$ rpki-client -vvf rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft File: m7K00aj-gR3ElT2ALRAvXQSNCB0.mft (raw, json) Hash identifier: rclOtdQ7tJNBCD3jjT+7lxeB7hGBUPm3GkVRlBANoKs= Subject key identifier: D5:88:D0:D9:95:FB:BA:59:D6:F6:97:75:FA:2E:5E:AB:DC:56:BC:8D Authority key identifier: 9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D Certificate issuer: /CN=A91454A8/serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D Certificate serial: 0767 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft Manifest number: 0763 Signing time: Sat 18 May 2024 22:17:13 +0000 Manifest this update: Sat 18 May 2024 22:17:12 +0000 Manifest next update: Sat 25 May 2024 22:17:12 +0000 Files and hashes: 1: m7K00aj-gR3ElT2ALRAvXQSNCB0.crl (hash: SrXM8YDq5BKPJcmvrz3TPd0Ij02crHux3lbkeepJD3k=) 2: 021C59CCD1D011EAA2763743C4F9AE02.roa (hash: yKLG4+4C6c5AczdoqwT5jvtakffjN4p5Kvq/AkjJqa8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1895 (0x767) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91454A8/serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D Validity Not Before: May 18 22:17:12 2024 GMT Not After : May 25 22:17:12 2024 GMT Subject: CN=664928e9-f2ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2c:73:4a:1e:07:9c:2f:76:a5:d0:cd:54:b5: 23:10:08:47:bf:69:48:3c:b7:55:9b:d7:49:7e:61: 8a:9a:6b:49:4f:4d:44:25:bc:d6:2e:4c:a3:5d:c9: 0d:b7:91:71:63:72:ed:2e:51:49:34:29:f4:e3:6f: 2c:07:fb:a7:ef:14:01:8e:e4:33:ac:ed:93:fd:08: b7:c3:f1:59:f9:86:af:19:c9:29:a7:e7:12:42:d6: eb:b5:00:85:6e:4c:57:e1:38:81:36:c5:01:b6:43: 29:4f:f5:18:af:dc:7d:9c:16:7c:64:3a:83:b7:3b: f4:b9:ba:10:e1:24:20:c9:63:c6:a9:71:e1:60:12: 60:b8:e1:7d:7f:51:03:a5:3f:cf:cb:4d:19:a2:aa: 18:42:39:e9:8a:10:cf:a9:da:5a:53:12:20:c7:43: 0e:ff:e7:6b:3f:5e:6b:21:61:17:d0:09:3a:b6:a9: 29:f9:5b:df:64:f9:43:6b:b5:5c:15:cf:3f:71:43: 73:b3:d0:de:ab:e5:11:55:1c:f3:f1:48:0a:a5:75: 41:00:e6:a2:5c:f6:3a:91:09:68:50:60:dc:a5:20: 7f:31:ff:08:df:1d:3a:83:72:19:95:e0:c4:be:c6: 37:67:ca:fc:1d:ec:9f:57:b7:49:3e:71:b5:84:a4: 80:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:88:D0:D9:95:FB:BA:59:D6:F6:97:75:FA:2E:5E:AB:DC:56:BC:8D X509v3 Authority Key Identifier: keyid:9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:6b:95:2d:1a:2e:1a:d3:1b:f2:f3:97:e5:1d:2a:b4:6a:86: ed:97:c9:11:a2:7b:9b:ca:87:6c:6a:8d:b2:63:4d:c1:f1:5f: ff:5a:25:f0:80:4e:5c:b6:90:c6:19:d7:52:be:6c:3a:e4:d3: 21:b6:50:ab:0a:41:ec:ab:6f:09:b2:7b:84:c8:0e:0f:4d:e9: c1:6d:c0:8f:3a:3c:d3:1e:c6:44:ee:51:9e:32:15:a3:8e:2e: 64:04:39:85:8e:29:3b:08:3b:a3:2c:fa:26:8b:3d:2e:77:85: 6f:07:a8:13:ca:a3:49:f2:f9:a9:09:a5:bc:be:fb:a4:f1:5b: ab:19:f2:06:1a:3a:69:44:f5:8f:2a:8a:80:76:bd:97:bd:f4: 72:d5:55:87:bb:5f:2d:3f:3d:5e:ad:eb:fa:89:fd:da:e4:ea: 25:04:ce:bc:3f:f3:4a:17:4c:d1:68:4f:f7:cd:fa:aa:36:56: 17:6d:db:30:14:29:12:f9:9b:1d:75:b1:58:d0:53:7f:cc:51: 63:0c:bf:e6:cc:c3:5c:4c:50:df:05:d5:f8:64:93:69:ce:4e: eb:55:3d:f1:16:9d:a6:50:ab:93:15:e0:f5:86:34:61:5a:80: d9:73:83:4f:2d:9e:84:ee:79:e7:7f:dc:64:0f:b8:72:5c:74: ae:51:66:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0QTgxMTAvBgNVBAUTKDlCQjJCNEQxQThGRTgxMURDNDk1M0Q4MDJEMTAyRjVE MDQ4RDA4MUQwHhcNMjQwNTE4MjIxNzEyWhcNMjQwNTI1MjIxNzEyWjAYMRYwFAYD VQQDEw02NjQ5MjhlOS1mMmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtSxzSh4HnC92pdDNVLUjEAhHv2lIPLdVm9dJfmGKmmtJT01EJbzWLkyjXckN t5FxY3LtLlFJNCn0428sB/un7xQBjuQzrO2T/Qi3w/FZ+YavGckpp+cSQtbrtQCF bkxX4TiBNsUBtkMpT/UYr9x9nBZ8ZDqDtzv0uboQ4SQgyWPGqXHhYBJguOF9f1ED pT/Py00ZoqoYQjnpihDPqdpaUxIgx0MO/+drP15rIWEX0Ak6tqkp+VvfZPlDa7Vc Fc8/cUNzs9Deq+URVRzz8UgKpXVBAOaiXPY6kQloUGDcpSB/Mf8I3x06g3IZleDE vsY3Z8r8HeyfV7dJPnG1hKSAmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNWI0NmV +7pZ1vaXdfouXqvcVryNMB8GA1UdIwQYMBaAFJuytNGo/oEdxJU9gC0QL10EjQgd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTRBOC9FMjk1MjBCOEQx Q0QxMUVBQkE0QTM0NDBDNEY5QUUwMi9tN0swMGFqLWdSM0VsVDJBTFJBdlhRU05D QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL203SzAwYWotZ1IzRWxUMkFMUkF2WFFTTkNCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTRBOC9FMjk1MjBCOEQxQ0QxMUVBQkE0QTM0NDBDNEY5QUUwMi9tN0swMGFqLWdS M0VsVDJBTFJBdlhRU05DQjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoa5UtGi4a0xvy85flHSq0aobtl8kRonubyodsao2yY03B8V//WiXw gE5ctpDGGddSvmw65NMhtlCrCkHsq28JsnuEyA4PTenBbcCPOjzTHsZE7lGeMhWj ji5kBDmFjik7CDujLPomiz0ud4VvB6gTyqNJ8vmpCaW8vvuk8VurGfIGGjppRPWP KoqAdr2XvfRy1VWHu18tPz1erev6if3a5OolBM68P/NKF0zRaE/3zfqqNlYXbdsw FCkS+ZsddbFY0FN/zFFjDL/mzMNcTFDfBdX4ZJNpzk7rVT3xFp2mUKuTFeD1hjRh WoDZc4NPLZ6E7nnnf9xkD7hyXHSuUWab -----END CERTIFICATE-----Generated at Sun May 19 00:16:13 2024 by rpki-client on console-fra.rpki-client.org