$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft File: d_7bUqwSiVBJ40An4RJqb9FRHu8.mft (raw, json) Hash identifier: icTiE9xviK86F6NcD6M1b04UxMU/ySWs7iiNb6oKC1k= Subject key identifier: 8F:07:A6:44:91:9D:1F:DA:BE:28:55:85:FB:41:BD:DD:3B:C6:81:50 Authority key identifier: 77:FE:DB:52:AC:12:89:50:49:E3:40:27:E1:12:6A:6F:D1:51:1E:EF Certificate issuer: /CN=A9114D23/serialNumber=77FEDB52AC12895049E34027E1126A6FD1511EEF Certificate serial: 33C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d_7bUqwSiVBJ40An4RJqb9FRHu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft Manifest number: 33C0 Signing time: Sat 18 May 2024 15:16:08 +0000 Manifest this update: Sat 18 May 2024 15:16:07 +0000 Manifest next update: Sat 25 May 2024 15:16:07 +0000 Files and hashes: 1: d_7bUqwSiVBJ40An4RJqb9FRHu8.crl (hash: +Pbn9XQclEYXI1VutfyABxTG/g+UYTebxvWhGIG/+yw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.crl rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d_7bUqwSiVBJ40An4RJqb9FRHu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13248 (0x33c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114D23/serialNumber=77FEDB52AC12895049E34027E1126A6FD1511EEF Validity Not Before: May 18 15:16:07 2024 GMT Not After : May 25 15:16:07 2024 GMT Subject: CN=6648c637-1a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e0:88:91:a6:65:9f:35:9e:78:a2:71:a4:51: e4:28:4a:42:da:88:c7:45:1b:1f:a7:24:9b:f8:ed: 9d:1f:ac:0f:5a:d7:d2:43:1e:1c:35:3b:57:38:44: a6:0d:62:89:91:09:bd:6c:82:d5:64:3b:ec:97:f0: 13:27:6a:95:17:58:3d:7f:35:da:b3:2d:03:ed:ec: a7:04:8c:0e:e0:1b:fe:01:a4:67:de:aa:e2:80:9d: 7b:68:28:29:93:14:a5:f2:6c:af:79:50:7c:1c:e7: f9:37:eb:20:f6:93:9d:ab:37:06:2d:0a:83:c9:97: 89:64:96:d3:d5:03:73:f9:de:05:e2:a5:48:7f:73: bd:dd:46:42:14:f4:c2:e8:3d:e4:73:76:4d:6f:e3: e3:24:9f:6c:48:2a:11:a5:64:18:78:67:29:1c:46: 66:a4:8c:89:6e:28:20:95:b4:fc:1e:00:14:0d:14: 9c:5f:b6:a0:d1:b3:52:9d:31:85:cd:a9:1c:7d:a6: 36:7c:3e:ba:69:fc:1a:1d:e2:9c:92:d6:d0:50:3f: e5:72:38:d4:b8:1c:12:3d:7a:b3:38:62:48:2a:df: 5e:35:31:37:1f:d0:07:4d:53:d7:1c:0a:1a:c2:94: 69:69:16:de:51:2d:4a:c9:98:61:4d:ce:03:44:00: ae:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:07:A6:44:91:9D:1F:DA:BE:28:55:85:FB:41:BD:DD:3B:C6:81:50 X509v3 Authority Key Identifier: keyid:77:FE:DB:52:AC:12:89:50:49:E3:40:27:E1:12:6A:6F:D1:51:1E:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d_7bUqwSiVBJ40An4RJqb9FRHu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:c0:19:20:9f:5e:ff:7e:68:63:4b:f4:92:20:49:c5:7a:65: 66:f6:ef:5b:91:57:6d:24:3c:d8:cf:5a:a1:fb:0b:ed:6b:a8: 4f:c6:bb:c0:10:a7:98:27:69:0c:79:48:89:f7:76:9d:0b:9c: 19:9a:e9:57:ce:fa:f5:36:d0:ee:0d:4a:ce:84:a0:09:64:4b: ea:f0:53:e0:c6:8e:bb:c7:e9:fe:b9:11:7b:96:41:5f:b2:d4: f2:85:80:17:6a:0b:1b:9a:09:5b:c2:d5:3c:78:ae:07:d5:e5: 63:19:8e:6d:11:38:aa:c5:dd:41:98:23:bc:91:62:c2:41:99: c1:01:8f:f2:74:5e:29:86:ac:1d:1c:89:43:bf:b9:98:c8:32: 27:b0:94:fa:10:2e:99:01:4c:69:c5:e0:77:c4:b8:c5:ab:3e: bf:a5:f8:f8:ab:75:bb:8f:ff:8a:82:90:53:ea:74:9c:d9:db: be:37:9b:17:43:c8:b8:41:0e:04:5e:89:49:d6:71:9d:83:01: f1:17:10:0c:17:a1:2a:05:57:69:f7:8e:10:20:2a:d5:7d:bf: 75:bd:46:de:db:11:d6:cb:b4:8a:65:d7:71:e7:47:cb:84:14: b2:e4:51:60:b2:74:a8:b9:f4:f5:f2:f2:c2:30:23:d2:43:67: 60:af:cf:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTREMjMxMTAvBgNVBAUTKDc3RkVEQjUyQUMxMjg5NTA0OUUzNDAyN0UxMTI2QTZG RDE1MTFFRUYwHhcNMjQwNTE4MTUxNjA3WhcNMjQwNTI1MTUxNjA3WjAYMRYwFAYD VQQDEw02NjQ4YzYzNy0xYTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAouCIkaZlnzWeeKJxpFHkKEpC2ojHRRsfpySb+O2dH6wPWtfSQx4cNTtXOESm DWKJkQm9bILVZDvsl/ATJ2qVF1g9fzXasy0D7eynBIwO4Bv+AaRn3qrigJ17aCgp kxSl8myveVB8HOf5N+sg9pOdqzcGLQqDyZeJZJbT1QNz+d4F4qVIf3O93UZCFPTC 6D3kc3ZNb+PjJJ9sSCoRpWQYeGcpHEZmpIyJbigglbT8HgAUDRScX7ag0bNSnTGF zakcfaY2fD66afwaHeKcktbQUD/lcjjUuBwSPXqzOGJIKt9eNTE3H9AHTVPXHAoa wpRpaRbeUS1KyZhhTc4DRACuMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI8HpkSR nR/avihVhftBvd07xoFQMB8GA1UdIwQYMBaAFHf+21KsEolQSeNAJ+ESam/RUR7v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEQyMy8wNDY5MDk3ODFE QTExMUUyQTU2REY2OTIwOEIwMkNEMi9kXzdiVXF3U2lWQko0MEFuNFJKcWI5RlJI dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RfN2JVcXdTaVZCSjQwQW40UkpxYjlGUkh1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEQyMy8wNDY5MDk3ODFEQTExMUUyQTU2REY2OTIwOEIwMkNEMi9kXzdiVXF3U2lW Qko0MEFuNFJKcWI5RlJIdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFwBkgn17/fmhjS/SSIEnFemVm9u9bkVdtJDzYz1qh+wvta6hPxrvA EKeYJ2kMeUiJ93adC5wZmulXzvr1NtDuDUrOhKAJZEvq8FPgxo67x+n+uRF7lkFf stTyhYAXagsbmglbwtU8eK4H1eVjGY5tETiqxd1BmCO8kWLCQZnBAY/ydF4phqwd HIlDv7mYyDInsJT6EC6ZAUxpxeB3xLjFqz6/pfj4q3W7j/+KgpBT6nSc2du+N5sX Q8i4QQ4EXolJ1nGdgwHxFxAMF6EqBVdp944QICrVfb91vUbe2xHWy7SKZddx50fL hBSy5FFgsnSoufT18vLCMCPSQ2dgr8+n -----END CERTIFICATE-----Generated at Sat May 18 16:19:51 2024 by rpki-client on console-fra.rpki-client.org