$ rpki-client -vvf rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft File: 7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft (raw, json) Hash identifier: +52B0wkzHVc28J9TEh60o1tI+ynGz34kB++lc9d+nIA= Subject key identifier: FE:24:10:A4:0E:4C:60:D7:5C:B3:E6:91:05:B8:F1:84:69:A1:AD:50 Authority key identifier: EC:84:D6:0F:79:6B:F4:16:F8:F8:1D:18:BA:DA:2F:FF:87:C1:5F:26 Certificate issuer: /CN=A917ACF1/serialNumber=EC84D60F796BF416F8F81D18BADA2FFF87C15F26 Certificate serial: 02D6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft Manifest number: 02D0 Signing time: Sun 19 May 2024 03:27:16 +0000 Manifest this update: Sun 19 May 2024 03:27:16 +0000 Manifest next update: Sun 26 May 2024 03:27:16 +0000 Files and hashes: 1: 7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl (hash: ++QZsGdK3s1dn3DLfTnddGhlJJTDBjBOjNurm3ZnzLs=) 2: 5895821AB62611ECB410C81DC4F9AE02.roa (hash: Cw84e/VfW9TbWmA54uCuBjCrxoDUPH36P2MA5oHYwqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 726 (0x2d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ACF1/serialNumber=EC84D60F796BF416F8F81D18BADA2FFF87C15F26 Validity Not Before: May 19 03:27:16 2024 GMT Not After : May 26 03:27:16 2024 GMT Subject: CN=66497194-36c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0e:90:07:53:66:3d:2d:46:6a:8b:ef:4c:23: 78:28:cf:fb:34:4a:8c:ca:40:35:8b:f0:31:f3:d5: a1:22:94:b2:e5:3c:bd:03:02:a7:e1:fe:f6:c0:63: 3e:13:93:e5:6b:5d:74:68:fe:3c:68:85:1c:11:a5: 3f:a1:e9:a3:a1:45:b0:00:3a:9a:27:91:cf:7b:bd: 17:58:15:e3:d6:90:88:4a:57:34:ab:ef:8b:22:a8: 7b:9a:6d:e9:09:d7:58:c4:8c:9f:b1:51:a7:f6:f8: ed:cf:c3:cf:e7:d5:be:ee:d7:c1:98:b6:8c:6a:73: 34:8a:9c:9f:fc:dc:5e:ed:dd:3b:fd:d0:57:21:4c: ca:70:13:e6:f1:f3:d3:9f:cb:3f:00:d1:da:7a:87: d8:0f:3f:9a:bc:19:03:1e:c2:6a:41:f3:32:f3:ff: 09:83:7f:ed:52:2e:33:4f:38:27:2e:9b:68:13:30: 5f:12:1a:da:fc:f4:0a:a6:4a:db:20:72:68:6b:90: 9d:ea:9e:4b:dc:e7:57:04:98:75:1f:f0:2b:a0:dc: ce:50:87:5c:93:20:da:41:d2:dd:0f:9d:b7:d3:8b: 06:f2:38:97:55:20:bb:25:40:27:6c:fb:5d:6c:19: 31:0c:e4:52:d3:8f:97:c0:de:70:2a:f3:4a:35:76: 0f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:24:10:A4:0E:4C:60:D7:5C:B3:E6:91:05:B8:F1:84:69:A1:AD:50 X509v3 Authority Key Identifier: keyid:EC:84:D6:0F:79:6B:F4:16:F8:F8:1D:18:BA:DA:2F:FF:87:C1:5F:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:d6:8b:23:8c:c1:83:ac:35:f1:97:1e:b4:a7:08:8d:a2:39: 35:da:77:fa:05:a5:c2:8a:0e:b0:24:05:d5:7b:a8:23:0c:f4: e0:45:96:e9:23:b1:18:69:23:d7:d0:34:07:27:2b:a7:3e:83: ae:02:8e:ad:58:17:f3:01:0d:2a:94:8d:48:ee:8a:60:50:ad: c9:b7:13:f2:ec:f9:6a:73:3b:7b:8d:74:f6:e6:55:a3:a5:35: 78:06:0e:43:f1:95:87:8f:b6:21:05:cc:b4:11:bb:e1:c1:c3: 1f:fc:16:d9:8f:1f:3b:3e:07:83:9e:7f:12:7f:1c:16:6c:e7: 38:5d:a5:39:31:1a:a6:d5:fa:64:cb:38:d9:bf:89:1d:28:ad: 92:d6:7d:26:45:d4:2b:d5:f7:34:47:50:7f:29:c8:26:ad:83: 35:5b:41:a2:70:70:ce:85:1d:9e:ba:4c:3c:08:8d:cb:81:5b: 81:2a:23:82:75:0f:6e:aa:96:b0:80:45:38:c7:a1:0c:a6:4f: 98:0e:29:92:d1:29:48:0d:87:33:50:2b:f5:b3:8f:0d:fc:44: 5a:5f:18:59:3b:90:79:2f:02:3a:53:d1:5c:68:5b:fb:1a:b7: 62:63:4f:31:6b:dc:5e:1e:9f:20:2a:5b:ba:be:ba:0f:90:10: eb:32:97:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FDRjExMTAvBgNVBAUTKEVDODRENjBGNzk2QkY0MTZGOEY4MUQxOEJBREEyRkZG ODdDMTVGMjYwHhcNMjQwNTE5MDMyNzE2WhcNMjQwNTI2MDMyNzE2WjAYMRYwFAYD VQQDEw02NjQ5NzE5NC0zNmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2A6QB1NmPS1GaovvTCN4KM/7NEqMykA1i/Ax89WhIpSy5Ty9AwKn4f72wGM+ E5Pla110aP48aIUcEaU/oemjoUWwADqaJ5HPe70XWBXj1pCISlc0q++LIqh7mm3p CddYxIyfsVGn9vjtz8PP59W+7tfBmLaManM0ipyf/Nxe7d07/dBXIUzKcBPm8fPT n8s/ANHaeofYDz+avBkDHsJqQfMy8/8Jg3/tUi4zTzgnLptoEzBfEhra/PQKpkrb IHJoa5Cd6p5L3OdXBJh1H/AroNzOUIdckyDaQdLdD52304sG8jiXVSC7JUAnbPtd bBkxDORS04+XwN5wKvNKNXYPYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP4kEKQO TGDXXLPmkQW48YRpoa1QMB8GA1UdIwQYMBaAFOyE1g95a/QW+PgdGLraL/+HwV8m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUNGMS84NjgzNTUwNkEw MzkxMUVDOEExRjFDMjNDNEY5QUUwMi83SVRXRDNscjlCYjQtQjBZdXRvdl80ZkJY eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdJVFdEM2xyOUJiNC1CMFl1dG92XzRmQlh5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUNGMS84NjgzNTUwNkEwMzkxMUVDOEExRjFDMjNDNEY5QUUwMi83SVRXRDNscjlC YjQtQjBZdXRvdl80ZkJYeVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBL1osjjMGDrDXxlx60pwiNojk12nf6BaXCig6wJAXVe6gjDPTgRZbp I7EYaSPX0DQHJyunPoOuAo6tWBfzAQ0qlI1I7opgUK3JtxPy7Plqczt7jXT25lWj pTV4Bg5D8ZWHj7YhBcy0EbvhwcMf/BbZjx87PgeDnn8SfxwWbOc4XaU5MRqm1fpk yzjZv4kdKK2S1n0mRdQr1fc0R1B/KcgmrYM1W0GicHDOhR2eukw8CI3LgVuBKiOC dQ9uqpawgEU4x6EMpk+YDimS0SlIDYczUCv1s48N/ERaXxhZO5B5LwI6U9FcaFv7 GrdiY08xa9xeHp8gKlu6vroPkBDrMpca -----END CERTIFICATE-----Generated at Sun May 19 04:20:42 2024 by rpki-client on console-ams.rpki-client.org