$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft File: EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft (raw, json) Hash identifier: 8bPFw3YlpllKJn8nNSsV9y4IAwC6dkZ2lut/3gl/rY8= Subject key identifier: A8:22:5F:C3:0B:EF:09:9C:08:E0:78:D0:A8:CB:65:C0:8E:DE:1F:F9 Authority key identifier: 11:B4:45:56:B7:96:27:85:3F:40:31:ED:6D:D5:72:84:05:6E:FF:53 Certificate issuer: /CN=A91E7222/serialNumber=11B44556B79627853F4031ED6DD57284056EFF53 Certificate serial: 05A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft Manifest number: 0598 Signing time: Sat 27 Apr 2024 00:18:36 +0000 Manifest this update: Sat 27 Apr 2024 00:18:35 +0000 Manifest next update: Sat 04 May 2024 00:18:35 +0000 Files and hashes: 1: EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl (hash: fwZ5ZPb47+V24ujqJkWGrUX2n9D9vhtHur1HxlUK5uU=) 2: 6BA11A56807911EBA6F1A955C4F9AE02.roa (hash: iZtU7p2H+nbvolRW4eT5L4QU3hEP3JYUgVmrgZqLQNM=) 3: 6C46B54C807911EBA6F1A955C4F9AE02.roa (hash: i/Y56z8Q4Q+yar6QyBHt4z2ceej9ppk32c4UgS/H+XY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 00:18:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1440 (0x5a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7222/serialNumber=11B44556B79627853F4031ED6DD57284056EFF53 Validity Not Before: Apr 27 00:18:35 2024 GMT Not After : May 4 00:18:35 2024 GMT Subject: CN=662c445c-dfcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7a:21:d8:71:3a:78:b8:d7:38:e4:17:dc:f2: 44:c2:9e:97:d1:60:d1:00:6a:56:e4:b5:0a:5a:ad: b8:fd:e4:2d:29:61:2b:b3:01:e4:1b:e3:b1:54:30: 58:be:17:1c:b8:4d:0e:ee:59:ef:75:2a:29:23:03: 5d:d8:e4:0f:9a:ec:21:7f:0f:01:56:0b:e5:87:19: f5:d5:f2:07:ab:d2:d0:fb:c2:9f:9f:9e:8f:1a:40: fa:9f:6e:4a:10:03:ec:85:e9:9f:26:05:1b:f0:8c: b4:39:a3:53:68:0e:59:0b:2f:96:c5:84:56:b3:2a: 8c:75:4c:50:3d:df:cf:39:09:60:b7:64:b6:12:9b: 4f:6c:21:cf:14:cf:da:e3:ee:f8:d5:3d:de:c5:8d: 98:c2:bc:47:42:27:dd:38:44:9a:c3:66:db:66:7c: b8:04:11:db:28:f0:0d:e8:d6:f4:50:4f:cf:27:46: 34:0e:66:78:4e:3c:b6:40:8b:f4:6b:a0:df:8f:5b: f7:fd:31:94:e8:bf:1a:f8:31:eb:a0:f7:5b:7e:13: 2d:23:c7:67:b9:c6:9f:a4:6c:5c:d7:79:71:00:11: d8:72:b1:04:ae:bd:42:d4:47:3f:77:57:48:7b:69: bb:17:60:29:61:c3:b1:21:34:12:4e:e8:de:9b:96: 12:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:22:5F:C3:0B:EF:09:9C:08:E0:78:D0:A8:CB:65:C0:8E:DE:1F:F9 X509v3 Authority Key Identifier: keyid:11:B4:45:56:B7:96:27:85:3F:40:31:ED:6D:D5:72:84:05:6E:FF:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:28:a0:2a:dd:fd:b0:27:61:74:7f:2a:9e:8c:a3:66:4d:58: fe:88:cf:0a:83:58:86:c7:37:7e:aa:f2:62:c5:7a:df:a6:9f: ec:73:34:30:c1:db:28:16:cb:39:fa:49:56:93:3d:15:ab:42: 40:ae:13:dd:b3:39:18:22:56:b9:9c:3b:39:56:e0:de:da:df: 98:18:2e:65:68:1c:2a:52:d9:bd:be:88:5c:96:f0:d8:e4:99: 07:73:84:16:35:06:05:c2:d7:d5:aa:ed:a0:03:15:cf:75:81: 98:4e:7d:77:20:0a:d7:a7:06:68:46:5e:3d:de:77:a4:48:96: e7:f7:8b:c0:8c:b1:fc:e1:54:bd:10:ac:c1:30:5f:88:ad:a8: 4b:dc:f5:1b:8d:ed:e0:59:32:dc:45:9f:70:b0:15:dd:8e:f9: 74:c1:a8:7d:d0:c2:ee:be:31:03:1e:97:51:03:0c:08:66:d8: cc:9a:9d:45:81:9f:48:03:e4:58:e6:9e:ee:8b:8b:91:5e:d4: 23:70:11:11:0b:fc:7d:16:df:68:69:64:39:3b:54:87:e4:5d: c3:4e:33:1f:3d:59:c2:00:f1:b0:4c:67:59:ff:49:b6:77:99: be:1a:61:20:7c:33:bd:20:ef:50:8e:64:0e:8a:1d:c3:9c:b3: 34:fe:11:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcyMjIxMTAvBgNVBAUTKDExQjQ0NTU2Qjc5NjI3ODUzRjQwMzFFRDZERDU3Mjg0 MDU2RUZGNTMwHhcNMjQwNDI3MDAxODM1WhcNMjQwNTA0MDAxODM1WjAYMRYwFAYD VQQDEw02NjJjNDQ1Yy1kZmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXoh2HE6eLjXOOQX3PJEwp6X0WDRAGpW5LUKWq24/eQtKWErswHkG+OxVDBY vhccuE0O7lnvdSopIwNd2OQPmuwhfw8BVgvlhxn11fIHq9LQ+8Kfn56PGkD6n25K EAPshemfJgUb8Iy0OaNTaA5ZCy+WxYRWsyqMdUxQPd/POQlgt2S2EptPbCHPFM/a 4+741T3exY2YwrxHQifdOESaw2bbZny4BBHbKPAN6Nb0UE/PJ0Y0DmZ4Tjy2QIv0 a6Dfj1v3/TGU6L8a+DHroPdbfhMtI8dnucafpGxc13lxABHYcrEErr1C1Ec/d1dI e2m7F2ApYcOxITQSTujem5YSKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKgiX8ML 7wmcCOB40KjLZcCO3h/5MB8GA1UdIwQYMBaAFBG0RVa3lieFP0Ax7W3VcoQFbv9T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzIyMi9DQTA3NjE1ODgw NzUxMUVCOERDQjk4NEVDNEY5QUUwMi9FYlJGVnJlV0o0VV9RREh0YmRWeWhBVnVf MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ViUkZWcmVXSjRVX1FESHRiZFZ5aEFWdV8xTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzIyMi9DQTA3NjE1ODgwNzUxMUVCOERDQjk4NEVDNEY5QUUwMi9FYlJGVnJlV0o0 VV9RREh0YmRWeWhBVnVfMU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjKKAq3f2wJ2F0fyqejKNmTVj+iM8Kg1iGxzd+qvJixXrfpp/sczQw wdsoFss5+klWkz0Vq0JArhPdszkYIla5nDs5VuDe2t+YGC5laBwqUtm9vohclvDY 5JkHc4QWNQYFwtfVqu2gAxXPdYGYTn13IArXpwZoRl493nekSJbn94vAjLH84VS9 EKzBMF+IrahL3PUbje3gWTLcRZ9wsBXdjvl0wah90MLuvjEDHpdRAwwIZtjMmp1F gZ9IA+RY5p7ui4uRXtQjcBERC/x9Ft9oaWQ5O1SH5F3DTjMfPVnCAPGwTGdZ/0m2 d5m+GmEgfDO9IO9QjmQOih3DnLM0/hFI -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:49 2024 by rpki-client on console-ams.rpki-client.org