$ rpki-client -vvf rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft File: 7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft (raw, json) Hash identifier: lQUdXDuftFiTt07ZvSTF7YuC72xG7At+rPs/0yFxgXE= Subject key identifier: FB:E2:C2:CC:20:F3:E7:EB:30:E5:B8:2A:8A:D6:C3:02:82:26:B6:3E Authority key identifier: EC:80:08:6C:22:07:B1:A0:46:00:72:51:83:E3:C4:F0:FD:E1:67:5F Certificate issuer: /CN=A9141526/serialNumber=EC80086C2207B1A04600725183E3C4F0FDE1675F Certificate serial: 2067 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft Manifest number: 2067 Signing time: Sat 18 May 2024 16:17:41 +0000 Manifest this update: Sat 18 May 2024 16:17:41 +0000 Manifest next update: Sat 25 May 2024 16:17:41 +0000 Files and hashes: 1: 7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl (hash: XSDrjSBsuY4Zzb1QdCXBJrBhQWOcIrGLpuFOPbSC/ag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8295 (0x2067) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141526/serialNumber=EC80086C2207B1A04600725183E3C4F0FDE1675F Validity Not Before: May 18 16:17:41 2024 GMT Not After : May 25 16:17:41 2024 GMT Subject: CN=6648d4a5-81d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:64:6f:bb:ae:00:04:f7:b2:c8:bc:2d:69:c7: 61:b6:c9:57:4c:17:1b:3a:37:fc:b1:8d:42:86:b7: 22:46:1f:d4:0c:65:12:67:15:6b:cb:59:ca:e6:a1: ca:36:a3:91:6f:87:21:12:ca:1c:cc:a2:1e:c5:74: 80:10:56:f5:ec:f5:01:1f:60:d5:ea:fa:5a:bc:a8: 31:94:ac:d9:52:52:a3:44:16:b5:28:d3:d1:4f:a2: 72:5c:c1:8a:4a:d3:93:53:49:82:75:1f:05:16:2b: 5a:54:36:5d:15:7b:75:35:30:ba:c4:b2:e6:1b:69: 66:6d:c2:dd:2b:78:19:c9:38:2e:fb:29:88:c5:65: 60:6d:af:88:fc:db:a8:3b:0d:d9:79:3e:14:be:dd: fa:44:8d:56:c7:d2:e2:68:e6:6c:24:92:90:39:66: f8:b6:b1:d8:6b:54:35:a6:eb:1f:53:85:8a:0f:d8: 07:2f:d3:de:89:1e:35:58:21:c3:d9:3a:68:07:ee: 5d:3f:29:57:e6:e1:e0:da:78:41:3a:da:25:70:b3: 7a:d5:22:cf:fa:d0:6b:d5:c3:f9:49:3d:aa:17:d2: e1:01:3b:70:31:95:f1:41:ec:05:6f:19:04:af:91: 4a:e6:d0:bc:e8:74:6f:c5:37:bd:df:d4:25:79:03: 10:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E2:C2:CC:20:F3:E7:EB:30:E5:B8:2A:8A:D6:C3:02:82:26:B6:3E X509v3 Authority Key Identifier: keyid:EC:80:08:6C:22:07:B1:A0:46:00:72:51:83:E3:C4:F0:FD:E1:67:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:a0:90:5a:67:02:c3:a9:93:c4:2b:d8:ae:ff:c8:f3:60:7b: 57:94:6e:cb:87:ad:d4:c4:38:98:e1:cf:6a:a5:9b:e1:4d:29: d4:ba:32:59:99:a7:dc:dd:16:3f:8a:ae:50:2e:61:91:90:df: 14:4e:1c:e8:5d:d7:22:14:e1:ed:17:65:59:51:42:93:31:58: 62:d9:50:e9:bf:d9:43:66:2d:22:95:c0:88:eb:a9:bf:b9:08: 9a:c0:0f:e4:18:4c:95:27:08:b7:03:b8:17:26:13:13:85:cc: 3c:95:2e:ef:5c:e9:08:53:72:91:91:d8:04:9a:85:35:e8:7b: 0a:64:43:c6:71:ac:b0:d2:1e:2c:35:fa:65:79:ac:46:af:29: d3:a2:fc:cd:51:b1:ec:99:23:a6:d2:da:a5:b0:f1:b5:fe:ec: cd:4b:8a:c8:a8:62:66:28:5b:0b:da:9d:cb:60:94:62:fb:a3: 71:01:68:6e:c0:62:00:33:32:23:29:24:03:6a:63:1e:c8:7a: c3:d4:53:8c:85:a7:00:7d:41:f1:24:a5:12:65:4b:35:0a:7b: f2:d5:8a:70:7d:cd:33:bc:cc:2c:a8:fe:b3:9e:14:bd:7e:d7: c3:6b:ab:3b:20:19:75:c1:0c:3b:c6:bd:6e:ff:3f:f1:fa:90: 03:29:8f:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1MjYxMTAvBgNVBAUTKEVDODAwODZDMjIwN0IxQTA0NjAwNzI1MTgzRTNDNEYw RkRFMTY3NUYwHhcNMjQwNTE4MTYxNzQxWhcNMjQwNTI1MTYxNzQxWjAYMRYwFAYD VQQDEw02NjQ4ZDRhNS04MWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqmRvu64ABPeyyLwtacdhtslXTBcbOjf8sY1ChrciRh/UDGUSZxVry1nK5qHK NqORb4chEsoczKIexXSAEFb17PUBH2DV6vpavKgxlKzZUlKjRBa1KNPRT6JyXMGK StOTU0mCdR8FFitaVDZdFXt1NTC6xLLmG2lmbcLdK3gZyTgu+ymIxWVgba+I/Nuo Ow3ZeT4Uvt36RI1Wx9LiaOZsJJKQOWb4trHYa1Q1pusfU4WKD9gHL9PeiR41WCHD 2TpoB+5dPylX5uHg2nhBOtolcLN61SLP+tBr1cP5ST2qF9LhATtwMZXxQewFbxkE r5FK5tC86HRvxTe939QleQMQbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPviwswg 8+frMOW4KorWwwKCJrY+MB8GA1UdIwQYMBaAFOyACGwiB7GgRgByUYPjxPD94Wdf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTUyNi9GNjI4QTMzNkU5 QTQxMUU1OTZBQjgyMjNDNEY5QUUwMi83SUFJYkNJSHNhQkdBSEpSZy1QRThQM2ha MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdJQUliQ0lIc2FCR0FISlJnLVBFOFAzaFoxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTUyNi9GNjI4QTMzNkU5QTQxMUU1OTZBQjgyMjNDNEY5QUUwMi83SUFJYkNJSHNh QkdBSEpSZy1QRThQM2haMTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAioJBaZwLDqZPEK9iu/8jzYHtXlG7Lh63UxDiY4c9qpZvhTSnUujJZ mafc3RY/iq5QLmGRkN8UThzoXdciFOHtF2VZUUKTMVhi2VDpv9lDZi0ilcCI66m/ uQiawA/kGEyVJwi3A7gXJhMThcw8lS7vXOkIU3KRkdgEmoU16HsKZEPGcayw0h4s NfpleaxGrynTovzNUbHsmSOm0tqlsPG1/uzNS4rIqGJmKFsL2p3LYJRi+6NxAWhu wGIAMzIjKSQDamMeyHrD1FOMhacAfUHxJKUSZUs1Cnvy1Ypwfc0zvMwsqP6znhS9 ftfDa6s7IBl1wQw7xr1u/z/x+pADKY9S -----END CERTIFICATE-----Generated at Sat May 18 16:57:53 2024 by rpki-client on console-fra.rpki-client.org