$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft File: eCkTb3m3-Js81HxTb8dJYjK54To.mft (raw, json) Hash identifier: REQEBK4kYLI6h1O3ncOy82IWVVAiy5hfl/kFAS3vKTQ= Subject key identifier: B7:90:53:8B:C5:1D:9D:9B:66:AD:96:A1:F5:71:E4:33:A4:35:02:1F Authority key identifier: 78:29:13:6F:79:B7:F8:9B:3C:D4:7C:53:6F:C7:49:62:32:B9:E1:3A Certificate issuer: /CN=A91B5552/serialNumber=7829136F79B7F89B3CD47C536FC7496232B9E13A Certificate serial: 0446 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft Manifest number: 0441 Signing time: Fri 03 May 2024 02:03:09 +0000 Manifest this update: Fri 03 May 2024 02:03:09 +0000 Manifest next update: Fri 10 May 2024 02:03:09 +0000 Files and hashes: 1: eCkTb3m3-Js81HxTb8dJYjK54To.crl (hash: G599iQd2MK6EwWJttvGPLjGJ9dRmIBOW6XCIQPgyQak=) 2: 0E183FBE516911ED9B5EF024C4F9AE02.roa (hash: ZSVjtijV+Et42Y6SlGoz0UPyq2QiZ9xC7vE305M8da8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.crl rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 02:03:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1094 (0x446) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5552/serialNumber=7829136F79B7F89B3CD47C536FC7496232B9E13A Validity Not Before: May 3 02:03:09 2024 GMT Not After : May 10 02:03:09 2024 GMT Subject: CN=663445dd-9a6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cd:00:b9:f1:30:ab:72:74:01:29:39:09:76: 4e:b8:07:39:ac:eb:8f:5c:69:43:f2:75:0c:bb:9e: cd:56:9e:f6:ef:d7:5f:e8:df:35:3c:c5:9e:be:d7: 75:a1:55:36:ec:9d:69:07:d7:0c:2a:a7:a6:98:08: 2a:73:74:60:26:a8:de:62:e7:62:28:dc:c2:39:87: 10:13:ab:9e:30:70:e1:b7:cf:c7:18:22:e8:ec:8f: 8b:10:29:32:cb:6d:97:82:a6:4f:36:b5:c7:e7:a0: 16:56:89:72:a9:7f:98:35:57:69:e4:94:2b:f6:96: f0:17:d9:50:b3:1b:00:26:09:5e:28:bd:88:60:da: 46:60:b1:3c:06:38:96:dd:3a:11:7d:55:e4:f5:dd: 68:3a:92:23:f7:85:9b:20:d5:95:6c:a2:7c:e6:d0: 38:cb:0c:0a:b7:18:55:42:8e:00:4a:8c:1f:56:f3: 24:4a:e1:3d:28:b0:ab:57:9a:e3:a6:84:9b:b3:02: a7:25:5b:42:d5:f5:c2:52:14:62:8b:ae:75:09:bb: 94:8b:7d:f4:03:39:60:f9:36:e3:bd:d0:67:c5:4a: c8:ac:1c:6a:4f:73:98:b6:84:d9:db:65:5c:60:26: c5:c8:58:27:de:35:3f:eb:ec:0e:57:8a:08:34:00: 67:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:90:53:8B:C5:1D:9D:9B:66:AD:96:A1:F5:71:E4:33:A4:35:02:1F X509v3 Authority Key Identifier: keyid:78:29:13:6F:79:B7:F8:9B:3C:D4:7C:53:6F:C7:49:62:32:B9:E1:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:fd:74:1e:ef:ce:01:6d:89:68:e0:22:4e:f2:0a:34:46:dc: fc:04:15:58:30:7e:d0:13:be:0c:b0:0f:0c:19:d3:5c:05:aa: 05:fd:68:83:b4:db:52:98:e3:d3:a1:3a:30:7e:d7:54:1c:57: 7f:71:dc:a7:89:1a:ff:d0:f4:44:3c:58:ea:fd:ab:31:7f:24: e4:b8:3e:00:44:6a:84:0e:6e:20:95:ef:cf:f9:ad:d0:f9:2b: 30:da:69:e0:53:87:34:f4:af:6c:95:10:c1:fa:ac:17:72:2a: 66:be:d0:47:23:84:7a:ad:09:b6:8d:75:32:56:b9:db:be:a6: c8:7f:cd:fc:05:26:31:66:ef:8e:07:cd:bb:4a:dc:06:7d:03: af:e8:28:c6:c8:20:82:4e:7f:4c:6e:ec:73:95:ef:49:18:7b: b3:c9:16:b4:c1:b2:90:fc:2a:70:a8:00:84:be:b3:aa:96:48: b9:a0:e2:b3:12:71:a8:2f:ac:f3:41:70:99:5a:ab:ca:90:33: 1a:10:c0:15:88:46:50:ca:53:96:be:8c:1a:38:82:4d:d4:c0: a9:27:cf:ac:ed:67:2c:97:17:d5:4e:c8:6f:fd:fb:89:95:83: cb:d3:d4:57:da:1c:53:6a:4b:9d:eb:19:58:ea:ed:d0:8d:38: 76:27:59:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU1NTIxMTAvBgNVBAUTKDc4MjkxMzZGNzlCN0Y4OUIzQ0Q0N0M1MzZGQzc0OTYy MzJCOUUxM0EwHhcNMjQwNTAzMDIwMzA5WhcNMjQwNTEwMDIwMzA5WjAYMRYwFAYD VQQDEw02NjM0NDVkZC05YTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuc0AufEwq3J0ASk5CXZOuAc5rOuPXGlD8nUMu57NVp7279df6N81PMWevtd1 oVU27J1pB9cMKqemmAgqc3RgJqjeYudiKNzCOYcQE6ueMHDht8/HGCLo7I+LECky y22XgqZPNrXH56AWVolyqX+YNVdp5JQr9pbwF9lQsxsAJgleKL2IYNpGYLE8BjiW 3ToRfVXk9d1oOpIj94WbINWVbKJ85tA4ywwKtxhVQo4ASowfVvMkSuE9KLCrV5rj poSbswKnJVtC1fXCUhRii651CbuUi330Azlg+TbjvdBnxUrIrBxqT3OYtoTZ22Vc YCbFyFgn3jU/6+wOV4oINABnzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLeQU4vF HZ2bZq2WofVx5DOkNQIfMB8GA1UdIwQYMBaAFHgpE295t/ibPNR8U2/HSWIyueE6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTU1Mi82RjYwRjc3QzBC Q0MxMUVDODU3MENEMUZDNEY5QUUwMi9lQ2tUYjNtMy1KczgxSHhUYjhkSllqSzU0 VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VDa1RiM20zLUpzODFIeFRiOGRKWWpLNTRUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTU1Mi82RjYwRjc3QzBCQ0MxMUVDODU3MENEMUZDNEY5QUUwMi9lQ2tUYjNtMy1K czgxSHhUYjhkSllqSzU0VG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAa/XQe784BbYlo4CJO8go0Rtz8BBVYMH7QE74MsA8MGdNcBaoF/WiD tNtSmOPToTowftdUHFd/cdyniRr/0PREPFjq/asxfyTkuD4ARGqEDm4gle/P+a3Q +Ssw2mngU4c09K9slRDB+qwXcipmvtBHI4R6rQm2jXUyVrnbvqbIf838BSYxZu+O B827StwGfQOv6CjGyCCCTn9Mbuxzle9JGHuzyRa0wbKQ/CpwqACEvrOqlki5oOKz EnGoL6zzQXCZWqvKkDMaEMAViEZQylOWvowaOIJN1MCpJ8+s7WcslxfVTshv/fuJ lYPL09RX2hxTakud6xlY6u3QjTh2J1mo -----END CERTIFICATE-----Generated at Fri May 3 04:45:25 2024 by rpki-client on console-fra.rpki-client.org