$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft File: 7tgLGUJsDUqCvG8LULm7El4f04o.mft (raw, json) Hash identifier: XWBZLQEfMQSowP5b4YYi1K9+DObq6n4pVxdBAs9t/40= Subject key identifier: 2B:DC:36:7F:2B:06:AA:1F:8F:CC:0E:CF:A4:9D:72:64:D2:5C:66:00 Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A Certificate issuer: /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A Certificate serial: 03F6 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft Manifest number: 03F6 Signing time: Sun 02 Jun 2024 15:42:28 +0000 Manifest this update: Sun 02 Jun 2024 15:42:28 +0000 Manifest next update: Sun 09 Jun 2024 15:42:28 +0000 Files and hashes: 1: 7tgLGUJsDUqCvG8LULm7El4f04o.crl (hash: 3B5V6lqUSKvvh6voujpHcrETeH0QzhpMj2LwhWUQL5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 14:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1014 (0x3f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A Validity Not Before: Jun 2 15:42:28 2024 GMT Not After : Jun 9 15:42:28 2024 GMT Subject: CN=665c92e4-0123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e2:86:e4:e5:9a:d7:33:5f:ca:b9:57:04:04: a4:3c:79:7a:0a:8d:5e:fd:f2:a7:ec:7d:1e:ce:13: de:48:f2:db:b8:1c:a1:63:3a:b5:79:d9:a9:4d:e7: b8:1b:ee:ff:d0:ec:82:c5:58:24:ee:11:84:dc:94: be:3e:6d:21:11:d6:e8:5b:b5:74:d5:6e:5d:14:0e: 6f:92:db:d8:20:6e:0a:c5:4a:00:93:5e:c4:66:9f: 27:50:b2:71:72:77:be:6c:6b:e1:be:6c:20:bb:b3: 47:83:d6:ae:03:01:7c:33:5e:0d:3e:24:e5:4f:7e: 05:e5:53:c5:ad:9b:bd:28:8d:c1:21:88:bd:91:4f: b0:0c:de:2f:12:33:06:9c:46:ec:9c:30:60:00:c2: 6e:d2:3e:63:10:6f:ce:a0:c4:fd:9b:7e:b5:be:de: 83:3f:1a:6b:fd:af:c8:b4:f8:c2:fb:df:5d:7d:f8: 87:f4:5b:a8:35:14:e9:56:d3:93:2e:be:c2:46:af: 82:fc:79:40:70:73:59:c2:07:69:1a:b0:a1:37:91: df:2e:b2:22:3a:8c:05:86:53:b9:7a:31:67:d4:3b: 9b:79:7e:63:9b:78:7c:e9:7f:1c:19:6b:7b:df:83: 0c:b4:cf:76:8d:2a:b1:e9:b5:2e:e9:f9:65:52:fc: 0e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:DC:36:7F:2B:06:AA:1F:8F:CC:0E:CF:A4:9D:72:64:D2:5C:66:00 X509v3 Authority Key Identifier: keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:c5:26:d1:cd:c1:d3:a0:58:90:a9:bc:f9:11:d1:82:68:49: ba:a7:47:4e:c9:14:10:d9:72:16:7f:86:b4:84:0a:c4:29:23: a5:79:fd:56:2c:07:dc:17:f1:6d:16:9d:81:00:af:7d:99:9a: ec:ad:d7:a2:a9:94:08:74:a6:06:1d:61:8d:63:43:62:39:4c: 26:17:8f:c8:2d:72:d6:8b:3b:b3:41:85:f6:b1:29:f1:b1:22: 24:5c:83:4d:45:30:94:a6:0d:1a:64:5e:01:96:29:03:48:62: 9b:be:d6:e9:8e:ad:46:97:1f:af:b1:c4:53:62:39:bb:15:51: 50:8f:34:4a:51:46:1a:8a:5d:d1:bb:96:a3:11:3a:65:58:77: 88:c1:27:53:6d:83:7f:8e:a7:18:12:f2:e1:2c:c2:1c:51:d8: 2a:f7:70:b6:c8:3d:5e:78:4a:99:5c:ce:b4:9e:12:21:8d:74: 5f:59:71:4c:7e:ff:7c:57:0e:99:b5:ed:aa:13:6b:1b:ce:4a: cf:8d:11:79:7c:74:21:cb:a9:db:8b:21:47:82:10:6b:da:64: 7e:9b:ca:f8:87:9c:f1:52:03:de:4b:63:6c:21:3b:59:68:78: 60:3e:c0:31:dd:bb:2d:15:ad:6e:e6:2d:10:43:31:89:05:34: 6c:43:28:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEVFRDgwQjE5NDI2QzBENEE4MkJDNkYwQjUwQjlCQjEy NUUxRkQzOEEwHhcNMjQwNjAyMTU0MjI4WhcNMjQwNjA5MTU0MjI4WjAYMRYwFAYD VQQDEw02NjVjOTJlNC0wMTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAueKG5OWa1zNfyrlXBASkPHl6Co1e/fKn7H0ezhPeSPLbuByhYzq1edmpTee4 G+7/0OyCxVgk7hGE3JS+Pm0hEdboW7V01W5dFA5vktvYIG4KxUoAk17EZp8nULJx cne+bGvhvmwgu7NHg9auAwF8M14NPiTlT34F5VPFrZu9KI3BIYi9kU+wDN4vEjMG nEbsnDBgAMJu0j5jEG/OoMT9m361vt6DPxpr/a/ItPjC+99dffiH9FuoNRTpVtOT Lr7CRq+C/HlAcHNZwgdpGrChN5HfLrIiOowFhlO5ejFn1DubeX5jm3h86X8cGWt7 34MMtM92jSqx6bUu6fllUvwO2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvcNn8r Bqofj8wOz6SdcmTSXGYAMB8GA1UdIwQYMBaAFO7YCxlCbA1KgrxvC1C5uxJeH9OK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi81NDdDODU4NjQx REExMUVDOTA1RTMyNTJDNEY5QUUwMi83dGdMR1VKc0RVcUN2RzhMVUxtN0VsNGYw NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzd0Z0xHVUpzRFVxQ3ZHOExVTG03RWw0ZjA0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RURCMi81NDdDODU4NjQxREExMUVDOTA1RTMyNTJDNEY5QUUwMi83dGdMR1VKc0RV cUN2RzhMVUxtN0VsNGYwNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXxSbRzcHToFiQqbz5EdGCaEm6p0dOyRQQ2XIWf4a0hArEKSOlef1W LAfcF/FtFp2BAK99mZrsrdeiqZQIdKYGHWGNY0NiOUwmF4/ILXLWizuzQYX2sSnx sSIkXINNRTCUpg0aZF4BlikDSGKbvtbpjq1Glx+vscRTYjm7FVFQjzRKUUYail3R u5ajETplWHeIwSdTbYN/jqcYEvLhLMIcUdgq93C2yD1eeEqZXM60nhIhjXRfWXFM fv98Vw6Zte2qE2sbzkrPjRF5fHQhy6nbiyFHghBr2mR+m8r4h5zxUgPeS2NsITtZ aHhgPsAx3bstFa1u5i0QQzGJBTRsQygf -----END CERTIFICATE-----Generated at Sun Jun 2 18:47:09 2024 by rpki-client on console-ams.rpki-client.org