$ rpki-client -vvf rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft File: EESZe8Y6gT2gTBuRiXN0tosEumE.mft (raw, json) Hash identifier: /RjjXQ/JddWzjL2YVIWZzZLPjA2NkSoAJw43whEt1s0= Subject key identifier: 21:8F:6F:32:99:D6:45:00:BF:A7:5B:24:FF:64:0D:8E:7E:6D:CF:4F Authority key identifier: 10:44:99:7B:C6:3A:81:3D:A0:4C:1B:91:89:73:74:B6:8B:04:BA:61 Certificate issuer: /CN=A91E87B4/serialNumber=1044997BC63A813DA04C1B91897374B68B04BA61 Certificate serial: 0DF6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EESZe8Y6gT2gTBuRiXN0tosEumE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft Manifest number: 0DEE Signing time: Fri 22 Nov 2024 17:46:14 +0000 Manifest this update: Fri 22 Nov 2024 17:46:14 +0000 Manifest next update: Fri 29 Nov 2024 17:46:14 +0000 Files and hashes: 1: EESZe8Y6gT2gTBuRiXN0tosEumE.crl (hash: NVtsRXZ4xcNShxsJviKZa3ryv4RqLMqhoYHugVL6Zqc=) 2: 6D6DED2830BE11EC9401610CC4F9AE02.roa (hash: zXn/ok7UahfrfJN7y5IqWCbS7b6GV0S9Q2wuv5crJWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.crl rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EESZe8Y6gT2gTBuRiXN0tosEumE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:46:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3574 (0xdf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E87B4/serialNumber=1044997BC63A813DA04C1B91897374B68B04BA61 Validity Not Before: Nov 22 17:46:14 2024 GMT Not After : Nov 29 17:46:14 2024 GMT Subject: CN=6740c366-095f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:46:4e:3d:05:cd:ab:8a:b6:0e:16:42:5e:69: 6d:9c:97:be:9b:de:ec:37:43:43:54:6c:3e:44:47: 95:26:80:2c:4c:9e:a6:c3:12:c7:5d:b3:e3:0b:13: 92:56:60:b6:21:64:e5:c3:f0:98:da:95:31:1a:7f: 7a:bc:a7:f0:46:63:38:09:20:78:af:14:0a:03:c7: 15:2a:3b:21:cc:17:fd:89:30:76:f2:6b:54:cc:b3: ad:a6:fc:27:93:d9:75:ae:78:0b:15:38:87:4d:de: 9b:68:b8:36:b3:ea:90:f7:42:08:27:e2:d3:c5:83: 82:02:6f:38:23:56:1b:6d:68:1e:30:b5:0c:ce:11: 3a:28:d2:3c:81:9e:0b:d8:3f:e4:dd:8d:d6:e8:71: 76:42:40:27:d4:af:cd:90:f8:4f:55:1b:b8:69:f2: 4f:b0:ed:53:12:b5:d7:a1:28:2b:76:81:79:ad:34: 14:e1:5f:71:84:d8:81:d4:6e:7f:86:8a:97:77:c1: 67:95:62:33:91:52:18:cb:5b:f0:80:ab:db:04:2e: 83:b3:76:4a:4f:14:30:63:59:a2:5b:73:eb:db:74: a8:12:ec:d9:8c:56:0c:fa:ce:56:7a:7f:12:23:0b: ce:61:8b:b2:4f:6e:a2:20:25:46:ed:0c:51:e0:08: cb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:8F:6F:32:99:D6:45:00:BF:A7:5B:24:FF:64:0D:8E:7E:6D:CF:4F X509v3 Authority Key Identifier: keyid:10:44:99:7B:C6:3A:81:3D:A0:4C:1B:91:89:73:74:B6:8B:04:BA:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EESZe8Y6gT2gTBuRiXN0tosEumE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:e8:86:6a:a9:32:e7:51:a5:d9:ee:3a:fc:c9:0a:04:37:da: d5:86:a6:1a:e4:54:b3:32:0d:15:cb:46:2c:ac:40:8f:48:cc: 63:9b:58:04:3c:ce:c0:70:c7:bc:7c:2a:e3:de:f5:cd:38:41: ca:d6:98:9e:65:f9:7d:50:c2:e8:8d:00:2f:38:d4:1e:17:52: e0:b2:d9:6c:fe:4b:1d:7e:18:62:24:72:ae:66:e4:36:fe:47: 2f:97:46:dd:22:ea:17:eb:c7:83:fc:36:cd:a8:b6:dd:4e:90: 04:00:20:30:25:4c:0d:63:7f:e7:1e:98:d1:d4:e1:5a:3e:80: b2:ad:4b:67:19:9c:a6:9e:c1:99:e9:f8:40:e1:2b:e9:e6:db: 8a:da:86:e8:2f:aa:d5:45:22:73:51:ea:3d:ad:4d:82:ee:a7: ce:9b:7b:c8:2a:75:a8:43:75:05:e2:46:05:43:f1:13:31:27: 09:72:e7:eb:d2:a2:cc:5b:da:9b:a5:d5:16:f3:16:93:ec:a1: 33:d5:d8:60:ab:36:de:b8:85:23:bc:01:6e:85:af:9a:de:58: fb:b5:34:8f:4d:b2:83:3f:5e:92:7f:39:6f:76:ad:0d:cd:15: d7:e6:67:6d:e2:89:60:d5:c0:9c:87:88:1d:32:bd:b7:3f:19: b6:9f:f4:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg3QjQxMTAvBgNVBAUTKDEwNDQ5OTdCQzYzQTgxM0RBMDRDMUI5MTg5NzM3NEI2 OEIwNEJBNjEwHhcNMjQxMTIyMTc0NjE0WhcNMjQxMTI5MTc0NjE0WjAYMRYwFAYD VQQDEw02NzQwYzM2Ni0wOTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1UZOPQXNq4q2DhZCXmltnJe+m97sN0NDVGw+REeVJoAsTJ6mwxLHXbPjCxOS VmC2IWTlw/CY2pUxGn96vKfwRmM4CSB4rxQKA8cVKjshzBf9iTB28mtUzLOtpvwn k9l1rngLFTiHTd6baLg2s+qQ90IIJ+LTxYOCAm84I1YbbWgeMLUMzhE6KNI8gZ4L 2D/k3Y3W6HF2QkAn1K/NkPhPVRu4afJPsO1TErXXoSgrdoF5rTQU4V9xhNiB1G5/ hoqXd8FnlWIzkVIYy1vwgKvbBC6Ds3ZKTxQwY1miW3Pr23SoEuzZjFYM+s5Wen8S IwvOYYuyT26iICVG7QxR4AjLOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGPbzKZ 1kUAv6dbJP9kDY5+bc9PMB8GA1UdIwQYMBaAFBBEmXvGOoE9oEwbkYlzdLaLBLph MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODdCNC8zNjA4OTIyMDlE OUExMUU5QUU5Qzg4NUFDNEY5QUUwMi9FRVNaZThZNmdUMmdUQnVSaVhOMHRvc0V1 bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VFU1plOFk2Z1QyZ1RCdVJpWE4wdG9zRXVtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODdCNC8zNjA4OTIyMDlEOUExMUU5QUU5Qzg4NUFDNEY5QUUwMi9FRVNaZThZNmdU MmdUQnVSaVhOMHRvc0V1bUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA26IZqqTLnUaXZ7jr8yQoEN9rVhqYa5FSzMg0Vy0YsrECPSMxjm1gE PM7AcMe8fCrj3vXNOEHK1pieZfl9UMLojQAvONQeF1Lgstls/ksdfhhiJHKuZuQ2 /kcvl0bdIuoX68eD/DbNqLbdTpAEACAwJUwNY3/nHpjR1OFaPoCyrUtnGZymnsGZ 6fhA4Svp5tuK2oboL6rVRSJzUeo9rU2C7qfOm3vIKnWoQ3UF4kYFQ/ETMScJcufr 0qLMW9qbpdUW8xaT7KEz1dhgqzbeuIUjvAFuha+a3lj7tTSPTbKDP16Sfzlvdq0N zRXX5mdt4olg1cCch4gdMr23Pxm2n/Qj -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:21 2024 by rpki-client on console-ams.rpki-client.org