$ rpki-client -vvf rpki.apnic.net/member_repository/A9185781/9EAC4A08D92511E98AB82E27C4F9AE02/eAuWI4efREbcR69T73DjvTJ61ZE.mft File: eAuWI4efREbcR69T73DjvTJ61ZE.mft (raw, json) Hash identifier: /kIZRq2Ssh1GnBew+G0ASqUGBjkN3r4wIBdfvDAVjxc= Subject key identifier: F5:4A:99:30:6E:16:92:0B:63:74:04:AE:C5:FC:B3:A8:6A:0D:50:56 Authority key identifier: 78:0B:96:23:87:9F:44:46:DC:47:AF:53:EF:70:E3:BD:32:7A:D5:91 Certificate issuer: /CN=A9185781/serialNumber=780B9623879F4446DC47AF53EF70E3BD327AD591 Certificate serial: 0C58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eAuWI4efREbcR69T73DjvTJ61ZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185781/9EAC4A08D92511E98AB82E27C4F9AE02/eAuWI4efREbcR69T73DjvTJ61ZE.mft Manifest number: 0C53 Signing time: Thu 02 May 2024 19:00:10 +0000 Manifest this update: Thu 02 May 2024 19:00:10 +0000 Manifest next update: Thu 09 May 2024 19:00:10 +0000 Files and hashes: 1: eAuWI4efREbcR69T73DjvTJ61ZE.crl (hash: nUgCY5dnl2xApBQR59HkaRGhTvQ9ad9rcg0P6T9vcgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185781/9EAC4A08D92511E98AB82E27C4F9AE02/eAuWI4efREbcR69T73DjvTJ61ZE.crl rsync://rpki.apnic.net/member_repository/A9185781/9EAC4A08D92511E98AB82E27C4F9AE02/eAuWI4efREbcR69T73DjvTJ61ZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eAuWI4efREbcR69T73DjvTJ61ZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 19:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3160 (0xc58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185781/serialNumber=780B9623879F4446DC47AF53EF70E3BD327AD591 Validity Not Before: May 2 19:00:10 2024 GMT Not After : May 9 19:00:10 2024 GMT Subject: CN=6633e2ba-a95a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f2:de:d2:21:17:1e:ed:9f:2f:58:e0:e1:09: 8f:4f:e1:d0:fa:47:4b:e7:85:75:b8:8e:24:90:5d: 35:00:58:ff:49:35:17:cd:cd:b8:f5:a4:1b:f9:d8: d6:81:e3:93:b7:14:c9:20:f6:6f:94:5f:20:15:e8: 30:e8:da:2a:53:5d:bc:be:52:1d:d7:f4:a5:eb:cd: b1:34:d4:e0:57:f8:2a:56:f8:0c:71:06:38:ab:be: f0:08:ce:b5:1a:4e:87:dd:c5:aa:49:16:63:13:f4: c7:13:ff:60:98:f1:c0:d0:80:92:24:e8:c7:f2:3e: ca:a7:fd:12:19:7e:4b:e9:08:17:ca:28:98:08:37: c5:87:b9:46:24:2e:b5:3c:4b:af:47:6f:43:c6:4e: 5e:e9:fa:45:b1:31:94:b0:07:90:b5:f0:be:b4:53: e6:2b:14:e3:8c:09:40:6f:ac:ec:f9:90:77:7a:4b: 27:bd:a3:9f:31:84:c2:39:4f:6f:06:4c:b1:03:12: c6:4c:9c:3c:f3:b9:6f:53:f5:42:21:0e:3b:3c:5b: f8:60:f6:ff:fe:e9:89:46:a4:14:9e:53:97:0c:b4: 3b:f6:97:8b:83:6d:e1:8c:b9:1b:63:63:29:4d:f0: 7f:47:7c:6c:f7:9b:fd:30:35:86:87:2e:7e:dc:77: a2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:4A:99:30:6E:16:92:0B:63:74:04:AE:C5:FC:B3:A8:6A:0D:50:56 X509v3 Authority Key Identifier: keyid:78:0B:96:23:87:9F:44:46:DC:47:AF:53:EF:70:E3:BD:32:7A:D5:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185781/9EAC4A08D92511E98AB82E27C4F9AE02/eAuWI4efREbcR69T73DjvTJ61ZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eAuWI4efREbcR69T73DjvTJ61ZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185781/9EAC4A08D92511E98AB82E27C4F9AE02/eAuWI4efREbcR69T73DjvTJ61ZE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:6f:05:1f:72:6c:e7:90:c7:a2:ff:d8:35:e6:d0:47:a5:04: ff:24:8f:97:13:5a:1d:a3:cf:56:8b:97:67:d7:0d:81:cd:d7: 9b:be:53:cf:4f:e0:02:44:f3:39:0f:15:51:e1:e4:9d:08:c2: 6a:e2:39:75:33:48:51:04:7d:f0:bd:2b:1d:5c:cd:2d:a5:13: 11:a4:1d:f9:38:5a:98:af:de:9c:f3:24:b9:66:27:0a:4f:c4: d5:12:27:80:60:19:23:10:30:67:13:2d:82:3b:89:e3:b0:2d: 69:30:7e:46:e5:2c:a5:d8:bb:6f:90:ae:21:6b:f9:94:ef:77: 02:ef:1c:2c:12:40:9a:36:da:3b:fa:c0:77:03:a7:33:f9:d1: 1c:f2:ba:ae:ec:b9:dc:48:9e:b3:d5:fe:ea:8d:1c:ef:4c:86: 0d:18:24:c6:53:21:03:eb:2b:a9:2d:7d:26:b7:74:91:0d:b8: 8c:68:bb:36:f0:53:88:a7:9f:c7:55:28:17:76:0d:32:bc:b8: 73:6f:e4:29:0d:0a:95:70:49:b2:c1:68:f7:ac:da:52:b2:1e: 05:1c:ff:80:dd:89:a1:5a:6d:5b:6e:29:64:b4:1a:c0:27:d9: 47:d7:ea:d7:51:0a:eb:cb:ec:ba:79:e3:5a:46:0b:44:af:2a: e8:46:f9:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU3ODExMTAvBgNVBAUTKDc4MEI5NjIzODc5RjQ0NDZEQzQ3QUY1M0VGNzBFM0JE MzI3QUQ1OTEwHhcNMjQwNTAyMTkwMDEwWhcNMjQwNTA5MTkwMDEwWjAYMRYwFAYD VQQDEw02NjMzZTJiYS1hOTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfLe0iEXHu2fL1jg4QmPT+HQ+kdL54V1uI4kkF01AFj/STUXzc249aQb+djW geOTtxTJIPZvlF8gFegw6NoqU128vlId1/Sl682xNNTgV/gqVvgMcQY4q77wCM61 Gk6H3cWqSRZjE/THE/9gmPHA0ICSJOjH8j7Kp/0SGX5L6QgXyiiYCDfFh7lGJC61 PEuvR29Dxk5e6fpFsTGUsAeQtfC+tFPmKxTjjAlAb6zs+ZB3eksnvaOfMYTCOU9v BkyxAxLGTJw887lvU/VCIQ47PFv4YPb//umJRqQUnlOXDLQ79peLg23hjLkbY2Mp TfB/R3xs95v9MDWGhy5+3HeiOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPVKmTBu FpILY3QErsX8s6hqDVBWMB8GA1UdIwQYMBaAFHgLliOHn0RG3EevU+9w470yetWR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTc4MS85RUFDNEEwOEQ5 MjUxMUU5OEFCODJFMjdDNEY5QUUwMi9lQXVXSTRlZlJFYmNSNjlUNzNEanZUSjYx WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VBdVdJNGVmUkViY1I2OVQ3M0RqdlRKNjFaRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTc4MS85RUFDNEEwOEQ5MjUxMUU5OEFCODJFMjdDNEY5QUUwMi9lQXVXSTRlZlJF YmNSNjlUNzNEanZUSjYxWkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqbwUfcmznkMei/9g15tBHpQT/JI+XE1odo89Wi5dn1w2BzdebvlPP T+ACRPM5DxVR4eSdCMJq4jl1M0hRBH3wvSsdXM0tpRMRpB35OFqYr96c8yS5ZicK T8TVEieAYBkjEDBnEy2CO4njsC1pMH5G5Syl2LtvkK4ha/mU73cC7xwsEkCaNto7 +sB3A6cz+dEc8rqu7LncSJ6z1f7qjRzvTIYNGCTGUyED6yupLX0mt3SRDbiMaLs2 8FOIp5/HVSgXdg0yvLhzb+QpDQqVcEmywWj3rNpSsh4FHP+A3YmhWm1bbilktBrA J9lH1+rXUQrry+y6eeNaRgtEryroRvla -----END CERTIFICATE-----Generated at Thu May 2 20:50:29 2024 by rpki-client on console-fra.rpki-client.org