$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft File: P7GNifrzGI3OWQ98SJB3lh-CqVc.mft (raw, json) Hash identifier: 2vgjvo+/3I2sUyD8+xjN9Xo15o7yPenmGSvvYxBE3hw= Subject key identifier: D1:E4:93:3F:26:11:EC:1B:97:B8:47:7B:A5:20:D9:CC:D7:97:FF:70 Authority key identifier: 3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57 Certificate issuer: /CN=A9186214/serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957 Certificate serial: 29B5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft Manifest number: 2998 Signing time: Sun 26 May 2024 15:53:11 +0000 Manifest this update: Sun 26 May 2024 15:53:11 +0000 Manifest next update: Sun 02 Jun 2024 15:53:11 +0000 Files and hashes: 1: P7GNifrzGI3OWQ98SJB3lh-CqVc.crl (hash: WyN2pOb8A6Lv/slZPyKkVe1RPOGZ/cJhbeWqaxsjVnk=) 2: B0D1C39A182511EABDE3E142C4F9AE02.roa (hash: 11dXrtQnIPILfsEPBscm1TW4vlIoIqmiCT4wZfEh8Fs=) 3: 6FEF4E442DE011EA853E2328C4F9AE02.roa (hash: DFd44NVaQA+x66nUaHpjv0bFRfAs6N1m0gvI9clk+zE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 14:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10677 (0x29b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214/serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957 Validity Not Before: May 26 15:53:11 2024 GMT Not After : Jun 2 15:53:11 2024 GMT Subject: CN=66535ae7-9d66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e1:fa:a7:d7:37:f8:1d:1c:75:c6:d4:7f:3e: 5c:6c:57:9b:59:5c:15:be:59:06:f8:a3:b4:b3:b9: 47:2a:7f:89:7a:88:a6:64:87:98:7e:a4:16:dc:02: 9c:c1:c2:cf:9f:7b:8d:2f:50:22:7d:e4:0e:4f:7e: 55:07:d9:3c:11:3c:5a:ca:e4:d4:71:26:50:9d:8d: 49:5d:f5:b2:94:a6:13:e4:74:66:16:29:f9:ff:4b: f6:1a:08:c6:0a:ae:54:70:73:ee:bc:25:34:3d:be: 35:9b:f2:61:0e:b9:c7:c9:b5:c3:07:7a:88:88:84: ed:ed:9c:cc:84:f7:a0:c3:25:0b:ca:1f:45:31:08: 40:a9:b1:13:8c:80:2d:32:40:73:e1:62:6b:1c:42: da:ce:44:8d:11:6a:f1:ff:b5:0b:7b:61:9c:35:16: cb:39:92:35:0b:eb:56:9b:0b:67:fe:48:50:6c:11: 44:52:81:66:db:26:03:7c:d0:ed:5f:96:f0:ed:ea: 5a:bb:d1:5f:da:ee:15:45:3d:0c:7e:d7:f5:26:bd: 94:02:6d:30:ed:9e:61:90:c0:8e:cf:8c:f9:d4:bd: 98:d5:3c:2b:ff:cc:d1:46:1c:17:35:7d:e6:db:f1: 42:8a:ab:54:89:a1:8f:d7:aa:8b:fe:f6:5d:a1:df: a9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E4:93:3F:26:11:EC:1B:97:B8:47:7B:A5:20:D9:CC:D7:97:FF:70 X509v3 Authority Key Identifier: keyid:3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:c2:c8:0d:ec:0a:1a:4b:79:0e:2b:6c:14:23:19:7b:d1:53: 96:10:04:56:3b:62:ba:7c:4b:c6:79:d9:77:c5:9f:3e:52:c7: cf:39:a2:10:db:e3:2e:c0:3a:da:ec:e5:71:88:57:0b:bd:b9: 8f:bc:75:83:5b:68:b5:99:09:c8:44:6f:2c:57:30:62:35:1b: 35:bd:49:09:c9:df:f1:96:73:31:a1:ba:b5:4b:3f:99:b0:62: 10:37:88:42:ff:64:2c:a7:6f:e4:e0:ee:41:cc:6c:07:40:1c: 9c:2a:f5:c6:e7:1d:40:e0:c8:a8:20:92:3c:e3:b0:6a:7c:1e: c9:85:d0:9e:ff:19:a0:9b:55:95:ba:fe:c9:d4:a2:b0:ea:07: 1e:ab:ce:73:0e:e6:0f:a4:86:25:95:29:af:11:63:52:12:d9: 6c:81:e7:c4:f9:f1:05:52:01:d8:31:98:6f:64:09:28:7a:6a: 71:28:cb:dd:5b:d1:9f:6f:6e:93:85:c2:c0:2c:62:90:e8:19: ba:83:87:89:11:f2:53:67:15:61:54:71:01:61:7a:b6:3d:0d: 60:36:d3:15:b6:ac:99:19:2c:d8:4f:b4:b4:06:34:d5:5a:f1: 22:0a:93:5a:40:b9:88:f6:cf:b6:4d:21:e6:48:3a:84:53:bd: 04:ae:c7:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKDNGQjE4RDg5RkFGMzE4OERDRTU5MEY3QzQ4OTA3Nzk2 MUY4MkE5NTcwHhcNMjQwNTI2MTU1MzExWhcNMjQwNjAyMTU1MzExWjAYMRYwFAYD VQQDEw02NjUzNWFlNy05ZDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxeH6p9c3+B0cdcbUfz5cbFebWVwVvlkG+KO0s7lHKn+JeoimZIeYfqQW3AKc wcLPn3uNL1AifeQOT35VB9k8ETxayuTUcSZQnY1JXfWylKYT5HRmFin5/0v2GgjG Cq5UcHPuvCU0Pb41m/JhDrnHybXDB3qIiITt7ZzMhPegwyULyh9FMQhAqbETjIAt MkBz4WJrHELazkSNEWrx/7ULe2GcNRbLOZI1C+tWmwtn/khQbBFEUoFm2yYDfNDt X5bw7epau9Ff2u4VRT0Mftf1Jr2UAm0w7Z5hkMCOz4z51L2Y1Twr/8zRRhwXNX3m 2/FCiqtUiaGP16qL/vZdod+pvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNHkkz8m Eewbl7hHe6Ug2czXl/9wMB8GA1UdIwQYMBaAFD+xjYn68xiNzlkPfEiQd5YfgqlX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9CN0Y4MTk1ODMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi9QN0dOaWZyekdJM09XUTk4U0pCM2xoLUNx VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1A3R05pZnJ6R0kzT1dROThTSkIzbGgtQ3FWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjIxNC9CN0Y4MTk1ODMzMUExMUU0QUYyQUIzN0NDNEY5QUUwMi9QN0dOaWZyekdJ M09XUTk4U0pCM2xoLUNxVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXwsgN7AoaS3kOK2wUIxl70VOWEARWO2K6fEvGedl3xZ8+UsfPOaIQ 2+MuwDra7OVxiFcLvbmPvHWDW2i1mQnIRG8sVzBiNRs1vUkJyd/xlnMxobq1Sz+Z sGIQN4hC/2Qsp2/k4O5BzGwHQBycKvXG5x1A4MioIJI847BqfB7JhdCe/xmgm1WV uv7J1KKw6gceq85zDuYPpIYllSmvEWNSEtlsgefE+fEFUgHYMZhvZAkoempxKMvd W9Gfb26ThcLALGKQ6Bm6g4eJEfJTZxVhVHEBYXq2PQ1gNtMVtqyZGSzYT7S0BjTV WvEiCpNaQLmI9s+2TSHmSDqEU70Ersc3 -----END CERTIFICATE-----Generated at Sun May 26 19:10:36 2024 by rpki-client on console-ams.rpki-client.org