$ rpki-client -vvf rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft File: eqxn28Hrko4pUTYuC8asdnfi3Hs.mft (raw, json) Hash identifier: 40h+pAzmzz/bc92rhDNIT6xGH/hUr0lJ3GSUJRhoe0o= Subject key identifier: 81:B4:D0:B9:1D:6A:13:E5:DD:2B:FC:AE:41:88:74:2E:8E:30:77:51 Authority key identifier: 7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B Certificate issuer: /CN=A919E9A5/serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B Certificate serial: 3400 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft Manifest number: 33E0 Signing time: Mon 06 May 2024 14:36:08 +0000 Manifest this update: Mon 06 May 2024 14:36:08 +0000 Manifest next update: Mon 13 May 2024 14:36:08 +0000 Files and hashes: 1: eqxn28Hrko4pUTYuC8asdnfi3Hs.crl (hash: jEV+okMrz7HNXxw4bqhQy05SjgzC43jAEq2Ml+XgyyE=) 2: 07B66286E24A11EEA3478879C4F9AE02.roa (hash: qF4EEK/eOx7T8Rcy1eoQDalCeAmsHD6meK0KtySTD1g=) 3: 3BC5B9F8B53311EE9D8D774EC4F9AE02.roa (hash: Zat3lfoJd7wHrgdR1LUW98aWngZsNPzvM6G1u6eboFc=) 4: 40525F82E24A11EE95367C17C4F9AE02.roa (hash: 4VjqCsZjVzs/xvrnyWHQDyl6GpzYXXfDRpmWkVkj15E=) 5: 3733FB76AA4211EEBB038B40C4F9AE02.roa (hash: U5tEexppSnLuHH6oSC7bnwCzRAe4KJ1WOTvOCz1NRvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 14:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13312 (0x3400) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E9A5/serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B Validity Not Before: May 6 14:36:08 2024 GMT Not After : May 13 14:36:08 2024 GMT Subject: CN=6638ead8-1388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:70:96:0a:93:f3:12:ac:2f:de:ac:07:3a:0a: 90:4d:d7:d4:ed:55:b2:37:e3:ab:08:63:52:3e:09: 35:00:6b:89:62:39:1d:6c:b3:2b:ff:dd:f2:18:9c: 01:5f:5b:0c:79:69:30:60:62:43:28:34:03:c6:06: 05:a8:6b:04:65:98:df:f3:e7:d6:06:f5:0d:4c:f5: cd:12:2b:78:19:5e:3f:b9:5a:d6:21:81:ff:8c:f6: 10:ea:c4:0c:90:05:a9:91:f6:c1:de:c8:c7:e7:eb: 43:ff:4a:c2:1a:ec:04:1c:1d:66:13:0d:77:f9:b9: e3:93:64:6d:d3:9f:9b:8a:ac:f1:47:65:c5:59:c2: 82:94:63:0f:d2:b6:17:7b:e5:23:1b:a1:35:72:d0: 0c:27:dc:eb:90:9b:7d:ef:c2:17:d5:f4:ed:d1:97: 8c:68:f5:18:3e:ca:37:a9:08:33:16:10:1a:49:e9: 25:16:37:74:70:c6:fa:e0:b1:d1:dd:02:5a:d5:90: c0:7e:41:b9:cd:d9:d8:83:ce:03:c0:22:4d:17:2f: c1:5e:8d:5a:fa:17:cc:af:15:33:b8:14:fd:78:fe: af:1b:dc:c4:5b:a2:48:ac:97:f2:c4:aa:d5:b9:c3: 4a:42:7e:c0:76:14:26:06:e2:33:c9:a5:14:8a:93: ba:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:B4:D0:B9:1D:6A:13:E5:DD:2B:FC:AE:41:88:74:2E:8E:30:77:51 X509v3 Authority Key Identifier: keyid:7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:71:9f:4f:04:81:06:d8:d6:c7:f8:b9:b6:2d:48:d1:ba:b7: b4:a2:0e:7b:aa:5d:ef:86:3d:12:04:e7:c9:af:fd:bd:01:c5: 4c:2c:23:29:7e:2a:3b:68:ea:52:87:e8:46:74:24:b1:f8:85: 4d:1a:7a:f0:84:68:8d:53:82:5c:87:aa:03:9a:a5:43:6b:87: c4:19:1b:7b:20:a7:e8:13:b5:03:3b:05:30:09:38:bc:0d:32: 3b:3b:56:2f:1a:6d:b6:ed:da:99:12:16:cd:9a:4d:d5:f5:a2: 22:c2:09:fe:65:b1:47:da:74:ce:40:bd:76:7a:c9:d2:7c:3b: 78:46:7d:70:40:79:35:17:6c:68:b0:c3:38:b8:4f:33:59:62: a1:17:8b:59:13:24:63:7b:7a:5b:04:2b:f6:90:75:d1:2f:d7: c3:eb:79:fb:df:f9:17:9b:a5:b4:ba:cf:0a:a0:9a:23:a6:6b: fe:77:fb:7d:12:46:24:1c:92:ad:6d:2b:30:7c:b3:2e:23:8f: 74:45:e2:d7:b6:7b:6c:54:94:ba:58:36:d8:d3:c7:cc:08:2f: b2:db:a4:58:20:af:12:f5:e3:b5:31:28:b9:27:5e:79:9a:67: 6d:b4:f9:ee:1f:d6:11:82:3f:ca:cc:e1:16:5b:54:0b:93:38: e6:d8:2f:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUU5QTUxMTAvBgNVBAUTKDdBQUM2N0RCQzFFQjkyOEUyOTUxMzYyRTBCQzZBQzc2 NzdFMkRDN0IwHhcNMjQwNTA2MTQzNjA4WhcNMjQwNTEzMTQzNjA4WjAYMRYwFAYD VQQDEw02NjM4ZWFkOC0xMzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwHCWCpPzEqwv3qwHOgqQTdfU7VWyN+OrCGNSPgk1AGuJYjkdbLMr/93yGJwB X1sMeWkwYGJDKDQDxgYFqGsEZZjf8+fWBvUNTPXNEit4GV4/uVrWIYH/jPYQ6sQM kAWpkfbB3sjH5+tD/0rCGuwEHB1mEw13+bnjk2Rt05+biqzxR2XFWcKClGMP0rYX e+UjG6E1ctAMJ9zrkJt978IX1fTt0ZeMaPUYPso3qQgzFhAaSeklFjd0cMb64LHR 3QJa1ZDAfkG5zdnYg84DwCJNFy/BXo1a+hfMrxUzuBT9eP6vG9zEW6JIrJfyxKrV ucNKQn7AdhQmBuIzyaUUipO6/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIG00Lkd ahPl3Sv8rkGIdC6OMHdRMB8GA1UdIwQYMBaAFHqsZ9vB65KOKVE2LgvGrHZ34tx7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTlBNS9BMzJFRkVCODFE ODkxMUUyOTJFNEZERTIwOEIwMkNEMi9lcXhuMjhIcmtvNHBVVFl1Qzhhc2RuZmkz SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VxeG4yOEhya280cFVUWXVDOGFzZG5maTNIcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTlBNS9BMzJFRkVCODFEODkxMUUyOTJFNEZERTIwOEIwMkNEMi9lcXhuMjhIcmtv NHBVVFl1Qzhhc2RuZmkzSHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAScZ9PBIEG2NbH+Lm2LUjRure0og57ql3vhj0SBOfJr/29AcVMLCMp fio7aOpSh+hGdCSx+IVNGnrwhGiNU4Jch6oDmqVDa4fEGRt7IKfoE7UDOwUwCTi8 DTI7O1YvGm227dqZEhbNmk3V9aIiwgn+ZbFH2nTOQL12esnSfDt4Rn1wQHk1F2xo sMM4uE8zWWKhF4tZEyRje3pbBCv2kHXRL9fD63n73/kXm6W0us8KoJojpmv+d/t9 EkYkHJKtbSswfLMuI490ReLXtntsVJS6WDbY08fMCC+y26RYIK8S9eO1MSi5J155 mmdttPnuH9YRgj/KzOEWW1QLkzjm2C8n -----END CERTIFICATE-----Generated at Mon May 6 17:43:23 2024 by rpki-client on console-ams.rpki-client.org