$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.mft File: EvkubHLmyiXAdQVbSP43tlq24FI.mft (raw, json) Hash identifier: z2TnxEiSySrU4nz16puhyXz39OxQwlrvonpfyGhOw1s= Subject key identifier: 5E:D8:8F:39:0C:5E:70:A2:D7:96:B5:74:F2:6C:66:F0:BE:16:05:3E Authority key identifier: 12:F9:2E:6C:72:E6:CA:25:C0:75:05:5B:48:FE:37:B6:5A:B6:E0:52 Certificate issuer: /CN=A91B6006/serialNumber=12F92E6C72E6CA25C075055B48FE37B65AB6E052 Certificate serial: 1203 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvkubHLmyiXAdQVbSP43tlq24FI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.mft Manifest number: 11E3 Signing time: Tue 30 Apr 2024 17:57:22 +0000 Manifest this update: Tue 30 Apr 2024 17:57:21 +0000 Manifest next update: Tue 07 May 2024 17:57:21 +0000 Files and hashes: 1: EvkubHLmyiXAdQVbSP43tlq24FI.crl (hash: ETFUNKgBg0rvoegsbsH4eYPXMtPvXl0EndABV26YunE=) 2: D67D6C12D09611ECAE4FA90AC4F9AE02.roa (hash: 7aJEq/y6xsqiOlletpMMhOEO8ZpDtKw7SxwksgJfUiY=) 3: D5BE6FF6D09611ECAE4FA90AC4F9AE02.roa (hash: HgtCODBGPiTbNncXfX1ucT9h50g1b79gx6wBGbEeToA=) 4: 2AD29284D22A11E8B6E99987C4F9AE02.roa (hash: CxdklR/LzdR6TgyFoZJ5+PRJh3tBFfXSIwz8ObgzEP8=) 5: D82E5F1ADBC211E99D686940C4F9AE02.roa (hash: MfunsiPRO0wUwC2PcFbEN3cmE/Z10/9QdOZaonQ8B6c=) 6: 8ECD16D0CE7211ED84D09A78C4F9AE02.roa (hash: kjxuaOwnlRrFIiMud2delB/VtQHPYjjBpoX3Zp4baiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.crl rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvkubHLmyiXAdQVbSP43tlq24FI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 17:57:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4611 (0x1203) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6006/serialNumber=12F92E6C72E6CA25C075055B48FE37B65AB6E052 Validity Not Before: Apr 30 17:57:21 2024 GMT Not After : May 7 17:57:21 2024 GMT Subject: CN=66313102-2e4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4e:2c:b7:4f:4f:4c:66:65:c7:41:ac:64:4a: 17:88:45:5c:9f:b3:4c:f1:74:81:0f:be:23:ad:0a: ee:97:e2:e2:af:63:6a:30:d9:a2:bd:7c:c0:2f:e5: e2:88:d4:68:82:1b:52:a5:6a:01:50:5e:35:47:7b: ee:2b:b4:d6:98:aa:33:36:f6:4c:94:30:ac:f4:f3: 7a:70:1d:b5:90:ff:c5:31:18:f6:40:81:62:e9:fb: 2f:55:03:b0:b0:5f:86:9f:55:f6:3e:47:64:e4:52: 8a:ca:82:a8:30:38:e3:33:33:0b:60:1a:ac:d5:38: 44:45:b5:f0:d8:ca:f8:ae:1b:40:2d:f3:16:ec:24: 8f:5b:99:2c:01:43:55:8e:4e:73:42:8c:d9:d7:79: 93:d7:1e:60:db:6e:2b:9d:2e:da:6d:5c:53:51:ba: 0b:4d:54:89:f5:c0:42:ac:10:6d:7d:7a:b0:f5:96: 19:38:52:18:f8:85:00:20:88:fc:65:2d:88:48:d3: 74:0f:83:02:bf:5a:8c:96:e4:5a:d6:24:de:6f:fd: 87:73:7c:62:57:65:52:00:4c:48:00:74:d2:e0:a2: 9d:8c:7e:5a:c7:9d:5e:5a:af:3b:d2:73:e5:1c:46: a9:14:d7:25:ea:97:5c:1a:85:f7:1c:14:f3:b7:17: 49:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D8:8F:39:0C:5E:70:A2:D7:96:B5:74:F2:6C:66:F0:BE:16:05:3E X509v3 Authority Key Identifier: keyid:12:F9:2E:6C:72:E6:CA:25:C0:75:05:5B:48:FE:37:B6:5A:B6:E0:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvkubHLmyiXAdQVbSP43tlq24FI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:b2:87:45:55:83:f5:1e:ef:5d:46:6e:f4:0b:74:3c:e2:1c: 15:5e:0f:f0:39:13:75:90:7e:d2:76:1b:26:bc:9b:a5:e7:54: 43:73:b7:95:88:33:cf:ac:75:f3:9a:55:3c:c4:98:aa:4f:35: b6:8e:8a:6e:99:fc:e1:03:db:fc:36:07:57:50:c8:36:25:a6: 66:07:16:e0:22:5d:39:7a:a8:87:d9:69:90:fd:be:2d:d8:4c: ed:b3:a1:5f:83:3c:b9:8b:7e:37:d4:5b:26:5f:db:36:01:ac: 5e:d4:b8:40:fd:ac:93:e2:b3:0b:8f:91:aa:0a:85:d2:77:33: b6:5d:a9:c2:0a:6e:a3:de:85:fa:b5:e0:76:12:04:ea:f8:e8: 3b:96:d0:9a:ab:0b:61:48:1c:8e:8b:16:f6:ca:45:f0:39:c8: 9d:e8:b4:d4:c4:81:50:b6:c4:49:0f:96:8a:81:e8:88:9b:9a: ac:9d:48:73:fc:30:fc:38:88:77:37:0d:5a:87:a9:f0:c8:c9: c1:3a:65:cc:d9:1d:64:be:d8:a4:64:b4:09:79:e4:04:41:17: 5b:f4:88:97:c5:10:a3:ea:d4:ca:45:5e:81:3d:22:40:73:05: ee:78:6e:e5:2e:b7:2e:a0:6e:6b:d5:d9:db:a7:f4:73:ad:7f: dd:f1:0a:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYwMDYxMTAvBgNVBAUTKDEyRjkyRTZDNzJFNkNBMjVDMDc1MDU1QjQ4RkUzN0I2 NUFCNkUwNTIwHhcNMjQwNDMwMTc1NzIxWhcNMjQwNTA3MTc1NzIxWjAYMRYwFAYD VQQDEw02NjMxMzEwMi0yZTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxE4st09PTGZlx0GsZEoXiEVcn7NM8XSBD74jrQrul+Lir2NqMNmivXzAL+Xi iNRoghtSpWoBUF41R3vuK7TWmKozNvZMlDCs9PN6cB21kP/FMRj2QIFi6fsvVQOw sF+Gn1X2Pkdk5FKKyoKoMDjjMzMLYBqs1ThERbXw2Mr4rhtALfMW7CSPW5ksAUNV jk5zQozZ13mT1x5g224rnS7abVxTUboLTVSJ9cBCrBBtfXqw9ZYZOFIY+IUAIIj8 ZS2ISNN0D4MCv1qMluRa1iTeb/2Hc3xiV2VSAExIAHTS4KKdjH5ax51eWq870nPl HEapFNcl6pdcGoX3HBTztxdJGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7YjzkM XnCi15a1dPJsZvC+FgU+MB8GA1UdIwQYMBaAFBL5Lmxy5solwHUFW0j+N7ZatuBS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjAwNi9FNEZERTQ2QUMz RTgxMUU4QUM3NkVCMTZDNEY5QUUwMi9Fdmt1YkhMbXlpWEFkUVZiU1A0M3RscTI0 RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V2a3ViSExteWlYQWRRVmJTUDQzdGxxMjRGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjAwNi9FNEZERTQ2QUMzRTgxMUU4QUM3NkVCMTZDNEY5QUUwMi9Fdmt1YkhMbXlp WEFkUVZiU1A0M3RscTI0RkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5sodFVYP1Hu9dRm70C3Q84hwVXg/wORN1kH7SdhsmvJul51RDc7eV iDPPrHXzmlU8xJiqTzW2jopumfzhA9v8NgdXUMg2JaZmBxbgIl05eqiH2WmQ/b4t 2Ezts6Ffgzy5i3431FsmX9s2Aaxe1LhA/ayT4rMLj5GqCoXSdzO2XanCCm6j3oX6 teB2EgTq+Og7ltCaqwthSByOixb2ykXwOcid6LTUxIFQtsRJD5aKgeiIm5qsnUhz /DD8OIh3Nw1ah6nwyMnBOmXM2R1kvtikZLQJeeQEQRdb9IiXxRCj6tTKRV6BPSJA cwXueG7lLrcuoG5r1dnbp/RzrX/d8Qr6 -----END CERTIFICATE-----Generated at Tue Apr 30 19:22:31 2024 by rpki-client on console-ams.rpki-client.org