$ rpki-client -vvf rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft File: EVpBYMhVVH2eMQxg09CIy7yamSo.mft (raw, json) Hash identifier: xhXkWDvf/KVmDcXR6d2VRMAjqv53UHtkbFwAhU+xi3U= Subject key identifier: D5:83:63:9D:9A:E4:59:1E:7C:49:64:50:A9:BD:15:66:54:B1:49:A0 Authority key identifier: 11:5A:41:60:C8:55:54:7D:9E:31:0C:60:D3:D0:88:CB:BC:9A:99:2A Certificate issuer: /CN=A91A76AD/serialNumber=115A4160C855547D9E310C60D3D088CBBC9A992A Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVpBYMhVVH2eMQxg09CIy7yamSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft Manifest number: 3C Signing time: Fri 17 May 2024 08:22:24 +0000 Manifest this update: Fri 17 May 2024 08:22:24 +0000 Manifest next update: Fri 24 May 2024 08:22:24 +0000 Files and hashes: 1: EVpBYMhVVH2eMQxg09CIy7yamSo.crl (hash: Xo/lB73t0VJUtUwsBIdVndFgQb7Sp7x0nPhTBEb1V/0=) 2: 26E31278CA3811EEB0C6A436C4F9AE02.roa (hash: cI170z2edUBV6NEFYs6fZhBBl9YkBW3UrisOF7mHZRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.crl rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVpBYMhVVH2eMQxg09CIy7yamSo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A76AD/serialNumber=115A4160C855547D9E310C60D3D088CBBC9A992A Validity Not Before: May 17 08:22:24 2024 GMT Not After : May 24 08:22:24 2024 GMT Subject: CN=664713c0-1f76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4d:4d:cd:94:23:9a:31:c3:d0:91:15:d6:52: 8b:4b:97:33:0f:cd:64:0c:49:58:3f:7e:9a:8a:3c: 59:31:1d:35:e2:a4:0e:54:47:a6:3f:f3:f5:b9:99: a5:3b:f1:26:89:56:b5:9d:a9:85:08:a2:07:b3:aa: 3b:65:73:07:08:46:80:9e:42:75:81:91:d2:6d:ea: c6:7b:db:4f:ae:60:04:44:d9:8e:a9:47:97:83:6d: a2:4a:1b:d6:b1:18:01:7c:14:7d:29:4e:9d:8d:4f: 5a:35:d2:59:f9:46:44:1e:f9:10:d2:02:bf:7a:20: 98:b0:0d:a4:23:3a:c1:e4:58:fb:58:3f:77:b9:35: 55:01:98:b4:56:36:3f:5e:7d:73:17:34:c9:a1:31: 8e:0d:64:99:e5:fc:e0:e4:57:ba:47:b2:1d:c3:72: 5f:65:ce:68:2e:40:30:7d:58:6f:85:95:67:29:12: f9:ff:e0:bc:83:d6:bb:56:b6:27:f3:82:b9:d5:ac: bb:82:5b:08:cc:e1:e4:1e:f5:2c:dc:f1:21:8c:1d: f6:b9:c4:ca:2f:b8:81:50:10:cf:d4:a8:a1:75:19: c4:c1:a4:73:94:0e:4b:2f:7d:60:cd:6d:1e:0a:57: 33:78:0b:0f:65:6b:26:b2:60:53:c7:20:01:04:8c: c3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:83:63:9D:9A:E4:59:1E:7C:49:64:50:A9:BD:15:66:54:B1:49:A0 X509v3 Authority Key Identifier: keyid:11:5A:41:60:C8:55:54:7D:9E:31:0C:60:D3:D0:88:CB:BC:9A:99:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVpBYMhVVH2eMQxg09CIy7yamSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:09:86:9a:02:53:5b:07:d0:74:ea:ac:45:d4:81:3d:73:bd: 68:4b:d3:e5:69:db:d7:34:00:c1:42:7d:e9:82:e0:74:19:32: 55:eb:0b:7e:90:05:fa:d0:14:d4:f2:ef:9a:e0:bc:25:f8:ea: b8:65:3a:be:b8:ca:c6:2b:75:ec:5a:12:ab:dd:62:b3:c7:2f: a9:c4:21:56:39:55:bf:63:e6:3f:9e:93:a7:24:c8:88:92:6d: 7e:79:15:e1:35:04:e4:4a:ab:c8:9d:37:63:13:66:d3:87:6b: c0:9e:31:f2:b3:40:f9:69:6d:21:dc:ae:88:a2:f5:4f:25:54: 14:fe:c1:04:99:aa:c6:b9:b1:40:cf:01:54:1b:8b:62:63:1b: 86:2f:47:0b:92:aa:84:d1:87:06:ad:99:21:2b:ea:46:e5:f6: 12:f3:e1:80:75:c6:4c:72:d6:8b:6e:e8:9a:ff:34:f6:c5:56: 1f:09:11:9d:08:6e:9e:2a:45:1e:d6:db:5a:da:96:72:1f:db: 19:be:66:1e:ba:de:64:d2:0d:aa:9b:3a:8b:b4:66:fe:87:36: b6:46:4e:0b:02:49:d4:d9:1e:a4:8e:db:ec:03:c5:d1:98:c5: 2d:59:93:e8:e7:8b:1b:4e:74:ef:68:dc:e6:29:06:de:d3:4f: ea:a8:dc:9c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NzZBRDExMC8GA1UEBRMoMTE1QTQxNjBDODU1NTQ3RDlFMzEwQzYwRDNEMDg4Q0JC QzlBOTkyQTAeFw0yNDA1MTcwODIyMjRaFw0yNDA1MjQwODIyMjRaMBgxFjAUBgNV BAMTDTY2NDcxM2MwLTFmNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYTU3NlCOaMcPQkRXWUotLlzMPzWQMSVg/fpqKPFkxHTXipA5UR6Y/8/W5maU7 8SaJVrWdqYUIogezqjtlcwcIRoCeQnWBkdJt6sZ720+uYARE2Y6pR5eDbaJKG9ax GAF8FH0pTp2NT1o10ln5RkQe+RDSAr96IJiwDaQjOsHkWPtYP3e5NVUBmLRWNj9e fXMXNMmhMY4NZJnl/ODkV7pHsh3Dcl9lzmguQDB9WG+FlWcpEvn/4LyD1rtWtifz grnVrLuCWwjM4eQe9Szc8SGMHfa5xMovuIFQEM/UqKF1GcTBpHOUDksvfWDNbR4K VzN4Cw9layayYFPHIAEEjMM/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1YNjnZrk WR58SWRQqb0VZlSxSaAwHwYDVR0jBBgwFoAUEVpBYMhVVH2eMQxg09CIy7yamSow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3NkFEL0ZFQ0E3NTA2QkU3 RjExRUU5Njc4NEQ2MkM0RjlBRTAyL0VWcEJZTWhWVkgyZU1ReGcwOUNJeTd5YW1T by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRVZwQllNaFZWSDJlTVF4ZzA5Q0l5N3lhbVNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3 NkFEL0ZFQ0E3NTA2QkU3RjExRUU5Njc4NEQ2MkM0RjlBRTAyL0VWcEJZTWhWVkgy ZU1ReGcwOUNJeTd5YW1Tby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADAJhpoCU1sH0HTqrEXUgT1zvWhL0+Vp29c0AMFCfemC4HQZMlXrC36Q BfrQFNTy75rgvCX46rhlOr64ysYrdexaEqvdYrPHL6nEIVY5Vb9j5j+ek6ckyIiS bX55FeE1BORKq8idN2MTZtOHa8CeMfKzQPlpbSHcroii9U8lVBT+wQSZqsa5sUDP AVQbi2JjG4YvRwuSqoTRhwatmSEr6kbl9hLz4YB1xkxy1otu6Jr/NPbFVh8JEZ0I bp4qRR7W21ralnIf2xm+Zh663mTSDaqbOou0Zv6HNrZGTgsCSdTZHqSO2+wDxdGY xS1Zk+jnixtOdO9o3OYpBt7TT+qo3Jw= -----END CERTIFICATE-----Generated at Fri May 17 10:59:13 2024 by rpki-client on console-ams.rpki-client.org