$ rpki-client -vvf rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft File: 7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft (raw, json) Hash identifier: Odc5x945iwk22ctPFJ+3JyMgNRVd2E33UnI+8Aj7WoA= Subject key identifier: 8A:7C:F9:3B:6F:1A:96:5C:73:5D:1C:E4:13:0C:18:4B:BA:4F:62:23 Authority key identifier: EC:3B:90:C3:48:86:FD:09:28:E3:12:54:61:FB:B4:15:2B:E9:91:37 Certificate issuer: /CN=A918D7D0/serialNumber=EC3B90C34886FD0928E3125461FBB4152BE99137 Certificate serial: 0B92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft Manifest number: 12C4 Signing time: Sat 18 May 2024 19:15:54 +0000 Manifest this update: Sat 18 May 2024 19:15:54 +0000 Manifest next update: Sat 25 May 2024 19:15:54 +0000 Files and hashes: 1: 7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl (hash: dT9OPmBU07LxmB2wR/RnIuSK6rDIIwJkWUkJGW88Fvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2962 (0xb92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D7D0/serialNumber=EC3B90C34886FD0928E3125461FBB4152BE99137 Validity Not Before: May 18 19:15:54 2024 GMT Not After : May 25 19:15:54 2024 GMT Subject: CN=6648fe6a-9986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ed:df:e0:91:39:84:68:52:bc:23:3c:8f:68: c9:1f:67:b7:e8:de:35:57:bc:2e:41:b8:1f:50:26: f2:23:8b:ec:1a:56:97:66:1d:7c:63:a9:19:0f:62: 02:8a:38:92:7b:4a:74:fd:8d:23:23:15:00:c7:4f: 39:87:ea:a4:9b:05:36:4c:7f:73:a6:64:44:40:b6: 6d:4a:c5:41:b9:ba:20:45:10:1c:e5:20:82:a4:7e: df:5a:6f:be:8e:fc:fc:30:a5:d3:17:f2:e4:e6:0a: 1d:af:3f:9a:de:93:74:af:f5:4a:89:d9:3b:9c:ed: f0:cb:4c:ca:18:4f:5e:fc:6b:0e:ef:a1:e3:a2:03: 36:37:d9:06:ad:eb:7f:43:de:6e:8b:a9:d6:67:08: 68:03:e4:bb:93:e9:f0:70:94:2d:67:8f:e2:ee:56: e6:11:e8:0f:31:7d:1f:1d:eb:8e:63:23:70:39:60: 70:da:d7:21:28:b2:01:f2:7f:7a:57:2d:b5:9d:97: bd:ea:db:b0:33:5c:05:ab:d7:26:e4:e4:0e:b1:85: b7:51:4e:fa:5f:b4:fe:2c:b0:b6:47:80:92:79:24: 3a:ce:b2:60:5e:7c:af:20:e7:dc:bb:93:d9:68:fa: 83:f6:a5:dd:33:85:38:5e:b3:3e:7e:f4:f5:1c:d7: aa:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:7C:F9:3B:6F:1A:96:5C:73:5D:1C:E4:13:0C:18:4B:BA:4F:62:23 X509v3 Authority Key Identifier: keyid:EC:3B:90:C3:48:86:FD:09:28:E3:12:54:61:FB:B4:15:2B:E9:91:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:9d:54:ea:65:6b:80:fe:80:a1:50:48:03:e8:24:dc:03:47: 5e:ee:79:a4:14:7f:71:bd:b5:92:00:02:75:b2:70:6a:ce:63: 60:10:c7:59:2e:12:23:40:24:02:39:c4:52:8d:01:2a:9e:1a: df:89:5c:27:60:6d:31:68:28:d7:7f:24:23:d0:30:b8:45:e3: 84:c5:35:46:c7:e9:22:e4:79:5e:96:05:dc:ed:ef:43:fa:61: ba:23:3b:90:d5:d8:e7:e9:53:b6:b7:2b:f3:9b:5b:01:5d:c8: c3:2e:46:c2:f2:30:2e:d7:44:32:f5:d7:ec:1a:7d:c0:d8:b1: 68:36:98:0f:95:8f:41:92:18:f4:8f:05:0c:16:f7:d6:77:5a: 21:b9:83:ed:dd:41:5f:f3:6b:d0:c3:04:5f:ac:ec:8d:82:eb: 9f:25:89:25:fb:87:6f:a0:c9:62:f2:dc:39:41:5d:61:d5:4f: 3c:c6:94:f6:24:e8:b5:72:13:07:14:50:23:95:4b:ff:fd:ac: 08:81:b8:22:e6:3b:44:df:71:26:68:5f:29:de:66:5a:68:c9: ae:ec:63:91:bd:3f:fa:46:fd:8f:65:a7:e5:94:1e:e9:43:03: ae:40:62:5e:d4:7d:9b:92:95:f3:07:fb:6b:51:ff:94:9c:78: 1f:0d:44:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ3RDAxMTAvBgNVBAUTKEVDM0I5MEMzNDg4NkZEMDkyOEUzMTI1NDYxRkJCNDE1 MkJFOTkxMzcwHhcNMjQwNTE4MTkxNTU0WhcNMjQwNTI1MTkxNTU0WjAYMRYwFAYD VQQDEw02NjQ4ZmU2YS05OTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+3f4JE5hGhSvCM8j2jJH2e36N41V7wuQbgfUCbyI4vsGlaXZh18Y6kZD2IC ijiSe0p0/Y0jIxUAx085h+qkmwU2TH9zpmREQLZtSsVBubogRRAc5SCCpH7fWm++ jvz8MKXTF/Lk5godrz+a3pN0r/VKidk7nO3wy0zKGE9e/GsO76HjogM2N9kGret/ Q95ui6nWZwhoA+S7k+nwcJQtZ4/i7lbmEegPMX0fHeuOYyNwOWBw2tchKLIB8n96 Vy21nZe96tuwM1wFq9cm5OQOsYW3UU76X7T+LLC2R4CSeSQ6zrJgXnyvIOfcu5PZ aPqD9qXdM4U4XrM+fvT1HNeqjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIp8+Ttv GpZcc10c5BMMGEu6T2IjMB8GA1UdIwQYMBaAFOw7kMNIhv0JKOMSVGH7tBUr6ZE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDdEMC85ODJCMkQ1QTAw ODIxMUVBQjcxRjRBMkJDNEY5QUUwMi83RHVRdzBpR19Ra280eEpVWWZ1MEZTdnBr VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdEdVF3MGlHX1FrbzR4SlVZZnUwRlN2cGtUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDdEMC85ODJCMkQ1QTAwODIxMUVBQjcxRjRBMkJDNEY5QUUwMi83RHVRdzBpR19R a280eEpVWWZ1MEZTdnBrVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlnVTqZWuA/oChUEgD6CTcA0de7nmkFH9xvbWSAAJ1snBqzmNgEMdZ LhIjQCQCOcRSjQEqnhrfiVwnYG0xaCjXfyQj0DC4ReOExTVGx+ki5HlelgXc7e9D +mG6IzuQ1djn6VO2tyvzm1sBXcjDLkbC8jAu10Qy9dfsGn3A2LFoNpgPlY9Bkhj0 jwUMFvfWd1ohuYPt3UFf82vQwwRfrOyNguufJYkl+4dvoMli8tw5QV1h1U88xpT2 JOi1chMHFFAjlUv//awIgbgi5jtE33EmaF8p3mZaaMmu7GORvT/6Rv2PZafllB7p QwOuQGJe1H2bkpXzB/trUf+UnHgfDUSb -----END CERTIFICATE-----Generated at Sat May 18 20:16:00 2024 by rpki-client on console-ams.rpki-client.org