$ rpki-client -vvf rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft File: 7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft (raw, json) Hash identifier: oJeVbSrSj2OUM3N6TB+DiODYQvv5OORRGb8MNc6/SZg= Subject key identifier: A8:1C:1E:11:8F:16:BC:D3:C9:8A:F3:FB:11:9D:8C:7A:B4:09:47:1F Authority key identifier: EC:70:5B:2A:D6:FB:13:FD:6F:C4:21:4B:97:72:70:41:13:E6:68:D7 Certificate issuer: /CN=A915D64F/serialNumber=EC705B2AD6FB13FD6FC4214B9772704113E668D7 Certificate serial: 091D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft Manifest number: 0917 Signing time: Sat 18 May 2024 21:12:40 +0000 Manifest this update: Sat 18 May 2024 21:12:40 +0000 Manifest next update: Sat 25 May 2024 21:12:40 +0000 Files and hashes: 1: 7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl (hash: jGkKdOweavyOxUPdbLLFnmtx2o5Bw0wrhXB394FAxxc=) 2: 2F7EAF12932411EB97630343C4F9AE02.roa (hash: taEGqA6seasVUG8wh6upIg7VNN7tLKDnm912bRHf+NY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2333 (0x91d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D64F/serialNumber=EC705B2AD6FB13FD6FC4214B9772704113E668D7 Validity Not Before: May 18 21:12:40 2024 GMT Not After : May 25 21:12:40 2024 GMT Subject: CN=664919c8-fe3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:af:a4:23:ca:2f:2d:c1:9b:ee:42:bc:90:50: 86:74:b6:a8:9a:52:88:ff:56:e5:13:fd:13:37:53: d2:ea:c1:a3:3a:6d:6c:f8:8f:f4:4d:14:2e:2e:45: ca:f4:19:56:b1:c1:eb:1c:f9:24:08:08:f3:ac:c4: fc:bc:75:22:36:0c:f0:97:bc:89:15:b9:18:16:09: f7:aa:eb:0b:fe:5e:53:20:5c:a0:42:28:e7:67:2e: 6b:15:ce:fc:0e:27:e0:29:1a:08:ab:59:9b:63:d2: 10:9a:7d:e5:ee:16:55:4e:d6:6e:85:07:2c:81:10: 87:49:1c:f5:ff:84:45:3a:d7:18:40:4f:83:3f:2b: 9c:97:ba:52:c1:dd:20:e3:63:ab:d6:c3:85:ae:51: 29:79:ca:b0:64:23:ee:51:74:7d:92:b4:ba:8d:17: ed:95:6a:8e:5d:84:65:5d:12:99:38:c9:ff:16:09: a8:75:7f:f1:a3:6f:c4:93:5a:bc:ac:58:20:a3:35: d8:c2:57:de:f3:fb:e9:43:4d:95:c0:da:1a:8c:46: 8e:4b:87:7a:7d:ca:cd:5c:38:b4:2f:a9:8e:b6:64: fd:2c:20:bc:94:f4:c1:71:6c:6e:16:38:f4:f0:f3: 11:29:a1:0c:34:75:f8:7d:e4:0e:85:ef:d1:59:71: a5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:1C:1E:11:8F:16:BC:D3:C9:8A:F3:FB:11:9D:8C:7A:B4:09:47:1F X509v3 Authority Key Identifier: keyid:EC:70:5B:2A:D6:FB:13:FD:6F:C4:21:4B:97:72:70:41:13:E6:68:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:84:b7:c3:b2:89:f5:87:92:05:6a:ad:49:da:54:87:c0:dc: c1:e1:79:5c:36:f9:01:a0:5a:a8:bc:ec:ef:f9:5d:3c:74:56: e6:1c:ab:f8:a2:4d:d4:ff:95:6b:24:b4:2f:d7:e8:29:f8:34: a3:66:05:85:7e:bd:4f:ff:f0:4d:8d:3c:0a:8e:9b:e1:c7:8d: 41:20:24:b6:4e:ed:39:83:9d:27:34:d5:99:24:95:cd:2f:73: 06:b3:73:6d:cd:86:ad:35:bd:99:ab:d8:ff:14:5d:e4:c1:14: 96:00:03:bb:c3:e4:b8:1a:31:57:cf:fa:1e:2c:ea:ab:16:df: a7:2c:91:0c:d5:52:f0:05:47:e8:67:8a:32:b0:9f:e0:98:5a: 4c:1e:5d:1d:84:6a:2c:7a:86:67:67:0a:4a:69:2c:0f:e7:68: ad:48:4f:02:b0:f3:ec:8d:bd:5b:6b:8f:27:27:d7:1e:d1:9f: ae:d7:0a:92:de:d9:d1:d1:55:ab:82:62:ad:8b:b7:23:75:dc: be:0a:d2:33:7f:c0:80:5b:34:2a:65:0d:c4:f4:0f:04:6a:5c: 68:b1:fb:39:cd:50:3a:e4:9d:34:04:3f:57:34:b0:27:3a:74: 6c:61:f8:34:c4:48:40:4c:69:67:46:87:90:aa:a2:f2:63:2c: 9a:6d:59:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2NEYxMTAvBgNVBAUTKEVDNzA1QjJBRDZGQjEzRkQ2RkM0MjE0Qjk3NzI3MDQx MTNFNjY4RDcwHhcNMjQwNTE4MjExMjQwWhcNMjQwNTI1MjExMjQwWjAYMRYwFAYD VQQDEw02NjQ5MTljOC1mZTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqK+kI8ovLcGb7kK8kFCGdLaomlKI/1blE/0TN1PS6sGjOm1s+I/0TRQuLkXK 9BlWscHrHPkkCAjzrMT8vHUiNgzwl7yJFbkYFgn3qusL/l5TIFygQijnZy5rFc78 DifgKRoIq1mbY9IQmn3l7hZVTtZuhQcsgRCHSRz1/4RFOtcYQE+DPyucl7pSwd0g 42Or1sOFrlEpecqwZCPuUXR9krS6jRftlWqOXYRlXRKZOMn/FgmodX/xo2/Ek1q8 rFggozXYwlfe8/vpQ02VwNoajEaOS4d6fcrNXDi0L6mOtmT9LCC8lPTBcWxuFjj0 8PMRKaEMNHX4feQOhe/RWXGldwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKgcHhGP FrzTyYrz+xGdjHq0CUcfMB8GA1UdIwQYMBaAFOxwWyrW+xP9b8QhS5dycEET5mjX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDY0Ri9GMTE1QjY3MjdE RUQxMUVBOUE1Q0NDNEJDNEY5QUUwMi83SEJiS3RiN0VfMXZ4Q0ZMbDNKd1FSUG1h TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdIQmJLdGI3RV8xdnhDRkxsM0p3UVJQbWFOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDY0Ri9GMTE1QjY3MjdERUQxMUVBOUE1Q0NDNEJDNEY5QUUwMi83SEJiS3RiN0Vf MXZ4Q0ZMbDNKd1FSUG1hTmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBihLfDson1h5IFaq1J2lSHwNzB4XlcNvkBoFqovOzv+V08dFbmHKv4 ok3U/5VrJLQv1+gp+DSjZgWFfr1P//BNjTwKjpvhx41BICS2Tu05g50nNNWZJJXN L3MGs3NtzYatNb2Zq9j/FF3kwRSWAAO7w+S4GjFXz/oeLOqrFt+nLJEM1VLwBUfo Z4oysJ/gmFpMHl0dhGoseoZnZwpKaSwP52itSE8CsPPsjb1ba48nJ9ce0Z+u1wqS 3tnR0VWrgmKti7cjddy+CtIzf8CAWzQqZQ3E9A8Ealxosfs5zVA65J00BD9XNLAn OnRsYfg0xEhATGlnRoeQqqLyYyyabVm0 -----END CERTIFICATE-----Generated at Sat May 18 22:27:54 2024 by rpki-client on console-ams.rpki-client.org