$ rpki-client -vvf rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft File: 7SPwf-AyVEbdDVoZwaF-PIhh75c.mft (raw, json) Hash identifier: s+k3ve7kbx78O3e4PfKdtoImg3bZQ403qqNPQf8kZFo= Subject key identifier: 05:3C:A8:5A:97:F2:B9:27:BC:B1:86:2D:10:A2:40:42:61:7D:51:CD Authority key identifier: ED:23:F0:7F:E0:32:54:46:DD:0D:5A:19:C1:A1:7E:3C:88:61:EF:97 Certificate issuer: /CN=A9136A3E/serialNumber=ED23F07FE0325446DD0D5A19C1A17E3C8861EF97 Certificate serial: 0B92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft Manifest number: 0B89 Signing time: Fri 31 May 2024 20:03:08 +0000 Manifest this update: Fri 31 May 2024 20:03:07 +0000 Manifest next update: Fri 07 Jun 2024 20:03:07 +0000 Files and hashes: 1: 7SPwf-AyVEbdDVoZwaF-PIhh75c.crl (hash: uVEYIjPiJPZYzGC5tvX6WCObNNhPtApkvtKYZTFqnDA=) 2: 83EDB54420E811EE97989E0DC4F9AE02.roa (hash: 03PZ9RQjgxD40nMbJ2eys41ohZjgGWxawEredJUIf/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.crl rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 20:03:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2962 (0xb92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136A3E/serialNumber=ED23F07FE0325446DD0D5A19C1A17E3C8861EF97 Validity Not Before: May 31 20:03:07 2024 GMT Not After : Jun 7 20:03:07 2024 GMT Subject: CN=665a2cfc-a803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:25:6c:f2:8c:b4:1e:6f:6f:df:a1:0f:04:f0: d5:04:18:4b:40:a0:5a:7a:93:23:7a:f0:e1:c6:55: b4:cf:e2:7a:d3:56:3e:50:f7:e6:83:88:ea:3e:18: c3:50:43:9e:6d:21:89:72:31:32:a3:1c:a3:b5:23: 6f:d0:34:97:0d:5f:20:7f:41:a4:cf:ca:b9:41:75: 57:76:4e:48:f6:c5:90:57:0e:e4:91:c1:35:1e:a7: 4b:fc:26:e5:24:de:ba:45:6f:00:a4:c3:42:0d:7e: 76:34:79:41:17:fc:06:c0:03:b6:d7:b2:53:2d:cb: 97:7a:ad:5a:b5:e1:d5:31:8c:ac:42:1d:ff:90:56: c3:d4:f3:a1:1a:83:c4:ae:e9:92:86:6e:37:f9:a7: 41:3d:40:01:8d:5a:81:7d:0e:16:dd:08:b6:14:26: 5f:47:66:59:ae:74:c0:0f:8b:a0:c8:3a:f5:38:7c: 05:88:40:1e:0a:64:43:eb:b2:ee:e9:31:71:6f:d8: b0:f9:24:f5:39:74:95:fa:f6:f3:a5:7a:ff:8a:c7: 44:3a:ba:16:c2:c3:ff:42:48:7f:e5:a0:5b:a0:2a: f5:72:30:e1:45:a8:fb:54:c8:7d:0d:3b:55:f8:df: 32:48:28:17:7e:92:d0:7f:25:12:6d:f4:e9:13:34: 13:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:3C:A8:5A:97:F2:B9:27:BC:B1:86:2D:10:A2:40:42:61:7D:51:CD X509v3 Authority Key Identifier: keyid:ED:23:F0:7F:E0:32:54:46:DD:0D:5A:19:C1:A1:7E:3C:88:61:EF:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:ef:03:e5:38:e8:e7:08:e5:50:7c:c3:da:7a:1d:9a:a4:33: d9:a8:53:e7:16:20:54:dc:2f:6b:2d:d0:eb:c0:ba:ee:8c:13: b9:d0:c7:46:41:4f:5d:a0:3d:c8:c9:51:5b:74:23:94:ad:1e: d6:37:83:62:91:c4:a7:c9:36:80:63:2a:ef:c4:61:a4:8f:84: 48:bd:47:29:b7:1f:d0:bd:fa:bb:0f:aa:4a:b2:00:e6:69:2e: 60:66:df:61:94:4f:a4:9c:2e:88:62:c8:f8:b2:9f:7b:f3:93: 60:97:d6:2d:9d:87:18:c1:9c:cf:c5:db:52:23:46:85:86:d2: 12:3b:8e:45:d7:df:33:3c:fc:cf:cd:63:82:a7:1a:2a:65:e8: 64:94:f8:7b:69:aa:45:50:03:5f:60:81:be:7a:56:9d:fb:65: 9c:f9:a3:9d:22:94:1e:ab:9a:b3:b9:69:cb:36:78:72:15:e5: a2:57:1b:2d:d1:f9:cc:b6:a6:3b:98:9a:04:72:d4:58:07:c3: 98:15:a5:64:3a:f5:1a:d5:4c:9d:e1:da:1b:97:b5:3c:86:d4: bd:e2:76:f7:1a:d3:ef:33:c4:b2:fe:30:bf:fc:3c:22:fe:be: 20:5c:b7:a3:ce:e5:be:63:02:91:85:5d:99:54:b1:ec:a4:c9: f3:22:63:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZBM0UxMTAvBgNVBAUTKEVEMjNGMDdGRTAzMjU0NDZERDBENUExOUMxQTE3RTND ODg2MUVGOTcwHhcNMjQwNTMxMjAwMzA3WhcNMjQwNjA3MjAwMzA3WjAYMRYwFAYD VQQDEw02NjVhMmNmYy1hODAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsSVs8oy0Hm9v36EPBPDVBBhLQKBaepMjevDhxlW0z+J601Y+UPfmg4jqPhjD UEOebSGJcjEyoxyjtSNv0DSXDV8gf0Gkz8q5QXVXdk5I9sWQVw7kkcE1HqdL/Cbl JN66RW8ApMNCDX52NHlBF/wGwAO217JTLcuXeq1ateHVMYysQh3/kFbD1POhGoPE rumShm43+adBPUABjVqBfQ4W3Qi2FCZfR2ZZrnTAD4ugyDr1OHwFiEAeCmRD67Lu 6TFxb9iw+ST1OXSV+vbzpXr/isdEOroWwsP/Qkh/5aBboCr1cjDhRaj7VMh9DTtV +N8ySCgXfpLQfyUSbfTpEzQTJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAU8qFqX 8rknvLGGLRCiQEJhfVHNMB8GA1UdIwQYMBaAFO0j8H/gMlRG3Q1aGcGhfjyIYe+X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkEzRS8xOTM3NjE1MjA1 RjYxMUVBODkxMkMxMjlDNEY5QUUwMi83U1B3Zi1BeVZFYmREVm9ad2FGLVBJaGg3 NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdTUHdmLUF5VkViZERWb1p3YUYtUEloaDc1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkEzRS8xOTM3NjE1MjA1RjYxMUVBODkxMkMxMjlDNEY5QUUwMi83U1B3Zi1BeVZF YmREVm9ad2FGLVBJaGg3NWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDA7wPlOOjnCOVQfMPaeh2apDPZqFPnFiBU3C9rLdDrwLrujBO50MdG QU9doD3IyVFbdCOUrR7WN4NikcSnyTaAYyrvxGGkj4RIvUcptx/Qvfq7D6pKsgDm aS5gZt9hlE+knC6IYsj4sp9785Ngl9YtnYcYwZzPxdtSI0aFhtISO45F198zPPzP zWOCpxoqZehklPh7aapFUANfYIG+elad+2Wc+aOdIpQeq5qzuWnLNnhyFeWiVxst 0fnMtqY7mJoEctRYB8OYFaVkOvUa1Uyd4dobl7U8htS94nb3GtPvM8Sy/jC//Dwi /r4gXLejzuW+YwKRhV2ZVLHspMnzImMp -----END CERTIFICATE-----Generated at Fri May 31 22:13:03 2024 by rpki-client on console-fra.rpki-client.org