$ rpki-client -vvf rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft File: 7ulOOvQOrIyjbcMuSeREbs-zNQU.mft (raw, json) Hash identifier: O2iHPd+0+Vqn0yOi3WhMCIQm1d7aBNVMCyYXmGQFocs= Subject key identifier: 54:95:BB:EC:32:1B:E8:00:C9:29:EC:07:DA:E0:9B:83:DD:83:88:FF Authority key identifier: EE:E9:4E:3A:F4:0E:AC:8C:A3:6D:C3:2E:49:E4:44:6E:CF:B3:35:05 Certificate issuer: /CN=A9161FF7/serialNumber=EEE94E3AF40EAC8CA36DC32E49E4446ECFB33505 Certificate serial: 115E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ulOOvQOrIyjbcMuSeREbs-zNQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft Manifest number: 1152 Signing time: Sat 18 May 2024 17:48:08 +0000 Manifest this update: Sat 18 May 2024 17:48:07 +0000 Manifest next update: Sat 25 May 2024 17:48:07 +0000 Files and hashes: 1: 7ulOOvQOrIyjbcMuSeREbs-zNQU.crl (hash: /TQi2sIN3PY0dkNH63VbayhK6qRT24v18nMdOmuz+XA=) 2: 44A110AE77F311EEBFBD3064C4F9AE02.roa (hash: V7wsrR/V3W0D132tlUg223REdCz2I0Rx3mNRza94jvM=) 3: 43CDA63877F311EEBFBD3064C4F9AE02.roa (hash: njLzYqX5Dinif1MjQywYkzBR2oHjJrVcqkevA93L0n0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.crl rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ulOOvQOrIyjbcMuSeREbs-zNQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4446 (0x115e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161FF7/serialNumber=EEE94E3AF40EAC8CA36DC32E49E4446ECFB33505 Validity Not Before: May 18 17:48:07 2024 GMT Not After : May 25 17:48:07 2024 GMT Subject: CN=6648e9d8-d605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:09:db:0a:0f:63:47:1a:16:b5:14:fc:d5:a7: 3a:10:c7:5f:7c:96:3e:81:ed:9a:7f:93:6f:fb:36: 02:93:06:4f:4f:33:e6:10:27:56:a3:da:dd:ee:ff: 16:64:40:c0:e1:1a:15:33:ae:65:2c:2c:c9:23:86: 2d:79:fd:84:77:9e:5d:b4:dd:49:d8:cf:c7:01:d6: 23:66:7e:c5:8f:af:cf:53:a4:f7:37:00:8e:0e:50: 06:81:5c:a6:9d:d3:ec:bb:ed:21:36:6b:89:dd:5d: 9d:9d:a4:2e:bd:a5:d5:76:62:a7:9a:70:99:13:b7: cb:fb:2b:1f:f3:59:fe:b2:89:00:dc:ef:21:24:ab: c3:3e:97:82:6b:92:ae:59:ca:63:5c:6c:34:03:ea: fd:98:45:57:5f:67:a6:0c:be:97:c9:82:1a:16:a6: bb:63:a6:41:68:be:95:b5:a4:f6:75:26:c6:ca:47: 48:f1:41:ba:6e:bc:65:d0:e6:4e:02:fc:8d:9f:cd: 0a:be:ac:ad:35:a4:65:4b:f9:e8:60:4c:c1:5c:08: c9:12:13:97:45:d4:5b:17:4a:fb:ba:52:af:ce:82: 6f:df:52:17:91:78:7c:17:06:69:f6:ef:f8:04:6e: 40:85:ab:55:1b:cb:27:af:43:9b:6f:18:43:46:38: e4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:95:BB:EC:32:1B:E8:00:C9:29:EC:07:DA:E0:9B:83:DD:83:88:FF X509v3 Authority Key Identifier: keyid:EE:E9:4E:3A:F4:0E:AC:8C:A3:6D:C3:2E:49:E4:44:6E:CF:B3:35:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ulOOvQOrIyjbcMuSeREbs-zNQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:7b:54:fa:6d:71:b8:1a:4f:aa:47:23:a4:04:8a:38:e6:8f: 99:49:51:69:3e:e2:3e:9a:9c:59:c6:77:37:18:3d:19:37:3d: 77:69:2c:e9:55:1a:76:a0:25:a9:0c:c4:f7:6c:3d:52:c7:4f: 2d:5e:3c:18:dd:17:cc:75:50:cb:f2:19:f4:01:d2:7a:3d:4b: 37:38:28:f3:4e:b2:cf:1b:e0:fe:4c:95:ed:e4:4a:09:02:75: 66:a3:de:64:ca:99:4f:70:48:3c:5a:93:f0:5f:94:cb:16:da: ec:b5:b1:c0:f3:eb:e0:d8:db:90:c6:65:97:7a:89:bc:fb:1c: a5:bd:a9:b5:94:89:9c:f1:96:6c:b0:c2:c0:1a:92:47:65:b0: b2:2c:6d:e4:9f:f4:b7:ac:68:a0:a7:bb:60:b4:12:f2:b2:3b: 83:fa:20:67:62:ab:ad:f2:84:67:a5:76:cb:2d:41:c0:de:22: d2:b4:52:51:0f:e8:77:b4:24:72:00:ea:db:a4:6a:af:a6:92: b9:9b:c6:a9:86:ab:8a:98:d3:2f:8c:49:4a:00:e9:45:c1:04: 5f:3b:0b:86:74:09:dc:fe:2c:a8:e2:a1:b6:4c:cb:25:60:98: 8b:b0:d3:3e:a6:b4:09:b5:ae:34:3d:47:da:34:d6:8d:98:ab: 77:6b:c3:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFGRjcxMTAvBgNVBAUTKEVFRTk0RTNBRjQwRUFDOENBMzZEQzMyRTQ5RTQ0NDZF Q0ZCMzM1MDUwHhcNMjQwNTE4MTc0ODA3WhcNMjQwNTI1MTc0ODA3WjAYMRYwFAYD VQQDEw02NjQ4ZTlkOC1kNjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuAnbCg9jRxoWtRT81ac6EMdffJY+ge2af5Nv+zYCkwZPTzPmECdWo9rd7v8W ZEDA4RoVM65lLCzJI4Ytef2Ed55dtN1J2M/HAdYjZn7Fj6/PU6T3NwCODlAGgVym ndPsu+0hNmuJ3V2dnaQuvaXVdmKnmnCZE7fL+ysf81n+sokA3O8hJKvDPpeCa5Ku WcpjXGw0A+r9mEVXX2emDL6XyYIaFqa7Y6ZBaL6VtaT2dSbGykdI8UG6brxl0OZO AvyNn80KvqytNaRlS/noYEzBXAjJEhOXRdRbF0r7ulKvzoJv31IXkXh8FwZp9u/4 BG5AhatVG8snr0ObbxhDRjjktQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFSVu+wy G+gAySnsB9rgm4Pdg4j/MB8GA1UdIwQYMBaAFO7pTjr0DqyMo23DLknkRG7PszUF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUZGNy8yMTg2MkM2NEUw QzAxMUU4OUU5QkZFMTVDNEY5QUUwMi83dWxPT3ZRT3JJeWpiY011U2VSRWJzLXpO UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd1bE9PdlFPckl5amJjTXVTZVJFYnMtek5RVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUZGNy8yMTg2MkM2NEUwQzAxMUU4OUU5QkZFMTVDNEY5QUUwMi83dWxPT3ZRT3JJ eWpiY011U2VSRWJzLXpOUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCae1T6bXG4Gk+qRyOkBIo45o+ZSVFpPuI+mpxZxnc3GD0ZNz13aSzp VRp2oCWpDMT3bD1Sx08tXjwY3RfMdVDL8hn0AdJ6PUs3OCjzTrLPG+D+TJXt5EoJ AnVmo95kyplPcEg8WpPwX5TLFtrstbHA8+vg2NuQxmWXeom8+xylvam1lImc8ZZs sMLAGpJHZbCyLG3kn/S3rGigp7tgtBLysjuD+iBnYqut8oRnpXbLLUHA3iLStFJR D+h3tCRyAOrbpGqvppK5m8aphquKmNMvjElKAOlFwQRfOwuGdAnc/iyo4qG2TMsl YJiLsNM+prQJta40PUfaNNaNmKt3a8Ph -----END CERTIFICATE-----Generated at Sat May 18 19:15:24 2024 by rpki-client on console-ams.rpki-client.org