2:9a:55:1b:1d:56:3e:de: 1e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A4:91:A6:C1:E2:4E:23:D0:38:22:2C:A1:6E:A8:13:BC:D6:B0:34 X509v3 Authority Key Identifier: keyid:11:6F:0A:2A:6A:4B:92:42:D7:7A:25:0B:71:70:08:15:D2:98:DD:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:d1:e7:97:97:b9:5a:d1:f0:3d:57:2d:0b:06:ca:1f:0b:dc: 80:2c:5b:f2:75:a7:71:61:e2:10:ee:24:9d:0b:dc:c3:8f:cd: 03:20:02:a4:b2:4b:df:f6:49:b0:19:8f:33:c6:d6:db:a2:18: 18:71:c7:6c:52:83:cd:d9:b3:88:f6:3e:e9:43:2c:e0:ef:5b: e1:c1:6c:84:52:5a:4e:fc:70:3c:a4:b0:dd:16:c8:28:9e:05: 9b:89:e5:56:e2:44:da:3b:9c:c8:ca:11:2d:bf:78:98:a4:fa: 49:24:bb:52:18:5a:31:c1:a1:6b:bc:4f:fe:f2:80:63:5f:33: ed:a3:bb:b4:f9:68:b2:03:ad:b4:a3:b9:86:77:6c:ad:b3:84: 98:8c:7b:d4:bd:b2:1b:02:05:c1:e7:17:13:9b:07:d8:d8:28: 6d:08:46:a2:3b:c6:61:1b:34:83:4d:fa:2f:fd:67:2d:4d:15: d1:5b:d1:6f:5a:9d:55:80:d9:cb:05:eb:11:35:61:f5:4d:71: b9:46:8c:b6:f1:4a:a2:6b:b2:05:2f:59:1f:8d:4b:95:0d:60: 8f:88:cc:c3:cb:9e:0b:f8:5e:13:75:55:d4:5a:50:fd:6c:59: 5b:5c:44:ac:3d:d4:4a:b7:0d:22:8a:7e:b0:e7:a8:6c:b7:0d: 46:ff:69:2d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NTk2NDExMC8GA1UEBRMoMTE2RjBBMkE2QTRCOTI0MkQ3N0EyNTBCNzE3MDA4MTVE Mjk4RERCOTAeFw0yNDEwMjMwNjI1MDlaFw0yNDEwMzAwNjI1MDlaMBgxFjAUBgNV BAMTDTY3MTg5NmM1LTA4NjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9VGaEuccPtKmroFv2OHXQoQjVNu4ggnV0t+M2ILBp66WtMhM6om3XISSS1L5n w817CgEQfM5ZF7Had/5MMWm3ucxIrozb/2gVBwkaxBXGwmvm0vYNd17Guh7nTLPt Ne7y2irIgJhVzbOnI8D9WfnSR/H/iXZnzWrlqT+l3x7mYWW3UsEzOGcTwdNDsxLp uv/A/VcLiLApjWiY4JarJQVAVPVF75q5v6KOWXOAQfjjsLoNQm3t21hfEJhFX5Zf UvnzqYS85fh4vCPtuhHVQcA5BOm6bzJfNCBmA8ga+0rpusoaxruAPeYT2PPFun3M rzgB51PYYNzCmlUbHVY+3h75AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8qSRpsHi TiPQOCIsoW6oE7zWsDQwHwYDVR0jBBgwFoAUEW8KKmpLkkLXeiULcXAIFdKY3bkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1OTY0L0Y1MzFFREU0NUIx NDExRUZBQzk3NDQ2MUM0RjlBRTAyL0VXOEtLbXBMa2tMWGVpVUxjWEFJRmRLWTNi ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRVc4S0ttcExra0xYZWlVTGNYQUlGZEtZM2JrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1 OTY0L0Y1MzFFREU0NUIxNDExRUZBQzk3NDQ2MUM0RjlBRTAyL0VXOEtLbXBMa2tM WGVpVUxjWEFJRmRLWTNiay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAfR55eXuVrR8D1XLQsGyh8L3IAsW/J1p3Fh4hDuJJ0L3MOPzQMgAqSy S9/2SbAZjzPG1tuiGBhxx2xSg83Zs4j2PulDLODvW+HBbIRSWk78cDyksN0WyCie BZuJ5VbiRNo7nMjKES2/eJik+kkku1IYWjHBoWu8T/7ygGNfM+2ju7T5aLIDrbSj uYZ3bK2zhJiMe9S9shsCBcHnFxObB9jYKG0IRqI7xmEbNINN+i/9Zy1NFdFb0W9a nVWA2csF6xE1YfVNcblGjLbxSqJrsgUvWR+NS5UNYI+IzMPLngv4XhN1VdRaUP1s WVtcRKw91Eq3DSKKfrDnqGy3DUb/aS0= -----END CERTIFICATE-----Generated at Wed Oct 23 07:45:55 2024 by rpki-client on console-ams.rpki-client.org