$ rpki-client -vvf rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft File: B-7MRCaowz1FkLzaEtl1DEkEhX0.mft (raw, json) Hash identifier: zvb+cwx7TMYrgb5VZbUcoQ2dIlTDSexHcve5SzDQZF4= Subject key identifier: 1F:65:5B:50:AE:D8:8D:70:81:EE:18:74:26:F1:10:F0:96:17:47:62 Authority key identifier: 07:EE:CC:44:26:A8:C3:3D:45:90:BC:DA:12:D9:75:0C:49:04:85:7D Certificate issuer: /CN=A914C90B/serialNumber=07EECC4426A8C33D4590BCDA12D9750C4904857D Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft Manifest number: 1F Signing time: Sun 19 May 2024 08:37:01 +0000 Manifest this update: Sun 19 May 2024 08:37:01 +0000 Manifest next update: Sun 26 May 2024 08:37:01 +0000 Files and hashes: 1: B-7MRCaowz1FkLzaEtl1DEkEhX0.crl (hash: K8sTCwyPjHO13Fq7dI91OUGxbXw22RBD26Itk+7E/TQ=) 2: 52BD65B4E7D511EE8C353D2AC4F9AE02.roa (hash: zFf97/9MWDJ1OuFa86jOAQdYZPSbsznuzGtJuPn2650=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.crl rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C90B/serialNumber=07EECC4426A8C33D4590BCDA12D9750C4904857D Validity Not Before: May 19 08:37:01 2024 GMT Not After : May 26 08:37:01 2024 GMT Subject: CN=6649ba2d-110b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2a:dc:ac:92:5f:4b:e7:4d:b9:f2:68:2b:bd: 20:d8:ae:66:6d:58:f6:49:14:d1:95:f6:0b:23:95: 74:21:b8:fc:6a:90:02:5c:f7:17:a2:59:58:aa:f5: 85:83:e1:4a:cd:df:d0:01:70:0d:e5:c9:fb:f4:31: ca:89:be:c4:e4:88:fd:72:96:8a:c6:ed:40:63:f2: 7f:25:bf:16:f2:e4:56:ee:78:4c:96:34:17:61:5a: 4d:90:21:9b:b7:21:fb:c2:40:fb:5d:85:7f:43:29: f1:c7:62:ab:0b:dc:89:eb:cf:aa:10:38:3f:22:60: e4:94:43:91:70:f6:59:71:dc:fd:70:43:93:5b:35: 4c:77:ca:f6:86:9a:42:8c:9f:cb:b9:1c:45:03:e9: bf:f4:86:da:b6:2f:be:16:45:b5:b6:8f:ff:51:88: 34:44:01:e2:ab:21:fc:79:3d:5f:c3:bc:6a:e9:7e: 1c:c9:d7:86:34:da:90:b1:6c:9f:89:23:7b:47:68: 89:7b:db:28:68:56:82:c4:59:ad:5b:5d:12:50:d2: 2f:e3:92:57:a6:e7:97:7c:6c:7d:fd:c5:2b:eb:86: 4d:75:00:06:dd:ef:01:0f:1e:74:71:ee:54:2a:1d: d7:8b:d0:bc:5e:86:14:93:a8:81:5b:84:1c:7c:2c: 2e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:65:5B:50:AE:D8:8D:70:81:EE:18:74:26:F1:10:F0:96:17:47:62 X509v3 Authority Key Identifier: keyid:07:EE:CC:44:26:A8:C3:3D:45:90:BC:DA:12:D9:75:0C:49:04:85:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:02:21:07:27:d6:12:3f:25:36:d0:27:63:46:cb:9f:a8:40: 9d:e4:23:7e:c8:0b:39:5d:e1:23:ee:2d:95:88:ad:e5:76:82: 85:08:9d:9b:ff:18:25:cd:7d:fe:ee:7a:44:90:58:d2:b9:e3: ea:6c:d2:a3:03:82:6e:59:b0:ad:97:10:24:2e:71:ca:d6:0c: b7:e3:66:6e:69:16:68:cd:b4:fa:20:27:87:70:7c:e0:2f:ec: f9:3a:70:d2:ca:bd:62:14:25:05:80:46:9b:cc:10:cd:cd:41: 21:60:6a:c2:cc:47:61:53:bd:e2:0c:5b:32:46:91:83:2d:5e: 1a:2d:40:ed:93:9d:29:b4:5a:1d:89:d9:cc:6f:c5:6a:77:f7: 11:5e:0e:23:91:12:ef:f6:bf:54:71:76:eb:a2:3a:68:91:ee: bf:09:24:2e:e6:73:63:21:aa:66:13:88:db:2a:d2:64:af:60: f5:8c:ca:8a:ad:a6:59:61:d1:ff:84:af:7b:0a:f0:d6:5e:be: 19:ec:37:78:18:10:4d:b0:a2:5d:7c:06:0b:2e:c5:32:1a:be: 2d:54:96:9e:0f:af:2b:2f:b1:22:ef:31:60:76:7c:ed:8d:a1: 92:ab:1d:e4:4d:02:7a:ea:c3:75:01:53:7a:a7:7d:43:74:71: 81:54:51:c6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QzkwQjExMC8GA1UEBRMoMDdFRUNDNDQyNkE4QzMzRDQ1OTBCQ0RBMTJEOTc1MEM0 OTA0ODU3RDAeFw0yNDA1MTkwODM3MDFaFw0yNDA1MjYwODM3MDFaMBgxFjAUBgNV BAMTDTY2NDliYTJkLTExMGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcKtyskl9L50258mgrvSDYrmZtWPZJFNGV9gsjlXQhuPxqkAJc9xeiWViq9YWD 4UrN39ABcA3lyfv0McqJvsTkiP1ylorG7UBj8n8lvxby5FbueEyWNBdhWk2QIZu3 IfvCQPtdhX9DKfHHYqsL3Inrz6oQOD8iYOSUQ5Fw9llx3P1wQ5NbNUx3yvaGmkKM n8u5HEUD6b/0htq2L74WRbW2j/9RiDREAeKrIfx5PV/DvGrpfhzJ14Y02pCxbJ+J I3tHaIl72yhoVoLEWa1bXRJQ0i/jklem55d8bH39xSvrhk11AAbd7wEPHnRx7lQq HdeL0LxehhSTqIFbhBx8LC4pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUH2VbUK7Y jXCB7hh0JvEQ8JYXR2IwHwYDVR0jBBgwFoAUB+7MRCaowz1FkLzaEtl1DEkEhX0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRDOTBCLzkyODQyNzAyRTcx MDExRUVBOURCQzI1MkM0RjlBRTAyL0ItN01SQ2Fvd3oxRmtMemFFdGwxREVrRWhY MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQi03TVJDYW93ejFGa0x6YUV0bDFERWtFaFgwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRD OTBCLzkyODQyNzAyRTcxMDExRUVBOURCQzI1MkM0RjlBRTAyL0ItN01SQ2Fvd3ox RmtMemFFdGwxREVrRWhYMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACQCIQcn1hI/JTbQJ2NGy5+oQJ3kI37ICzld4SPuLZWIreV2goUInZv/ GCXNff7uekSQWNK54+ps0qMDgm5ZsK2XECQuccrWDLfjZm5pFmjNtPogJ4dwfOAv 7Pk6cNLKvWIUJQWARpvMEM3NQSFgasLMR2FTveIMWzJGkYMtXhotQO2TnSm0Wh2J 2cxvxWp39xFeDiOREu/2v1RxduuiOmiR7r8JJC7mc2MhqmYTiNsq0mSvYPWMyoqt pllh0f+Er3sK8NZevhnsN3gYEE2wol18BgsuxTIavi1Ulp4PrysvsSLvMWB2fO2N oZKrHeRNAnrqw3UBU3qnfUN0cYFUUcY= -----END CERTIFICATE-----Generated at Sun May 19 09:32:16 2024 by rpki-client on console-ams.rpki-client.org