$ rpki-client -vvf rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft File: 7eL0zENHKMeciTkUFPbuA_tBaIw.mft (raw, json) Hash identifier: QS9cvrDk9UfKVki9B9tk18PSxQ6j+vY3KInZaoy91bk= Subject key identifier: A7:83:BB:26:C0:96:73:F8:57:A2:22:AD:AD:00:12:9F:4E:5A:FE:30 Authority key identifier: ED:E2:F4:CC:43:47:28:C7:9C:89:39:14:14:F6:EE:03:FB:41:68:8C Certificate issuer: /CN=A912294F/serialNumber=EDE2F4CC434728C79C89391414F6EE03FB41688C Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7eL0zENHKMeciTkUFPbuA_tBaIw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft Manifest number: 7C Signing time: Sun 19 May 2024 07:15:57 +0000 Manifest this update: Sun 19 May 2024 07:15:56 +0000 Manifest next update: Sun 26 May 2024 07:15:56 +0000 Files and hashes: 1: 7eL0zENHKMeciTkUFPbuA_tBaIw.crl (hash: wmqCQpTMMERuqmODRmbWR6m5eNW4DbisvAiT+4k69Kg=) 2: 4FC496A657BC11EE9025060BC4F9AE02.roa (hash: t9JXjGRiZJRaRIkD8UWGwvtm6rQfd2ZXh3xYo44qscI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.crl rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7eL0zENHKMeciTkUFPbuA_tBaIw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912294F/serialNumber=EDE2F4CC434728C79C89391414F6EE03FB41688C Validity Not Before: May 19 07:15:56 2024 GMT Not After : May 26 07:15:56 2024 GMT Subject: CN=6649a72d-186a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0e:19:a9:e2:bc:4a:67:b5:40:18:46:2a:4e: a7:94:5f:f1:5a:24:81:58:a9:31:55:04:ce:46:63: 64:9d:38:06:1e:36:bc:dc:45:97:8c:44:82:f7:82: 32:f9:59:76:0e:1e:13:3d:92:55:05:a9:17:02:2d: b1:a5:65:62:cd:7b:5f:67:d1:c3:db:9a:ec:dd:e7: e0:be:f2:a0:5e:a6:81:3f:ed:06:c4:af:b4:33:8b: 5d:a4:31:fb:b6:1d:9b:8e:d5:42:56:a7:b1:2d:96: 4e:c7:bd:95:9e:de:a3:99:f7:c2:c8:12:28:11:df: 41:59:df:3a:2d:95:09:c6:d3:34:cd:87:08:23:ac: 89:1e:5c:f5:63:ff:e4:8e:21:db:49:6d:46:88:e2: 3d:01:4b:e4:54:92:65:86:41:44:7f:68:c1:73:d9: 19:94:6b:89:e6:a6:ed:5d:bd:33:8d:b1:ed:96:92: 87:c6:07:c0:24:63:60:d6:93:bd:ab:8e:85:21:f5: 84:48:a8:8b:4e:f1:6b:85:bc:03:0c:e3:e4:0a:b8: 69:c8:be:08:86:ea:68:5d:47:fb:fb:ad:fd:50:39: 85:4f:2c:3c:e3:03:4c:5d:73:5f:88:0a:68:23:29: b9:7a:50:a7:d5:e0:bb:9a:12:10:25:35:85:2c:31: f4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:83:BB:26:C0:96:73:F8:57:A2:22:AD:AD:00:12:9F:4E:5A:FE:30 X509v3 Authority Key Identifier: keyid:ED:E2:F4:CC:43:47:28:C7:9C:89:39:14:14:F6:EE:03:FB:41:68:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7eL0zENHKMeciTkUFPbuA_tBaIw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:9b:f9:17:c6:e0:5b:4e:c0:15:16:30:3d:1f:d4:4f:3e:6a: b7:59:79:d9:18:dd:d6:c7:89:b0:06:e9:f4:a0:3b:2a:a7:7e: 04:ad:9d:4f:4a:a7:52:c5:7c:a2:9c:2e:7d:7d:25:ff:fc:1c: 82:57:c4:8a:b4:6a:be:6b:9e:9a:98:c2:65:a0:c6:fa:de:89: bb:a4:28:ca:18:b7:83:4c:b8:f1:97:dd:ac:05:b6:b8:63:2b: 9c:c5:f1:09:04:a0:30:3d:f5:65:08:7e:36:d2:40:b2:6c:b9: fb:25:5d:90:46:01:0c:fa:9c:5d:46:c3:28:3d:5a:20:11:6a: 77:cc:99:7c:e8:24:ba:e6:27:3e:38:c6:96:97:62:5c:8f:ed: 50:d2:6c:44:d0:d6:bb:ed:ad:1c:9b:0d:de:d3:3f:e4:7e:30: 48:ce:54:8a:a7:ee:65:c9:83:2a:6f:6a:f2:7e:99:66:b1:68: fc:0e:e9:65:d2:a1:ac:d0:cc:72:d2:29:af:96:a2:d7:b9:97: fb:a4:c9:4c:6e:00:ae:e6:89:8a:0f:9f:86:45:b4:ec:be:a1: 65:59:30:1a:e7:32:9e:df:2d:41:e8:4a:b1:6a:2e:3a:71:0c: 85:91:c3:b9:0d:b4:a0:89:de:c9:7d:67:37:df:2b:af:bf:3e: 62:82:d2:6f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Mjk0RjExMC8GA1UEBRMoRURFMkY0Q0M0MzQ3MjhDNzlDODkzOTE0MTRGNkVFMDNG QjQxNjg4QzAeFw0yNDA1MTkwNzE1NTZaFw0yNDA1MjYwNzE1NTZaMBgxFjAUBgNV BAMTDTY2NDlhNzJkLTE4NmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3Dhmp4rxKZ7VAGEYqTqeUX/FaJIFYqTFVBM5GY2SdOAYeNrzcRZeMRIL3gjL5 WXYOHhM9klUFqRcCLbGlZWLNe19n0cPbmuzd5+C+8qBepoE/7QbEr7Qzi12kMfu2 HZuO1UJWp7Etlk7HvZWe3qOZ98LIEigR30FZ3zotlQnG0zTNhwgjrIkeXPVj/+SO IdtJbUaI4j0BS+RUkmWGQUR/aMFz2RmUa4nmpu1dvTONse2WkofGB8AkY2DWk72r joUh9YRIqItO8WuFvAMM4+QKuGnIvgiG6mhdR/v7rf1QOYVPLDzjA0xdc1+ICmgj Kbl6UKfV4LuaEhAlNYUsMfTRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUp4O7JsCW c/hXoiKtrQASn05a/jAwHwYDVR0jBBgwFoAU7eL0zENHKMeciTkUFPbuA/tBaIww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIyOTRGL0M5ODkwNjcyNTdC QTExRUVBNTlENUE4NEM0RjlBRTAyLzdlTDB6RU5IS01lY2lUa1VGUGJ1QV90QmFJ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN2VMMHpFTkhLTWVjaVRrVUZQYnVBX3RCYUl3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIy OTRGL0M5ODkwNjcyNTdCQTExRUVBNTlENUE4NEM0RjlBRTAyLzdlTDB6RU5IS01l Y2lUa1VGUGJ1QV90QmFJdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJOb+RfG4FtOwBUWMD0f1E8+ardZedkY3dbHibAG6fSgOyqnfgStnU9K p1LFfKKcLn19Jf/8HIJXxIq0ar5rnpqYwmWgxvreibukKMoYt4NMuPGX3awFtrhj K5zF8QkEoDA99WUIfjbSQLJsufslXZBGAQz6nF1Gwyg9WiARanfMmXzoJLrmJz44 xpaXYlyP7VDSbETQ1rvtrRybDd7TP+R+MEjOVIqn7mXJgypvavJ+mWaxaPwO6WXS oazQzHLSKa+Wote5l/ukyUxuAK7miYoPn4ZFtOy+oWVZMBrnMp7fLUHoSrFqLjpx DIWRw7kNtKCJ3sl9ZzffK6+/PmKC0m8= -----END CERTIFICATE-----Generated at Sun May 19 07:40:37 2024 by rpki-client on console-fra.rpki-client.org