$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft File: EBEGw3VRsRR1-6qyOQEVt6zygC0.mft (raw, json) Hash identifier: 5MBxQLP3TRXVAOCIuVJ5rbhtSa92UZqdSgo5DfMIscw= Subject key identifier: 5E:1B:FE:CB:EA:71:5C:F2:D9:5B:69:EA:4D:07:01:6F:AD:C2:80:55 Authority key identifier: 10:11:06:C3:75:51:B1:14:75:FB:AA:B2:39:01:15:B7:AC:F2:80:2D Certificate issuer: /CN=A91BF286/serialNumber=101106C37551B11475FBAAB2390115B7ACF2802D Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft Manifest number: D4 Signing time: Thu 21 Nov 2024 03:47:40 +0000 Manifest this update: Thu 21 Nov 2024 03:47:39 +0000 Manifest next update: Thu 28 Nov 2024 03:47:39 +0000 Files and hashes: 1: EBEGw3VRsRR1-6qyOQEVt6zygC0.crl (hash: o7a10rrSMPgnxlTlE5zd45cwO5dGGWZAliY8sN3er48=) 2: 44BA2B8C671011EEB41FB227C4F9AE02.roa (hash: K0k0e9gheoS9Qbdr5+8PO7ypfn8xYG5X2qYnDLr7XOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.crl rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 03:47:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF286/serialNumber=101106C37551B11475FBAAB2390115B7ACF2802D Validity Not Before: Nov 21 03:47:39 2024 GMT Not After : Nov 28 03:47:39 2024 GMT Subject: CN=673ead5b-7e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1a:35:a5:bf:71:ff:64:02:71:0c:16:f5:80: 38:0f:cc:16:a2:bf:c2:8c:53:c4:50:73:2d:97:34: 38:ab:97:75:80:d5:ad:54:10:c5:28:55:c3:4f:f2: 4b:36:a7:77:6c:90:fe:1c:ee:a3:76:0c:75:5f:cb: 27:56:c8:6a:20:43:fd:18:91:cc:a3:54:a7:c1:fc: 44:55:86:e8:0d:49:90:fc:9a:40:3a:dd:c3:fd:52: 1d:e9:c7:77:c8:18:7f:da:b1:4d:7e:55:0d:30:14: a2:04:60:49:c9:6f:7b:02:14:88:a9:bd:4b:71:b0: 2c:4f:bd:34:d8:c6:84:85:98:89:87:d9:c6:cd:ea: 2e:90:27:31:26:a8:18:67:5c:02:4c:18:32:c7:87: 98:1b:a1:30:7e:39:d1:a2:92:7d:e6:f8:66:12:d9: ba:12:b7:f8:e1:6c:be:da:42:f4:27:65:aa:64:08: fe:f1:a9:d7:6d:f5:1d:63:f2:56:70:2e:58:18:c8: 46:c4:db:41:78:4e:ed:9f:59:99:3c:9b:e6:35:2a: a6:89:10:47:d7:71:8d:58:4d:b8:d5:98:66:da:81: 16:67:a2:06:10:d8:e1:bb:bb:68:03:0b:4c:4e:e4: da:59:22:64:41:72:da:9c:19:64:ae:c6:4f:f4:bb: ce:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:1B:FE:CB:EA:71:5C:F2:D9:5B:69:EA:4D:07:01:6F:AD:C2:80:55 X509v3 Authority Key Identifier: keyid:10:11:06:C3:75:51:B1:14:75:FB:AA:B2:39:01:15:B7:AC:F2:80:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:a1:b8:27:f5:a7:10:36:29:0a:b5:16:db:0c:9b:3b:03:1f: f3:ec:27:f5:c4:b0:d2:82:6e:88:03:16:4e:78:44:eb:df:b6: 04:3b:56:5e:f8:cd:3a:15:3c:bc:63:34:f4:41:1b:4c:a2:5b: ef:83:63:fe:78:e0:15:ad:dd:9c:b6:d1:c3:ad:8c:81:dc:fe: 5a:09:56:af:bd:39:da:37:a4:4a:10:fd:d2:da:99:64:4c:bd: 93:6b:c3:07:39:d7:88:0b:33:9e:87:c1:28:5b:b9:9c:e9:ea: 40:51:c0:4d:1d:7c:5f:e8:ea:fa:70:27:8e:6f:75:67:fc:22: cb:40:46:30:58:a4:e7:de:70:e7:a2:08:55:10:91:c1:76:fb: 6a:4a:8c:e3:3d:6b:73:6a:77:c6:e7:29:25:2f:e2:86:05:fc: cf:da:ce:0d:a2:04:60:07:4d:52:83:3b:93:77:21:d5:8a:6c: 0f:0c:7f:b1:02:fd:8c:af:15:f3:1a:f5:9a:f8:e7:fd:b9:e9: 63:64:74:12:9c:3f:c7:4f:36:60:cf:83:1d:89:c6:f2:47:b2: 07:7d:fa:b7:e8:fb:56:97:ba:26:6d:52:34:ee:e3:a4:8d:bc: d4:90:6e:fa:d3:a4:b3:10:61:e5:df:d5:5d:e2:eb:49:67:c1: 04:a3:f9:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyODYxMTAvBgNVBAUTKDEwMTEwNkMzNzU1MUIxMTQ3NUZCQUFCMjM5MDExNUI3 QUNGMjgwMkQwHhcNMjQxMTIxMDM0NzM5WhcNMjQxMTI4MDM0NzM5WjAYMRYwFAYD VQQDEw02NzNlYWQ1Yi03ZTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ho1pb9x/2QCcQwW9YA4D8wWor/CjFPEUHMtlzQ4q5d1gNWtVBDFKFXDT/JL Nqd3bJD+HO6jdgx1X8snVshqIEP9GJHMo1SnwfxEVYboDUmQ/JpAOt3D/VId6cd3 yBh/2rFNflUNMBSiBGBJyW97AhSIqb1LcbAsT7002MaEhZiJh9nGzeoukCcxJqgY Z1wCTBgyx4eYG6EwfjnRopJ95vhmEtm6Erf44Wy+2kL0J2WqZAj+8anXbfUdY/JW cC5YGMhGxNtBeE7tn1mZPJvmNSqmiRBH13GNWE241Zhm2oEWZ6IGENjhu7toAwtM TuTaWSJkQXLanBlkrsZP9LvOOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4b/svq cVzy2Vtp6k0HAW+twoBVMB8GA1UdIwQYMBaAFBARBsN1UbEUdfuqsjkBFbes8oAt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjI4Ni8xQ0UyQjBDNDY2 OTQxMUVFQTA0NTI5NTFDNEY5QUUwMi9FQkVHdzNWUnNSUjEtNnF5T1FFVnQ2enln QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VCRUd3M1ZSc1JSMS02cXlPUUVWdDZ6eWdDMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjI4Ni8xQ0UyQjBDNDY2OTQxMUVFQTA0NTI5NTFDNEY5QUUwMi9FQkVHdzNWUnNS UjEtNnF5T1FFVnQ2enlnQzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASobgn9acQNikKtRbbDJs7Ax/z7Cf1xLDSgm6IAxZOeETr37YEO1Ze +M06FTy8YzT0QRtMolvvg2P+eOAVrd2cttHDrYyB3P5aCVavvTnaN6RKEP3S2plk TL2Ta8MHOdeICzOeh8EoW7mc6epAUcBNHXxf6Or6cCeOb3Vn/CLLQEYwWKTn3nDn oghVEJHBdvtqSozjPWtzanfG5yklL+KGBfzP2s4NogRgB01SgzuTdyHVimwPDH+x Av2MrxXzGvWa+Of9ueljZHQSnD/HTzZgz4MdicbyR7IHffq36PtWl7ombVI07uOk jbzUkG7606SzEGHl39Vd4utJZ8EEo/lM -----END CERTIFICATE-----Generated at Thu Nov 21 05:06:04 2024 by rpki-client on console-fra.rpki-client.org