$ rpki-client -vvf rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft File: 7knhDcoGuBY3lASCqMSKzvukTT8.mft (raw, json) Hash identifier: nkERIghk50UD24KpjItZuhhVswMmnv1cHxI5iMEt8EQ= Subject key identifier: 1F:2B:84:D8:CD:15:0C:A6:90:6F:B5:1E:F8:E6:65:FF:B2:24:AA:F7 Authority key identifier: EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F Certificate issuer: /CN=A918E76B/serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F Certificate serial: 08A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft Manifest number: 08A0 Signing time: Sat 18 May 2024 21:31:26 +0000 Manifest this update: Sat 18 May 2024 21:31:26 +0000 Manifest next update: Sat 25 May 2024 21:31:26 +0000 Files and hashes: 1: 7knhDcoGuBY3lASCqMSKzvukTT8.crl (hash: 6xHonX6Q8Ip8T56/ysxZf0Sb16KDrbmkIFcLlENAklc=) 2: DD726152945311EAB9A9B971C4F9AE02.roa (hash: 5x1qc/WoeaNVoEpC5uhb9hW2H/Qy8G3Vz638uPldxWc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2213 (0x8a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E76B/serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F Validity Not Before: May 18 21:31:26 2024 GMT Not After : May 25 21:31:26 2024 GMT Subject: CN=66491e2e-ca8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:68:65:1a:dd:7b:47:79:e2:23:36:84:31:04: 63:60:c8:66:3d:0e:8b:52:75:4a:e5:bc:44:d0:58: 04:c6:cb:1f:fa:56:7a:97:1e:11:60:d4:e3:cc:21: 16:a6:3b:7c:13:c2:8b:c9:86:26:e3:3c:82:2c:18: 06:10:0b:2d:32:6f:51:ed:2a:53:5e:d1:d4:99:d0: db:dc:f7:c1:ef:66:3b:25:c4:22:40:22:1b:33:a0: 3d:3f:3a:87:5d:d9:c1:23:d2:6e:60:8a:2c:83:65: fd:86:84:56:e0:d7:90:17:8d:50:55:b5:8d:48:74: cc:d6:ef:23:75:f7:de:f4:bb:f1:5e:84:6c:bb:65: e0:60:ef:e1:2d:35:c4:ee:b0:fd:8e:3f:c9:e2:42: 80:f4:d0:21:1b:0c:87:bb:24:d8:59:db:a7:b6:c8: 16:a8:a5:ab:16:08:b5:27:cb:16:69:3b:a6:e9:48: 78:56:72:1d:77:df:35:fc:2a:52:59:fe:33:4f:80: 91:09:6e:b1:b1:23:62:00:38:c6:de:76:0d:ae:ff: 41:00:e7:30:70:f7:73:49:07:fb:b4:33:81:64:0d: 27:52:eb:b7:97:f6:a9:52:b8:f9:90:75:a9:fb:0b: 88:1b:f3:6e:86:b7:a4:a8:32:e7:7b:ca:24:86:44: c9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:2B:84:D8:CD:15:0C:A6:90:6F:B5:1E:F8:E6:65:FF:B2:24:AA:F7 X509v3 Authority Key Identifier: keyid:EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:f8:55:a1:eb:8d:5c:3e:22:28:5d:07:d0:52:ae:04:61:a9: a6:35:c0:8e:6e:85:11:4e:22:12:45:e5:b5:72:ab:2f:72:cc: fc:7e:a8:a7:88:e0:18:35:2e:e1:e0:48:6a:6f:eb:c0:8d:33: 7f:a7:b7:7a:f6:df:b2:2d:70:f9:a0:d3:97:86:5b:1c:21:09: d5:a7:d7:a1:a7:6d:6c:9d:cf:f8:e1:95:28:95:4a:64:9b:5e: 94:3f:00:b5:94:02:a3:de:97:42:47:43:f8:09:44:60:7c:47: 3a:1a:4d:f4:e0:c0:04:fd:5b:f1:56:c9:0d:15:86:60:60:18: 8e:53:48:91:16:8b:7b:c8:e4:35:fd:98:56:94:65:56:cc:aa: 68:b1:88:24:ac:dd:59:93:96:34:49:5e:ed:0d:6f:66:e7:7a: c1:c5:20:7f:4d:d1:14:61:5e:f1:ea:cf:ba:28:b9:5e:f3:b0: 6a:70:32:a3:a8:a4:c1:f1:24:4b:a1:73:f2:e3:50:04:c3:e9: 57:a8:8f:06:1c:3d:fc:ed:98:aa:c4:29:3f:d2:14:dc:b6:fb: 73:85:3a:1d:74:94:91:63:dc:f2:8a:b3:04:b1:d6:d0:72:39: cb:50:35:c2:2f:53:04:0b:9a:85:4a:f9:00:ae:a4:b6:44:7c: 05:55:9a:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU3NkIxMTAvBgNVBAUTKEVFNDlFMTBEQ0EwNkI4MTYzNzk0MDQ4MkE4QzQ4QUNF RkJBNDREM0YwHhcNMjQwNTE4MjEzMTI2WhcNMjQwNTI1MjEzMTI2WjAYMRYwFAYD VQQDEw02NjQ5MWUyZS1jYThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/mhlGt17R3niIzaEMQRjYMhmPQ6LUnVK5bxE0FgExssf+lZ6lx4RYNTjzCEW pjt8E8KLyYYm4zyCLBgGEAstMm9R7SpTXtHUmdDb3PfB72Y7JcQiQCIbM6A9PzqH XdnBI9JuYIosg2X9hoRW4NeQF41QVbWNSHTM1u8jdffe9LvxXoRsu2XgYO/hLTXE 7rD9jj/J4kKA9NAhGwyHuyTYWduntsgWqKWrFgi1J8sWaTum6Uh4VnIdd981/CpS Wf4zT4CRCW6xsSNiADjG3nYNrv9BAOcwcPdzSQf7tDOBZA0nUuu3l/apUrj5kHWp +wuIG/NuhrekqDLne8okhkTJkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB8rhNjN FQymkG+1HvjmZf+yJKr3MB8GA1UdIwQYMBaAFO5J4Q3KBrgWN5QEgqjEis77pE0/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTc2Qi9CRjE4MzIzMjk0 NTIxMUVBODA2RTY5NzBDNEY5QUUwMi83a25oRGNvR3VCWTNsQVNDcU1TS3p2dWtU VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdrbmhEY29HdUJZM2xBU0NxTVNLenZ1a1RUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTc2Qi9CRjE4MzIzMjk0NTIxMUVBODA2RTY5NzBDNEY5QUUwMi83a25oRGNvR3VC WTNsQVNDcU1TS3p2dWtUVDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG+FWh641cPiIoXQfQUq4EYammNcCOboURTiISReW1cqsvcsz8fqin iOAYNS7h4Ehqb+vAjTN/p7d69t+yLXD5oNOXhlscIQnVp9ehp21snc/44ZUolUpk m16UPwC1lAKj3pdCR0P4CURgfEc6Gk304MAE/VvxVskNFYZgYBiOU0iRFot7yOQ1 /ZhWlGVWzKposYgkrN1Zk5Y0SV7tDW9m53rBxSB/TdEUYV7x6s+6KLle87BqcDKj qKTB8SRLoXPy41AEw+lXqI8GHD387ZiqxCk/0hTctvtzhToddJSRY9zyirMEsdbQ cjnLUDXCL1MEC5qFSvkArqS2RHwFVZo/ -----END CERTIFICATE-----Generated at Sat May 18 22:14:04 2024 by rpki-client on console-fra.rpki-client.org