$ rpki-client -vvf rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.mft File: eDj_-XHbpCvN2NjzdFXwsoSbedc.mft (raw, json) Hash identifier: OLKUysxI9mvG+jxGuWx/hrG4Ng0CsBNYKoNT3S0jBA8= Subject key identifier: FA:5B:C0:04:33:2E:F3:FC:95:13:14:B6:0C:7B:DC:C9:C3:7B:FC:C9 Authority key identifier: 78:38:FF:F9:71:DB:A4:2B:CD:D8:D8:F3:74:55:F0:B2:84:9B:79:D7 Certificate issuer: /CN=A919A9C8/serialNumber=7838FFF971DBA42BCDD8D8F37455F0B2849B79D7 Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDj_-XHbpCvN2NjzdFXwsoSbedc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.mft Manifest number: 51 Signing time: Wed 15 May 2024 08:02:00 +0000 Manifest this update: Wed 15 May 2024 08:02:00 +0000 Manifest next update: Wed 22 May 2024 08:02:00 +0000 Files and hashes: 1: eDj_-XHbpCvN2NjzdFXwsoSbedc.crl (hash: gS6FdPAjZsI6rF3SNM8WH1vlQ13+0iz5OzLyCitc560=) 2: 0D0118A89A4C11EEB7AE8812C4F9AE02.roa (hash: dBxphccrDtHWBtP4mox7vNoz0R+Ag/oTU8vRZmA2QGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.crl rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDj_-XHbpCvN2NjzdFXwsoSbedc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A9C8/serialNumber=7838FFF971DBA42BCDD8D8F37455F0B2849B79D7 Validity Not Before: May 15 08:02:00 2024 GMT Not After : May 22 08:02:00 2024 GMT Subject: CN=66446bf8-56fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:85:a7:93:0c:f4:38:ed:6a:29:54:6e:51:6f: 57:2a:99:3d:bb:6a:cc:e1:16:f9:2e:d7:f4:f8:39: a8:35:59:88:f2:ac:87:19:a2:23:13:de:6e:b1:76: 5d:a8:f6:cb:94:44:0f:7f:97:b3:07:c0:cd:23:96: 82:92:39:f2:2e:a5:2d:73:9b:49:81:50:ac:e6:e2: 27:3d:85:3e:37:e1:f3:24:f7:c9:f4:41:3d:e6:fd: d5:29:f1:9e:18:e6:2f:12:43:9b:9f:60:dd:b2:43: ec:09:8c:a2:05:26:99:30:12:81:45:6b:1f:5b:a3: e1:e7:e6:e4:95:f3:71:1a:a5:9c:d3:95:6b:51:55: 69:08:12:87:0e:b2:82:a1:e5:a3:88:e7:ee:bf:ff: 8c:63:df:b8:f8:6e:7d:63:d3:ad:0a:00:72:24:59: f4:b8:db:5b:de:c5:5d:0c:df:c3:11:c4:e6:19:c4: 27:07:23:67:39:6e:a1:60:42:aa:28:4a:8c:63:37: 59:f2:9b:55:74:5e:83:78:7f:6b:7a:cd:b7:72:f6: 6a:47:f0:4a:1a:55:13:db:f4:e3:d5:4d:0f:74:ad: fb:2c:59:39:98:8c:6d:e5:f3:9d:c0:e0:ae:4b:5e: ef:09:7a:13:c7:0a:47:3a:8c:e0:2d:36:0e:b1:20: 25:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:5B:C0:04:33:2E:F3:FC:95:13:14:B6:0C:7B:DC:C9:C3:7B:FC:C9 X509v3 Authority Key Identifier: keyid:78:38:FF:F9:71:DB:A4:2B:CD:D8:D8:F3:74:55:F0:B2:84:9B:79:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDj_-XHbpCvN2NjzdFXwsoSbedc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:ad:8b:db:c4:ad:00:6f:33:59:c5:c1:4b:7d:e8:5d:4b:b7: bf:60:af:b2:50:eb:72:ee:c9:c6:0f:08:ff:8b:2a:b6:82:1a: 37:66:53:bd:06:93:2d:b6:0b:ad:09:07:19:51:9a:ce:42:6c: 90:7f:56:54:15:fc:a0:10:dc:20:4d:61:48:30:6c:15:41:21: f7:71:ae:5f:36:cb:25:c4:ee:01:9d:8c:e0:5f:23:0a:79:a7: 45:19:19:31:94:51:4d:70:49:db:34:1b:84:fd:08:da:83:f6: be:82:75:36:e6:fa:7f:8e:d5:b3:8c:72:ca:24:0a:18:81:da: dd:a7:49:be:23:4f:a2:1b:d7:16:61:57:46:8e:09:f0:59:26: 36:a6:bf:92:c7:4d:b4:a7:6a:52:ee:37:50:ee:2f:17:91:22: 92:0f:e7:b1:4c:84:9e:7e:db:f4:97:e7:00:ec:cd:c0:1e:d2: 8c:65:69:46:6a:fb:94:cf:df:e8:2b:c5:44:ea:2d:fa:9c:18: 7a:24:4a:73:14:51:ea:0c:ab:e8:f2:fd:76:a2:9a:6f:52:16: 73:1c:2d:c8:7a:30:56:44:b3:8c:94:38:9c:c4:f5:54:ce:00: b0:67:4f:b8:1f:69:df:7f:d2:4e:84:ef:26:59:07:69:40:4e: 31:b4:ae:2c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 QTlDODExMC8GA1UEBRMoNzgzOEZGRjk3MURCQTQyQkNERDhEOEYzNzQ1NUYwQjI4 NDlCNzlENzAeFw0yNDA1MTUwODAyMDBaFw0yNDA1MjIwODAyMDBaMBgxFjAUBgNV BAMTDTY2NDQ2YmY4LTU2ZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWhaeTDPQ47WopVG5Rb1cqmT27aszhFvku1/T4Oag1WYjyrIcZoiMT3m6xdl2o 9suURA9/l7MHwM0jloKSOfIupS1zm0mBUKzm4ic9hT434fMk98n0QT3m/dUp8Z4Y 5i8SQ5ufYN2yQ+wJjKIFJpkwEoFFax9bo+Hn5uSV83EapZzTlWtRVWkIEocOsoKh 5aOI5+6//4xj37j4bn1j060KAHIkWfS421vexV0M38MRxOYZxCcHI2c5bqFgQqoo SoxjN1nym1V0XoN4f2t6zbdy9mpH8EoaVRPb9OPVTQ90rfssWTmYjG3l853A4K5L Xu8JehPHCkc6jOAtNg6xICVzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+lvABDMu 8/yVExS2DHvcycN7/MkwHwYDVR0jBBgwFoAUeDj/+XHbpCvN2NjzdFXwsoSbedcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlBOUM4L0RCQkIwOUZFOUEz QTExRUVBNjc1ODk3Q0M0RjlBRTAyL2VEal8tWEhicEN2TjJOanpkRlh3c29TYmVk Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZURqXy1YSGJwQ3ZOMk5qemRGWHdzb1NiZWRjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlB OUM4L0RCQkIwOUZFOUEzQTExRUVBNjc1ODk3Q0M0RjlBRTAyL2VEal8tWEhicEN2 TjJOanpkRlh3c29TYmVkYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAiti9vErQBvM1nFwUt96F1Lt79gr7JQ63LuycYPCP+LKraCGjdmU70G ky22C60JBxlRms5CbJB/VlQV/KAQ3CBNYUgwbBVBIfdxrl82yyXE7gGdjOBfIwp5 p0UZGTGUUU1wSds0G4T9CNqD9r6CdTbm+n+O1bOMcsokChiB2t2nSb4jT6Ib1xZh V0aOCfBZJjamv5LHTbSnalLuN1DuLxeRIpIP57FMhJ5+2/SX5wDszcAe0oxlaUZq +5TP3+grxUTqLfqcGHokSnMUUeoMq+jy/Xaimm9SFnMcLch6MFZEs4yUOJzE9VTO ALBnT7gfad9/0k6E7yZZB2lATjG0riw= -----END CERTIFICATE-----Generated at Wed May 15 09:28:12 2024 by rpki-client on console-fra.rpki-client.org