$ rpki-client -vvf rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft File: sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft (raw, json) Hash identifier: wKsD1x7Gcy7urIwAIdsJSGTifEkuV0pgiIDcOyUXQSk= Subject key identifier: EB:A0:A8:75:B4:86:77:4C:8B:E3:0C:3D:04:FF:C6:FE:CB:72:1D:FE Authority key identifier: B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9 Certificate issuer: /CN=A91374BB/serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9 Certificate serial: 80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft Manifest number: 7D Signing time: Sun 19 May 2024 07:17:40 +0000 Manifest this update: Sun 19 May 2024 07:17:40 +0000 Manifest next update: Sun 26 May 2024 07:17:40 +0000 Files and hashes: 1: sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl (hash: 1NQpr6PEBu8yzpAO5VwYOQgxUXYqHOHomA6Dn7IVPn8=) 2: E7DBE2945B6A11EE8C05CA59C4F9AE02.roa (hash: gVUndys1FOrdFAUgWj7NFlEkhtcr9jjG/N1oaA3t584=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91374BB/serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9 Validity Not Before: May 19 07:17:40 2024 GMT Not After : May 26 07:17:40 2024 GMT Subject: CN=6649a794-c670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6f:7c:54:25:a5:91:57:9f:08:1f:f9:74:b3: 7a:69:d2:51:77:94:04:e3:93:be:11:9a:4f:4b:69: 3c:1e:2b:ae:2d:81:b3:e7:77:42:be:25:56:a5:72: b6:1a:51:ba:8d:c7:aa:82:81:80:1c:48:36:73:d5: 69:a2:90:c8:4e:8f:47:3e:65:43:76:94:10:c5:39: 27:46:0f:fa:b2:b1:d2:4d:b3:17:00:a0:51:57:c4: 5b:e4:8f:16:77:7e:5c:2e:31:ee:d6:df:64:f7:c5: ea:27:1d:9a:81:18:e1:57:a8:fb:9e:2a:f1:14:66: 5f:43:3a:a4:ce:3f:b3:07:3a:a7:40:8b:43:bd:a6: 9e:bf:99:86:58:d5:96:b3:eb:af:20:10:0e:1f:b0: 8d:1a:0f:b8:17:bd:22:50:40:70:d5:22:41:ca:50: 4e:e2:3d:a6:25:db:aa:09:16:28:9c:3d:57:d2:27: 42:37:de:ea:4a:e4:bc:da:5e:98:63:58:87:24:bb: 98:35:02:d8:0e:5d:f6:80:dd:e5:90:29:8e:a5:da: 50:d0:fb:4e:a0:68:82:f1:d7:3c:50:08:1f:24:79: f8:47:70:21:78:97:82:78:e5:d4:ee:9b:5e:37:d5: 78:f7:22:ef:ca:0b:50:7c:05:08:dd:29:43:49:3a: 42:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A0:A8:75:B4:86:77:4C:8B:E3:0C:3D:04:FF:C6:FE:CB:72:1D:FE X509v3 Authority Key Identifier: keyid:B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:a9:09:45:e1:41:1b:e1:66:38:af:ed:e1:c8:a5:62:d9:e7: c9:06:9d:c7:03:80:02:00:42:2b:ad:68:76:e0:d8:7c:79:dc: 83:33:6f:0b:4e:b3:89:c1:95:69:10:d4:74:4f:65:40:0d:32: 52:e0:98:83:41:c7:ca:0e:ba:b9:bc:4c:a9:3f:27:0d:72:f5: 38:6b:92:18:a8:de:67:c4:d5:17:f5:b2:ec:55:57:a1:ff:59: 35:57:f7:22:68:b9:00:d9:d2:62:4b:3b:c6:dc:c1:db:e9:cc: e6:fd:e7:7d:36:49:90:cc:57:1a:98:e5:57:c4:04:5d:9f:0a: 6f:61:da:16:84:09:4e:60:6e:c5:ac:e3:68:a1:04:41:41:52: 29:5b:a0:ce:b8:c9:23:c2:8f:d5:4a:b3:c8:24:ac:13:36:df: 3f:e1:71:3a:3c:82:16:ae:74:a7:e0:ad:21:02:ea:67:c2:7f: bb:1d:83:ad:44:5e:15:4c:b8:88:ef:ef:c4:e4:4c:03:5e:1d: 71:79:b6:36:25:83:4c:9f:03:bd:96:3a:86:37:d6:b7:89:67: 46:78:55:b3:9b:94:b5:a5:b4:eb:39:6b:1f:f2:e4:c6:6a:aa: 20:9a:aa:0b:9b:24:37:5c:af:13:7d:28:8c:25:b7:ae:4a:ea: ae:2f:8c:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc0QkIxMTAvBgNVBAUTKEIzMTJDMjJGM0QwQjk3QkFBRjMyNzNFNUM2NkI4RjE0 MDIwM0UyRjkwHhcNMjQwNTE5MDcxNzQwWhcNMjQwNTI2MDcxNzQwWjAYMRYwFAYD VQQDEw02NjQ5YTc5NC1jNjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAym98VCWlkVefCB/5dLN6adJRd5QE45O+EZpPS2k8HiuuLYGz53dCviVWpXK2 GlG6jceqgoGAHEg2c9VpopDITo9HPmVDdpQQxTknRg/6srHSTbMXAKBRV8Rb5I8W d35cLjHu1t9k98XqJx2agRjhV6j7nirxFGZfQzqkzj+zBzqnQItDvaaev5mGWNWW s+uvIBAOH7CNGg+4F70iUEBw1SJBylBO4j2mJduqCRYonD1X0idCN97qSuS82l6Y Y1iHJLuYNQLYDl32gN3lkCmOpdpQ0PtOoGiC8dc8UAgfJHn4R3AheJeCeOXU7pte N9V49yLvygtQfAUI3SlDSTpC0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOugqHW0 hndMi+MMPQT/xv7Lch3+MB8GA1UdIwQYMBaAFLMSwi89C5e6rzJz5cZrjxQCA+L5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzRCQi82NDg1NDJDODVC NkExMUVFODBEMzZCNTRDNEY5QUUwMi9zeExDTHowTGw3cXZNblBseG11UEZBSUQ0 dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N4TENMejBMbDdxdk1uUGx4bXVQRkFJRDR2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzRCQi82NDg1NDJDODVCNkExMUVFODBEMzZCNTRDNEY5QUUwMi9zeExDTHowTGw3 cXZNblBseG11UEZBSUQ0dmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCqQlF4UEb4WY4r+3hyKVi2efJBp3HA4ACAEIrrWh24Nh8edyDM28L TrOJwZVpENR0T2VADTJS4JiDQcfKDrq5vEypPycNcvU4a5IYqN5nxNUX9bLsVVeh /1k1V/ciaLkA2dJiSzvG3MHb6czm/ed9NkmQzFcamOVXxARdnwpvYdoWhAlOYG7F rONooQRBQVIpW6DOuMkjwo/VSrPIJKwTNt8/4XE6PIIWrnSn4K0hAupnwn+7HYOt RF4VTLiI7+/E5EwDXh1xebY2JYNMnwO9ljqGN9a3iWdGeFWzm5S1pbTrOWsf8uTG aqogmqoLmyQ3XK8TfSiMJbeuSuquL4y1 -----END CERTIFICATE-----Generated at Sun May 19 08:26:42 2024 by rpki-client on console-fra.rpki-client.org