$ rpki-client -vvf rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft File: 7VRR-GERmCtnraCkwGxR1KCAAXA.mft (raw, json) Hash identifier: 9KedBbzW13r6jpWGurwDygIG+JijZei5mb+NUZz2+60= Subject key identifier: 12:D4:D3:2E:3B:5B:92:07:6F:23:3C:F5:CA:DF:97:67:4C:83:0A:28 Authority key identifier: ED:54:51:F8:61:11:98:2B:67:AD:A0:A4:C0:6C:51:D4:A0:80:01:70 Certificate issuer: /CN=A9154786/serialNumber=ED5451F86111982B67ADA0A4C06C51D4A0800170 Certificate serial: 2FBE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VRR-GERmCtnraCkwGxR1KCAAXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft Manifest number: 2FBD Signing time: Fri 31 May 2024 15:46:58 +0000 Manifest this update: Fri 31 May 2024 15:46:57 +0000 Manifest next update: Fri 07 Jun 2024 15:46:57 +0000 Files and hashes: 1: 7VRR-GERmCtnraCkwGxR1KCAAXA.crl (hash: lDINffbkzYxbL9xhYhTZ5iPeZuads2X0wbBLj+W6he8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.crl rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VRR-GERmCtnraCkwGxR1KCAAXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 15:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12222 (0x2fbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154786/serialNumber=ED5451F86111982B67ADA0A4C06C51D4A0800170 Validity Not Before: May 31 15:46:57 2024 GMT Not After : Jun 7 15:46:57 2024 GMT Subject: CN=6659f0f2-3bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8f:f6:79:68:68:bb:9c:01:94:35:88:c7:53: 20:af:da:25:e9:8c:72:01:1f:d6:bd:13:60:ba:a0: d3:49:b0:fb:af:2c:7d:2b:7e:c3:c5:9a:ba:62:30: 8d:bc:91:30:5e:55:28:a0:6c:58:d0:cb:ec:5a:35: 0e:0b:64:17:74:30:a2:76:7e:08:b6:77:a6:56:ad: 89:31:52:b2:76:2b:0c:ca:54:d0:36:29:66:ef:fb: 6d:c3:1c:40:6e:a7:7e:d3:e2:97:51:b5:ad:a9:38: bc:64:dc:58:61:64:b6:dc:67:96:93:ed:e3:66:1e: a0:06:75:68:3a:5d:45:95:2f:7b:dd:33:48:0e:e5: 3a:53:49:9d:39:85:d6:ff:ae:7e:df:4e:46:e0:26: 52:d4:92:6c:e9:60:08:52:1b:1d:7a:58:ec:a9:dc: bc:7b:ad:a7:a6:5f:d8:8a:9f:b7:a5:f4:8c:ae:a6: 0b:37:a2:63:65:67:af:a2:04:e5:f9:5c:ee:fd:58: bd:ab:88:2f:01:dd:4f:eb:66:fb:77:04:b3:e9:8b: 0e:7f:9c:51:b7:0d:16:46:f8:25:f4:15:fb:c9:b3: 78:b2:cb:78:aa:2f:a5:6f:4a:6f:91:30:64:63:02: f1:ba:cf:f5:68:a4:50:65:ba:7b:cb:40:92:ab:78: bb:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D4:D3:2E:3B:5B:92:07:6F:23:3C:F5:CA:DF:97:67:4C:83:0A:28 X509v3 Authority Key Identifier: keyid:ED:54:51:F8:61:11:98:2B:67:AD:A0:A4:C0:6C:51:D4:A0:80:01:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VRR-GERmCtnraCkwGxR1KCAAXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:89:c9:37:26:f1:d8:78:f3:f7:47:8c:90:a1:0f:24:f2:2a: 09:0f:0e:c1:93:b1:4b:d6:c8:c4:a0:17:e9:93:4c:9d:24:c3: 9e:0c:f1:13:04:2f:92:d9:74:f5:5d:56:ee:92:e6:eb:a4:95: c1:4a:08:c0:35:d7:bf:b6:e5:af:20:33:04:e0:a8:ff:be:7f: 0f:4a:57:ff:29:dc:22:08:1b:52:b2:76:de:9b:63:cc:29:de: 9f:c2:5d:b7:82:64:3d:78:04:24:3a:3c:1a:75:70:80:a5:dc: cc:b7:1c:30:f6:45:d1:92:b9:4e:66:68:3d:b1:cc:c9:65:6c: 3c:2e:d9:d7:00:b2:f0:dd:fa:0d:7c:05:fe:72:ef:2f:21:b9: d2:38:c1:09:f6:96:c2:c5:f8:ab:57:99:15:5d:a6:9c:64:fa: c8:3b:27:fd:3e:84:c4:6b:f9:f8:7d:d8:53:c9:cd:33:3d:91: 12:09:6a:41:bc:82:35:9a:3e:9c:e9:41:40:33:db:53:01:51: c0:81:94:ff:f6:16:38:5e:6e:74:99:18:44:67:74:97:53:f3: 6d:db:f4:73:2a:86:6f:dd:b8:ca:4b:85:80:1a:ef:c8:71:b6: 76:ca:5a:8b:9c:b8:b2:8c:d9:df:aa:37:19:74:99:e3:22:db: de:88:19:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICL74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ3ODYxMTAvBgNVBAUTKEVENTQ1MUY4NjExMTk4MkI2N0FEQTBBNEMwNkM1MUQ0 QTA4MDAxNzAwHhcNMjQwNTMxMTU0NjU3WhcNMjQwNjA3MTU0NjU3WjAYMRYwFAYD VQQDEw02NjU5ZjBmMi0zYmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvo/2eWhou5wBlDWIx1Mgr9ol6YxyAR/WvRNguqDTSbD7ryx9K37DxZq6YjCN vJEwXlUooGxY0MvsWjUOC2QXdDCidn4ItnemVq2JMVKydisMylTQNilm7/ttwxxA bqd+0+KXUbWtqTi8ZNxYYWS23GeWk+3jZh6gBnVoOl1FlS973TNIDuU6U0mdOYXW /65+305G4CZS1JJs6WAIUhsdeljsqdy8e62npl/Yip+3pfSMrqYLN6JjZWevogTl +Vzu/Vi9q4gvAd1P62b7dwSz6YsOf5xRtw0WRvgl9BX7ybN4sst4qi+lb0pvkTBk YwLxus/1aKRQZbp7y0CSq3i7ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBLU0y47 W5IHbyM89crfl2dMgwooMB8GA1UdIwQYMBaAFO1UUfhhEZgrZ62gpMBsUdSggAFw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDc4Ni9FRUNENDYwNEU5 MkIxMUUyODdGM0JEOTQ1OTExRUEzMi83VlJSLUdFUm1DdG5yYUNrd0d4UjFLQ0FB WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdWUlItR0VSbUN0bnJhQ2t3R3hSMUtDQUFYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDc4Ni9FRUNENDYwNEU5MkIxMUUyODdGM0JEOTQ1OTExRUEzMi83VlJSLUdFUm1D dG5yYUNrd0d4UjFLQ0FBWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+ick3JvHYePP3R4yQoQ8k8ioJDw7Bk7FL1sjEoBfpk0ydJMOeDPET BC+S2XT1XVbukubrpJXBSgjANde/tuWvIDME4Kj/vn8PSlf/KdwiCBtSsnbem2PM Kd6fwl23gmQ9eAQkOjwadXCApdzMtxww9kXRkrlOZmg9sczJZWw8LtnXALLw3foN fAX+cu8vIbnSOMEJ9pbCxfirV5kVXaacZPrIOyf9PoTEa/n4fdhTyc0zPZESCWpB vII1mj6c6UFAM9tTAVHAgZT/9hY4Xm50mRhEZ3SXU/Nt2/RzKoZv3bjKS4WAGu/I cbZ2ylqLnLiyjNnfqjcZdJnjItveiBnB -----END CERTIFICATE-----Generated at Fri May 31 16:40:56 2024 by rpki-client on console-ams.rpki-client.org