$ rpki-client -vvf rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft File: 7iTJi5YTEPUN8Nyy0naWug69fUs.mft (raw, json) Hash identifier: QPKWfDx0xHhsSdHYYYcADCe/mk1LS36EpVXq27c+esM= Subject key identifier: 24:93:BD:06:64:32:8F:2F:5B:8F:D2:A1:6C:A6:D0:B1:E4:B9:09:5E Authority key identifier: EE:24:C9:8B:96:13:10:F5:0D:F0:DC:B2:D2:76:96:BA:0E:BD:7D:4B Certificate issuer: /CN=A9186883/serialNumber=EE24C98B961310F50DF0DCB2D27696BA0EBD7D4B Certificate serial: 81 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft Manifest number: 81 Signing time: Sat 01 Jun 2024 08:36:52 +0000 Manifest this update: Sat 01 Jun 2024 08:36:51 +0000 Manifest next update: Sat 08 Jun 2024 08:36:51 +0000 Files and hashes: 1: 7iTJi5YTEPUN8Nyy0naWug69fUs.crl (hash: bzqEFa327bdOFvqMAb3KZTvm5STC8+7L7CkdJTfvwQM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.crl rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:36:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 129 (0x81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186883/serialNumber=EE24C98B961310F50DF0DCB2D27696BA0EBD7D4B Validity Not Before: Jun 1 08:36:51 2024 GMT Not After : Jun 8 08:36:51 2024 GMT Subject: CN=665adda4-7482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ae:ab:54:07:c4:63:88:94:09:db:2d:4e:ef: c9:20:82:58:b6:bc:82:b1:f1:be:41:c4:f0:ab:ec: ee:30:5c:7b:e0:c2:6d:2f:9e:ad:bf:ef:63:d2:45: e2:f4:62:2b:11:c6:e4:08:a4:42:0a:ce:eb:f9:71: 21:19:c9:7f:d1:9e:e5:ac:b7:f3:ea:e0:f7:88:2b: 28:3f:4a:73:dd:25:15:6b:7e:77:83:ac:37:70:da: e0:93:9f:d3:29:65:92:b9:2f:25:02:82:87:22:f8: d2:21:b2:7f:c3:b6:f8:83:6c:a2:b6:ef:69:b8:1c: 6d:48:40:34:39:c3:5d:04:ef:a1:2b:6a:92:d8:d3: a1:87:c3:f4:1a:8d:d3:57:3e:af:15:2f:d3:f0:af: c8:76:ed:8b:f2:19:a3:43:96:5a:63:7b:c6:b1:f0: 92:83:45:01:4b:61:5a:9c:ad:d6:88:65:eb:31:79: 92:cd:b0:dc:11:c6:c1:88:b5:14:92:60:78:25:46: 92:8d:46:a7:75:a2:90:63:03:92:51:84:d6:9a:00: 20:c0:47:76:f9:79:8b:9c:a2:c2:a8:db:c6:4c:99: 57:6d:e0:d4:30:62:30:0a:0c:35:76:c7:ad:2f:55: 01:21:23:9c:2d:89:8c:f1:5d:2f:6c:21:d2:3f:1d: f2:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:93:BD:06:64:32:8F:2F:5B:8F:D2:A1:6C:A6:D0:B1:E4:B9:09:5E X509v3 Authority Key Identifier: keyid:EE:24:C9:8B:96:13:10:F5:0D:F0:DC:B2:D2:76:96:BA:0E:BD:7D:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:03:55:92:1e:c2:f0:08:31:e9:b3:e7:e7:f8:ee:cf:26:bd: 5e:0f:41:92:02:1b:5c:36:5a:77:6d:1a:90:c7:e9:12:ae:db: e7:df:56:b5:6b:b7:7e:e4:ac:8c:c3:08:ad:13:73:ba:10:0b: af:f5:57:31:4d:14:34:ef:0a:27:ec:4d:ea:7b:79:ff:c9:91: ce:bc:a9:7e:12:64:8f:fb:f9:7e:78:23:16:ab:c6:c8:e5:b1: f7:94:66:29:b4:83:da:f0:8b:3e:85:8a:78:06:4f:00:c3:9a: 18:c4:28:bd:69:0e:c9:da:86:e0:b4:4e:03:1f:ab:93:11:4a: df:be:bf:1d:dd:db:c8:98:6a:75:ba:af:6e:36:30:1b:ac:1c: 00:f4:15:40:94:82:0b:a0:7c:75:7d:57:47:b2:03:1e:70:a9: e7:67:2b:1e:5f:4d:85:9b:c3:6d:7a:6e:c4:19:43:c5:ef:14: ee:46:aa:16:b4:d0:3c:57:53:0e:7c:92:88:06:5c:90:fb:75: 76:03:f1:36:d8:c8:98:32:e9:7a:cf:3d:2f:5a:d7:32:1b:54: 01:91:9a:7e:21:b4:87:be:be:ea:f3:3f:85:c1:a1:3d:68:70: 30:4a:0d:b3:bb:40:dc:f9:5d:4f:b3:d8:dc:e0:6e:ba:52:9f: 1e:a0:ef:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY4ODMxMTAvBgNVBAUTKEVFMjRDOThCOTYxMzEwRjUwREYwRENCMkQyNzY5NkJB MEVCRDdENEIwHhcNMjQwNjAxMDgzNjUxWhcNMjQwNjA4MDgzNjUxWjAYMRYwFAYD VQQDEw02NjVhZGRhNC03NDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn66rVAfEY4iUCdstTu/JIIJYtryCsfG+QcTwq+zuMFx74MJtL56tv+9j0kXi 9GIrEcbkCKRCCs7r+XEhGcl/0Z7lrLfz6uD3iCsoP0pz3SUVa353g6w3cNrgk5/T KWWSuS8lAoKHIvjSIbJ/w7b4g2yitu9puBxtSEA0OcNdBO+hK2qS2NOhh8P0Go3T Vz6vFS/T8K/Idu2L8hmjQ5ZaY3vGsfCSg0UBS2FanK3WiGXrMXmSzbDcEcbBiLUU kmB4JUaSjUandaKQYwOSUYTWmgAgwEd2+XmLnKLCqNvGTJlXbeDUMGIwCgw1dset L1UBISOcLYmM8V0vbCHSPx3yIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCSTvQZk Mo8vW4/SoWym0LHkuQleMB8GA1UdIwQYMBaAFO4kyYuWExD1DfDcstJ2lroOvX1L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Njg4My9BODhGRkNGODVD NTMxMUVFOTUxRTlENThDNEY5QUUwMi83aVRKaTVZVEVQVU44Tnl5MG5hV3VnNjlm VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdpVEppNVlURVBVTjhOeXkwbmFXdWc2OWZVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Njg4My9BODhGRkNGODVDNTMxMUVFOTUxRTlENThDNEY5QUUwMi83aVRKaTVZVEVQ VU44Tnl5MG5hV3VnNjlmVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNA1WSHsLwCDHps+fn+O7PJr1eD0GSAhtcNlp3bRqQx+kSrtvn31a1 a7d+5KyMwwitE3O6EAuv9VcxTRQ07won7E3qe3n/yZHOvKl+EmSP+/l+eCMWq8bI 5bH3lGYptIPa8Is+hYp4Bk8Aw5oYxCi9aQ7J2obgtE4DH6uTEUrfvr8d3dvImGp1 uq9uNjAbrBwA9BVAlIILoHx1fVdHsgMecKnnZyseX02Fm8Ntem7EGUPF7xTuRqoW tNA8V1MOfJKIBlyQ+3V2A/E22MiYMul6zz0vWtcyG1QBkZp+IbSHvr7q8z+FwaE9 aHAwSg2zu0Dc+V1Ps9jc4G66Up8eoO8o -----END CERTIFICATE-----Generated at Sat Jun 1 11:47:19 2024 by rpki-client on console-ams.rpki-client.org