$ rpki-client -vvf rpki.apnic.net/member_repository/A911513F/CCD7F934553B11EBB13DFE6FC4F9AE02/7hyKGwbDa9zEPHECS1LZHGpq9ro.mft File: 7hyKGwbDa9zEPHECS1LZHGpq9ro.mft (raw, json) Hash identifier: N+iynw1HTdycv50V6PKwJfat8JxfjWbLAITEJk638fE= Subject key identifier: AD:15:37:AA:F8:AB:9B:75:19:4B:19:45:E2:B9:DE:CF:73:DC:43:95 Authority key identifier: EE:1C:8A:1B:06:C3:6B:DC:C4:3C:71:02:4B:52:D9:1C:6A:6A:F6:BA Certificate issuer: /CN=A911513F/serialNumber=EE1C8A1B06C36BDCC43C71024B52D91C6A6AF6BA Certificate serial: 0615 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7hyKGwbDa9zEPHECS1LZHGpq9ro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911513F/CCD7F934553B11EBB13DFE6FC4F9AE02/7hyKGwbDa9zEPHECS1LZHGpq9ro.mft Manifest number: 0611 Signing time: Sat 18 May 2024 23:49:06 +0000 Manifest this update: Sat 18 May 2024 23:49:05 +0000 Manifest next update: Sat 25 May 2024 23:49:05 +0000 Files and hashes: 1: 7hyKGwbDa9zEPHECS1LZHGpq9ro.crl (hash: Pw6u71MBERYxdXLILYU23roczDKxwtUbVd4Qjmm4W8w=) 2: B9F42C72554D11EBA9D33130C4F9AE02.roa (hash: cB3h0BwU7n31UJ46QG5DLAIX4mE+Nr0sDLSdub3xWHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911513F/CCD7F934553B11EBB13DFE6FC4F9AE02/7hyKGwbDa9zEPHECS1LZHGpq9ro.crl rsync://rpki.apnic.net/member_repository/A911513F/CCD7F934553B11EBB13DFE6FC4F9AE02/7hyKGwbDa9zEPHECS1LZHGpq9ro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7hyKGwbDa9zEPHECS1LZHGpq9ro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1557 (0x615) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911513F/serialNumber=EE1C8A1B06C36BDCC43C71024B52D91C6A6AF6BA Validity Not Before: May 18 23:49:05 2024 GMT Not After : May 25 23:49:05 2024 GMT Subject: CN=66493e71-c170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d3:f0:39:8a:02:40:e0:0c:6c:70:ff:f7:52: ac:87:53:33:63:48:25:06:0f:1e:8a:27:68:73:ce: d1:85:55:d4:54:dc:0e:9a:b4:27:ce:03:8f:1d:80: 23:b4:7e:ad:e9:d8:99:c5:b8:a4:10:4a:3e:1b:35: 9d:3e:95:06:28:7c:60:bc:01:1e:f3:64:7c:4f:0f: f2:2f:11:66:55:6d:39:60:7d:14:38:a5:96:cc:99: c8:4b:55:07:48:c0:ce:f6:e5:20:0b:3f:25:9b:f5: e1:d1:c4:fe:f8:3e:91:34:1e:c4:6a:5f:f9:f1:24: f4:b5:d8:80:79:99:fd:31:88:cc:a6:4b:4c:c5:72: 17:ad:2c:69:b8:4c:7a:9b:9f:af:54:cd:02:b6:17: 5a:bf:77:8c:47:3e:0a:ef:64:2e:e8:b6:82:d3:df: 42:38:7e:28:63:9d:70:22:6a:7b:3b:6a:df:23:b0: ed:d1:e2:8a:c7:6f:91:87:33:22:95:00:bb:18:98: 22:3c:27:56:0c:77:64:8c:57:2e:fe:d4:77:0f:07: 88:b3:59:5e:59:28:19:72:cc:70:af:62:b6:cb:77: 78:2f:c7:01:cd:07:aa:c2:e1:ca:5c:e8:a9:67:bd: cb:0f:4d:61:17:f4:51:42:6c:3e:65:a7:8c:24:06: cc:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:15:37:AA:F8:AB:9B:75:19:4B:19:45:E2:B9:DE:CF:73:DC:43:95 X509v3 Authority Key Identifier: keyid:EE:1C:8A:1B:06:C3:6B:DC:C4:3C:71:02:4B:52:D9:1C:6A:6A:F6:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911513F/CCD7F934553B11EBB13DFE6FC4F9AE02/7hyKGwbDa9zEPHECS1LZHGpq9ro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7hyKGwbDa9zEPHECS1LZHGpq9ro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911513F/CCD7F934553B11EBB13DFE6FC4F9AE02/7hyKGwbDa9zEPHECS1LZHGpq9ro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:5c:57:e0:81:cf:50:5c:ae:a4:ad:cd:c6:bc:e8:10:85:7c: f3:36:39:83:08:ed:d7:a9:bb:e6:8a:e1:50:da:80:c6:6f:a3: 92:44:e3:ab:76:c4:02:cf:a6:42:2f:6a:c0:1f:ba:d3:be:03: 74:ec:e2:6f:b5:17:77:7e:8e:80:d8:21:49:05:da:4f:a4:16: ea:f7:84:5d:9c:01:84:ce:07:4c:60:ce:76:92:15:75:2c:60: 28:7c:e3:9f:27:ee:3d:f5:bb:03:66:a8:aa:f7:46:43:21:b0: 09:4e:5e:df:5d:ff:87:d2:0f:4a:ed:ff:80:cc:c7:f7:cc:68: 53:eb:2a:a1:19:d7:4d:ce:70:38:38:b9:68:39:d1:68:92:96: 91:00:46:49:e9:22:ab:92:0d:c9:79:db:2b:f4:a5:a7:be:ba: 32:4a:39:a0:14:02:95:54:14:0b:1e:01:a9:2b:5d:25:0b:dd: b0:1a:9d:7e:2d:16:cc:a6:0f:58:04:f2:cc:cc:8d:dd:7f:22: 8f:f6:1b:01:60:b1:26:21:57:5d:75:fa:89:8a:36:e1:77:68: 5e:f7:81:8c:b0:15:86:66:b1:e6:d9:b5:c5:05:f8:bb:3f:14: 55:10:c8:81:37:fb:43:88:ad:ad:18:5c:c0:10:d3:3e:72:91: ee:51:8b:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTUxM0YxMTAvBgNVBAUTKEVFMUM4QTFCMDZDMzZCRENDNDNDNzEwMjRCNTJEOTFD NkE2QUY2QkEwHhcNMjQwNTE4MjM0OTA1WhcNMjQwNTI1MjM0OTA1WjAYMRYwFAYD VQQDEw02NjQ5M2U3MS1jMTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAydPwOYoCQOAMbHD/91Ksh1MzY0glBg8eiidoc87RhVXUVNwOmrQnzgOPHYAj tH6t6diZxbikEEo+GzWdPpUGKHxgvAEe82R8Tw/yLxFmVW05YH0UOKWWzJnIS1UH SMDO9uUgCz8lm/Xh0cT++D6RNB7Eal/58ST0tdiAeZn9MYjMpktMxXIXrSxpuEx6 m5+vVM0Cthdav3eMRz4K72Qu6LaC099COH4oY51wImp7O2rfI7Dt0eKKx2+RhzMi lQC7GJgiPCdWDHdkjFcu/tR3DweIs1leWSgZcsxwr2K2y3d4L8cBzQeqwuHKXOip Z73LD01hF/RRQmw+ZaeMJAbMIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK0VN6r4 q5t1GUsZReK53s9z3EOVMB8GA1UdIwQYMBaAFO4cihsGw2vcxDxxAktS2Rxqava6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTEzRi9DQ0Q3RjkzNDU1 M0IxMUVCQjEzREZFNkZDNEY5QUUwMi83aHlLR3diRGE5ekVQSEVDUzFMWkhHcHE5 cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdoeUtHd2JEYTl6RVBIRUNTMUxaSEdwcTlyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTEzRi9DQ0Q3RjkzNDU1M0IxMUVCQjEzREZFNkZDNEY5QUUwMi83aHlLR3diRGE5 ekVQSEVDUzFMWkhHcHE5cm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHXFfggc9QXK6krc3GvOgQhXzzNjmDCO3XqbvmiuFQ2oDGb6OSROOr dsQCz6ZCL2rAH7rTvgN07OJvtRd3fo6A2CFJBdpPpBbq94RdnAGEzgdMYM52khV1 LGAofOOfJ+499bsDZqiq90ZDIbAJTl7fXf+H0g9K7f+AzMf3zGhT6yqhGddNznA4 OLloOdFokpaRAEZJ6SKrkg3Jedsr9KWnvroySjmgFAKVVBQLHgGpK10lC92wGp1+ LRbMpg9YBPLMzI3dfyKP9hsBYLEmIVdddfqJijbhd2he94GMsBWGZrHm2bXFBfi7 PxRVEMiBN/tDiK2tGFzAENM+cpHuUYuG -----END CERTIFICATE-----Generated at Sun May 19 00:30:12 2024 by rpki-client on console-ams.rpki-client.org