$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft File: C7AFcf321rzGNEbrOmSR-uqpCG8.mft (raw, json) Hash identifier: 7fpHuW7x+zkf5wqIuJBRoR0m46W4cZTfSs7ctvSQdFQ= Subject key identifier: 8F:59:3C:B8:CF:62:60:48:1D:97:35:CB:15:62:46:B0:A8:3D:25:FC Authority key identifier: 0B:B0:05:71:FD:F6:D6:BC:C6:34:46:EB:3A:64:91:FA:EA:A9:08:6F Certificate issuer: /CN=A912AC83/serialNumber=0BB00571FDF6D6BCC63446EB3A6491FAEAA9086F Certificate serial: 047B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7AFcf321rzGNEbrOmSR-uqpCG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft Manifest number: 0477 Signing time: Sun 19 May 2024 01:42:07 +0000 Manifest this update: Sun 19 May 2024 01:42:07 +0000 Manifest next update: Sun 26 May 2024 01:42:07 +0000 Files and hashes: 1: C7AFcf321rzGNEbrOmSR-uqpCG8.crl (hash: JCJGDyuQy17owgyPaIhVPMmOZ2QKv6Xo6G3yDMs4YWc=) 2: 6B191E20F75811EB9C2B5D4DC4F9AE02.roa (hash: 4adOiIgJl0Kfadpc1vetBRm8e77C/OGsoV4229ZvSXA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.crl rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7AFcf321rzGNEbrOmSR-uqpCG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1147 (0x47b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC83/serialNumber=0BB00571FDF6D6BCC63446EB3A6491FAEAA9086F Validity Not Before: May 19 01:42:07 2024 GMT Not After : May 26 01:42:07 2024 GMT Subject: CN=664958ef-93e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:49:81:75:1b:44:1b:2d:d3:1a:51:1b:65:a4: 72:9a:e5:2d:f0:ac:7f:67:17:dc:6f:aa:01:4c:a4: 01:00:17:80:aa:a9:7c:45:a3:97:fa:95:e6:92:f6: 8e:1f:4e:ed:6b:21:5c:61:92:2a:9a:38:4d:24:8c: 67:93:14:b3:bd:78:63:e2:51:24:1f:d4:0c:62:08: c7:0a:c3:de:c7:5e:49:3a:8b:a3:71:22:8f:31:28: 70:44:8d:7c:bb:f7:3f:19:8e:f4:11:d7:9f:be:78: 3e:a5:18:10:91:e0:02:99:33:ad:fe:43:16:38:c9: 44:1f:2f:c3:db:99:27:4e:2b:3b:0b:12:e4:70:ef: 90:0d:43:7b:93:5a:d2:19:36:57:80:99:a2:26:da: 0d:bf:c5:a8:e5:83:a0:f4:72:17:ca:58:4d:90:af: ad:69:aa:67:1d:88:e9:19:39:ef:ae:9a:cc:46:d5: c2:7d:ba:fe:61:b9:ea:ad:fe:d5:d2:00:cf:78:33: 93:a8:8c:9b:a1:1f:45:8a:f0:62:89:4b:ce:5c:23: a5:a5:1f:93:8c:9b:73:85:5f:1e:f7:a9:5b:7f:5d: 01:5b:8c:ad:b4:fd:da:3f:68:52:13:e9:dc:13:3d: 6a:c4:67:ef:53:e6:98:63:0d:c1:7f:8c:0b:2c:d3: bd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:59:3C:B8:CF:62:60:48:1D:97:35:CB:15:62:46:B0:A8:3D:25:FC X509v3 Authority Key Identifier: keyid:0B:B0:05:71:FD:F6:D6:BC:C6:34:46:EB:3A:64:91:FA:EA:A9:08:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7AFcf321rzGNEbrOmSR-uqpCG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:32:c7:ee:0c:07:aa:20:d7:14:b4:b3:ad:b5:02:8b:f3:ff: 45:f2:94:92:6f:83:be:80:5d:2c:92:9f:40:d3:e4:1d:2d:31: 2a:2b:33:a5:39:02:b5:02:b6:ac:05:22:f7:14:28:0b:7a:89: ab:a5:fe:cf:9d:ce:be:b2:89:e8:f9:4f:85:50:3c:1c:f5:03: 0e:26:80:35:11:ca:29:28:1e:ca:8a:bb:80:b0:91:98:ec:6f: 0b:3d:79:23:3e:ce:0c:15:59:f0:5f:ea:ce:e2:e3:81:41:eb: a7:0f:ba:d4:dc:60:c2:c3:f5:9b:d3:fd:9a:9f:a7:1f:87:01: 95:4d:3c:0c:45:4b:9d:bf:48:b0:b6:f3:62:6e:29:9e:33:09: 76:ef:ba:52:e5:12:a0:2d:a4:ea:86:34:10:11:f9:8a:e6:97: 45:ea:ca:c4:fa:ec:b2:45:94:1f:dc:fc:11:1d:fb:9d:7d:80: 33:7c:7d:62:18:a1:b6:0c:84:d4:d1:b2:e5:b7:55:53:90:b6: 9a:4a:fe:8a:55:b5:ad:69:84:8c:98:88:e2:a2:46:36:d4:7d: 64:26:5d:d9:1b:fd:e7:b3:93:4b:fc:bc:98:85:aa:2e:6f:61: 56:92:f3:db:3f:62:81:69:c2:37:15:b0:51:69:4a:6d:03:e8: b9:76:2e:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFDODMxMTAvBgNVBAUTKDBCQjAwNTcxRkRGNkQ2QkNDNjM0NDZFQjNBNjQ5MUZB RUFBOTA4NkYwHhcNMjQwNTE5MDE0MjA3WhcNMjQwNTI2MDE0MjA3WjAYMRYwFAYD VQQDEw02NjQ5NThlZi05M2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA00mBdRtEGy3TGlEbZaRymuUt8Kx/Zxfcb6oBTKQBABeAqql8RaOX+pXmkvaO H07tayFcYZIqmjhNJIxnkxSzvXhj4lEkH9QMYgjHCsPex15JOoujcSKPMShwRI18 u/c/GY70Edefvng+pRgQkeACmTOt/kMWOMlEHy/D25knTis7CxLkcO+QDUN7k1rS GTZXgJmiJtoNv8Wo5YOg9HIXylhNkK+taapnHYjpGTnvrprMRtXCfbr+Ybnqrf7V 0gDPeDOTqIyboR9FivBiiUvOXCOlpR+TjJtzhV8e96lbf10BW4yttP3aP2hSE+nc Ez1qxGfvU+aYYw3Bf4wLLNO9XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI9ZPLjP YmBIHZc1yxViRrCoPSX8MB8GA1UdIwQYMBaAFAuwBXH99ta8xjRG6zpkkfrqqQhv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUM4My80QkFGQjExOEY3 NTYxMUVCOTlGOTEwNENDNEY5QUUwMi9DN0FGY2YzMjFyekdORWJyT21TUi11cXBD RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M3QUZjZjMyMXJ6R05FYnJPbVNSLXVxcENHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUM4My80QkFGQjExOEY3NTYxMUVCOTlGOTEwNENDNEY5QUUwMi9DN0FGY2YzMjFy ekdORWJyT21TUi11cXBDRzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmMsfuDAeqINcUtLOttQKL8/9F8pSSb4O+gF0skp9A0+QdLTEqKzOl OQK1ArasBSL3FCgLeomrpf7Pnc6+sono+U+FUDwc9QMOJoA1EcopKB7KiruAsJGY 7G8LPXkjPs4MFVnwX+rO4uOBQeunD7rU3GDCw/Wb0/2an6cfhwGVTTwMRUudv0iw tvNibimeMwl277pS5RKgLaTqhjQQEfmK5pdF6srE+uyyRZQf3PwRHfudfYAzfH1i GKG2DITU0bLlt1VTkLaaSv6KVbWtaYSMmIjiokY21H1kJl3ZG/3ns5NL/LyYhaou b2FWkvPbP2KBacI3FbBRaUptA+i5di58 -----END CERTIFICATE-----Generated at Sun May 19 02:59:05 2024 by rpki-client on console-ams.rpki-client.org