$ rpki-client -vvf rpki.apnic.net/member_repository/A9160F2D/085A70489DF911EC83CCFA65C4F9AE02/7FdAxHbX__RLph-FeRWh8XmTGko.mft File: 7FdAxHbX__RLph-FeRWh8XmTGko.mft (raw, json) Hash identifier: EsXXqFq4n9Gc+ogl3rVvL18gUnwRQwKffcqGjppHlng= Subject key identifier: 48:62:70:8B:E3:51:D7:71:13:1F:A7:61:2C:EC:2B:D3:6D:64:93:22 Authority key identifier: EC:57:40:C4:76:D7:FF:F4:4B:A6:1F:85:79:15:A1:F1:79:93:1A:4A Certificate issuer: /CN=A9160F2D/serialNumber=EC5740C476D7FFF44BA61F857915A1F179931A4A Certificate serial: 02DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FdAxHbX__RLph-FeRWh8XmTGko.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160F2D/085A70489DF911EC83CCFA65C4F9AE02/7FdAxHbX__RLph-FeRWh8XmTGko.mft Manifest number: 02D8 Signing time: Sun 19 May 2024 03:22:50 +0000 Manifest this update: Sun 19 May 2024 03:22:49 +0000 Manifest next update: Sun 26 May 2024 03:22:49 +0000 Files and hashes: 1: 7FdAxHbX__RLph-FeRWh8XmTGko.crl (hash: fSh/4R4VssFo2xLgYbR4cVH8vBSGOeuiim6oSRe6Egs=) 2: F7EA272C043111EDB7DA7485C4F9AE02.roa (hash: mJhgsg3Wq2rzRuujkB6eG0zeP2qDmSZd91bZ6KNL7kw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160F2D/085A70489DF911EC83CCFA65C4F9AE02/7FdAxHbX__RLph-FeRWh8XmTGko.crl rsync://rpki.apnic.net/member_repository/A9160F2D/085A70489DF911EC83CCFA65C4F9AE02/7FdAxHbX__RLph-FeRWh8XmTGko.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FdAxHbX__RLph-FeRWh8XmTGko.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 734 (0x2de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160F2D/serialNumber=EC5740C476D7FFF44BA61F857915A1F179931A4A Validity Not Before: May 19 03:22:49 2024 GMT Not After : May 26 03:22:49 2024 GMT Subject: CN=66497089-4dde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:24:84:d1:dd:f8:71:19:85:2b:dc:55:d6:fd: a4:5e:0a:b2:cc:87:54:ce:86:7d:37:a2:1d:53:c5: ce:a5:1e:20:ee:6f:1e:7b:88:06:b6:bb:99:54:47: 24:ac:99:f1:39:cb:68:a3:88:12:38:15:b9:71:d1: f5:da:15:87:61:78:0b:4f:58:3d:7b:b8:82:4e:04: 0c:cd:b8:d4:ae:77:bb:59:65:70:83:7d:f4:6b:d1: 09:57:88:74:af:1e:85:35:52:eb:3a:07:49:3a:80: 2b:4e:09:80:b8:46:c0:32:34:c8:74:3a:50:32:6d: 6e:3b:1b:86:36:12:da:11:13:54:42:6a:36:10:26: b8:d4:27:09:8c:e2:15:42:3a:64:33:bb:ee:7f:b4: 82:e1:0b:9c:8a:06:4b:73:42:29:0a:78:9e:39:ec: 99:dd:3c:75:2d:da:2f:81:44:c6:dd:d6:79:80:ce: a0:71:26:1f:af:b3:44:16:e7:17:5c:bc:95:95:5d: 91:71:6d:d4:28:e2:01:2e:a6:d3:17:61:41:a2:a9: 4d:e4:b2:04:90:25:55:4c:f3:c7:70:94:86:41:10: 99:2c:88:69:2d:14:52:11:21:9b:0a:26:34:64:53: f7:ce:96:09:1b:b0:8e:3d:8e:7a:52:f4:6b:46:82: 1a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:62:70:8B:E3:51:D7:71:13:1F:A7:61:2C:EC:2B:D3:6D:64:93:22 X509v3 Authority Key Identifier: keyid:EC:57:40:C4:76:D7:FF:F4:4B:A6:1F:85:79:15:A1:F1:79:93:1A:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160F2D/085A70489DF911EC83CCFA65C4F9AE02/7FdAxHbX__RLph-FeRWh8XmTGko.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FdAxHbX__RLph-FeRWh8XmTGko.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160F2D/085A70489DF911EC83CCFA65C4F9AE02/7FdAxHbX__RLph-FeRWh8XmTGko.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:6c:7f:82:5a:5d:11:c3:45:ed:4f:3f:49:cb:dc:3a:d3:d3: 7e:06:69:3c:12:fb:c5:bf:fc:dc:e1:d8:61:e2:b0:04:e8:31: 3d:6d:4c:d7:d2:f3:c2:14:70:66:f8:f3:27:f4:12:20:bf:2c: 35:ed:27:13:f1:60:88:03:e1:47:95:c0:2d:50:52:d5:3e:1d: 3d:4d:d7:f7:d5:7e:7a:3e:ec:c5:40:4e:ab:28:ba:27:b6:c8: 03:8b:7e:68:93:75:d0:0a:6b:ac:c9:5e:76:f8:0a:44:2c:ab: c8:07:2b:bd:87:27:c6:87:55:83:56:99:31:cb:25:ea:ee:4c: a6:b2:34:e1:6e:ec:1a:e3:a9:91:b9:b5:22:c2:77:46:9d:ba: fc:48:16:c6:e0:45:f9:80:f7:eb:05:25:78:53:fc:bd:fb:37: 3c:c6:6f:f6:2d:7f:7f:1b:12:97:fb:d7:cc:fa:7c:bb:1d:7d: 08:5f:66:2b:4c:0f:12:fe:b5:eb:9b:50:d1:24:a3:32:9e:cc: b4:5c:6f:8d:3b:6c:7c:6d:2a:bf:73:31:fe:dc:3e:35:62:5a: 51:02:9b:05:a1:77:63:3e:60:72:75:f2:ed:92:b5:bc:bf:cf: 23:87:e3:0a:d1:51:7c:14:41:0e:17:9d:79:e4:cf:bd:e2:74: 53:82:44:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBGMkQxMTAvBgNVBAUTKEVDNTc0MEM0NzZEN0ZGRjQ0QkE2MUY4NTc5MTVBMUYx Nzk5MzFBNEEwHhcNMjQwNTE5MDMyMjQ5WhcNMjQwNTI2MDMyMjQ5WjAYMRYwFAYD VQQDEw02NjQ5NzA4OS00ZGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyiSE0d34cRmFK9xV1v2kXgqyzIdUzoZ9N6IdU8XOpR4g7m8ee4gGtruZVEck rJnxOctoo4gSOBW5cdH12hWHYXgLT1g9e7iCTgQMzbjUrne7WWVwg330a9EJV4h0 rx6FNVLrOgdJOoArTgmAuEbAMjTIdDpQMm1uOxuGNhLaERNUQmo2ECa41CcJjOIV QjpkM7vuf7SC4QucigZLc0IpCnieOeyZ3Tx1LdovgUTG3dZ5gM6gcSYfr7NEFucX XLyVlV2RcW3UKOIBLqbTF2FBoqlN5LIEkCVVTPPHcJSGQRCZLIhpLRRSESGbCiY0 ZFP3zpYJG7COPY56UvRrRoIaewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEhicIvj UddxEx+nYSzsK9NtZJMiMB8GA1UdIwQYMBaAFOxXQMR21//0S6YfhXkVofF5kxpK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEYyRC8wODVBNzA0ODlE RjkxMUVDODNDQ0ZBNjVDNEY5QUUwMi83RmRBeEhiWF9fUkxwaC1GZVJXaDhYbVRH a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGZEF4SGJYX19STHBoLUZlUldoOFhtVEdrby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEYyRC8wODVBNzA0ODlERjkxMUVDODNDQ0ZBNjVDNEY5QUUwMi83RmRBeEhiWF9f UkxwaC1GZVJXaDhYbVRHa28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAybH+CWl0Rw0XtTz9Jy9w609N+Bmk8EvvFv/zc4dhh4rAE6DE9bUzX 0vPCFHBm+PMn9BIgvyw17ScT8WCIA+FHlcAtUFLVPh09Tdf31X56PuzFQE6rKLon tsgDi35ok3XQCmusyV52+ApELKvIByu9hyfGh1WDVpkxyyXq7kymsjThbuwa46mR ubUiwndGnbr8SBbG4EX5gPfrBSV4U/y9+zc8xm/2LX9/GxKX+9fM+ny7HX0IX2Yr TA8S/rXrm1DRJKMynsy0XG+NO2x8bSq/czH+3D41YlpRApsFoXdjPmBydfLtkrW8 v88jh+MK0VF8FEEOF5155M+94nRTgkRZ -----END CERTIFICATE-----Generated at Sun May 19 04:20:42 2024 by rpki-client on console-ams.rpki-client.org