$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft File: 7MBefFuSR4uMxDst35ql9slCnyE.mft (raw, json) Hash identifier: GeFQnO3Qo2XEAC88z04ytEKzgv/IL1/oHZs9tTuDNWs= Subject key identifier: 60:77:7D:0C:14:4D:10:8F:7B:2B:CF:36:0B:7D:F0:9C:F5:C3:A2:E2 Authority key identifier: EC:C0:5E:7C:5B:92:47:8B:8C:C4:3B:2D:DF:9A:A5:F6:C9:42:9F:21 Certificate issuer: /CN=A9190D0D/serialNumber=ECC05E7C5B92478B8CC43B2DDF9AA5F6C9429F21 Certificate serial: 0A30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft Manifest number: 0A2B Signing time: Sat 18 May 2024 20:33:04 +0000 Manifest this update: Sat 18 May 2024 20:33:03 +0000 Manifest next update: Sat 25 May 2024 20:33:03 +0000 Files and hashes: 1: 7MBefFuSR4uMxDst35ql9slCnyE.crl (hash: tjQdxQ5CEtHoc4EjtEYOTrUEEUdRBbeB+D5DoD2T7G0=) 2: 2791E5FC476811EA943F5A66C4F9AE02.roa (hash: k4+lsY8L02z32iF+UWjCQvZeaHHhQdbaThZCLODRGV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.crl rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2608 (0xa30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190D0D/serialNumber=ECC05E7C5B92478B8CC43B2DDF9AA5F6C9429F21 Validity Not Before: May 18 20:33:03 2024 GMT Not After : May 25 20:33:03 2024 GMT Subject: CN=66491080-8be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:02:8c:0f:46:0f:84:37:cb:a3:14:94:a4:38: 36:d0:d9:89:b3:8b:b9:b9:c3:94:5b:1a:ed:df:3a: c7:35:80:78:4a:28:60:fe:7e:e1:68:b8:b3:75:69: 6d:76:e3:6a:9e:f2:f6:12:a2:02:f6:03:5c:16:5e: cb:b2:33:7e:82:21:88:90:ca:be:e5:16:12:e7:f8: 83:03:d2:f1:b3:6d:86:d3:45:7c:75:d1:1b:8e:cb: 37:23:15:79:2f:75:e7:fc:7c:9b:b1:ca:6d:f3:79: 1b:fd:c0:01:32:a3:31:92:a9:89:ad:f5:fa:b3:af: 8b:f2:3e:fb:64:f4:29:7c:6c:20:4f:00:0d:f0:43: 93:7d:f9:15:53:7a:8d:97:62:d7:6f:5e:df:25:a5: 45:f2:aa:6b:b1:8e:67:51:08:cc:ac:76:65:aa:5a: b8:e6:89:08:34:fc:3c:29:41:17:6c:65:bc:ca:ce: 3f:1b:97:a9:7e:3a:62:e9:36:f8:13:75:89:50:c5: 89:16:c9:45:e4:76:26:b7:2d:a7:72:87:cb:07:5f: 59:95:8e:00:fb:15:b8:78:21:05:3e:26:ea:b1:67: 53:65:75:1a:7b:3b:c4:76:85:95:87:87:a9:b4:7e: af:2f:1a:ef:15:f8:cd:c7:c2:d5:0b:db:e6:df:f8: 21:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:77:7D:0C:14:4D:10:8F:7B:2B:CF:36:0B:7D:F0:9C:F5:C3:A2:E2 X509v3 Authority Key Identifier: keyid:EC:C0:5E:7C:5B:92:47:8B:8C:C4:3B:2D:DF:9A:A5:F6:C9:42:9F:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:d7:41:86:8d:00:fb:a7:90:cb:75:14:c4:68:28:bb:d0:99: d4:b5:07:fd:0b:14:46:0f:25:52:ec:67:82:f9:5b:dd:40:d4: 36:d5:d7:27:1f:79:04:6e:12:df:36:b4:71:c0:88:fc:db:44: a3:0d:9d:51:1b:92:fb:60:63:b8:73:39:a4:a5:92:a6:e3:45: 2b:6f:ce:b2:56:47:01:86:9c:50:b7:51:b8:02:63:ad:b6:92: f9:78:a9:4c:93:3f:6b:20:7c:5e:fe:6f:75:8a:87:83:71:42: 29:b3:5c:30:77:78:1a:8b:f4:5f:5c:16:e9:e6:7b:85:e8:ba: a2:d7:f6:ca:1b:ef:a7:87:eb:63:4c:bd:78:ae:f2:d7:7e:66: e2:66:4d:d6:23:c4:ec:b7:95:c0:6a:3f:df:ac:f2:76:7d:09: 74:51:83:bb:d8:05:82:6e:db:40:62:b3:80:93:0e:b9:da:f6: 92:8b:87:72:f3:f7:e5:7e:92:fe:62:fe:71:06:40:55:b4:db: 05:97:61:26:78:cd:ce:0b:8f:9b:7b:5e:c3:12:a8:75:23:38: f8:8e:86:34:26:a6:be:97:22:6b:ef:dc:8e:cb:dc:b6:f1:0a: bc:5e:d6:1a:ed:7f:3d:ca:08:7e:bf:eb:b9:75:23:4f:b7:e9: 4b:ac:16:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBEMEQxMTAvBgNVBAUTKEVDQzA1RTdDNUI5MjQ3OEI4Q0M0M0IyRERGOUFBNUY2 Qzk0MjlGMjEwHhcNMjQwNTE4MjAzMzAzWhcNMjQwNTI1MjAzMzAzWjAYMRYwFAYD VQQDEw02NjQ5MTA4MC04YmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvAKMD0YPhDfLoxSUpDg20NmJs4u5ucOUWxrt3zrHNYB4Sihg/n7haLizdWlt duNqnvL2EqIC9gNcFl7LsjN+giGIkMq+5RYS5/iDA9Lxs22G00V8ddEbjss3IxV5 L3Xn/Hybscpt83kb/cABMqMxkqmJrfX6s6+L8j77ZPQpfGwgTwAN8EOTffkVU3qN l2LXb17fJaVF8qprsY5nUQjMrHZlqlq45okINPw8KUEXbGW8ys4/G5epfjpi6Tb4 E3WJUMWJFslF5HYmty2ncofLB19ZlY4A+xW4eCEFPibqsWdTZXUaezvEdoWVh4ep tH6vLxrvFfjNx8LVC9vm3/ghmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGB3fQwU TRCPeyvPNgt98Jz1w6LiMB8GA1UdIwQYMBaAFOzAXnxbkkeLjMQ7Ld+apfbJQp8h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQwRC9GMDM3QkQwODQ3 NjYxMUVBQUJCMTFBNjVDNEY5QUUwMi83TUJlZkZ1U1I0dU14RHN0MzVxbDlzbENu eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdNQmVmRnVTUjR1TXhEc3QzNXFsOXNsQ255RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEQwRC9GMDM3QkQwODQ3NjYxMUVBQUJCMTFBNjVDNEY5QUUwMi83TUJlZkZ1U1I0 dU14RHN0MzVxbDlzbENueUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQ10GGjQD7p5DLdRTEaCi70JnUtQf9CxRGDyVS7GeC+VvdQNQ21dcn H3kEbhLfNrRxwIj820SjDZ1RG5L7YGO4czmkpZKm40Urb86yVkcBhpxQt1G4AmOt tpL5eKlMkz9rIHxe/m91ioeDcUIps1wwd3gai/RfXBbp5nuF6Lqi1/bKG++nh+tj TL14rvLXfmbiZk3WI8Tst5XAaj/frPJ2fQl0UYO72AWCbttAYrOAkw652vaSi4dy 8/flfpL+Yv5xBkBVtNsFl2EmeM3OC4+be17DEqh1Izj4joY0Jqa+lyJr79yOy9y2 8Qq8XtYa7X89ygh+v+u5dSNPt+lLrBbi -----END CERTIFICATE-----Generated at Sat May 18 21:24:22 2024 by rpki-client on console-fra.rpki-client.org