$ rpki-client -vvf rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft File: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft (raw, json) Hash identifier: sDmGDKcT+AoD6hmyHrRPwx/jU0z3/i4LUt1IqlHX/4E= Subject key identifier: E5:E2:53:A2:D4:78:78:A4:31:CF:FE:21:A5:90:5B:CE:48:EA:EC:F7 Authority key identifier: ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4 Certificate issuer: /CN=A9146944/serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4 Certificate serial: 0929 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft Manifest number: 08F9 Signing time: Thu 30 May 2024 21:53:16 +0000 Manifest this update: Thu 30 May 2024 21:53:15 +0000 Manifest next update: Thu 06 Jun 2024 21:53:15 +0000 Files and hashes: 1: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl (hash: 4ymbJzmLI2yRDwS1hC6Oqv8U29FLn9IvDQjDQ93gOVU=) 2: 2C042068417511EE96ADB173C4F9AE02.roa (hash: qhFLyAzvSDXSfYUij4iL9t8VtmKLzxeSsG1vLJcftG8=) 3: 2B2EF1E0417511EE96ADB173C4F9AE02.roa (hash: kJRhJDw76J4yZdZaQoYg7NxeSWYRtskAPrPxOGYA9Ag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 21:33:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2345 (0x929) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146944/serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4 Validity Not Before: May 30 21:53:15 2024 GMT Not After : Jun 6 21:53:15 2024 GMT Subject: CN=6658f54b-bda4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4e:85:a1:50:42:72:fa:90:d5:38:6a:0a:1f: 44:0c:e4:50:1f:1b:f3:b5:51:4a:03:dd:6b:3a:ca: ac:e2:7f:47:1a:d6:97:0e:78:dd:b7:7a:0d:c0:33: f6:29:c9:61:95:8d:95:90:7f:09:56:49:0a:04:e0: 07:08:1c:9f:c0:4a:06:f5:f2:8b:e2:d3:59:fc:9a: ed:89:57:71:df:2f:d3:60:e1:97:2f:92:45:df:df: a0:02:55:8e:10:55:a0:c9:c6:24:56:83:6b:d7:ba: 9b:aa:ba:92:c5:e4:3b:bf:3a:44:18:38:52:c0:14: 77:4c:2b:33:b9:00:11:9f:aa:46:5b:95:46:6d:31: c3:5b:e5:4d:a7:67:16:df:d4:3a:3b:99:36:d5:20: 34:c7:07:3c:e1:38:e1:85:91:d6:82:6d:77:4b:31: 40:db:76:46:d4:85:6b:73:f5:86:c3:4a:0f:6e:66: c6:1b:a3:35:ea:ae:98:64:dc:c8:9f:fc:87:2d:f1: a7:2b:91:c7:33:bc:29:e9:3c:8f:c6:1b:ec:5f:aa: 4f:ba:14:29:97:de:fb:ae:24:3c:b1:b5:b4:b2:84: f1:cb:61:0b:bc:59:a8:89:9f:da:ce:22:08:50:2c: 03:1d:5e:c9:3c:f5:47:5d:65:a1:2a:a3:2d:88:2c: c1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E2:53:A2:D4:78:78:A4:31:CF:FE:21:A5:90:5B:CE:48:EA:EC:F7 X509v3 Authority Key Identifier: keyid:ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:76:2d:c1:4f:9a:6b:83:d8:97:36:8f:92:e9:73:bc:12:4c: 66:88:02:bd:7c:25:04:f9:35:74:c5:bf:fc:7f:7b:67:2c:db: a5:e2:5d:39:38:06:5c:a4:2f:31:cd:ad:6a:6a:de:5a:a4:17: 04:24:27:78:ab:ba:76:8d:f4:ec:37:94:8e:d9:71:d8:e3:17: 19:78:4a:6a:de:73:e0:17:8d:50:e3:94:38:0b:5d:fb:70:28: b8:28:b1:28:68:fa:4a:b5:21:0d:7d:9b:eb:9a:87:68:83:6d: 15:5b:94:3b:7f:c4:d1:a8:eb:f7:47:6d:61:a2:f9:9f:63:91: 4c:38:c3:58:51:00:0d:7a:1d:d3:0c:d1:fd:68:79:11:79:54: fa:75:3c:71:66:ca:71:51:ca:0c:33:d0:5b:4d:c9:f3:36:a6: 40:7a:1e:3c:11:d1:3d:a6:ac:e9:5d:6d:ab:ef:f1:4e:ff:b5: f4:4c:0f:94:79:10:bc:30:dd:d0:77:96:4a:9c:c0:39:b7:2f: ad:cb:74:b7:de:56:de:e3:50:c6:d5:51:4b:19:fd:46:a2:80: fe:dc:b2:7d:de:37:a1:0b:0e:cf:15:d2:64:fa:2f:52:73:0a: 6f:72:ba:7f:a6:7f:62:d7:9d:70:48:1c:ca:7a:3a:b5:e0:e2: 11:65:82:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY5NDQxMTAvBgNVBAUTKEVEMUY5NThDQjYwNEI1NzZFODIyMTRCNENGM0NDMEZF NjIwRUY5RjQwHhcNMjQwNTMwMjE1MzE1WhcNMjQwNjA2MjE1MzE1WjAYMRYwFAYD VQQDEw02NjU4ZjU0Yi1iZGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqE6FoVBCcvqQ1ThqCh9EDORQHxvztVFKA91rOsqs4n9HGtaXDnjdt3oNwDP2 KclhlY2VkH8JVkkKBOAHCByfwEoG9fKL4tNZ/JrtiVdx3y/TYOGXL5JF39+gAlWO EFWgycYkVoNr17qbqrqSxeQ7vzpEGDhSwBR3TCszuQARn6pGW5VGbTHDW+VNp2cW 39Q6O5k21SA0xwc84TjhhZHWgm13SzFA23ZG1IVrc/WGw0oPbmbGG6M16q6YZNzI n/yHLfGnK5HHM7wp6TyPxhvsX6pPuhQpl977riQ8sbW0soTxy2ELvFmoiZ/aziII UCwDHV7JPPVHXWWhKqMtiCzBiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOXiU6LU eHikMc/+IaWQW85I6uz3MB8GA1UdIwQYMBaAFO0flYy2BLV26CIUtM88wP5iDvn0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Njk0NC80M0JEMUM2RThF OTUxMUVBQTlENzNBMkVDNEY5QUUwMi83Ui1WakxZRXRYYm9JaFMwenp6QV9tSU8t ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdSLVZqTFlFdFhib0loUzB6enpBX21JTy1mUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Njk0NC80M0JEMUM2RThFOTUxMUVBQTlENzNBMkVDNEY5QUUwMi83Ui1WakxZRXRY Ym9JaFMwenp6QV9tSU8tZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKdi3BT5prg9iXNo+S6XO8EkxmiAK9fCUE+TV0xb/8f3tnLNul4l05 OAZcpC8xza1qat5apBcEJCd4q7p2jfTsN5SO2XHY4xcZeEpq3nPgF41Q45Q4C137 cCi4KLEoaPpKtSENfZvrmodog20VW5Q7f8TRqOv3R21hovmfY5FMOMNYUQANeh3T DNH9aHkReVT6dTxxZspxUcoMM9BbTcnzNqZAeh48EdE9pqzpXW2r7/FO/7X0TA+U eRC8MN3Qd5ZKnMA5ty+ty3S33lbe41DG1VFLGf1GooD+3LJ93jehCw7PFdJk+i9S cwpvcrp/pn9i151wSBzKejq14OIRZYK2 -----END CERTIFICATE-----Generated at Thu May 30 22:23:42 2024 by rpki-client on console-fra.rpki-client.org