$ rpki-client -vvf rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft File: 7C-kN5G65saorcWjDpmoUrYSj68.mft (raw, json) Hash identifier: Mblr8UOM0yLzm8X7xz4Ebh2C7JArsAVtiBXkzfypRgs= Subject key identifier: 1E:81:E7:6D:AF:43:62:21:22:3C:2A:B1:6B:92:7D:0C:BC:31:88:DF Authority key identifier: EC:2F:A4:37:91:BA:E6:C6:A8:AD:C5:A3:0E:99:A8:52:B6:12:8F:AF Certificate issuer: /CN=A915A813/serialNumber=EC2FA43791BAE6C6A8ADC5A30E99A852B6128FAF Certificate serial: 33C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft Manifest number: 33C2 Signing time: Sat 18 May 2024 14:34:44 +0000 Manifest this update: Sat 18 May 2024 14:34:44 +0000 Manifest next update: Sat 25 May 2024 14:34:44 +0000 Files and hashes: 1: 7C-kN5G65saorcWjDpmoUrYSj68.crl (hash: Y2C3Koh5ue0TvE9mmGBu5kN6S2I13xShESWj9m3paqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.crl rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13250 (0x33c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A813/serialNumber=EC2FA43791BAE6C6A8ADC5A30E99A852B6128FAF Validity Not Before: May 18 14:34:44 2024 GMT Not After : May 25 14:34:44 2024 GMT Subject: CN=6648bc84-33b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:56:47:2b:78:04:2e:83:a1:07:5b:df:83:38: e8:8b:c2:92:a0:a7:e8:24:c9:0a:6b:3d:03:f7:ab: 4c:29:c4:e3:22:cf:3a:49:ab:58:7f:00:97:e9:c0: 4e:f4:cb:31:f2:c2:10:b0:80:fa:69:8a:52:ab:db: 00:8d:c3:61:5d:1b:70:a4:07:d1:a0:e3:96:d2:ed: d6:9b:d7:bc:5d:36:03:94:91:f0:40:0e:98:ac:2b: 06:10:51:1a:12:a0:7e:1b:23:26:21:04:ed:8d:d9: 78:be:db:17:83:a9:c0:41:2c:18:6c:dd:e3:b6:44: b6:5e:55:1d:69:bc:42:e9:07:b2:44:16:dd:d5:18: d2:52:2a:9a:90:cf:da:89:fe:44:0b:96:8f:a4:c1: a6:0c:43:ed:86:ae:67:fa:16:e7:0f:fd:c9:cc:92: 46:b1:46:4b:7e:49:e6:83:c1:af:50:20:a1:43:5c: 93:28:4d:df:85:8b:ee:df:1f:c2:fb:81:e8:0f:09: 32:a2:1b:70:2b:5f:a7:a6:4a:28:6d:34:d2:9d:d4: 6a:b0:05:5c:e3:86:81:fa:33:9f:33:49:47:49:82: 0d:fa:2d:2b:cc:5a:bb:08:d8:51:bf:ff:fb:a8:4d: df:92:7e:05:10:d6:31:f2:12:e3:8b:3a:eb:31:da: b3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:81:E7:6D:AF:43:62:21:22:3C:2A:B1:6B:92:7D:0C:BC:31:88:DF X509v3 Authority Key Identifier: keyid:EC:2F:A4:37:91:BA:E6:C6:A8:AD:C5:A3:0E:99:A8:52:B6:12:8F:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:b5:76:e2:2c:3b:21:08:15:3f:09:fd:62:4a:aa:3d:2f:09: 47:dd:5f:c3:03:ea:5a:cf:a8:97:4d:5f:20:b0:6b:fa:c6:30: 51:a2:6f:24:89:c7:66:ba:98:f4:9e:19:59:be:66:7e:0a:85: be:f6:6b:2d:95:bb:7d:2b:44:6e:59:16:93:82:39:6c:47:a3: ef:46:98:82:42:48:11:c9:39:6a:e2:01:80:2c:cb:53:1a:1a: 41:b5:74:5a:db:90:50:ff:57:27:5d:5a:ce:20:2d:60:03:4c: 43:6c:7a:bd:c6:6b:ee:44:42:87:19:10:ff:0f:b9:05:ee:9b: dd:e6:9b:8b:1a:16:f1:03:0f:92:e6:47:66:1a:78:ed:e8:4c: 60:e8:70:a3:cf:57:07:cd:01:35:ef:03:2e:b6:62:95:37:42: e3:08:56:ed:29:7f:b6:b5:29:48:8f:f8:2a:2f:a2:ca:4f:8e: 33:a3:bd:f3:2e:c8:45:e3:1d:6e:34:5c:a7:41:22:17:79:a2: 46:0a:60:cd:59:52:83:4b:de:00:c0:08:77:b0:b4:52:42:0e: 6b:ac:bf:78:24:7e:62:7d:ce:38:21:fb:06:e5:64:68:1e:1a: 1a:3c:aa:40:8d:4d:a8:9a:78:c2:29:af:9a:1a:80:4c:c9:a6: 24:c2:4a:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE4MTMxMTAvBgNVBAUTKEVDMkZBNDM3OTFCQUU2QzZBOEFEQzVBMzBFOTlBODUy QjYxMjhGQUYwHhcNMjQwNTE4MTQzNDQ0WhcNMjQwNTI1MTQzNDQ0WjAYMRYwFAYD VQQDEw02NjQ4YmM4NC0zM2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVZHK3gELoOhB1vfgzjoi8KSoKfoJMkKaz0D96tMKcTjIs86SatYfwCX6cBO 9Msx8sIQsID6aYpSq9sAjcNhXRtwpAfRoOOW0u3Wm9e8XTYDlJHwQA6YrCsGEFEa EqB+GyMmIQTtjdl4vtsXg6nAQSwYbN3jtkS2XlUdabxC6QeyRBbd1RjSUiqakM/a if5EC5aPpMGmDEPthq5n+hbnD/3JzJJGsUZLfknmg8GvUCChQ1yTKE3fhYvu3x/C +4HoDwkyohtwK1+npkoobTTSndRqsAVc44aB+jOfM0lHSYIN+i0rzFq7CNhRv//7 qE3fkn4FENYx8hLjizrrMdqz+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB6B522v Q2IhIjwqsWuSfQy8MYjfMB8GA1UdIwQYMBaAFOwvpDeRuubGqK3Fow6ZqFK2Eo+v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTgxMy81QjREN0Y1MjFE ODkxMUUyQTQyMDg4RTIwOEIwMkNEMi83Qy1rTjVHNjVzYW9yY1dqRHBtb1VyWVNq NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdDLWtONUc2NXNhb3JjV2pEcG1vVXJZU2o2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTgxMy81QjREN0Y1MjFEODkxMUUyQTQyMDg4RTIwOEIwMkNEMi83Qy1rTjVHNjVz YW9yY1dqRHBtb1VyWVNqNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLtXbiLDshCBU/Cf1iSqo9LwlH3V/DA+paz6iXTV8gsGv6xjBRom8k icdmupj0nhlZvmZ+CoW+9mstlbt9K0RuWRaTgjlsR6PvRpiCQkgRyTlq4gGALMtT GhpBtXRa25BQ/1cnXVrOIC1gA0xDbHq9xmvuREKHGRD/D7kF7pvd5puLGhbxAw+S 5kdmGnjt6Exg6HCjz1cHzQE17wMutmKVN0LjCFbtKX+2tSlIj/gqL6LKT44zo73z LshF4x1uNFynQSIXeaJGCmDNWVKDS94AwAh3sLRSQg5rrL94JH5ifc44IfsG5WRo HhoaPKpAjU2omnjCKa+aGoBMyaYkwko+ -----END CERTIFICATE-----Generated at Sat May 18 15:26:03 2024 by rpki-client on console-fra.rpki-client.org