$ rpki-client -vvf rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft File: -7rBZWoMY3CLzNYNyCXmwxkacZs.mft (raw, json) Hash identifier: Z/jPRFGlsoFkPk+JjNQvqP26+LPfDL5Z2Hrjb+FK+rs= Subject key identifier: C0:B5:6D:53:EB:38:86:2A:3D:72:A7:1E:50:43:1D:7F:28:DB:E1:6B Authority key identifier: FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B Certificate issuer: /CN=A91657DD/serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B Certificate serial: 0E90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft Manifest number: 0E86 Signing time: Sat 18 May 2024 18:21:37 +0000 Manifest this update: Sat 18 May 2024 18:21:36 +0000 Manifest next update: Sat 25 May 2024 18:21:36 +0000 Files and hashes: 1: -7rBZWoMY3CLzNYNyCXmwxkacZs.crl (hash: zX+UTf9W2AlJLQXNzPjPQP9xvbrFA5MFgOihpsLcD0o=) 2: 05B3C1D2134511EAB2075B28C4F9AE02.roa (hash: ++MQxyz4SvSJxW+ZF60oZzlPBvgOQzmFnm7G6eiSvzY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3728 (0xe90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91657DD/serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B Validity Not Before: May 18 18:21:36 2024 GMT Not After : May 25 18:21:36 2024 GMT Subject: CN=6648f1b0-3461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1d:ba:c2:ec:76:d1:ac:4e:43:7d:4b:4f:a5: 5d:2a:cb:ac:a9:e6:1c:10:ad:25:3b:f2:82:c5:3c: 5b:5e:5a:6c:58:30:60:ae:9b:8a:e4:93:73:3a:68: 88:4c:3d:70:46:dd:4b:cf:10:15:56:b4:ca:92:84: cb:6c:52:59:68:cf:71:d4:8b:9a:a0:a4:7f:e6:d4: 3b:63:ce:48:8c:be:7d:63:38:b4:f3:43:c1:d8:55: 34:5b:71:21:f0:a3:eb:6b:b1:f0:61:c0:df:bd:73: d9:6f:bd:05:5c:41:e6:e4:1d:20:2d:9f:ba:d3:55: e9:dc:7b:a1:1b:36:37:fd:9a:fa:de:f5:7a:ca:a3: e5:69:72:7f:d7:da:f7:c7:bd:ac:39:41:41:4c:70: 68:a4:6b:70:73:9b:ea:1c:bb:8a:61:34:cd:4a:4f: b0:d6:61:3f:d0:5b:48:b7:be:30:86:d2:5e:97:8b: 66:64:23:c6:4a:b9:e4:f9:86:a2:bf:22:fa:ab:c2: e0:3c:37:5f:df:6b:8d:02:64:8c:ab:5f:ca:e9:0a: 1e:8b:41:0d:b4:89:1d:16:3d:09:f7:7e:24:8b:cb: c8:b8:72:ff:4e:82:53:a1:b7:14:1b:fd:9a:26:97: cb:f6:d9:71:e5:ee:54:ca:ac:3d:8f:12:b4:c5:06: e6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:B5:6D:53:EB:38:86:2A:3D:72:A7:1E:50:43:1D:7F:28:DB:E1:6B X509v3 Authority Key Identifier: keyid:FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ef:65:f8:20:90:ba:e2:8f:e3:2d:5b:e9:d1:e9:5c:8c:68: 17:d7:7d:31:a4:03:2a:53:32:eb:27:25:a2:4f:18:a9:c4:fa: cc:43:0f:c2:3d:98:1e:b2:d2:4f:d0:e9:2d:fc:62:01:79:23: 40:bc:49:0d:8b:4f:46:7b:5e:ef:51:36:4e:4d:92:cd:57:d4: d2:eb:a5:5d:7e:9a:0e:21:7d:09:9e:d4:09:0f:21:b3:c1:75: 0e:f5:9f:d5:bc:05:9b:62:6b:65:95:00:a7:f2:3a:bc:30:5f: 3b:58:3c:09:b1:39:f4:de:85:aa:ae:c0:9b:77:a9:17:9a:a2: 0a:a9:85:d1:02:c5:76:7c:f1:66:43:e4:16:2f:7f:be:9c:79: 50:d4:0e:7e:43:71:9c:93:03:3b:db:8c:d4:30:e2:b4:94:2b: c0:f8:0d:ba:7e:1d:9f:f3:d6:b2:f4:df:e6:6b:4e:99:e1:cb: b6:db:3a:ab:72:21:1f:4a:78:1c:d1:81:6c:39:f0:01:04:aa: 0c:27:e6:69:98:13:59:fe:cc:ba:39:6e:6b:63:55:21:5c:e9: be:db:1a:7d:7b:85:69:d9:74:9e:6c:09:bd:9a:3a:2d:10:b6: 69:7b:9a:45:c6:ca:b5:74:f2:0c:4f:3c:fb:4b:e2:ab:9d:0e: a7:09:c4:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDpAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU3REQxMTAvBgNVBAUTKEZCQkFDMTY1NkEwQzYzNzA4QkNDRDYwREM4MjVFNkMz MTkxQTcxOUIwHhcNMjQwNTE4MTgyMTM2WhcNMjQwNTI1MTgyMTM2WjAYMRYwFAYD VQQDEw02NjQ4ZjFiMC0zNDYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxh26wux20axOQ31LT6VdKsusqeYcEK0lO/KCxTxbXlpsWDBgrpuK5JNzOmiI TD1wRt1LzxAVVrTKkoTLbFJZaM9x1IuaoKR/5tQ7Y85IjL59Yzi080PB2FU0W3Eh 8KPra7HwYcDfvXPZb70FXEHm5B0gLZ+601Xp3HuhGzY3/Zr63vV6yqPlaXJ/19r3 x72sOUFBTHBopGtwc5vqHLuKYTTNSk+w1mE/0FtIt74whtJel4tmZCPGSrnk+Yai vyL6q8LgPDdf32uNAmSMq1/K6Qoei0ENtIkdFj0J934ki8vIuHL/ToJTobcUG/2a JpfL9tlx5e5Uyqw9jxK0xQbmoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMC1bVPr OIYqPXKnHlBDHX8o2+FrMB8GA1UdIwQYMBaAFPu6wWVqDGNwi8zWDcgl5sMZGnGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTdERC9BRDYxNUY2RTZF NTYxMUU5QkQ5QjVFNjlDNEY5QUUwMi8tN3JCWldvTVkzQ0x6TllOeUNYbXd4a2Fj WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy03ckJaV29NWTNDTHpOWU55Q1htd3hrYWNacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTdERC9BRDYxNUY2RTZFNTYxMUU5QkQ5QjVFNjlDNEY5QUUwMi8tN3JCWldvTVkz Q0x6TllOeUNYbXd4a2FjWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA672X4IJC64o/jLVvp0elcjGgX130xpAMqUzLrJyWiTxipxPrMQw/C PZgestJP0Okt/GIBeSNAvEkNi09Ge17vUTZOTZLNV9TS66VdfpoOIX0JntQJDyGz wXUO9Z/VvAWbYmtllQCn8jq8MF87WDwJsTn03oWqrsCbd6kXmqIKqYXRAsV2fPFm Q+QWL3++nHlQ1A5+Q3GckwM724zUMOK0lCvA+A26fh2f89ay9N/ma06Z4cu22zqr ciEfSngc0YFsOfABBKoMJ+ZpmBNZ/sy6OW5rY1UhXOm+2xp9e4Vp2XSebAm9mjot ELZpe5pFxsq1dPIMTzz7S+KrnQ6nCcRX -----END CERTIFICATE-----Generated at Sat May 18 19:15:24 2024 by rpki-client on console-ams.rpki-client.org