$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft File: 0eKZ-egsk3yysqaQYegXNB-FCPU.mft (raw, json) Hash identifier: H1a4Y8PLeuRLjCer++1QgCTrd0zvNSOJ+H0U6Vjijek= Subject key identifier: 22:76:42:62:12:DD:6E:92:93:53:27:C4:57:9B:99:04:2C:67:73:B4 Authority key identifier: D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5 Certificate issuer: /CN=A91886CC/serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5 Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft Manifest number: BC Signing time: Mon 29 Apr 2024 06:15:23 +0000 Manifest this update: Mon 29 Apr 2024 06:15:22 +0000 Manifest next update: Mon 06 May 2024 06:15:22 +0000 Files and hashes: 1: 0eKZ-egsk3yysqaQYegXNB-FCPU.crl (hash: aD3WabfYQp+8FnYbgvk9rBXKi5gXKLy62NIZ4t/KKno=) 2: 71F97AC0560E11EEA8088470C4F9AE02.roa (hash: vlOxck46XcYU9UbattmjZz1IE2d5D0uBNF1fH/AZQTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 06:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886CC/serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5 Validity Not Before: Apr 29 06:15:22 2024 GMT Not After : May 6 06:15:22 2024 GMT Subject: CN=662f3afb-f105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7f:d3:e6:44:6d:03:e8:87:1e:ba:cc:05:89: 75:bf:48:64:13:57:29:c2:62:cd:c1:b4:69:a5:77: c0:87:54:6b:40:25:bc:fc:e2:83:1d:b2:4d:34:48: 67:c9:3b:d4:64:07:9f:02:c9:08:e6:99:ef:8d:2e: 03:46:36:f3:5f:90:1d:e9:b4:5a:0c:1f:71:e2:0e: 94:95:7b:7f:34:20:f8:e9:3f:96:57:c5:b3:c0:68: 15:06:d5:25:bb:72:2b:20:67:19:ae:5f:dc:ed:e7: af:6a:4a:37:20:8f:cb:36:f2:86:4b:25:c6:7d:eb: 05:df:8f:91:82:6e:40:fb:1d:9d:f8:9b:36:ef:3b: f7:ec:e0:e2:0f:81:11:d8:73:76:b7:b7:6d:72:ad: d6:e0:3c:77:57:47:70:7b:e2:48:c6:8f:33:ce:69: 4f:34:2b:a3:5a:39:a9:a7:3d:7a:83:c9:31:d7:15: e6:5e:17:b1:4d:0a:5d:f1:7a:73:ae:de:de:20:c5: 38:78:05:d0:17:c3:fa:e2:2e:c8:f2:4b:c0:8f:d1: 14:53:0b:17:8a:b3:d1:d0:9e:7d:76:3a:e1:cd:52: 57:d3:7a:9e:de:5f:cc:0e:96:21:95:aa:13:24:51: 38:c7:02:09:0a:79:5d:d2:e7:10:10:80:2f:5e:d3: b1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:76:42:62:12:DD:6E:92:93:53:27:C4:57:9B:99:04:2C:67:73:B4 X509v3 Authority Key Identifier: keyid:D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:e9:a7:c2:ff:68:97:b3:70:52:92:17:82:26:83:ca:f6:87: 30:30:4e:c4:d3:77:39:db:06:30:96:e6:4e:3e:75:10:ee:db: b8:41:bd:45:b8:af:97:f9:7a:41:69:ef:61:9d:a2:d5:96:54: 9b:dc:0e:22:0d:60:6b:58:19:f6:0d:a7:a6:c7:e0:67:0c:51: 19:e2:b2:82:aa:9d:1c:e9:3c:2f:d2:75:c1:27:75:2a:f9:42: bc:81:ff:c9:47:a2:21:3f:58:2b:39:64:f3:cd:77:78:32:51: 74:6f:9b:00:60:8a:22:90:af:15:0f:75:b2:23:33:0c:5a:7d: cd:97:16:53:2e:08:99:2f:ad:aa:c5:1b:0e:a8:1a:f4:1e:de: 54:b2:93:04:5d:7c:84:0d:90:ec:9e:24:04:87:23:20:81:05: 8f:47:df:ba:57:3f:fe:eb:82:ae:70:22:43:7c:ee:60:e2:cb: 37:5f:0a:ed:db:8c:db:2b:70:69:94:82:78:43:90:00:f1:cf: ba:89:29:5e:27:6c:9e:1e:78:ca:f8:7e:db:36:33:a3:84:b4: 96:e7:d6:78:5d:e7:3b:2f:31:a2:38:8e:f6:fa:a6:2a:9c:c6: f9:68:34:32:e9:82:3d:52:29:07:06:8a:21:77:f7:5f:f9:59: b6:46:1e:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg2Q0MxMTAvBgNVBAUTKEQxRTI5OUY5RTgyQzkzN0NCMkIyQTY5MDYxRTgxNzM0 MUY4NTA4RjUwHhcNMjQwNDI5MDYxNTIyWhcNMjQwNTA2MDYxNTIyWjAYMRYwFAYD VQQDEw02NjJmM2FmYi1mMTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkn/T5kRtA+iHHrrMBYl1v0hkE1cpwmLNwbRppXfAh1RrQCW8/OKDHbJNNEhn yTvUZAefAskI5pnvjS4DRjbzX5Ad6bRaDB9x4g6UlXt/NCD46T+WV8WzwGgVBtUl u3IrIGcZrl/c7eevako3II/LNvKGSyXGfesF34+Rgm5A+x2d+Js27zv37ODiD4ER 2HN2t7dtcq3W4Dx3V0dwe+JIxo8zzmlPNCujWjmppz16g8kx1xXmXhexTQpd8Xpz rt7eIMU4eAXQF8P64i7I8kvAj9EUUwsXirPR0J59djrhzVJX03qe3l/MDpYhlaoT JFE4xwIJCnld0ucQEIAvXtOxBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJ2QmIS 3W6Sk1MnxFebmQQsZ3O0MB8GA1UdIwQYMBaAFNHimfnoLJN8srKmkGHoFzQfhQj1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZDQy80RUE2QzYxOEU4 QkQxMUVEOEI4OTI1MjJDNEY5QUUwMi8wZUtaLWVnc2szeXlzcWFRWWVnWE5CLUZD UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBlS1otZWdzazN5eXNxYVFZZWdYTkItRkNQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODZDQy80RUE2QzYxOEU4QkQxMUVEOEI4OTI1MjJDNEY5QUUwMi8wZUtaLWVnc2sz eXlzcWFRWWVnWE5CLUZDUFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJ6afC/2iXs3BSkheCJoPK9ocwME7E03c52wYwluZOPnUQ7tu4Qb1F uK+X+XpBae9hnaLVllSb3A4iDWBrWBn2Daemx+BnDFEZ4rKCqp0c6Twv0nXBJ3Uq +UK8gf/JR6IhP1grOWTzzXd4MlF0b5sAYIoikK8VD3WyIzMMWn3NlxZTLgiZL62q xRsOqBr0Ht5UspMEXXyEDZDsniQEhyMggQWPR9+6Vz/+64KucCJDfO5g4ss3Xwrt 24zbK3BplIJ4Q5AA8c+6iSleJ2yeHnjK+H7bNjOjhLSW59Z4Xec7LzGiOI72+qYq nMb5aDQy6YI9UikHBoohd/df+Vm2Rh7g -----END CERTIFICATE-----Generated at Mon Apr 29 09:06:19 2024 by rpki-client on console-fra.rpki-client.org