$ rpki-client -vvf rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.mft File: EEQCn_gxdMbx1myK0NP6FmTv5Ts.mft (raw, json) Hash identifier: C+06xZfYGXDcQplLIH6ZnUHQ8xX7EMfCCMH93TxDseg= Subject key identifier: A4:84:27:A1:A4:78:5C:86:A8:62:0A:4C:E8:EE:F0:A5:35:9F:D6:00 Authority key identifier: 10:44:02:9F:F8:31:74:C6:F1:D6:6C:8A:D0:D3:FA:16:64:EF:E5:3B Certificate issuer: /CN=A918DFCE/serialNumber=1044029FF83174C6F1D66C8AD0D3FA1664EFE53B Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEQCn_gxdMbx1myK0NP6FmTv5Ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.mft Manifest number: 3D Signing time: Wed 15 May 2024 08:26:10 +0000 Manifest this update: Wed 15 May 2024 08:26:10 +0000 Manifest next update: Wed 22 May 2024 08:26:10 +0000 Files and hashes: 1: EEQCn_gxdMbx1myK0NP6FmTv5Ts.crl (hash: RJ+rTFmLmyNDUAKelBD+Y+1aAnJguOWaKvTBC7RfuBo=) 2: B5E8546EBF2611EE8879BB66C4F9AE02.roa (hash: pica+OIuTQS4TlEemz1Hkm9K0CssRJQO7CEuBQMDM7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.crl rsync://rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEQCn_gxdMbx1myK0NP6FmTv5Ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DFCE/serialNumber=1044029FF83174C6F1D66C8AD0D3FA1664EFE53B Validity Not Before: May 15 08:26:10 2024 GMT Not After : May 22 08:26:10 2024 GMT Subject: CN=664471a2-c858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:80:b7:ac:ac:cd:a4:3a:cd:75:8e:7c:2e:98: 8e:6c:d4:ad:0c:b1:36:74:bc:52:27:f9:02:5f:56: 1b:6e:53:66:6c:e3:ce:5b:27:20:0b:a3:60:4f:be: 52:55:b5:a7:2d:98:a7:32:bb:93:b7:49:c9:ee:94: e7:4a:7f:b1:aa:a0:19:00:ba:b2:91:f4:db:ad:73: 2e:f3:22:f9:09:11:ab:f2:02:32:14:b5:73:25:ca: b6:7d:87:72:4c:d2:c5:98:fb:64:25:b0:86:f7:50: 2b:72:51:34:0d:4a:70:c1:52:62:ca:24:38:cf:4e: 16:d4:44:52:6c:a6:aa:08:7b:21:77:a9:53:b2:09: 14:cc:86:a6:2c:70:13:39:9d:f8:b6:d6:10:82:5d: dd:0b:29:8c:2a:21:e9:20:43:fb:b2:da:7c:91:db: a2:5c:74:d6:9c:96:5c:7a:79:58:6a:bc:a2:e6:63: d0:b9:58:9b:a3:e8:5a:9b:fc:be:3c:8c:0a:fb:d3: 7f:29:ac:4e:78:a1:68:c8:04:1c:bc:14:d8:79:45: ca:13:b4:02:76:4b:59:b3:bb:33:38:62:87:1b:f6: b9:99:d5:3d:ea:ef:b5:40:7a:a4:73:01:37:ed:20: bc:b1:1d:e9:ae:5b:f6:a6:9b:14:c1:fb:17:8d:18: 62:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:84:27:A1:A4:78:5C:86:A8:62:0A:4C:E8:EE:F0:A5:35:9F:D6:00 X509v3 Authority Key Identifier: keyid:10:44:02:9F:F8:31:74:C6:F1:D6:6C:8A:D0:D3:FA:16:64:EF:E5:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEQCn_gxdMbx1myK0NP6FmTv5Ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:91:aa:d8:ab:c8:39:58:35:52:d0:bb:98:92:8e:92:90:9a: 4e:db:16:fb:7d:6d:f4:2c:bb:64:a3:ca:7c:1e:e7:1b:b2:f2: 07:d9:d9:c9:01:fe:f1:20:df:74:b1:79:62:d4:30:31:a8:83: 72:5c:6c:b7:5a:72:f3:30:ae:76:d0:63:4c:d6:16:c2:28:8b: a7:39:14:dc:e9:7c:bd:ea:11:7d:17:87:3d:1d:18:fb:77:3f: a8:17:28:0f:a1:28:e5:ff:c4:18:fc:d9:d2:35:60:82:0c:bf: eb:fe:78:15:69:2f:90:df:bc:2d:71:d7:fd:a7:97:35:b6:b7: e5:b4:9e:a1:f5:85:ab:e7:a4:98:30:5e:01:68:93:63:b0:7a: ac:60:f6:72:2c:c6:8d:a4:a6:63:bb:19:e1:92:66:d0:40:84: 05:2b:3a:2c:75:d0:77:a1:4c:e4:9c:d0:8b:9f:41:0a:f0:68: b5:31:14:56:ec:a7:15:5c:ae:cb:91:ce:07:ce:71:f0:fc:12: fe:9c:58:f9:d9:e8:f2:8d:8b:87:0f:86:0b:8e:a6:ef:c4:5b: 6c:ff:09:fb:2f:c5:1c:75:3a:ed:60:c9:c2:a5:27:58:04:f3: ec:98:6c:37:ed:dd:ff:1f:3c:59:81:83:7e:63:d6:24:c9:0c: 34:e7:f3:ab -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 REZDRTExMC8GA1UEBRMoMTA0NDAyOUZGODMxNzRDNkYxRDY2QzhBRDBEM0ZBMTY2 NEVGRTUzQjAeFw0yNDA1MTUwODI2MTBaFw0yNDA1MjIwODI2MTBaMBgxFjAUBgNV BAMTDTY2NDQ3MWEyLWM4NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCugLesrM2kOs11jnwumI5s1K0MsTZ0vFIn+QJfVhtuU2Zs485bJyALo2BPvlJV tactmKcyu5O3ScnulOdKf7GqoBkAurKR9Nutcy7zIvkJEavyAjIUtXMlyrZ9h3JM 0sWY+2QlsIb3UCtyUTQNSnDBUmLKJDjPThbURFJspqoIeyF3qVOyCRTMhqYscBM5 nfi21hCCXd0LKYwqIekgQ/uy2nyR26JcdNacllx6eVhqvKLmY9C5WJuj6Fqb/L48 jAr7038prE54oWjIBBy8FNh5RcoTtAJ2S1mzuzM4Yocb9rmZ1T3q77VAeqRzATft ILyxHemuW/ammxTB+xeNGGLfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpIQnoaR4 XIaoYgpM6O7wpTWf1gAwHwYDVR0jBBgwFoAUEEQCn/gxdMbx1myK0NP6FmTv5Tsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThERkNFLzgwQUM1NENBQkYx RDExRUU4NzVBRTI3RkM0RjlBRTAyL0VFUUNuX2d4ZE1ieDFteUswTlA2Rm1UdjVU cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRUVRQ25fZ3hkTWJ4MW15SzBOUDZGbVR2NVRzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE RkNFLzgwQUM1NENBQkYxRDExRUU4NzVBRTI3RkM0RjlBRTAyL0VFUUNuX2d4ZE1i eDFteUswTlA2Rm1UdjVUcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKaRqtiryDlYNVLQu5iSjpKQmk7bFvt9bfQsu2Sjynwe5xuy8gfZ2ckB /vEg33SxeWLUMDGog3JcbLdacvMwrnbQY0zWFsIoi6c5FNzpfL3qEX0Xhz0dGPt3 P6gXKA+hKOX/xBj82dI1YIIMv+v+eBVpL5DfvC1x1/2nlzW2t+W0nqH1havnpJgw XgFok2Oweqxg9nIsxo2kpmO7GeGSZtBAhAUrOix10HehTOSc0IufQQrwaLUxFFbs pxVcrsuRzgfOcfD8Ev6cWPnZ6PKNi4cPhguOpu/EW2z/CfsvxRx1Ou1gycKlJ1gE 8+yYbDft3f8fPFmBg35j1iTJDDTn86s= -----END CERTIFICATE-----Generated at Wed May 15 09:27:35 2024 by rpki-client on console-fra.rpki-client.org