$ rpki-client -vvf rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft File: u7bmAQQ3QyUFSIC308E15vx8yrE.mft (raw, json) Hash identifier: phoAgu9ud0WO6i+nWUv6bOkNWIHUW5UWdCTBw6QVjpw= Subject key identifier: EA:A9:75:39:72:80:95:09:B7:59:3D:D0:BC:1E:D9:95:D2:36:90:78 Authority key identifier: BB:B6:E6:01:04:37:43:25:05:48:80:B7:D3:C1:35:E6:FC:7C:CA:B1 Certificate issuer: /CN=A912804A/serialNumber=BBB6E60104374325054880B7D3C135E6FC7CCAB1 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft Manifest number: 0130 Signing time: Fri 31 May 2024 05:46:01 +0000 Manifest this update: Fri 31 May 2024 05:46:00 +0000 Manifest next update: Fri 07 Jun 2024 05:46:00 +0000 Files and hashes: 1: u7bmAQQ3QyUFSIC308E15vx8yrE.crl (hash: 7brRNc3LkIXQ97iA2iKcU7hkLhbFZedtyqeFhMS3uyg=) 2: CCB0DBA8CB2911EE9CE70483C4F9AE02.roa (hash: sgSXd3m9mDi3ZHfWlaTLdX/V0PIgSoBQzzaSnrjqwOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.crl rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 05:45:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912804A/serialNumber=BBB6E60104374325054880B7D3C135E6FC7CCAB1 Validity Not Before: May 31 05:46:00 2024 GMT Not After : Jun 7 05:46:00 2024 GMT Subject: CN=66596418-4a23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1e:ca:10:b1:dd:48:39:20:7d:ca:d0:1d:23: cc:f9:89:c3:22:0e:a1:6f:7b:b6:e1:bb:c2:56:08: 16:84:e0:48:f7:c3:fa:e8:c9:a4:f4:e2:67:9c:2d: cb:0b:6b:26:4a:ba:3f:83:48:41:7c:ae:da:46:b4: b5:83:db:98:38:d3:f9:6b:a9:23:b5:e5:d0:05:3d: 0c:b6:31:f7:73:2c:f6:57:f3:bf:3e:55:20:ed:cd: 01:16:ed:a6:93:79:3d:44:47:c9:99:85:c1:cb:96: 10:5f:d6:33:fb:ba:82:29:6b:9c:48:41:4c:7a:2c: 37:79:72:77:63:4f:d1:0b:04:8f:5d:c7:f8:4e:f8: cc:e6:8d:89:94:09:88:bf:08:97:48:bd:c7:e5:ac: 4f:18:9e:45:7a:2c:ed:4d:2e:76:f6:b0:8f:84:df: 7c:2e:58:d5:e7:49:50:97:29:07:bc:a8:61:b5:88: c3:77:8c:78:89:b6:95:14:82:f7:6b:17:a2:ef:ba: 2a:11:a4:66:34:92:ab:80:4c:81:5f:2c:b7:ee:6f: c8:3b:ab:37:86:49:e8:d5:bb:7b:7a:66:d0:2c:86: 5a:d1:9f:d2:44:28:a0:61:e9:84:9b:b9:2f:ba:1f: 25:85:20:09:78:5d:38:b7:45:ba:eb:da:82:31:b2: 2a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:A9:75:39:72:80:95:09:B7:59:3D:D0:BC:1E:D9:95:D2:36:90:78 X509v3 Authority Key Identifier: keyid:BB:B6:E6:01:04:37:43:25:05:48:80:B7:D3:C1:35:E6:FC:7C:CA:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:72:9c:3d:ad:ae:00:56:04:49:4e:fd:9b:bd:e6:3d:7a:36: e2:f4:78:dd:f2:fc:ba:67:ae:69:22:9c:f5:5d:d8:66:73:32: 1f:6b:33:21:77:4c:79:a5:0a:0c:d1:7b:00:ac:6d:4e:13:0c: 7a:40:dd:0d:34:63:77:ef:1c:96:b4:5e:2a:5c:59:c2:a5:79: ae:fb:47:9c:4a:e0:e2:2c:1f:91:5e:48:a6:b5:4a:4b:60:24: ec:79:a7:47:6a:2f:01:e8:ff:02:b6:11:76:dd:cb:49:ef:5a: a3:1b:ad:5a:dd:ca:33:74:bf:08:34:b8:e8:3e:d6:bd:93:67: f2:19:06:f5:cf:cb:70:fe:08:ab:ff:9e:82:65:04:90:d9:65: 17:51:23:42:3f:f6:23:c4:12:74:e1:3d:d3:55:92:70:0e:29: 15:af:0a:dd:e9:32:ad:3a:fa:1a:16:47:03:53:58:0b:9d:fb: 7e:ad:f4:ff:a3:b7:c9:a3:0f:87:89:12:0f:ad:b2:5f:1f:c6: 0e:cb:96:0c:39:e7:1b:09:dd:46:46:98:d7:fc:83:3f:e1:b1: 62:78:b1:a0:75:64:22:68:97:1f:d0:a7:be:5c:d4:c5:70:83: 31:e6:c9:22:c1:74:72:b8:1a:66:fd:8f:9a:27:45:f9:de:30: e6:e7:8c:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjgwNEExMTAvBgNVBAUTKEJCQjZFNjAxMDQzNzQzMjUwNTQ4ODBCN0QzQzEzNUU2 RkM3Q0NBQjEwHhcNMjQwNTMxMDU0NjAwWhcNMjQwNjA3MDU0NjAwWjAYMRYwFAYD VQQDEw02NjU5NjQxOC00YTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtx7KELHdSDkgfcrQHSPM+YnDIg6hb3u24bvCVggWhOBI98P66Mmk9OJnnC3L C2smSro/g0hBfK7aRrS1g9uYONP5a6kjteXQBT0MtjH3cyz2V/O/PlUg7c0BFu2m k3k9REfJmYXBy5YQX9Yz+7qCKWucSEFMeiw3eXJ3Y0/RCwSPXcf4TvjM5o2JlAmI vwiXSL3H5axPGJ5FeiztTS529rCPhN98LljV50lQlykHvKhhtYjDd4x4ibaVFIL3 axei77oqEaRmNJKrgEyBXyy37m/IO6s3hkno1bt7embQLIZa0Z/SRCigYemEm7kv uh8lhSAJeF04t0W669qCMbIqxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOqpdTly gJUJt1k90Lwe2ZXSNpB4MB8GA1UdIwQYMBaAFLu25gEEN0MlBUiAt9PBNeb8fMqx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODA0QS85NUE4MTAxNDUw NzcxMUVEOUY3MjU5MjhDNEY5QUUwMi91N2JtQVFRM1F5VUZTSUMzMDhFMTV2eDh5 ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U3Ym1BUVEzUXlVRlNJQzMwOEUxNXZ4OHlyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODA0QS85NUE4MTAxNDUwNzcxMUVEOUY3MjU5MjhDNEY5QUUwMi91N2JtQVFRM1F5 VUZTSUMzMDhFMTV2eDh5ckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4cpw9ra4AVgRJTv2bveY9ejbi9Hjd8vy6Z65pIpz1XdhmczIfazMh d0x5pQoM0XsArG1OEwx6QN0NNGN37xyWtF4qXFnCpXmu+0ecSuDiLB+RXkimtUpL YCTseadHai8B6P8CthF23ctJ71qjG61a3cozdL8INLjoPta9k2fyGQb1z8tw/gir /56CZQSQ2WUXUSNCP/YjxBJ04T3TVZJwDikVrwrd6TKtOvoaFkcDU1gLnft+rfT/ o7fJow+HiRIPrbJfH8YOy5YMOecbCd1GRpjX/IM/4bFieLGgdWQiaJcf0Ke+XNTF cIMx5skiwXRyuBpm/Y+aJ0X53jDm54wk -----END CERTIFICATE-----Generated at Fri May 31 06:33:57 2024 by rpki-client on console-fra.rpki-client.org