$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft File: EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft (raw, json) Hash identifier: uBLPLWJmB28cJaTVMvZwOEgMGLasDoMTgmveNYfGXBY= Subject key identifier: F2:B4:E0:4B:39:4E:56:ED:D6:36:B4:98:D8:DF:0B:69:9A:1D:BB:1D Authority key identifier: 12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19 Certificate issuer: /CN=A917E00F/serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019 Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft Manifest number: 04CE Signing time: Fri 17 May 2024 01:44:59 +0000 Manifest this update: Fri 17 May 2024 01:44:59 +0000 Manifest next update: Fri 24 May 2024 01:44:59 +0000 Files and hashes: 1: EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl (hash: Q/PuRD660dqjgGQpCqwmn2e4NapaHbbO2DUaQ1Dd8I8=) 2: E10C2796B42D11EEBCE04D61C4F9AE02.roa (hash: hB4Cn6tue3TITcEXLx2sCFa+W/8M2+iMSwYC8PB4Q+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 00:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E00F/serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019 Validity Not Before: May 17 01:44:59 2024 GMT Not After : May 24 01:44:59 2024 GMT Subject: CN=6646b69b-1357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:21:70:70:9e:35:1d:c9:8d:39:9a:b5:85:3b: 95:6e:80:6d:f6:96:bf:96:82:89:30:61:f0:b4:6a: d8:33:b6:c1:6d:0e:a2:7c:78:92:da:73:d0:70:bd: 27:19:a2:2f:e9:db:9d:4c:1c:47:56:25:06:2a:ce: b5:80:38:56:46:e2:dc:e6:69:7a:7a:21:b4:f7:64: a1:1d:05:8f:e3:52:c2:67:8d:ac:70:20:b6:26:d4: b8:52:fa:62:64:38:8a:b2:69:50:67:7e:96:4f:87: 98:ff:bc:39:1e:9a:22:ea:e4:c6:be:6d:9b:2d:80: ce:ed:0a:b5:87:69:d8:fa:cf:6c:03:5f:34:b0:d0: 62:15:2b:75:5c:27:ba:b2:fc:ff:64:47:d4:56:90: 6e:23:96:cd:cb:ad:49:bf:26:79:eb:2e:6a:a0:f0: ab:59:d8:a3:aa:71:f7:8a:62:6a:5a:82:bb:75:85: c4:b1:64:17:a9:cd:02:34:e4:cd:58:1f:95:63:6e: 6a:28:e6:e8:94:9e:3e:d6:64:9c:3b:9f:d6:e6:e2: 44:74:ad:72:ca:c9:17:68:22:fb:9c:a9:86:c5:0a: b4:09:21:9b:55:8e:96:34:a1:f9:03:83:90:a5:f2: dd:76:c9:a5:40:6c:da:b8:e0:ec:91:a1:e0:f2:d0: ce:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B4:E0:4B:39:4E:56:ED:D6:36:B4:98:D8:DF:0B:69:9A:1D:BB:1D X509v3 Authority Key Identifier: keyid:12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:8a:cc:e6:17:8b:f2:a2:03:4f:50:14:c0:b9:05:eb:ae:16: e9:07:4a:16:a7:59:7b:03:e3:bc:3b:58:b4:d9:4d:e9:e1:7c: 20:34:84:67:2b:91:03:f4:82:9c:8a:b0:e2:8e:74:70:d8:b1: da:26:ae:81:88:f2:05:44:00:8f:33:7b:80:44:af:dc:78:a3: 38:10:1d:fd:b1:c3:6e:7f:5e:17:17:40:70:56:76:c5:4a:e5: 05:1f:28:47:d3:54:f3:65:3b:17:47:ec:85:80:a9:37:02:eb: df:0b:0f:ec:d6:ff:a6:a0:28:55:33:c7:be:e5:cf:6e:d3:16: fa:11:19:67:61:19:69:1b:b0:2d:00:57:9f:f8:a0:c9:21:fe: 3c:94:2a:27:fe:dd:b1:94:1e:e4:38:87:26:df:71:06:7f:98: 30:f4:c8:63:ea:35:61:92:be:9f:e3:25:8c:23:61:94:69:2c: 02:ee:da:c7:18:8d:64:8b:15:70:1c:cd:74:21:47:0b:c1:a4: 79:6c:ea:23:79:87:72:d9:9e:22:e5:66:c2:5b:16:b7:27:35: e8:df:1a:c0:b2:d9:5a:30:fd:24:31:68:06:10:28:43:f5:70: 45:18:2b:b7:f6:59:e3:73:94:8a:b9:8a:7a:31:e8:55:5c:29: a6:34:7f:d4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTAwRjExMC8GA1UEBRMoMTJDNDg5NzJGMjZEMDY3QTlGMjFCNEM0RkEwQzg2NjMz RTAyQzAxOTAeFw0yNDA1MTcwMTQ0NTlaFw0yNDA1MjQwMTQ0NTlaMBgxFjAUBgNV BAMTDTY2NDZiNjliLTEzNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7IXBwnjUdyY05mrWFO5VugG32lr+WgokwYfC0atgztsFtDqJ8eJLac9BwvScZ oi/p251MHEdWJQYqzrWAOFZG4tzmaXp6IbT3ZKEdBY/jUsJnjaxwILYm1LhS+mJk OIqyaVBnfpZPh5j/vDkemiLq5Ma+bZstgM7tCrWHadj6z2wDXzSw0GIVK3VcJ7qy /P9kR9RWkG4jls3LrUm/JnnrLmqg8KtZ2KOqcfeKYmpagrt1hcSxZBepzQI05M1Y H5Vjbmoo5uiUnj7WZJw7n9bm4kR0rXLKyRdoIvucqYbFCrQJIZtVjpY0ofkDg5Cl 8t12yaVAbNq44OyRoeDy0M5PAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8rTgSzlO Vu3WNrSY2N8LaZodux0wHwYDVR0jBBgwFoAUEsSJcvJtBnqfIbTE+gyGYz4CwBkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFMDBGL0VERTQ4QjlDRUUy OTExRUI4MDg0QjYzOEM0RjlBRTAyL0VzU0pjdkp0Qm5xZkliVEUtZ3lHWXo0Q3dC ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRXNTSmN2SnRCbnFmSWJURS1neUdZejRDd0JrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF MDBGL0VERTQ4QjlDRUUyOTExRUI4MDg0QjYzOEM0RjlBRTAyL0VzU0pjdkp0Qm5x ZkliVEUtZ3lHWXo0Q3dCay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADiKzOYXi/KiA09QFMC5BeuuFukHShanWXsD47w7WLTZTenhfCA0hGcr kQP0gpyKsOKOdHDYsdomroGI8gVEAI8ze4BEr9x4ozgQHf2xw25/XhcXQHBWdsVK 5QUfKEfTVPNlOxdH7IWAqTcC698LD+zW/6agKFUzx77lz27TFvoRGWdhGWkbsC0A V5/4oMkh/jyUKif+3bGUHuQ4hybfcQZ/mDD0yGPqNWGSvp/jJYwjYZRpLALu2scY jWSLFXAczXQhRwvBpHls6iN5h3LZniLlZsJbFrcnNejfGsCy2Vow/SQxaAYQKEP1 cEUYK7f2WeNzlIq5inox6FVcKaY0f9Q= -----END CERTIFICATE-----Generated at Fri May 17 02:38:39 2024 by rpki-client on console-fra.rpki-client.org