$ rpki-client -vvf rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft File: r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft (raw, json) Hash identifier: iNcSFhMagmsVsTkR7R3DzQXywdJrdBibKMOAXFlIp8k= Subject key identifier: 3A:46:57:86:50:D9:7F:4A:1E:26:6E:DC:D1:65:B4:85:BE:AE:0E:1D Authority key identifier: AF:B8:FF:E1:E8:68:62:96:B9:96:C6:3A:A9:02:EA:9C:12:8F:48:FE Certificate issuer: /CN=A912BA82/serialNumber=AFB8FFE1E8686296B996C63AA902EA9C128F48FE Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft Manifest number: 31 Signing time: Sun 19 May 2024 08:23:32 +0000 Manifest this update: Sun 19 May 2024 08:23:32 +0000 Manifest next update: Sun 26 May 2024 08:23:31 +0000 Files and hashes: 1: r7j_4ehoYpa5lsY6qQLqnBKPSP4.crl (hash: gZ4oyKBntTGiDDqq5klBpkywiu6/AD+VbaPmSbkqPMc=) 2: 6198218AEB3311EEA75DE77DC4F9AE02.roa (hash: bPf9OeOoi06Rnw8uv3TpDzvZ9rbymPD0sd16mNTyii0=) 3: 4BFDDACCEB3311EE9D65C57DC4F9AE02.roa (hash: l2/AcYIuuEmWmC/Xu8FUURnDfGYw2qZ7H+y/uBwBrJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.crl rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BA82/serialNumber=AFB8FFE1E8686296B996C63AA902EA9C128F48FE Validity Not Before: May 19 08:23:32 2024 GMT Not After : May 26 08:23:31 2024 GMT Subject: CN=6649b704-5ed8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b7:c0:95:04:71:89:eb:7f:8b:6c:68:e3:44: 9b:ce:4e:b8:c3:62:c9:d5:37:34:ec:3c:a0:cb:20: 0e:05:fa:4c:5b:73:72:d5:ee:40:36:f8:e2:e5:b7: 60:6c:17:9f:47:10:b2:d7:dc:c7:70:34:c2:56:df: 25:a6:d3:e8:c0:b7:e2:6a:0b:fc:05:7c:f6:36:1b: bd:9d:c5:ea:82:25:41:a2:3a:20:97:2c:69:cc:cc: d1:84:ce:b7:67:e0:4c:12:bb:2c:bc:3e:e2:48:28: dd:ef:b8:9d:29:d7:07:16:b0:cf:44:08:c3:1f:96: 57:05:6d:74:60:61:64:72:07:49:c3:45:06:6c:16: f3:bf:dd:cb:41:48:a3:00:ef:23:5a:5d:ce:c3:dd: f1:0d:d0:97:35:40:01:9b:5d:73:bc:27:2c:41:74: ff:3a:3e:f4:bb:d5:72:d0:fe:ef:c8:50:fb:e3:87: 55:51:db:f4:7b:da:a4:74:d9:24:bd:59:49:ee:ff: 78:3a:cc:2e:87:54:87:ff:e1:8e:9b:3f:93:a7:a9: ab:6b:0e:10:0c:c8:cf:88:ca:59:8b:a8:fd:98:82: 66:00:5d:30:4a:3d:4d:a2:50:25:b3:87:97:fc:07: e3:d3:04:e5:7e:6f:a0:65:99:d5:d9:c0:23:17:1d: 00:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:46:57:86:50:D9:7F:4A:1E:26:6E:DC:D1:65:B4:85:BE:AE:0E:1D X509v3 Authority Key Identifier: keyid:AF:B8:FF:E1:E8:68:62:96:B9:96:C6:3A:A9:02:EA:9C:12:8F:48:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:d2:de:83:e4:52:2a:fc:c4:7a:a2:a4:6c:25:ba:4d:18:cd: 68:87:72:17:8a:1a:b2:16:1b:f3:65:f1:b1:50:1b:61:6a:5a: 70:ee:9e:50:4f:b6:53:63:62:b0:45:89:f5:92:30:84:68:ce: 4d:8d:6f:e1:54:09:ae:71:d6:a1:41:87:44:aa:0d:5b:fc:c3: 37:a5:e1:cc:fd:2f:e0:48:0b:7a:fe:67:57:58:a2:2d:ff:df: 48:83:d7:9c:6e:f5:c9:c1:df:b3:84:ef:ca:e8:9a:a1:53:33: 19:34:5e:51:c4:6e:6d:bf:a2:ca:c1:5b:a5:a2:7f:18:50:ea: 56:67:be:14:2b:76:65:81:2c:46:08:2d:e3:fc:e5:63:eb:cb: 9a:08:50:a8:b6:db:ee:76:e5:61:cb:0b:ed:5c:1d:e3:ec:a3: b5:b7:52:29:dd:96:01:d4:b4:6f:76:3d:20:65:e4:2f:a1:89: e1:72:79:e6:26:2a:18:a2:35:1e:aa:4e:27:a2:6b:9f:52:5d: b8:a5:f5:01:9a:1e:f5:e3:78:a2:c1:be:ea:75:78:5e:1a:30: 10:32:4d:16:03:34:a4:76:ee:04:1c:7e:58:56:70:37:12:5f: 78:c5:01:b6:e8:f6:2f:12:9d:9f:08:1d:24:3f:83:fe:f3:f8: b2:89:d1:0a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QkE4MjExMC8GA1UEBRMoQUZCOEZGRTFFODY4NjI5NkI5OTZDNjNBQTkwMkVBOUMx MjhGNDhGRTAeFw0yNDA1MTkwODIzMzJaFw0yNDA1MjYwODIzMzFaMBgxFjAUBgNV BAMTDTY2NDliNzA0LTVlZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1t8CVBHGJ63+LbGjjRJvOTrjDYsnVNzTsPKDLIA4F+kxbc3LV7kA2+OLlt2Bs F59HELLX3MdwNMJW3yWm0+jAt+JqC/wFfPY2G72dxeqCJUGiOiCXLGnMzNGEzrdn 4EwSuyy8PuJIKN3vuJ0p1wcWsM9ECMMfllcFbXRgYWRyB0nDRQZsFvO/3ctBSKMA 7yNaXc7D3fEN0Jc1QAGbXXO8JyxBdP86PvS71XLQ/u/IUPvjh1VR2/R72qR02SS9 WUnu/3g6zC6HVIf/4Y6bP5OnqatrDhAMyM+IylmLqP2YgmYAXTBKPU2iUCWzh5f8 B+PTBOV+b6BlmdXZwCMXHQBJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOkZXhlDZ f0oeJm7c0WW0hb6uDh0wHwYDVR0jBBgwFoAUr7j/4ehoYpa5lsY6qQLqnBKPSP4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJCQTgyL0ZCRERBQzI0Q0U1 QTExRUU4QzNCRDAzQUM0RjlBRTAyL3I3al80ZWhvWXBhNWxzWTZxUUxxbkJLUFNQ NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcjdqXzRlaG9ZcGE1bHNZNnFRTHFuQktQU1A0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJC QTgyL0ZCRERBQzI0Q0U1QTExRUU4QzNCRDAzQUM0RjlBRTAyL3I3al80ZWhvWXBh NWxzWTZxUUxxbkJLUFNQNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJvS3oPkUir8xHqipGwluk0YzWiHcheKGrIWG/Nl8bFQG2FqWnDunlBP tlNjYrBFifWSMIRozk2Nb+FUCa5x1qFBh0SqDVv8wzel4cz9L+BIC3r+Z1dYoi3/ 30iD15xu9cnB37OE78romqFTMxk0XlHEbm2/osrBW6WifxhQ6lZnvhQrdmWBLEYI LeP85WPry5oIUKi22+525WHLC+1cHePso7W3UindlgHUtG92PSBl5C+hieFyeeYm KhiiNR6qTieia59SXbil9QGaHvXjeKLBvup1eF4aMBAyTRYDNKR27gQcflhWcDcS X3jFAbbo9i8SnZ8IHSQ/g/7z+LKJ0Qo= -----END CERTIFICATE-----Generated at Sun May 19 09:04:12 2024 by rpki-client on console-fra.rpki-client.org