$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft File: n7dBtymAPGtDKbw7QOduUqvYufg.mft (raw, json) Hash identifier: I0ANrKl1Zw3S7Lmajnkl0YHDtyQ37P6CKlvoUxTT/rE= Subject key identifier: F9:36:E4:11:A9:44:5E:1F:0B:53:13:4F:2C:E2:44:ED:8B:D5:15:C8 Authority key identifier: 9F:B7:41:B7:29:80:3C:6B:43:29:BC:3B:40:E7:6E:52:AB:D8:B9:F8 Certificate issuer: /CN=A91A7F56/serialNumber=9FB741B729803C6B4329BC3B40E76E52ABD8B9F8 Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft Manifest number: 48 Signing time: Sun 19 May 2024 08:02:31 +0000 Manifest this update: Sun 19 May 2024 08:02:31 +0000 Manifest next update: Sun 26 May 2024 08:02:31 +0000 Files and hashes: 1: n7dBtymAPGtDKbw7QOduUqvYufg.crl (hash: FpcQ+LbUUieB95hc5Aqm3xLRkdg266cqQwXAZo5LZnU=) 2: 1FFCF508ADF211EE93DC0A12C4F9AE02.roa (hash: 8//d7/RdOnFmwlpCrp0Cvzccfj5fKjb0YYKURUPqYow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.crl rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7F56/serialNumber=9FB741B729803C6B4329BC3B40E76E52ABD8B9F8 Validity Not Before: May 19 08:02:31 2024 GMT Not After : May 26 08:02:31 2024 GMT Subject: CN=6649b217-2f4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0c:22:dc:3a:34:e8:c8:bf:2c:0b:0d:85:ba: eb:75:6a:7c:e2:74:7b:13:ee:4d:a2:fe:ef:82:4b: 73:d3:60:52:f2:ce:3d:da:9f:c7:36:72:17:0c:a7: 03:a3:3a:9f:c4:f5:cd:40:b3:a9:5b:b1:95:ef:6d: 06:82:fa:b7:84:3f:15:c7:e0:33:17:fc:f0:d0:ae: 03:2b:42:c6:b3:97:6a:fa:47:91:09:62:f2:d8:e0: 80:96:e3:e2:5f:0f:af:b7:d5:86:39:eb:5e:2c:67: 90:0a:eb:e2:01:cd:f6:ed:26:45:e8:d9:17:3c:cf: 00:2e:af:94:c9:b8:a4:3d:31:f8:6a:c8:39:a6:73: 49:70:e6:4d:19:b4:f5:f8:ff:d8:84:67:de:f9:62: 03:e0:48:cb:8b:82:14:d7:2f:5c:2d:b3:ab:71:14: 99:fc:52:1e:8f:f5:ae:1b:8c:f4:88:c0:c2:35:18: 94:14:9f:a8:60:ff:50:3e:9e:cf:f9:30:d2:6b:1b: 7f:76:03:5e:59:6f:9d:09:2e:39:7f:df:75:86:79: 18:e7:7c:74:b1:6b:6f:32:a6:cd:6e:dd:3b:63:f1: dd:cb:7a:56:41:d3:de:47:bd:39:fe:a1:3a:82:9c: ec:4d:2d:a9:0a:7e:a3:22:56:80:a9:b7:96:1b:bf: cb:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:36:E4:11:A9:44:5E:1F:0B:53:13:4F:2C:E2:44:ED:8B:D5:15:C8 X509v3 Authority Key Identifier: keyid:9F:B7:41:B7:29:80:3C:6B:43:29:BC:3B:40:E7:6E:52:AB:D8:B9:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:96:3f:ea:66:44:3c:2c:a9:72:40:4a:2c:74:88:12:dc:51: e0:bd:a0:c7:10:56:b9:56:4d:fe:2a:cf:7a:a2:ed:4b:c0:38: 90:2f:ab:93:7c:5f:04:4b:cb:8f:e4:d9:0b:95:aa:6e:3f:57: 0c:1c:66:c7:76:e4:df:b5:13:6d:d4:37:e1:67:f9:3f:62:6d: ac:4b:1e:dc:7e:25:ff:09:a4:23:c2:b0:5b:a7:a6:1f:9f:a4: fb:e5:58:4f:bd:2d:1b:fb:d1:4d:6d:18:65:0f:fc:d7:28:0d: 11:f3:a2:2d:11:19:91:c9:9a:23:87:eb:10:2f:3c:9f:b8:dd: fb:f8:28:f4:78:0c:0f:b3:e0:3a:25:a7:53:bf:ab:ba:22:6d: 61:e7:2c:47:f2:33:1a:64:d9:8e:0b:03:31:6f:6e:ff:f3:e4: b6:6b:58:3a:60:b1:82:50:e4:8e:05:98:b6:95:39:d7:f4:ae: fd:af:d9:6a:47:d9:e7:8d:bb:bf:3a:c0:d9:45:71:07:06:9f: 50:e9:ec:e6:dd:db:98:65:c5:32:51:be:bb:76:03:a8:68:33: d5:7b:0e:66:89:8f:e1:af:da:16:f6:04:a0:87:ca:91:cb:8b: a3:d6:d1:3c:1f:1b:a8:95:2a:e4:79:df:90:1a:2e:8c:d7:bc: d9:61:17:56 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB N0Y1NjExMC8GA1UEBRMoOUZCNzQxQjcyOTgwM0M2QjQzMjlCQzNCNDBFNzZFNTJB QkQ4QjlGODAeFw0yNDA1MTkwODAyMzFaFw0yNDA1MjYwODAyMzFaMBgxFjAUBgNV BAMTDTY2NDliMjE3LTJmNGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNDCLcOjToyL8sCw2Fuut1anzidHsT7k2i/u+CS3PTYFLyzj3an8c2chcMpwOj Op/E9c1As6lbsZXvbQaC+reEPxXH4DMX/PDQrgMrQsazl2r6R5EJYvLY4ICW4+Jf D6+31YY5614sZ5AK6+IBzfbtJkXo2Rc8zwAur5TJuKQ9MfhqyDmmc0lw5k0ZtPX4 /9iEZ975YgPgSMuLghTXL1wts6txFJn8Uh6P9a4bjPSIwMI1GJQUn6hg/1A+ns/5 MNJrG392A15Zb50JLjl/33WGeRjnfHSxa28yps1u3Ttj8d3LelZB095HvTn+oTqC nOxNLakKfqMiVoCpt5Ybv8sXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+TbkEalE Xh8LUxNPLOJE7YvVFcgwHwYDVR0jBBgwFoAUn7dBtymAPGtDKbw7QOduUqvYufgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3RjU2Lzk0RDU3MjM2QUND RDExRUU4MTA2OTA1MEM0RjlBRTAyL243ZEJ0eW1BUEd0REtidzdRT2R1VXF2WXVm Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbjdkQnR5bUFQR3RES2J3N1FPZHVVcXZZdWZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3 RjU2Lzk0RDU3MjM2QUNDRDExRUU4MTA2OTA1MEM0RjlBRTAyL243ZEJ0eW1BUEd0 REtidzdRT2R1VXF2WXVmZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH2WP+pmRDwsqXJASix0iBLcUeC9oMcQVrlWTf4qz3qi7UvAOJAvq5N8 XwRLy4/k2QuVqm4/VwwcZsd25N+1E23UN+Fn+T9ibaxLHtx+Jf8JpCPCsFunph+f pPvlWE+9LRv70U1tGGUP/NcoDRHzoi0RGZHJmiOH6xAvPJ+43fv4KPR4DA+z4Dol p1O/q7oibWHnLEfyMxpk2Y4LAzFvbv/z5LZrWDpgsYJQ5I4FmLaVOdf0rv2v2WpH 2eeNu786wNlFcQcGn1Dp7Obd25hlxTJRvrt2A6hoM9V7DmaJj+Gv2hb2BKCHypHL i6PW0TwfG6iVKuR535AaLozXvNlhF1Y= -----END CERTIFICATE-----Generated at Sun May 19 09:04:14 2024 by rpki-client on console-fra.rpki-client.org