$ rpki-client -vvf rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft File: D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft (raw, json) Hash identifier: 4bWlqlLwRk389N7VlwjdMjXAdSUwuDkuvvFeYPlJ9FQ= Subject key identifier: 10:65:F3:9E:F0:E0:55:47:12:9A:E4:91:14:F1:7B:A8:EC:3C:BC:A9 Authority key identifier: 0F:D7:0E:78:A1:0E:09:18:EF:1C:9D:D8:2A:E2:E9:FD:C3:5A:A4:9F Certificate issuer: /CN=A9186883/serialNumber=0FD70E78A10E0918EF1C9DD82AE2E9FDC35AA49F Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft Manifest number: 7A Signing time: Sun 19 May 2024 07:18:39 +0000 Manifest this update: Sun 19 May 2024 07:18:39 +0000 Manifest next update: Sun 26 May 2024 07:18:39 +0000 Files and hashes: 1: D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl (hash: MEGUOXHLtLe4atFTyLm35DwPLVwMxTr4KgPqCELR6Fg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186883/serialNumber=0FD70E78A10E0918EF1C9DD82AE2E9FDC35AA49F Validity Not Before: May 19 07:18:39 2024 GMT Not After : May 26 07:18:39 2024 GMT Subject: CN=6649a7cf-fcce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5f:e9:9b:8d:20:61:d3:7a:20:0a:cf:87:2c: ef:83:af:10:29:cc:59:df:c6:e4:a0:23:d3:9f:95: 70:52:6f:9a:24:99:09:0b:47:1c:76:af:96:96:57: a0:24:0f:89:32:23:1e:d7:2f:48:38:98:b2:f9:cb: 14:e9:b3:c3:79:d7:37:de:79:26:03:67:6e:eb:58: 55:a1:9b:77:50:41:5f:b1:00:29:b1:9a:29:02:92: bd:68:26:19:b9:80:e6:fd:37:b0:49:c6:3a:30:23: 8a:76:ce:cc:64:77:3c:b4:09:54:23:2b:12:86:cd: 8e:ac:9c:71:71:6a:a3:76:53:84:1c:38:7f:86:8f: 1d:9b:ac:e5:da:bb:25:31:80:34:e2:0a:ad:7b:2f: 5f:9a:58:40:01:c3:eb:b3:31:ed:8a:1c:56:48:06: a1:e9:8b:b4:9d:46:b3:28:0c:9a:59:ce:ad:2e:40: 30:28:b0:b9:64:c8:80:53:c9:34:52:a9:8d:80:7f: 45:2b:aa:c2:ce:c9:c0:1c:9d:04:de:b1:ed:6d:0c: 40:2e:4f:cd:a6:bb:a2:4a:2e:81:86:58:c9:96:0b: 7f:cb:a6:95:64:7f:b5:e4:eb:a2:3e:08:f8:6f:ea: e7:09:3f:26:1b:50:7b:34:63:36:9e:ac:ef:d9:a3: e3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:65:F3:9E:F0:E0:55:47:12:9A:E4:91:14:F1:7B:A8:EC:3C:BC:A9 X509v3 Authority Key Identifier: keyid:0F:D7:0E:78:A1:0E:09:18:EF:1C:9D:D8:2A:E2:E9:FD:C3:5A:A4:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:43:3a:df:ea:33:da:a1:1d:53:da:73:02:7a:66:53:98:01: 7b:5f:47:ef:8a:38:e3:3a:d3:4e:dc:50:a7:89:87:04:20:eb: 6e:96:72:f9:2f:dd:62:3c:70:70:5d:10:c7:9b:ef:08:7c:47: 42:6f:59:7c:a5:6d:a2:c9:34:f6:59:6e:9c:a2:71:a3:21:37: 5f:cd:4b:53:7e:ae:2c:13:d3:94:27:ef:b7:0f:5e:1b:3a:37: a6:ed:99:85:fd:9d:c2:15:bd:74:93:8f:59:58:a2:5b:83:5b: 3c:11:fb:bc:40:18:88:de:50:fd:b3:57:ea:9e:9f:a3:88:de: 64:83:56:c7:13:cf:23:4c:66:e8:1b:e7:7a:a6:b5:f5:07:d6: 77:a6:c2:e0:a5:58:3b:32:81:78:4f:39:84:9a:89:23:f2:97: e8:e7:cb:11:7d:f7:7b:33:06:a7:c1:79:ae:68:69:bb:48:f5: c0:8f:57:c6:ac:a2:56:88:32:58:81:c0:f3:7b:a3:56:42:da: 9e:6e:79:bc:a9:6b:7f:2e:36:aa:5d:2b:e6:f8:c5:06:9e:93: 41:88:9b:83:05:61:a3:c9:56:19:80:d7:f4:74:6a:29:35:c7: 83:65:34:9b:af:81:5e:d3:eb:25:e9:10:10:85:3f:6b:eb:c3: 36:23:51:30 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 Njg4MzExMC8GA1UEBRMoMEZENzBFNzhBMTBFMDkxOEVGMUM5REQ4MkFFMkU5RkRD MzVBQTQ5RjAeFw0yNDA1MTkwNzE4MzlaFw0yNDA1MjYwNzE4MzlaMBgxFjAUBgNV BAMTDTY2NDlhN2NmLWZjY2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgX+mbjSBh03ogCs+HLO+DrxApzFnfxuSgI9OflXBSb5okmQkLRxx2r5aWV6Ak D4kyIx7XL0g4mLL5yxTps8N51zfeeSYDZ27rWFWhm3dQQV+xACmxmikCkr1oJhm5 gOb9N7BJxjowI4p2zsxkdzy0CVQjKxKGzY6snHFxaqN2U4QcOH+Gjx2brOXauyUx gDTiCq17L1+aWEABw+uzMe2KHFZIBqHpi7SdRrMoDJpZzq0uQDAosLlkyIBTyTRS qY2Af0UrqsLOycAcnQTese1tDEAuT82mu6JKLoGGWMmWC3/LppVkf7Xk66I+CPhv 6ucJPyYbUHs0YzaerO/Zo+P9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEGXznvDg VUcSmuSRFPF7qOw8vKkwHwYDVR0jBBgwFoAUD9cOeKEOCRjvHJ3YKuLp/cNapJ8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2ODgzL0IxMjIyODQ2NUM1 MzExRUU5NTFFOUQ1OEM0RjlBRTAyL0Q5Y09lS0VPQ1JqdkhKM1lLdUxwX2NOYXBK OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRDljT2VLRU9DUmp2SEozWUt1THBfY05hcEo4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2 ODgzL0IxMjIyODQ2NUM1MzExRUU5NTFFOUQ1OEM0RjlBRTAyL0Q5Y09lS0VPQ1Jq dkhKM1lLdUxwX2NOYXBKOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHtDOt/qM9qhHVPacwJ6ZlOYAXtfR++KOOM6007cUKeJhwQg626Wcvkv 3WI8cHBdEMeb7wh8R0JvWXylbaLJNPZZbpyicaMhN1/NS1N+riwT05Qn77cPXhs6 N6btmYX9ncIVvXSTj1lYoluDWzwR+7xAGIjeUP2zV+qen6OI3mSDVscTzyNMZugb 53qmtfUH1nemwuClWDsygXhPOYSaiSPyl+jnyxF993szBqfBea5oabtI9cCPV8as olaIMliBwPN7o1ZC2p5uebypa38uNqpdK+b4xQaek0GIm4MFYaPJVhmA1/R0aik1 x4NlNJuvgV7T6yXpEBCFP2vrwzYjUTA= -----END CERTIFICATE-----Generated at Sun May 19 08:25:03 2024 by rpki-client on console-ams.rpki-client.org