$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft File: 7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft (raw, json) Hash identifier: 58NuuIYO26YmD7Eg3xPVLdtPHi6fDuv6KxSJcKC/l3s= Subject key identifier: 10:04:EA:A2:CD:E1:18:A3:67:B7:DC:05:73:B1:32:9D:2E:1C:3B:43 Authority key identifier: EC:67:8D:E0:D7:BC:F8:39:D9:98:A0:FC:E5:C9:EB:75:FF:C8:67:3D Certificate issuer: /CN=A91A55C9/serialNumber=EC678DE0D7BCF839D998A0FCE5C9EB75FFC8673D Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft Manifest number: 33 Signing time: Sun 19 May 2024 08:21:12 +0000 Manifest this update: Sun 19 May 2024 08:21:11 +0000 Manifest next update: Sun 26 May 2024 08:21:11 +0000 Files and hashes: 1: 7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl (hash: JToVCMJPoJTrUpbiPPrULZwJ81PQov6DHWVDW4xL1os=) 2: 9DDCAB1AC9EC11EE9644540FC4F9AE02.roa (hash: Kic8h5EKd6f6RJkj1KvOZp4O1CzZUY/VSl4mLsZ7Pfc=) 3: 9E40D11CC9EC11EE9644540FC4F9AE02.roa (hash: pDNT90FCM+cZ/wTmkGN2qw6fYi9CK445g/weGQTkxo8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A55C9/serialNumber=EC678DE0D7BCF839D998A0FCE5C9EB75FFC8673D Validity Not Before: May 19 08:21:11 2024 GMT Not After : May 26 08:21:11 2024 GMT Subject: CN=6649b678-b2a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9b:ba:a1:1a:21:7f:2e:40:3d:f5:df:36:b3: c3:07:b2:5b:3a:de:62:70:1f:96:f8:82:13:4d:c6: fa:51:c4:ee:2a:a5:80:3f:66:aa:c6:c1:81:a2:11: 38:da:d9:1f:91:c5:7b:14:78:39:e3:52:36:d7:f9: 30:ae:00:81:a0:ad:c5:64:eb:4b:47:7d:52:25:ca: 04:06:f3:5e:90:c3:1d:6c:c7:76:f1:d1:5d:37:40: 56:3f:f9:35:b0:b4:ca:68:f3:30:61:2c:e9:e0:17: b0:3f:e1:b0:fa:b0:b6:8f:cc:77:79:6d:bd:fd:5e: fd:6e:69:0e:22:06:7b:dd:4a:0c:bf:4a:9b:b3:54: 1e:bb:e0:84:ae:e0:a3:de:10:a1:96:54:3c:be:20: 31:41:de:79:3a:be:fe:4f:2b:5a:94:21:a9:76:e9: bc:8c:1f:f5:0d:20:e1:5b:2b:81:d7:58:44:0e:d8: e7:5b:0d:be:80:3a:51:62:f7:8a:2c:0f:c7:3f:50: 5f:db:11:a2:a2:64:81:11:b6:b5:56:23:f2:54:52: e4:d1:7a:9f:2a:df:1e:45:35:0f:49:06:33:d7:d9: e2:77:99:12:9a:fa:f1:9b:7a:c9:2c:87:b4:ea:96: c9:08:62:6f:cc:64:f5:bd:56:a7:63:4a:ec:ee:72: 61:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:04:EA:A2:CD:E1:18:A3:67:B7:DC:05:73:B1:32:9D:2E:1C:3B:43 X509v3 Authority Key Identifier: keyid:EC:67:8D:E0:D7:BC:F8:39:D9:98:A0:FC:E5:C9:EB:75:FF:C8:67:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:21:03:56:bf:0d:e8:85:25:a9:e2:e9:d8:a2:50:ea:ed:fe: 2c:97:a5:4b:6f:54:b8:a9:91:a9:d4:61:3e:1a:82:62:36:38: f7:23:2e:97:24:60:80:cc:18:2e:c6:17:b7:a8:ce:b5:9f:b0: d8:8b:9c:b9:9c:a4:4d:bb:3c:74:be:d0:55:d6:9e:ef:4c:f7: 5d:ba:08:66:86:56:92:ae:d4:31:65:14:50:d9:5d:7d:5e:a2: f2:43:91:9a:b3:22:bb:47:ef:65:2a:24:85:9d:c5:26:71:70: 1d:8f:ad:23:41:ba:79:57:66:48:1f:ed:9e:0b:15:b5:c1:eb: bd:1f:32:8b:50:80:d4:66:07:fd:9a:e1:5c:0b:13:1c:94:d9: 32:c4:48:e7:d7:c9:bb:34:94:52:73:81:ab:42:d8:d3:c0:9c: 37:96:1b:f2:92:10:9f:67:d2:5a:72:47:0a:ba:46:1f:8e:98: 11:13:f1:3c:14:59:33:e5:83:3c:55:4b:aa:6a:b1:48:39:b8: 37:72:fa:0f:39:54:45:97:bf:69:74:c0:65:d2:92:23:44:df: b6:6f:55:d1:b6:ca:2b:e6:74:66:cf:0c:80:dc:d7:0f:f2:dd: a1:e4:d8:b3:35:2a:9a:5f:be:a9:71:24:46:20:87:31:05:65: 52:6d:73:ab -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NTVDOTExMC8GA1UEBRMoRUM2NzhERTBEN0JDRjgzOUQ5OThBMEZDRTVDOUVCNzVG RkM4NjczRDAeFw0yNDA1MTkwODIxMTFaFw0yNDA1MjYwODIxMTFaMBgxFjAUBgNV BAMTDTY2NDliNjc4LWIyYTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHm7qhGiF/LkA99d82s8MHsls63mJwH5b4ghNNxvpRxO4qpYA/ZqrGwYGiETja 2R+RxXsUeDnjUjbX+TCuAIGgrcVk60tHfVIlygQG816Qwx1sx3bx0V03QFY/+TWw tMpo8zBhLOngF7A/4bD6sLaPzHd5bb39Xv1uaQ4iBnvdSgy/SpuzVB674ISu4KPe EKGWVDy+IDFB3nk6vv5PK1qUIal26byMH/UNIOFbK4HXWEQO2OdbDb6AOlFi94os D8c/UF/bEaKiZIERtrVWI/JUUuTRep8q3x5FNQ9JBjPX2eJ3mRKa+vGbesksh7Tq lskIYm/MZPW9VqdjSuzucmG5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEATqos3h GKNnt9wFc7EynS4cO0MwHwYDVR0jBBgwFoAU7GeN4Ne8+DnZmKD85cnrdf/IZz0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1NUM5LzdFMkYxMjY4QzlF QjExRUU4Qjg1N0IwQ0M0RjlBRTAyLzdHZU40TmU4LURuWm1LRDg1Y25yZGZfSVp6 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvN0dlTjROZTgtRG5abUtEODVjbnJkZl9JWnowLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1 NUM5LzdFMkYxMjY4QzlFQjExRUU4Qjg1N0IwQ0M0RjlBRTAyLzdHZU40TmU4LURu Wm1LRDg1Y25yZGZfSVp6MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKQhA1a/DeiFJani6diiUOrt/iyXpUtvVLipkanUYT4agmI2OPcjLpck YIDMGC7GF7eozrWfsNiLnLmcpE27PHS+0FXWnu9M9126CGaGVpKu1DFlFFDZXX1e ovJDkZqzIrtH72UqJIWdxSZxcB2PrSNBunlXZkgf7Z4LFbXB670fMotQgNRmB/2a 4VwLExyU2TLESOfXybs0lFJzgatC2NPAnDeWG/KSEJ9n0lpyRwq6Rh+OmBET8TwU WTPlgzxVS6pqsUg5uDdy+g85VEWXv2l0wGXSkiNE37ZvVdG2yivmdGbPDIDc1w/y 3aHk2LM1KppfvqlxJEYghzEFZVJtc6s= -----END CERTIFICATE-----Generated at Sun May 19 09:32:17 2024 by rpki-client on console-ams.rpki-client.org