$ rpki-client -vvf rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft File: 7Yy8VM2G8sH5LexryQnbxvpjTIE.mft (raw, json) Hash identifier: XMcOvghsb8l0rdCKJvjmwl3I7o57xOacFEXlyEPrSHQ= Subject key identifier: FF:23:00:19:F9:52:DD:70:CB:5D:92:AF:58:67:62:10:5D:F6:7D:B5 Authority key identifier: ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81 Certificate issuer: /CN=A918A3E6/serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81 Certificate serial: 071F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft Manifest number: 0716 Signing time: Sat 18 May 2024 22:37:41 +0000 Manifest this update: Sat 18 May 2024 22:37:41 +0000 Manifest next update: Sat 25 May 2024 22:37:41 +0000 Files and hashes: 1: 7Yy8VM2G8sH5LexryQnbxvpjTIE.crl (hash: 4yby42WIrft3w4bqTklK167xMZXD1dJzdsK//dyXP5M=) 2: C130A016889811EE8EB03D6EC4F9AE02.roa (hash: pug/gg3wGa6rjCyz4q0WrX2sTDGQJThGrNKA8Z6H8Rg=) 3: 7ABD27E4889811EEB99AD46DC4F9AE02.roa (hash: 5fkVp+IdKN1uTcIv4zREz2o3t33bYQj59xiklZh4RiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1823 (0x71f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A3E6/serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81 Validity Not Before: May 18 22:37:41 2024 GMT Not After : May 25 22:37:41 2024 GMT Subject: CN=66492db5-794b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:38:df:0a:ce:02:5f:99:76:91:02:6b:b5:11: b6:5a:3a:91:1b:a3:fa:d1:de:91:be:e5:97:ae:fc: d5:66:23:88:a3:ad:fb:9b:a0:04:5a:8b:7a:c5:97: bb:ee:b3:41:72:a5:c6:1b:f6:e2:87:6c:3f:9d:dc: e0:8e:e0:6b:42:8f:3a:79:94:82:c1:00:bb:e7:d3: a0:6b:84:6e:62:13:cd:92:fc:5c:dd:5c:1d:2a:fc: 53:9a:18:b7:17:2f:16:9f:f0:b2:2e:31:6f:0e:3f: be:17:b4:41:98:79:5b:41:72:62:34:a3:30:f6:8d: e8:a3:9c:72:14:04:15:37:5c:63:65:c5:3c:f2:ac: e9:7c:a7:51:d3:74:4a:0d:1c:87:b4:a1:df:ae:25: 95:6f:1f:c0:21:f8:87:f7:d9:e0:20:88:a3:40:0f: 2c:72:5d:ba:28:df:3b:72:bd:83:1a:82:48:0c:f7: bd:ed:17:72:d2:6b:77:ff:58:95:ba:92:e7:32:3d: 79:7f:2f:c0:cd:a6:ca:7d:d9:90:01:39:b8:19:ec: dd:3b:98:68:d7:79:ac:8c:f9:ed:36:59:24:6d:5e: 9f:19:7d:9b:d6:d9:f1:36:18:b9:e4:12:82:ae:a9: 00:8d:ba:3d:d8:ef:d8:e8:5a:cf:79:15:e1:6d:fb: 1e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:23:00:19:F9:52:DD:70:CB:5D:92:AF:58:67:62:10:5D:F6:7D:B5 X509v3 Authority Key Identifier: keyid:ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:54:cb:d3:d1:a5:e5:35:10:3c:75:12:0e:70:13:54:07:ba: ef:e9:e6:4c:26:72:04:13:62:0f:27:47:be:8f:37:73:7d:44: db:f7:44:e4:0f:c5:9e:78:69:c4:cd:8a:0a:c7:3f:c2:a1:23: 77:fe:08:f5:1b:d4:bb:a1:3b:69:4f:f0:3a:12:5d:07:54:f4: 2a:90:67:4f:a2:28:08:1a:02:85:d4:fb:2d:22:7b:5c:31:7a: 41:07:61:8b:18:47:59:f0:c7:c1:07:bb:b5:03:5b:fa:2c:21: 06:fe:87:be:d1:a8:41:08:bf:62:cd:41:d1:46:3c:5f:06:a2: 01:fb:a8:46:e4:98:22:5f:a5:c8:39:37:4e:06:a6:d6:e2:37: a2:e9:36:6d:83:6f:83:a0:72:e1:5d:9b:90:e4:f0:f3:ad:68: c3:90:10:f9:59:51:a9:94:be:c8:57:b0:8d:cc:d6:a9:b5:49: b0:5f:cd:7d:eb:94:11:29:b0:0c:91:b1:4d:38:8e:2a:e6:a1: f6:13:fb:72:fd:b8:2e:45:2d:c0:9b:03:cd:ee:18:2b:49:a9: 35:3c:d2:80:42:f6:36:8c:c7:4f:09:e4:60:0e:7b:81:9f:50: 23:5f:2a:ec:08:63:6d:df:d7:42:58:fa:61:90:15:e2:46:47: f0:2a:8e:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEEzRTYxMTAvBgNVBAUTKEVEOENCQzU0Q0Q4NkYyQzFGOTJERUM2QkM5MDlEQkM2 RkE2MzRDODEwHhcNMjQwNTE4MjIzNzQxWhcNMjQwNTI1MjIzNzQxWjAYMRYwFAYD VQQDEw02NjQ5MmRiNS03OTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDjfCs4CX5l2kQJrtRG2WjqRG6P60d6RvuWXrvzVZiOIo637m6AEWot6xZe7 7rNBcqXGG/bih2w/ndzgjuBrQo86eZSCwQC759Oga4RuYhPNkvxc3VwdKvxTmhi3 Fy8Wn/CyLjFvDj++F7RBmHlbQXJiNKMw9o3oo5xyFAQVN1xjZcU88qzpfKdR03RK DRyHtKHfriWVbx/AIfiH99ngIIijQA8scl26KN87cr2DGoJIDPe97Rdy0mt3/1iV upLnMj15fy/AzabKfdmQATm4GezdO5ho13msjPntNlkkbV6fGX2b1tnxNhi55BKC rqkAjbo92O/Y6FrPeRXhbfse4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP8jABn5 Ut1wy12Sr1hnYhBd9n21MB8GA1UdIwQYMBaAFO2MvFTNhvLB+S3sa8kJ28b6Y0yB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTNFNi82NDBENjE4RUYy QzkxMUVBODZGMTI3MTdDNEY5QUUwMi83WXk4Vk0yRzhzSDVMZXhyeVFuYnh2cGpU SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZeThWTTJHOHNINUxleHJ5UW5ieHZwalRJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTNFNi82NDBENjE4RUYyQzkxMUVBODZGMTI3MTdDNEY5QUUwMi83WXk4Vk0yRzhz SDVMZXhyeVFuYnh2cGpUSUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCVMvT0aXlNRA8dRIOcBNUB7rv6eZMJnIEE2IPJ0e+jzdzfUTb90Tk D8WeeGnEzYoKxz/CoSN3/gj1G9S7oTtpT/A6El0HVPQqkGdPoigIGgKF1PstIntc MXpBB2GLGEdZ8MfBB7u1A1v6LCEG/oe+0ahBCL9izUHRRjxfBqIB+6hG5JgiX6XI OTdOBqbW4jei6TZtg2+DoHLhXZuQ5PDzrWjDkBD5WVGplL7IV7CNzNaptUmwX819 65QRKbAMkbFNOI4q5qH2E/ty/bguRS3AmwPN7hgrSak1PNKAQvY2jMdPCeRgDnuB n1AjXyrsCGNt39dCWPphkBXiRkfwKo5h -----END CERTIFICATE-----Generated at Sun May 19 00:16:16 2024 by rpki-client on console-fra.rpki-client.org