$ rpki-client -vvf rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft File: eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft (raw, json) Hash identifier: DtpUC+jQM+OBGywdk1j9wFYxyF+BwD3aMgiMi4Z1U/s= Subject key identifier: E9:87:EB:2C:60:60:54:4D:95:95:55:A5:86:AC:09:35:CD:86:80:11 Authority key identifier: 78:11:27:0E:78:E5:2F:81:EC:6F:0E:96:D9:96:C7:90:93:C1:24:32 Certificate issuer: /CN=A917ACF1/serialNumber=7811270E78E52F81EC6F0E96D996C79093C12432 Certificate serial: 02C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft Manifest number: 02C4 Signing time: Wed 01 May 2024 03:48:05 +0000 Manifest this update: Wed 01 May 2024 03:48:04 +0000 Manifest next update: Wed 08 May 2024 03:48:04 +0000 Files and hashes: 1: eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.crl (hash: SV9n2i+LNyM6UBw2H+rudfKZPyXTVlAtsvYdZRGMkUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.crl rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 708 (0x2c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ACF1/serialNumber=7811270E78E52F81EC6F0E96D996C79093C12432 Validity Not Before: May 1 03:48:04 2024 GMT Not After : May 8 03:48:04 2024 GMT Subject: CN=6631bb74-4183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:0e:df:f4:de:2d:f9:12:27:a0:73:74:ce:f5: a0:6d:69:bd:ea:27:69:04:4c:01:1f:37:93:ab:0c: f1:09:8a:b9:15:8b:27:93:ce:3c:7d:40:fe:91:7d: b4:f4:ec:19:aa:0c:08:12:2c:b0:ef:c4:77:77:f7: 26:7d:d7:42:d8:e5:ae:1c:43:fe:ce:ec:f3:d5:c4: 19:99:f2:f0:4d:ef:3a:16:13:18:8d:2b:d9:fb:d1: 4c:b0:d0:db:33:05:fd:12:69:9a:12:ef:b6:c7:3d: c9:f4:08:2a:f2:c6:64:6e:28:b6:24:d8:0a:41:1d: 1d:d5:a5:5e:b0:b2:bc:72:a7:86:ce:00:ba:a3:66: 95:06:0f:4d:52:b7:f7:86:7c:d9:f7:bb:53:a6:19: 0b:a2:d1:58:af:68:04:e6:c5:c7:a3:ca:2a:ae:c9: ad:d8:d2:d7:30:c7:16:85:63:fa:c8:eb:3c:a4:c1: 9b:46:43:96:4c:f0:ca:40:bc:be:b2:ad:fb:ce:30: f3:75:ba:ac:3b:fe:d7:b4:36:a3:98:b8:d9:05:dd: eb:76:67:48:d7:cb:19:6f:92:36:77:58:92:2b:7a: 7c:19:11:64:10:f6:55:04:73:17:e8:63:1c:a0:9b: 78:39:1d:f7:4d:fd:f2:83:9b:9a:6b:ae:4a:a2:f9: cb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:87:EB:2C:60:60:54:4D:95:95:55:A5:86:AC:09:35:CD:86:80:11 X509v3 Authority Key Identifier: keyid:78:11:27:0E:78:E5:2F:81:EC:6F:0E:96:D9:96:C7:90:93:C1:24:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:5a:e0:71:5b:5b:a7:49:fa:25:f9:64:71:fd:31:1d:19:ce: 4b:6a:3d:4a:2a:49:d6:1f:5f:3c:ff:5c:4b:47:d4:95:ac:d2: e1:af:ed:0f:e2:39:52:64:b3:9c:61:84:e4:ac:01:dc:05:38: 3e:8c:1b:94:e8:7a:84:11:ef:67:c0:a4:f5:5c:74:44:cf:99: 4a:c4:d8:25:7c:5b:75:a4:b9:b1:b9:f1:d3:49:ce:2f:92:69: 59:23:f1:4d:b5:01:d6:e6:40:41:f7:a3:85:e9:07:ba:a4:fa: cb:ac:05:92:d0:1b:72:7e:a7:eb:d2:d0:aa:1f:a2:ab:12:b4: b7:1f:a9:66:5b:16:79:d9:e8:14:62:c0:91:12:24:d9:8c:47: 39:b4:b7:7b:84:37:f8:ea:4e:b4:37:af:1a:42:04:04:a7:ea: 86:a3:79:69:17:4b:10:a1:d5:5c:5b:ba:f7:29:27:b0:44:b1: d5:80:27:54:33:58:38:62:01:89:33:8a:f2:f3:0c:5a:c4:05: 54:8b:2e:a2:0c:c1:82:c7:e8:3c:72:e1:6e:07:35:b8:20:01: e7:3b:80:be:09:05:f0:b4:ab:56:dc:c7:cf:ff:9b:b0:ba:34: 71:d4:25:51:ad:88:79:e5:4f:64:92:a1:2c:0f:d9:b5:a3:ef: 67:38:84:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FDRjExMTAvBgNVBAUTKDc4MTEyNzBFNzhFNTJGODFFQzZGMEU5NkQ5OTZDNzkw OTNDMTI0MzIwHhcNMjQwNTAxMDM0ODA0WhcNMjQwNTA4MDM0ODA0WjAYMRYwFAYD VQQDEw02NjMxYmI3NC00MTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6g7f9N4t+RInoHN0zvWgbWm96idpBEwBHzeTqwzxCYq5FYsnk848fUD+kX20 9OwZqgwIEiyw78R3d/cmfddC2OWuHEP+zuzz1cQZmfLwTe86FhMYjSvZ+9FMsNDb MwX9EmmaEu+2xz3J9Agq8sZkbii2JNgKQR0d1aVesLK8cqeGzgC6o2aVBg9NUrf3 hnzZ97tTphkLotFYr2gE5sXHo8oqrsmt2NLXMMcWhWP6yOs8pMGbRkOWTPDKQLy+ sq37zjDzdbqsO/7XtDajmLjZBd3rdmdI18sZb5I2d1iSK3p8GRFkEPZVBHMX6GMc oJt4OR33Tf3yg5uaa65KovnLFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOmH6yxg YFRNlZVVpYasCTXNhoARMB8GA1UdIwQYMBaAFHgRJw545S+B7G8OltmWx5CTwSQy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUNGMS85MDlCQzAyOEEw MzkxMUVDOEExRjFDMjNDNEY5QUUwMi9lQkVuRG5qbEw0SHNidzZXMlpiSGtKUEJK REkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VCRW5EbmpsTDRIc2J3NlcyWmJIa0pQQkpESS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUNGMS85MDlCQzAyOEEwMzkxMUVDOEExRjFDMjNDNEY5QUUwMi9lQkVuRG5qbEw0 SHNidzZXMlpiSGtKUEJKREkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNWuBxW1unSfol+WRx/TEdGc5Laj1KKknWH188/1xLR9SVrNLhr+0P 4jlSZLOcYYTkrAHcBTg+jBuU6HqEEe9nwKT1XHREz5lKxNglfFt1pLmxufHTSc4v kmlZI/FNtQHW5kBB96OF6Qe6pPrLrAWS0Btyfqfr0tCqH6KrErS3H6lmWxZ52egU YsCREiTZjEc5tLd7hDf46k60N68aQgQEp+qGo3lpF0sQodVcW7r3KSewRLHVgCdU M1g4YgGJM4ry8wxaxAVUiy6iDMGCx+g8cuFuBzW4IAHnO4C+CQXwtKtW3MfP/5uw ujRx1CVRrYh55U9kkqEsD9m1o+9nOISV -----END CERTIFICATE-----Generated at Wed May 1 05:59:06 2024 by rpki-client on console-fra.rpki-client.org