$ rpki-client -vvf rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft File: c7-jegclQ-L9dR5OBQw603ABDFk.mft (raw, json) Hash identifier: deAKejqtRjvtFieRHSCv49f1NBRjzY7Mjrj5CozyKVo= Subject key identifier: C9:23:4D:47:FC:5C:EF:26:8B:59:74:58:8C:5A:97:AE:2E:92:55:24 Authority key identifier: 73:BF:A3:7A:07:25:43:E2:FD:75:1E:4E:05:0C:3A:D3:70:01:0C:59 Certificate issuer: /CN=A9195AA2/serialNumber=73BFA37A072543E2FD751E4E050C3AD370010C59 Certificate serial: 071B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft Manifest number: 1287 Signing time: Sat 18 May 2024 19:27:02 +0000 Manifest this update: Sat 18 May 2024 19:27:01 +0000 Manifest next update: Sat 25 May 2024 19:27:01 +0000 Files and hashes: 1: c7-jegclQ-L9dR5OBQw603ABDFk.crl (hash: m+vsj1I2dD/HD49zrSF4cLNGMO+JJ9hKUDR0jgPSN1Q=) 2: 9839F630765111EDA744AE3AC4F9AE02.roa (hash: jThWavYpcLH8XlTA8WKtECA8EbagBitDppSeSnQP6Yk=) 3: 967FDF30765111EDA744AE3AC4F9AE02.roa (hash: 0OnnQKUi3+qjBmQq2LcIa0u1hp36N0A14bY+K5Vg+z0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.crl rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1819 (0x71b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195AA2/serialNumber=73BFA37A072543E2FD751E4E050C3AD370010C59 Validity Not Before: May 18 19:27:01 2024 GMT Not After : May 25 19:27:01 2024 GMT Subject: CN=66490105-cf0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d0:86:bf:69:57:e0:1b:67:00:99:b3:bf:01: 06:e8:42:83:1d:25:c4:30:6d:8d:be:12:2a:19:cb: b4:81:a7:20:2e:cc:34:c0:06:47:05:1d:ea:46:26: 15:f0:f2:7e:e1:6b:32:9e:a0:a0:4a:ed:51:8a:ae: 29:4a:36:95:98:09:fa:c4:1e:b7:1f:78:29:84:9d: 12:2e:e9:ae:66:0a:c9:4e:a7:0f:4d:55:3f:f5:17: f7:f2:9e:2e:c6:c1:86:c8:39:ea:15:58:6e:85:64: 28:14:7f:2d:78:44:da:92:a1:2e:8f:5c:3b:7c:9c: 33:de:73:e5:48:63:66:ec:40:8c:ef:26:48:3a:fa: 20:fe:be:a2:8e:fc:a7:56:e0:3a:bf:3c:a5:cd:7d: 20:42:b5:e8:65:0a:b6:f9:31:bc:ad:bd:97:46:ab: c4:fb:bc:1f:fd:d9:03:db:32:19:a6:ff:da:79:f6: 53:45:8a:03:34:ff:4d:e1:a5:3a:fc:23:bc:3f:b6: 60:49:e8:a1:28:1d:cd:3c:b5:f2:e1:03:3c:aa:10: b1:b9:66:db:2a:77:e4:54:45:0c:54:f9:79:b3:b8: ab:e1:8b:8d:ec:81:fa:43:ea:16:f2:13:73:4d:2d: bf:9f:12:0a:bb:7a:51:74:0b:7d:31:f7:9a:36:2e: 03:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:23:4D:47:FC:5C:EF:26:8B:59:74:58:8C:5A:97:AE:2E:92:55:24 X509v3 Authority Key Identifier: keyid:73:BF:A3:7A:07:25:43:E2:FD:75:1E:4E:05:0C:3A:D3:70:01:0C:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:92:2d:cc:6c:68:21:65:b8:b8:e3:a0:c9:44:99:22:1e:e5: fb:b8:42:c0:de:9b:e2:a7:ca:be:af:10:6a:be:50:3b:ef:cf: 66:c8:79:63:49:78:73:71:38:23:0f:60:4c:da:6a:91:f4:1f: ff:84:fc:61:48:5c:9e:9d:3a:17:d9:70:b9:1f:8e:4f:1b:7d: ab:cf:fe:f1:9c:32:01:3b:f2:ff:cb:32:1a:32:74:2a:fd:2d: 47:7c:35:b2:80:f5:17:9c:56:02:a6:4e:7d:9c:97:c6:07:be: 96:45:a8:08:1d:21:b9:47:55:27:22:f6:70:50:b3:49:4e:6d: 14:c6:b2:35:0c:64:d3:e8:2b:25:f6:76:3a:05:fe:df:4b:e1: cd:93:2b:8b:61:6c:76:2b:0e:67:be:bb:10:61:3b:c0:bb:7c: 0b:5f:f5:53:84:79:72:2e:0b:9c:1b:7a:e1:45:93:da:00:6f: ea:8b:54:3e:48:36:95:0c:bd:38:65:65:e7:a2:f5:5d:d8:b4: 36:3b:f3:65:cc:0d:98:1b:f1:da:15:fa:56:fd:4e:08:e1:09: 49:1b:ee:59:16:e1:06:f7:84:b1:26:b0:01:ef:f4:80:81:4c: 19:7b:10:c6:c6:3c:03:a8:62:e3:69:49:cd:fe:a1:a5:81:37: 1e:1b:57:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVBQTIxMTAvBgNVBAUTKDczQkZBMzdBMDcyNTQzRTJGRDc1MUU0RTA1MEMzQUQz NzAwMTBDNTkwHhcNMjQwNTE4MTkyNzAxWhcNMjQwNTI1MTkyNzAxWjAYMRYwFAYD VQQDEw02NjQ5MDEwNS1jZjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArdCGv2lX4BtnAJmzvwEG6EKDHSXEMG2NvhIqGcu0gacgLsw0wAZHBR3qRiYV 8PJ+4WsynqCgSu1Riq4pSjaVmAn6xB63H3gphJ0SLumuZgrJTqcPTVU/9Rf38p4u xsGGyDnqFVhuhWQoFH8teETakqEuj1w7fJwz3nPlSGNm7ECM7yZIOvog/r6ijvyn VuA6vzylzX0gQrXoZQq2+TG8rb2XRqvE+7wf/dkD2zIZpv/aefZTRYoDNP9N4aU6 /CO8P7ZgSeihKB3NPLXy4QM8qhCxuWbbKnfkVEUMVPl5s7ir4YuN7IH6Q+oW8hNz TS2/nxIKu3pRdAt9MfeaNi4DsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMkjTUf8 XO8mi1l0WIxal64uklUkMB8GA1UdIwQYMBaAFHO/o3oHJUPi/XUeTgUMOtNwAQxZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUFBMi8xRkUzNTdENDA2 QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9jNy1qZWdjbFEtTDlkUjVPQlF3NjAzQUJE RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3LWplZ2NsUS1MOWRSNU9CUXc2MDNBQkRGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUFBMi8xRkUzNTdENDA2QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9jNy1qZWdjbFEt TDlkUjVPQlF3NjAzQUJERmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOki3MbGghZbi446DJRJkiHuX7uELA3pvip8q+rxBqvlA7789myHlj SXhzcTgjD2BM2mqR9B//hPxhSFyenToX2XC5H45PG32rz/7xnDIBO/L/yzIaMnQq /S1HfDWygPUXnFYCpk59nJfGB76WRagIHSG5R1UnIvZwULNJTm0UxrI1DGTT6Csl 9nY6Bf7fS+HNkyuLYWx2Kw5nvrsQYTvAu3wLX/VThHlyLgucG3rhRZPaAG/qi1Q+ SDaVDL04ZWXnovVd2LQ2O/NlzA2YG/HaFfpW/U4I4QlJG+5ZFuEG94SxJrAB7/SA gUwZexDGxjwDqGLjaUnN/qGlgTceG1f2 -----END CERTIFICATE-----Generated at Sat May 18 20:16:01 2024 by rpki-client on console-ams.rpki-client.org