$ rpki-client -vvf rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft File: 7dKmloaGUlbJsP3da3FJZtU3jzM.mft (raw, json) Hash identifier: pD+0r4NW1Fk0BNEAc0uQxhOqxZ3u8/Bk/AJOEXAFOSE= Subject key identifier: 7C:94:4C:18:6C:9B:62:D3:02:0B:8E:89:FB:08:78:04:5C:A8:A2:46 Authority key identifier: ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33 Certificate issuer: /CN=A912D3CB/serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33 Certificate serial: 099F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft Manifest number: 098C Signing time: Mon 20 May 2024 21:01:25 +0000 Manifest this update: Mon 20 May 2024 21:01:24 +0000 Manifest next update: Mon 27 May 2024 21:01:24 +0000 Files and hashes: 1: 7dKmloaGUlbJsP3da3FJZtU3jzM.crl (hash: LVSEq9J1SmRvWf0JMFlOFXdipRhC9gZoS/L5X1Ez9jA=) 2: 923B6404466B11EE8B37E13CC4F9AE02.roa (hash: 2PTTTwQLgh4fXXfTwObsWVUAWIktXTAcMw+Xyyr0VJ8=) 3: C2E32E34466B11EE988B243DC4F9AE02.roa (hash: ATnpQbMAdtf7EHZF16qCy3h60N8FuS/9+ZIqFWtImrM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 May 2024 20:38:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2463 (0x99f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D3CB/serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33 Validity Not Before: May 20 21:01:24 2024 GMT Not After : May 27 21:01:24 2024 GMT Subject: CN=664bba25-4821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9f:6f:b6:04:4a:8a:5c:2b:68:6b:3a:22:ba: 6c:67:d8:d3:9f:9d:0b:91:c0:a1:48:ca:e2:7e:46: ee:1e:a8:00:06:a4:ac:5e:0f:b8:82:d2:98:9d:32: 3c:0d:38:a2:3b:68:0f:96:69:84:22:96:5b:33:0c: ba:a6:88:84:c8:dc:db:b8:66:d4:9e:31:77:81:c7: 3c:d9:c9:f7:e5:63:b0:31:64:ba:9d:30:c4:12:47: af:79:20:97:7c:eb:6a:f3:54:a4:1d:8e:e4:b9:b2: 44:e4:12:08:d0:9f:d6:3a:7b:8d:cf:5b:46:15:df: 6f:a6:29:74:29:68:94:8e:d5:78:4f:b4:30:4e:79: 8c:6c:78:87:79:83:93:8e:72:e9:db:f4:ac:5a:0d: 51:52:2a:06:21:c8:2e:e9:a1:00:23:86:48:e5:c1: 06:0c:02:e7:9e:6e:7a:bf:19:0f:39:25:1f:02:09: fb:ad:1a:5b:a7:b1:92:18:2f:cc:46:b2:9a:9c:34: fd:38:86:93:7c:a4:09:b3:d4:0c:3c:88:aa:61:eb: f5:b3:23:3b:e6:8c:4e:ac:c1:4e:4b:72:aa:fd:5e: 35:33:bc:9e:63:2b:b5:a2:a4:51:cf:0e:1f:29:8d: dc:d1:60:df:4d:ce:e2:a1:b0:15:8c:87:f7:03:29: 06:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:94:4C:18:6C:9B:62:D3:02:0B:8E:89:FB:08:78:04:5C:A8:A2:46 X509v3 Authority Key Identifier: keyid:ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:16:ba:6f:ac:92:64:12:f3:8f:38:ef:a3:19:09:cd:88:97: 18:fd:1f:dc:01:f1:43:1b:c5:f5:ec:9a:71:ae:9a:cd:cf:e3: 92:e9:4d:57:2f:90:c0:9d:68:65:03:5b:0b:4f:03:cb:5c:d6: 86:e0:ad:e8:4f:f7:a0:48:e1:92:d8:8e:1f:f7:19:d2:97:b5: 68:b2:33:cc:54:b0:33:8e:f1:85:f5:8c:ec:40:15:f0:f7:44: a7:78:49:0c:e5:98:21:f2:07:0c:f5:d9:d4:20:34:fb:14:d1: bd:1d:0b:75:0b:bc:12:99:f7:77:4c:ac:ad:46:4c:f2:1f:9f: a7:57:ae:f9:0d:2d:48:03:45:08:08:f4:ee:c6:be:fd:91:b8: f1:90:fa:d0:77:7e:b4:73:58:06:f2:90:d0:5c:f9:68:6f:67: 5c:35:52:32:3c:ff:aa:04:2f:a5:b2:e1:4c:63:aa:36:01:d3: ef:85:62:51:f5:65:ca:e4:ad:cb:45:27:04:5d:ba:82:7d:17: c7:67:5f:86:d3:1c:19:d4:ec:ca:71:a9:9e:0d:dc:71:bd:54: c1:2a:d5:77:72:09:27:81:7a:f8:d3:f0:eb:5e:c9:28:89:ee: 64:1b:3b:e4:40:e3:30:0b:83:30:28:b3:7a:9a:eb:55:c8:8c: e9:99:7c:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQzQ0IxMTAvBgNVBAUTKEVERDJBNjk2ODY4NjUyNTZDOUIwRkRERDZCNzE0OTY2 RDUzNzhGMzMwHhcNMjQwNTIwMjEwMTI0WhcNMjQwNTI3MjEwMTI0WjAYMRYwFAYD VQQDEw02NjRiYmEyNS00ODIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJ9vtgRKilwraGs6IrpsZ9jTn50LkcChSMrifkbuHqgABqSsXg+4gtKYnTI8 DTiiO2gPlmmEIpZbMwy6poiEyNzbuGbUnjF3gcc82cn35WOwMWS6nTDEEkeveSCX fOtq81SkHY7kubJE5BII0J/WOnuNz1tGFd9vpil0KWiUjtV4T7QwTnmMbHiHeYOT jnLp2/SsWg1RUioGIcgu6aEAI4ZI5cEGDALnnm56vxkPOSUfAgn7rRpbp7GSGC/M RrKanDT9OIaTfKQJs9QMPIiqYev1syM75oxOrMFOS3Kq/V41M7yeYyu1oqRRzw4f KY3c0WDfTc7iobAVjIf3AykGGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHyUTBhs m2LTAguOifsIeARcqKJGMB8GA1UdIwQYMBaAFO3SppaGhlJWybD93WtxSWbVN48z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDNDQi9BOUE0MzlGQzY5 QjIxMUVBOTc3OURENDhDNEY5QUUwMi83ZEttbG9hR1VsYkpzUDNkYTNGSlp0VTNq ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdkS21sb2FHVWxiSnNQM2RhM0ZKWnRVM2p6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDNDQi9BOUE0MzlGQzY5QjIxMUVBOTc3OURENDhDNEY5QUUwMi83ZEttbG9hR1Vs YkpzUDNkYTNGSlp0VTNqek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOFrpvrJJkEvOPOO+jGQnNiJcY/R/cAfFDG8X17JpxrprNz+OS6U1X L5DAnWhlA1sLTwPLXNaG4K3oT/egSOGS2I4f9xnSl7VosjPMVLAzjvGF9YzsQBXw 90SneEkM5Zgh8gcM9dnUIDT7FNG9HQt1C7wSmfd3TKytRkzyH5+nV675DS1IA0UI CPTuxr79kbjxkPrQd360c1gG8pDQXPlob2dcNVIyPP+qBC+lsuFMY6o2AdPvhWJR 9WXK5K3LRScEXbqCfRfHZ1+G0xwZ1OzKcameDdxxvVTBKtV3cgkngXr40/DrXsko ie5kGzvkQOMwC4MwKLN6mutVyIzpmXxf -----END CERTIFICATE-----Generated at Mon May 20 22:01:03 2024 by rpki-client on console-fra.rpki-client.org