$ rpki-client -vvf rpki.apnic.net/member_repository/A9192210/5CA373D8127811EBA8592412C4F9AE02/eB-VsMirLvf9c8-PwQ0vqG7M3Eo.mft File: eB-VsMirLvf9c8-PwQ0vqG7M3Eo.mft (raw, json) Hash identifier: RrLR/VFf3AQnjuyGOdvs8EPX25pBGEMWMXHX9jSvlko= Subject key identifier: 43:E7:87:80:56:54:D9:0E:36:D0:99:2C:EC:69:3C:27:AF:AE:AB:93 Authority key identifier: 78:1F:95:B0:C8:AB:2E:F7:FD:73:CF:8F:C1:0D:2F:A8:6E:CC:DC:4A Certificate issuer: /CN=A9192210/serialNumber=781F95B0C8AB2EF7FD73CF8FC10D2FA86ECCDC4A Certificate serial: 06CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eB-VsMirLvf9c8-PwQ0vqG7M3Eo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192210/5CA373D8127811EBA8592412C4F9AE02/eB-VsMirLvf9c8-PwQ0vqG7M3Eo.mft Manifest number: 06C1 Signing time: Thu 02 May 2024 23:15:08 +0000 Manifest this update: Thu 02 May 2024 23:15:07 +0000 Manifest next update: Thu 09 May 2024 23:15:07 +0000 Files and hashes: 1: eB-VsMirLvf9c8-PwQ0vqG7M3Eo.crl (hash: R7m/LCaerlMJdvbNYR+a6e3HRI2R15BsEa2UWAY5hP4=) 2: 955B70D2A8C111EC82C6CD3AC4F9AE02.roa (hash: XN7Hg+IUpOPmqlqDvxsi4aWx0G9FXaRRB0MCA+S5kT4=) 3: B4A978F0127F11EBA218CA3DC4F9AE02.roa (hash: 2GQSgQ2kIJsP3PVft0GDU0ZWN+bECDR4Q6nAkvpyir0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192210/5CA373D8127811EBA8592412C4F9AE02/eB-VsMirLvf9c8-PwQ0vqG7M3Eo.crl rsync://rpki.apnic.net/member_repository/A9192210/5CA373D8127811EBA8592412C4F9AE02/eB-VsMirLvf9c8-PwQ0vqG7M3Eo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eB-VsMirLvf9c8-PwQ0vqG7M3Eo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1743 (0x6cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192210/serialNumber=781F95B0C8AB2EF7FD73CF8FC10D2FA86ECCDC4A Validity Not Before: May 2 23:15:07 2024 GMT Not After : May 9 23:15:07 2024 GMT Subject: CN=66341e7b-2deb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:36:ab:34:75:04:1d:19:d0:a6:b9:b4:2a:b9: 57:f8:b5:14:fb:ec:9c:17:65:2e:00:e3:b0:91:e0: 76:63:3e:30:68:a5:35:cf:78:7a:28:d6:c9:ac:83: 73:72:ce:5b:92:ba:cf:4e:c2:32:36:0b:37:c3:5f: 8e:e5:6d:b4:91:78:bc:34:94:2f:df:82:6d:16:73: 17:47:f1:4c:d0:30:eb:df:04:a5:1d:87:3c:6b:84: 9d:b5:8e:13:c2:bd:49:8c:2c:43:6c:4c:db:ad:b4: c3:ba:4b:94:e4:f4:f2:b2:f7:13:30:70:9e:0a:39: 83:56:ec:b1:35:42:ac:03:e6:16:5e:b0:40:7e:58: 83:d8:09:e5:2d:ad:14:2c:93:2f:a2:a1:01:53:1d: 7c:4f:10:8a:d3:c8:f9:ff:97:a0:bb:c8:7e:50:fc: b5:d4:4e:d6:1d:d7:51:41:16:e2:dc:9b:58:41:e5: ae:7e:39:03:dc:fa:f1:ec:fd:1b:2f:11:19:6c:a6: 95:8d:fd:e0:a0:05:b6:72:40:c4:67:ae:1d:82:7c: 1c:d1:fc:57:4f:f0:98:2d:c4:c4:5f:ec:4c:04:a6: ce:43:f9:7a:d5:4c:ba:f9:a7:cf:99:03:63:55:25: c2:e6:95:03:a0:b0:21:13:de:1d:de:a0:5c:09:0f: 1a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E7:87:80:56:54:D9:0E:36:D0:99:2C:EC:69:3C:27:AF:AE:AB:93 X509v3 Authority Key Identifier: keyid:78:1F:95:B0:C8:AB:2E:F7:FD:73:CF:8F:C1:0D:2F:A8:6E:CC:DC:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192210/5CA373D8127811EBA8592412C4F9AE02/eB-VsMirLvf9c8-PwQ0vqG7M3Eo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eB-VsMirLvf9c8-PwQ0vqG7M3Eo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192210/5CA373D8127811EBA8592412C4F9AE02/eB-VsMirLvf9c8-PwQ0vqG7M3Eo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:cf:5a:06:21:23:87:07:bb:35:d7:64:de:0e:49:82:b8:b5: 55:a5:09:ae:ee:66:a2:69:9d:f4:de:1e:f8:e8:55:69:85:58: 99:75:e4:bf:fb:dc:d5:3e:c6:a9:67:21:8a:5d:3c:48:af:ef: a6:9c:55:fc:de:49:a6:60:2e:52:16:39:0e:a6:8c:6e:82:86: d7:76:22:0a:34:94:49:f1:9a:c1:66:76:99:ad:c5:2d:0a:30: 51:2a:d8:3f:1f:8a:81:59:3c:1e:c0:b8:fb:79:70:48:93:23: ce:5a:e3:e7:a3:4e:42:07:58:47:db:b2:20:15:c7:41:20:7c: 9c:de:42:1e:e6:85:73:81:2f:08:ea:92:d2:68:5c:5f:cb:06: 58:c3:0f:06:32:0f:70:54:1d:69:a3:4e:e5:14:9c:8f:5e:31: f1:09:9a:9e:a7:98:e4:01:07:dd:f4:25:70:f2:70:d5:47:5a: ab:25:2c:b3:78:03:7e:8c:38:68:32:9f:a7:60:81:36:ab:cc: 60:2f:94:ed:34:22:13:46:a0:5e:6a:44:8b:33:28:02:fa:a8: 08:20:84:08:40:ae:a5:f6:43:2f:c2:d2:59:2f:54:6f:e2:d8: 71:ed:24:e8:d4:ee:34:04:e7:79:aa:63:33:c2:f9:9f:8f:8c: 5d:65:c9:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTIyMTAxMTAvBgNVBAUTKDc4MUY5NUIwQzhBQjJFRjdGRDczQ0Y4RkMxMEQyRkE4 NkVDQ0RDNEEwHhcNMjQwNTAyMjMxNTA3WhcNMjQwNTA5MjMxNTA3WjAYMRYwFAYD VQQDEw02NjM0MWU3Yi0yZGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzarNHUEHRnQprm0KrlX+LUU++ycF2UuAOOwkeB2Yz4waKU1z3h6KNbJrINz cs5bkrrPTsIyNgs3w1+O5W20kXi8NJQv34JtFnMXR/FM0DDr3wSlHYc8a4SdtY4T wr1JjCxDbEzbrbTDukuU5PTysvcTMHCeCjmDVuyxNUKsA+YWXrBAfliD2AnlLa0U LJMvoqEBUx18TxCK08j5/5egu8h+UPy11E7WHddRQRbi3JtYQeWufjkD3Prx7P0b LxEZbKaVjf3goAW2ckDEZ64dgnwc0fxXT/CYLcTEX+xMBKbOQ/l61Uy6+afPmQNj VSXC5pUDoLAhE94d3qBcCQ8alQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEPnh4BW VNkONtCZLOxpPCevrquTMB8GA1UdIwQYMBaAFHgflbDIqy73/XPPj8ENL6huzNxK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjIxMC81Q0EzNzNEODEy NzgxMUVCQTg1OTI0MTJDNEY5QUUwMi9lQi1Wc01pckx2ZjljOC1Qd1EwdnFHN00z RW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VCLVZzTWlyTHZmOWM4LVB3UTB2cUc3TTNFby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjIxMC81Q0EzNzNEODEyNzgxMUVCQTg1OTI0MTJDNEY5QUUwMi9lQi1Wc01pckx2 ZjljOC1Qd1EwdnFHN00zRW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbz1oGISOHB7s112TeDkmCuLVVpQmu7maiaZ303h746FVphViZdeS/ +9zVPsapZyGKXTxIr++mnFX83kmmYC5SFjkOpoxugobXdiIKNJRJ8ZrBZnaZrcUt CjBRKtg/H4qBWTwewLj7eXBIkyPOWuPno05CB1hH27IgFcdBIHyc3kIe5oVzgS8I 6pLSaFxfywZYww8GMg9wVB1po07lFJyPXjHxCZqep5jkAQfd9CVw8nDVR1qrJSyz eAN+jDhoMp+nYIE2q8xgL5TtNCITRqBeakSLMygC+qgIIIQIQK6l9kMvwtJZL1Rv 4thx7STo1O40BOd5qmMzwvmfj4xdZcnT -----END CERTIFICATE-----Generated at Fri May 3 00:07:13 2024 by rpki-client on console-ams.rpki-client.org