$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft File: EBEGw3VRsRR1-6qyOQEVt6zygC0.mft (raw, json) Hash identifier: agUgYQGwB9eWUmftwPx3OGF37EjILy45c32/rYPc8TU= Subject key identifier: 12:1B:EB:EA:F2:3E:29:02:E4:58:0A:6F:6C:2B:AB:55:DF:47:AD:60 Authority key identifier: 10:11:06:C3:75:51:B1:14:75:FB:AA:B2:39:01:15:B7:AC:F2:80:2D Certificate issuer: /CN=A91BF286/serialNumber=101106C37551B11475FBAAB2390115B7ACF2802D Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft Manifest number: 75 Signing time: Fri 17 May 2024 07:30:18 +0000 Manifest this update: Fri 17 May 2024 07:30:18 +0000 Manifest next update: Fri 24 May 2024 07:30:18 +0000 Files and hashes: 1: EBEGw3VRsRR1-6qyOQEVt6zygC0.crl (hash: Ge7fVFUHx0QQWgw2mfH1FcLKDUUbaEQsr3M5Fk/9WqY=) 2: 44BA2B8C671011EEB41FB227C4F9AE02.roa (hash: K0k0e9gheoS9Qbdr5+8PO7ypfn8xYG5X2qYnDLr7XOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.crl rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:30:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF286/serialNumber=101106C37551B11475FBAAB2390115B7ACF2802D Validity Not Before: May 17 07:30:18 2024 GMT Not After : May 24 07:30:18 2024 GMT Subject: CN=6647078a-7892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:51:c4:90:fb:aa:7a:99:35:39:4d:2e:89:b9: 4c:b9:ed:24:35:9f:d1:37:f7:26:90:64:3c:26:10: bf:ae:85:eb:d5:c5:6f:7f:e0:a4:0d:eb:04:73:76: 6a:17:1a:2b:df:8c:54:a7:93:dc:53:14:05:f0:d3: ac:e4:3b:69:7b:c9:79:11:f5:cf:c5:b0:e0:45:17: 1e:69:cb:cb:f8:08:31:06:93:1a:4f:f7:57:91:6a: ad:46:4d:be:00:d9:63:2d:35:98:23:55:20:d3:87: b6:57:28:f5:34:72:c9:f8:af:0c:7f:cd:c9:da:00: 6d:34:a8:95:be:e4:2e:74:60:46:ad:23:27:ee:bf: fa:76:fb:ad:0d:b5:77:8a:b7:46:14:db:74:5d:71: ac:78:99:88:fb:d9:a6:f7:cb:b4:f4:fe:16:d5:07: a3:7c:2a:0b:1d:3f:d0:29:6c:07:3b:94:a5:eb:ec: 68:4d:a0:cf:af:d4:0e:80:14:0a:ac:cb:07:15:a6: c2:38:6f:50:5d:d3:2c:45:64:b4:d3:a2:e4:47:c8: 41:3f:94:07:b4:1c:4c:99:52:7e:74:b7:a0:74:cb: ac:e1:e4:23:a5:09:d7:bd:f3:f5:89:5f:d2:40:20: 3b:72:54:6a:62:8f:cc:72:11:2b:0c:69:fc:24:2b: 5a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:1B:EB:EA:F2:3E:29:02:E4:58:0A:6F:6C:2B:AB:55:DF:47:AD:60 X509v3 Authority Key Identifier: keyid:10:11:06:C3:75:51:B1:14:75:FB:AA:B2:39:01:15:B7:AC:F2:80:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:71:46:97:08:3c:e2:87:d1:ca:57:a6:08:87:94:91:40:bf: a6:1b:a0:11:e7:54:5f:9d:dc:7d:c2:6e:42:29:b7:66:a2:ac: a2:e3:78:47:4c:ca:a2:f8:5c:66:dd:d0:d6:16:8b:7d:96:f4: df:ef:82:a3:23:06:e6:1d:6e:71:a3:ef:62:a6:5f:77:e8:08: a7:ad:e3:92:74:d1:04:b9:23:95:dd:da:bb:cc:72:8f:17:a2: 47:3a:19:56:1b:8f:8e:e6:7e:54:6b:d4:b7:89:c6:ef:1c:14: 46:af:88:2f:aa:60:b5:ec:57:ba:76:d9:d0:76:79:3a:fe:18: e5:b0:d5:97:15:4c:e2:98:ed:0c:ac:2a:6b:9c:c1:67:51:ab: 3f:5c:8a:2c:24:49:87:54:c0:70:dc:87:eb:eb:e6:7b:ed:65: 60:1d:96:db:4e:fb:1b:6d:eb:91:ea:72:f8:fc:8c:63:9d:22: ba:4a:d5:c3:f0:bb:54:1f:1e:62:cf:93:15:35:44:2b:52:41: f5:ff:c6:4b:f8:12:f5:fd:4b:1d:7e:17:36:4b:ed:7f:38:2d: 06:b4:2a:ca:25:e8:b7:f5:0f:6c:b3:96:b5:c1:b7:4b:d0:6d: 77:d0:ef:0d:f1:d9:ed:17:28:34:c6:b8:ba:f2:9f:28:50:c8: 98:6c:1e:76 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RjI4NjExMC8GA1UEBRMoMTAxMTA2QzM3NTUxQjExNDc1RkJBQUIyMzkwMTE1QjdB Q0YyODAyRDAeFw0yNDA1MTcwNzMwMThaFw0yNDA1MjQwNzMwMThaMBgxFjAUBgNV BAMTDTY2NDcwNzhhLTc4OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmUcSQ+6p6mTU5TS6JuUy57SQ1n9E39yaQZDwmEL+uhevVxW9/4KQN6wRzdmoX GivfjFSnk9xTFAXw06zkO2l7yXkR9c/FsOBFFx5py8v4CDEGkxpP91eRaq1GTb4A 2WMtNZgjVSDTh7ZXKPU0csn4rwx/zcnaAG00qJW+5C50YEatIyfuv/p2+60NtXeK t0YU23Rdcax4mYj72ab3y7T0/hbVB6N8KgsdP9ApbAc7lKXr7GhNoM+v1A6AFAqs ywcVpsI4b1Bd0yxFZLTTouRHyEE/lAe0HEyZUn50t6B0y6zh5COlCde98/WJX9JA IDtyVGpij8xyESsMafwkK1rtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEhvr6vI+ KQLkWApvbCurVd9HrWAwHwYDVR0jBBgwFoAUEBEGw3VRsRR1+6qyOQEVt6zygC0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGMjg2LzFDRTJCMEM0NjY5 NDExRUVBMDQ1Mjk1MUM0RjlBRTAyL0VCRUd3M1ZSc1JSMS02cXlPUUVWdDZ6eWdD MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRUJFR3czVlJzUlIxLTZxeU9RRVZ0Nnp5Z0MwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJG Mjg2LzFDRTJCMEM0NjY5NDExRUVBMDQ1Mjk1MUM0RjlBRTAyL0VCRUd3M1ZSc1JS MS02cXlPUUVWdDZ6eWdDMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANZxRpcIPOKH0cpXpgiHlJFAv6YboBHnVF+d3H3CbkIpt2airKLjeEdM yqL4XGbd0NYWi32W9N/vgqMjBuYdbnGj72KmX3foCKet45J00QS5I5Xd2rvMco8X okc6GVYbj47mflRr1LeJxu8cFEaviC+qYLXsV7p22dB2eTr+GOWw1ZcVTOKY7Qys KmucwWdRqz9ciiwkSYdUwHDch+vr5nvtZWAdlttO+xtt65Hqcvj8jGOdIrpK1cPw u1QfHmLPkxU1RCtSQfX/xkv4EvX9Sx1+FzZL7X84LQa0Ksol6Lf1D2yzlrXBt0vQ bXfQ7w3x2e0XKDTGuLrynyhQyJhsHnY= -----END CERTIFICATE-----Generated at Fri May 17 08:52:53 2024 by rpki-client on console-ams.rpki-client.org