$ rpki-client -vvf rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft File: EhCVgwI-GF3korKUIxWZ1jZAvJo.mft (raw, json) Hash identifier: m5ATC5fLFNQVjH+8AyWO35WJAET5uK5eurClMmA5/PY= Subject key identifier: 9D:EF:A9:F9:78:B4:FA:EE:D0:51:1A:FA:4D:EC:CD:C1:39:92:2D:88 Authority key identifier: 12:10:95:83:02:3E:18:5D:E4:A2:B2:94:23:15:99:D6:36:40:BC:9A Certificate issuer: /CN=A918B5FE/serialNumber=12109583023E185DE4A2B294231599D63640BC9A Certificate serial: 05E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft Manifest number: 05D4 Signing time: Tue 23 Apr 2024 00:11:02 +0000 Manifest this update: Tue 23 Apr 2024 00:11:01 +0000 Manifest next update: Tue 30 Apr 2024 00:11:01 +0000 Files and hashes: 1: EhCVgwI-GF3korKUIxWZ1jZAvJo.crl (hash: qmOn29cF/JDYTjwyuj/Y+iUVEodH7Kp6ntNdJI69jno=) 2: E744DAB06C0D11EB89BF4725C4F9AE02.roa (hash: sUhBtszyGA77U+0hMf0ckqr3Bu7sksYzljgOUrgetwk=) 3: E649E89E6C0D11EB89BF4725C4F9AE02.roa (hash: 5jGLbN1I7+GANw0PJTx7Mh3WkS4coMideo7Yv1TbjW4=) 4: 4652D2C2DF3C11EBAC0C7536C4F9AE02.roa (hash: 2VhFm5czESDTfhAUYWatLmPdk00qYJo8R/XxSPi4ECo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.crl rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 00:11:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1508 (0x5e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B5FE/serialNumber=12109583023E185DE4A2B294231599D63640BC9A Validity Not Before: Apr 23 00:11:01 2024 GMT Not After : Apr 30 00:11:01 2024 GMT Subject: CN=6626fc95-875b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b8:f2:20:29:8c:27:0d:cc:34:fa:d6:68:2e: 65:27:2f:10:00:7d:8a:b2:97:09:b2:21:49:e6:3c: 95:7e:99:d0:e6:4a:9b:52:27:60:d7:82:f3:b1:89: 03:2c:a4:e8:d9:be:eb:c0:45:06:8e:07:c6:c9:1b: 5f:3a:f1:7e:aa:e6:1c:b8:8c:6f:2e:14:14:27:3d: 8b:82:a9:65:3a:80:5f:37:cb:01:80:db:b6:a7:ef: d9:13:b4:b9:91:da:b7:69:89:05:0c:56:00:f1:1a: 05:6a:b3:53:8a:c4:84:5d:d3:57:ac:7c:34:37:63: 85:6f:12:98:e7:6f:a9:99:fc:a7:66:76:4f:84:cc: d9:46:ec:9c:df:4a:6b:4b:d6:31:c9:f3:2d:08:59: 33:c1:a3:15:84:ce:f6:8e:f7:c9:dc:4d:50:cc:72: 3f:2b:2b:11:35:15:33:15:a9:42:fa:6d:59:af:15: de:97:2c:b0:01:86:56:f4:83:33:16:d1:9a:ba:8c: 4a:3e:37:4b:6b:9c:32:e2:fb:a2:1e:c7:d4:6a:87: 5c:43:4c:a5:13:a8:1e:30:61:27:ad:6e:c8:32:92: e4:44:74:dd:ec:09:3a:1e:ac:1f:15:e0:58:f9:2f: e5:25:b7:04:b2:17:d0:5b:04:be:49:81:83:d7:4d: 7f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:EF:A9:F9:78:B4:FA:EE:D0:51:1A:FA:4D:EC:CD:C1:39:92:2D:88 X509v3 Authority Key Identifier: keyid:12:10:95:83:02:3E:18:5D:E4:A2:B2:94:23:15:99:D6:36:40:BC:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:bb:03:4a:96:a7:45:72:d8:f7:92:8c:23:3e:ec:da:42:b1: 05:03:e9:96:f3:f1:c8:e8:3b:5f:4a:c7:15:0c:2c:c4:3f:50: f5:ac:7c:05:da:ae:98:9d:59:11:1a:14:ca:6a:1a:6d:27:49: 42:0b:e7:58:09:ae:8d:a3:6d:46:58:91:e0:05:bb:81:f5:b8: ed:a8:53:cf:42:31:44:2b:31:fd:fb:03:c6:53:28:d8:b6:8a: f6:34:aa:7a:fe:f1:0e:27:09:b0:c5:99:3d:a1:a7:13:c8:a2: 0f:e0:97:46:1d:31:2a:ea:3e:dc:90:07:26:d4:1a:05:dd:8b: 8e:cd:37:c6:58:bc:83:d1:5e:63:ae:ea:ff:b9:3d:78:0c:de: b9:ad:34:aa:9c:54:cf:0c:c7:3f:53:89:4f:f1:75:95:cd:37: 7d:55:74:50:5f:d9:12:ac:7a:46:e8:a4:a8:85:9e:d2:18:36: 68:0b:0c:69:6b:ea:d4:2e:8c:30:a5:93:e2:d5:cb:5b:dd:14: 84:ad:ff:fd:85:ac:88:d0:3a:ef:37:02:5b:3e:2f:04:8b:d9: 03:8b:5d:17:7f:ce:ca:15:31:05:f0:c6:94:da:3b:ee:f9:10: 81:a7:37:8b:88:75:e4:4f:06:ba:5a:4e:0e:4d:00:bd:23:4f: f8:1c:5a:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI1RkUxMTAvBgNVBAUTKDEyMTA5NTgzMDIzRTE4NURFNEEyQjI5NDIzMTU5OUQ2 MzY0MEJDOUEwHhcNMjQwNDIzMDAxMTAxWhcNMjQwNDMwMDAxMTAxWjAYMRYwFAYD VQQDEw02NjI2ZmM5NS04NzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbjyICmMJw3MNPrWaC5lJy8QAH2KspcJsiFJ5jyVfpnQ5kqbUidg14LzsYkD LKTo2b7rwEUGjgfGyRtfOvF+quYcuIxvLhQUJz2LgqllOoBfN8sBgNu2p+/ZE7S5 kdq3aYkFDFYA8RoFarNTisSEXdNXrHw0N2OFbxKY52+pmfynZnZPhMzZRuyc30pr S9YxyfMtCFkzwaMVhM72jvfJ3E1QzHI/KysRNRUzFalC+m1ZrxXelyywAYZW9IMz FtGauoxKPjdLa5wy4vuiHsfUaodcQ0ylE6geMGEnrW7IMpLkRHTd7Ak6HqwfFeBY +S/lJbcEshfQWwS+SYGD101/9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ3vqfl4 tPru0FEa+k3szcE5ki2IMB8GA1UdIwQYMBaAFBIQlYMCPhhd5KKylCMVmdY2QLya MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjVGRS8zQ0VFREY5MDZB OUUxMUVCQjY3NjIzMThDNEY5QUUwMi9FaENWZ3dJLUdGM2tvcktVSXhXWjFqWkF2 Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VoQ1Znd0ktR0Yza29yS1VJeFdaMWpaQXZKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjVGRS8zQ0VFREY5MDZBOUUxMUVCQjY3NjIzMThDNEY5QUUwMi9FaENWZ3dJLUdG M2tvcktVSXhXWjFqWkF2Sm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUuwNKlqdFctj3kowjPuzaQrEFA+mW8/HI6DtfSscVDCzEP1D1rHwF 2q6YnVkRGhTKahptJ0lCC+dYCa6No21GWJHgBbuB9bjtqFPPQjFEKzH9+wPGUyjY tor2NKp6/vEOJwmwxZk9oacTyKIP4JdGHTEq6j7ckAcm1BoF3YuOzTfGWLyD0V5j rur/uT14DN65rTSqnFTPDMc/U4lP8XWVzTd9VXRQX9kSrHpG6KSohZ7SGDZoCwxp a+rULowwpZPi1ctb3RSErf/9hayI0DrvNwJbPi8Ei9kDi10Xf87KFTEF8MaU2jvu +RCBpzeLiHXkTwa6Wk4OTQC9I0/4HFpX -----END CERTIFICATE-----Generated at Tue Apr 23 18:43:28 2024 by rpki-client on console-ams.rpki-client.org