$ rpki-client -vvf rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.mft File: Equ-nU5ZmFhZgTSaX6m3X9q8WHY.mft (raw, json) Hash identifier: T81/IAqaiI221Wsvb3pH2Pdg11NuPMjOqq4otX2R6AE= Subject key identifier: 88:C6:94:31:B4:6A:A2:61:DB:87:1F:DE:71:39:B7:C3:86:6D:62:D3 Authority key identifier: 12:AB:BE:9D:4E:59:98:58:59:81:34:9A:5F:A9:B7:5F:DA:BC:58:76 Certificate issuer: /CN=A91B778A/serialNumber=12ABBE9D4E5998585981349A5FA9B75FDABC5876 Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.mft Manifest number: 98 Signing time: Fri 17 May 2024 06:57:01 +0000 Manifest this update: Fri 17 May 2024 06:57:00 +0000 Manifest next update: Fri 24 May 2024 06:57:00 +0000 Files and hashes: 1: Equ-nU5ZmFhZgTSaX6m3X9q8WHY.crl (hash: pQ4dzMCjTx5y7eQ3Xpdz5M34cs44O3FNoYqpeW53Y/4=) 2: A60B75F62B7B11EEA4D0FA24C4F9AE02.roa (hash: uRadmjJVMxXwHVckAvvFZMfxFmfKoEQIvqTnZHW8nEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.crl rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 06:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B778A/serialNumber=12ABBE9D4E5998585981349A5FA9B75FDABC5876 Validity Not Before: May 17 06:57:00 2024 GMT Not After : May 24 06:57:00 2024 GMT Subject: CN=6646ffbc-1855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:17:df:e8:8c:1f:91:24:0b:55:78:22:a9:44: 09:e8:a5:21:d4:14:4d:25:39:54:78:36:49:9c:42: fe:f0:e6:66:fb:7f:b2:8b:05:65:32:66:21:a0:2d: de:1d:b6:37:b9:1c:e4:50:81:21:de:c8:7d:73:23: e1:36:b8:98:52:c1:c4:0c:2b:37:0e:4b:8a:de:3e: 43:ec:9b:69:e7:86:bc:f1:47:25:31:76:14:ca:ca: 7a:b4:3d:d6:9f:47:67:19:8e:17:6e:b8:47:00:36: 8e:af:d2:7e:ce:7a:21:37:69:3e:bb:19:db:f7:32: d0:e8:6c:e3:f3:e1:f5:0d:e0:c3:10:c8:bb:29:22: 84:04:ae:11:69:e4:3c:1d:fe:bf:ce:e6:33:6c:bd: d8:86:e9:dd:15:4a:45:f8:67:f5:60:5b:3b:8c:f0: 34:fb:0b:ac:17:95:59:90:46:be:56:85:16:ec:0e: a9:09:82:23:61:71:6d:d1:50:eb:83:66:65:88:98: 49:39:54:96:76:30:a3:35:da:f2:e9:f3:ab:40:8a: 53:36:07:c7:f3:74:be:4e:d7:7b:e0:56:b0:cf:88: 0a:92:d3:d8:2d:c1:3c:8c:f5:73:ea:f0:69:75:49: 77:88:c8:24:73:9d:c6:5c:dd:02:19:9d:53:e8:32: ad:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C6:94:31:B4:6A:A2:61:DB:87:1F:DE:71:39:B7:C3:86:6D:62:D3 X509v3 Authority Key Identifier: keyid:12:AB:BE:9D:4E:59:98:58:59:81:34:9A:5F:A9:B7:5F:DA:BC:58:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:89:8c:b3:5e:67:8c:74:62:76:0c:09:d2:48:de:3b:49:25: b4:ec:23:17:71:2a:e3:34:54:31:07:52:4d:64:73:68:57:7c: 0a:76:5a:08:e0:96:c4:6f:51:98:f8:1d:83:cf:af:72:dd:4f: e0:61:f3:da:ac:2a:75:67:a2:27:d0:ba:e2:cf:f8:16:f6:c5: d2:20:10:d2:a5:56:b0:65:c2:42:03:09:7f:94:a6:01:f4:c3: f4:cb:2f:2e:95:6d:e2:c2:7b:39:3a:9b:9e:db:7f:33:4a:c0: 62:c0:26:1b:7f:6a:1e:e6:24:fc:12:8f:3c:b0:7b:76:ff:f2: c8:0b:37:5e:b0:d5:43:c9:1e:42:ba:1d:a9:a4:cf:22:8b:91: 2c:67:f7:62:6c:95:2d:32:50:e9:56:05:f5:2b:15:1e:b9:4f: 16:e4:b7:e4:e5:2d:1c:8d:7a:ed:92:bb:0a:a9:c5:93:c8:14: 25:99:2a:0e:f9:b0:38:3a:f1:20:5e:e9:bf:7c:98:04:6f:d4: e1:30:be:9d:d6:9e:cb:5c:20:ff:bb:04:1a:f8:79:b5:b7:91: 71:bf:20:d6:a8:57:7c:9e:dc:9e:bd:59:57:46:dc:b9:0e:19: 3b:b0:9d:93:12:2a:6b:6a:ec:60:90:29:21:bd:7f:2c:3c:68: 73:f6:6e:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3OEExMTAvBgNVBAUTKDEyQUJCRTlENEU1OTk4NTg1OTgxMzQ5QTVGQTlCNzVG REFCQzU4NzYwHhcNMjQwNTE3MDY1NzAwWhcNMjQwNTI0MDY1NzAwWjAYMRYwFAYD VQQDEw02NjQ2ZmZiYy0xODU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Rff6IwfkSQLVXgiqUQJ6KUh1BRNJTlUeDZJnEL+8OZm+3+yiwVlMmYhoC3e HbY3uRzkUIEh3sh9cyPhNriYUsHEDCs3DkuK3j5D7Jtp54a88UclMXYUysp6tD3W n0dnGY4XbrhHADaOr9J+znohN2k+uxnb9zLQ6Gzj8+H1DeDDEMi7KSKEBK4RaeQ8 Hf6/zuYzbL3YhundFUpF+Gf1YFs7jPA0+wusF5VZkEa+VoUW7A6pCYIjYXFt0VDr g2ZliJhJOVSWdjCjNdry6fOrQIpTNgfH83S+Ttd74Fawz4gKktPYLcE8jPVz6vBp dUl3iMgkc53GXN0CGZ1T6DKt8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIjGlDG0 aqJh24cf3nE5t8OGbWLTMB8GA1UdIwQYMBaAFBKrvp1OWZhYWYE0ml+pt1/avFh2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc4QS85MDJBQUU5ODJC NkYxMUVFQTRCQThGN0NDNEY5QUUwMi9FcXUtblU1Wm1GaFpnVFNhWDZtM1g5cThX SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VxdS1uVTVabUZoWmdUU2FYNm0zWDlxOFdIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc4QS85MDJBQUU5ODJCNkYxMUVFQTRCQThGN0NDNEY5QUUwMi9FcXUtblU1Wm1G aFpnVFNhWDZtM1g5cThXSFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaiYyzXmeMdGJ2DAnSSN47SSW07CMXcSrjNFQxB1JNZHNoV3wKdloI 4JbEb1GY+B2Dz69y3U/gYfParCp1Z6In0Lriz/gW9sXSIBDSpVawZcJCAwl/lKYB 9MP0yy8ulW3iwns5Opue238zSsBiwCYbf2oe5iT8Eo88sHt2//LICzdesNVDyR5C uh2ppM8ii5EsZ/dibJUtMlDpVgX1KxUeuU8W5Lfk5S0cjXrtkrsKqcWTyBQlmSoO +bA4OvEgXum/fJgEb9ThML6d1p7LXCD/uwQa+Hm1t5FxvyDWqFd8ntyevVlXRty5 Dhk7sJ2TEiprauxgkCkhvX8sPGhz9m7S -----END CERTIFICATE-----Generated at Fri May 17 08:13:53 2024 by rpki-client on console-fra.rpki-client.org