$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft File: 7CxkBsqh85689Fh1MVANVrlTYsA.mft (raw, json) Hash identifier: 5ElHz/c5FDZsYWBll/DXaTa43ADrBM+171IVJOPfClw= Subject key identifier: 1C:4F:A9:E1:FD:EF:7A:B7:8C:61:E6:2D:E7:72:34:EF:05:86:26:C3 Authority key identifier: EC:2C:64:06:CA:A1:F3:9E:BC:F4:58:75:31:50:0D:56:B9:53:62:C0 Certificate issuer: /CN=A9174880/serialNumber=EC2C6406CAA1F39EBCF4587531500D56B95362C0 Certificate serial: 3404 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft Manifest number: 33E0 Signing time: Sat 18 May 2024 14:16:57 +0000 Manifest this update: Sat 18 May 2024 14:16:56 +0000 Manifest next update: Sat 25 May 2024 14:16:56 +0000 Files and hashes: 1: 7CxkBsqh85689Fh1MVANVrlTYsA.crl (hash: LYKwrVYsrrtUHKRvVR5PA6Knpbpi6Kp+imE11c2m5/A=) 2: 3768DFB41C6011EEAF58FB61C4F9AE02.roa (hash: KpwyVmAV+2aohI+X1BHF5SHX3fe5QtPqxB/sPIhZciU=) 3: 316EEFD4AAE511E68EBE4D52C4F9AE02.roa (hash: n8S4t4f2oxEeC4hHMiXxQldgRISCLl6Cw10IhOqQqmg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.crl rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:16:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13316 (0x3404) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174880/serialNumber=EC2C6406CAA1F39EBCF4587531500D56B95362C0 Validity Not Before: May 18 14:16:56 2024 GMT Not After : May 25 14:16:56 2024 GMT Subject: CN=6648b858-832b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b6:2b:80:75:27:2c:c5:ff:e3:1a:47:b9:fa: 0a:90:12:3d:15:73:98:55:c2:42:16:ab:01:b3:93: 7d:d8:46:d6:48:fd:17:b1:6b:4f:ef:e7:eb:54:e4: a1:ea:ee:88:06:b4:f8:e2:73:76:aa:89:55:e5:e1: fa:f5:75:b6:84:14:5d:a2:ea:7e:fd:0e:9e:af:7e: d9:55:2a:1d:6e:59:88:4c:72:44:81:53:83:29:a7: ce:f1:65:33:12:22:88:80:aa:d3:41:64:99:15:dc: 96:9c:6c:82:61:57:2a:68:b7:e5:38:87:53:57:26: 43:57:af:b4:57:d9:ac:19:ce:a0:57:03:3b:e3:dd: 9a:c6:40:1d:57:de:5f:a0:06:bf:12:90:8d:59:60: bf:86:5a:da:84:d1:90:c3:14:1a:94:6c:a3:16:9a: 9e:00:63:82:34:12:35:34:61:1b:83:68:fe:77:fa: 71:b7:a0:4b:f3:27:f0:43:eb:54:05:23:49:33:f2: 89:8a:66:93:6f:4f:1f:63:80:60:f7:aa:8c:20:6a: b6:9b:05:1e:b4:36:b7:08:dc:03:01:e2:db:d4:42: f0:16:e9:bc:87:cd:31:1a:fc:d3:61:85:33:9e:61: 3a:d0:91:40:3d:68:fe:c7:58:3c:b6:e4:ad:56:55: 45:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:4F:A9:E1:FD:EF:7A:B7:8C:61:E6:2D:E7:72:34:EF:05:86:26:C3 X509v3 Authority Key Identifier: keyid:EC:2C:64:06:CA:A1:F3:9E:BC:F4:58:75:31:50:0D:56:B9:53:62:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:ac:d0:5a:ea:2c:8b:d6:b7:b9:e8:2a:80:7b:10:ec:4d:d7: 1f:68:6b:3f:6b:7b:8e:50:18:9a:e8:6f:aa:ae:f0:e4:9c:28: 33:81:44:fc:0e:e8:ec:d5:bf:b9:29:57:4d:9d:5c:52:60:21: 00:c2:6e:ef:dd:95:7e:ac:89:d0:36:d8:db:99:af:41:6d:f6: 37:e7:1f:11:1a:34:34:82:35:8c:d7:11:37:84:92:f7:30:30: 17:dc:ad:67:bc:9a:fc:f9:4c:ab:8c:82:a9:5d:2c:4d:b8:02: d4:05:bc:2a:5f:a0:16:bf:10:74:a5:22:57:1e:52:af:b6:a0: ff:7e:f1:85:82:c0:16:6f:71:a2:41:23:93:fa:6c:94:3b:4f: f4:bb:6a:c6:97:0d:a1:8d:34:ec:59:1d:55:13:f1:3f:06:e8: 0a:42:8a:99:1d:17:03:aa:c8:97:54:08:71:59:c0:36:28:63: 45:67:81:b0:c9:84:91:5e:61:d2:3f:16:d3:1a:64:f9:f5:80: 1d:97:5a:5e:0d:ab:4e:e2:1c:27:52:e7:f0:57:f4:ed:8a:b3: ca:14:6a:28:f9:3a:28:81:8f:91:16:f1:68:5c:4d:bf:24:3f: 62:f3:2b:9f:6c:71:d5:6f:32:c8:99:6d:05:ea:1b:24:66:47: a5:62:05:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ4ODAxMTAvBgNVBAUTKEVDMkM2NDA2Q0FBMUYzOUVCQ0Y0NTg3NTMxNTAwRDU2 Qjk1MzYyQzAwHhcNMjQwNTE4MTQxNjU2WhcNMjQwNTI1MTQxNjU2WjAYMRYwFAYD VQQDEw02NjQ4Yjg1OC04MzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3rYrgHUnLMX/4xpHufoKkBI9FXOYVcJCFqsBs5N92EbWSP0XsWtP7+frVOSh 6u6IBrT44nN2qolV5eH69XW2hBRdoup+/Q6er37ZVSodblmITHJEgVODKafO8WUz EiKIgKrTQWSZFdyWnGyCYVcqaLflOIdTVyZDV6+0V9msGc6gVwM7492axkAdV95f oAa/EpCNWWC/hlrahNGQwxQalGyjFpqeAGOCNBI1NGEbg2j+d/pxt6BL8yfwQ+tU BSNJM/KJimaTb08fY4Bg96qMIGq2mwUetDa3CNwDAeLb1ELwFum8h80xGvzTYYUz nmE60JFAPWj+x1g8tuStVlVF3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxPqeH9 73q3jGHmLedyNO8FhibDMB8GA1UdIwQYMBaAFOwsZAbKofOevPRYdTFQDVa5U2LA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDg4MC80RTg2NDUwQzFE NkExMUUyQkI3MDE0QTgwOEIwMkNEMi83Q3hrQnNxaDg1Njg5RmgxTVZBTlZybFRZ c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdDeGtCc3FoODU2ODlGaDFNVkFOVnJsVFlzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDg4MC80RTg2NDUwQzFENkExMUUyQkI3MDE0QTgwOEIwMkNEMi83Q3hrQnNxaDg1 Njg5RmgxTVZBTlZybFRZc0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2rNBa6iyL1re56CqAexDsTdcfaGs/a3uOUBia6G+qrvDknCgzgUT8 Dujs1b+5KVdNnVxSYCEAwm7v3ZV+rInQNtjbma9BbfY35x8RGjQ0gjWM1xE3hJL3 MDAX3K1nvJr8+UyrjIKpXSxNuALUBbwqX6AWvxB0pSJXHlKvtqD/fvGFgsAWb3Gi QSOT+myUO0/0u2rGlw2hjTTsWR1VE/E/BugKQoqZHRcDqsiXVAhxWcA2KGNFZ4Gw yYSRXmHSPxbTGmT59YAdl1peDatO4hwnUufwV/TtirPKFGoo+ToogY+RFvFoXE2/ JD9i8yufbHHVbzLImW0F6hskZkelYgW8 -----END CERTIFICATE-----Generated at Sat May 18 15:26:05 2024 by rpki-client on console-fra.rpki-client.org