$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft File: 7BeaWHQiKOMLffeXiCZYOHglW3g.mft (raw, json) Hash identifier: e1dNC8bp/ZZKhYz9zDxU1vZLcPvsjPv71IVGYPZVxoY= Subject key identifier: A8:07:60:15:D9:6E:AA:62:27:1A:9B:5A:C4:35:FB:9E:DB:F5:D6:5C Authority key identifier: EC:17:9A:58:74:22:28:E3:0B:7D:F7:97:88:26:58:38:78:25:5B:78 Certificate issuer: /CN=A91AA95A/serialNumber=EC179A58742228E30B7DF7978826583878255B78 Certificate serial: 0CE7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft Manifest number: 0CE4 Signing time: Sat 18 May 2024 18:46:09 +0000 Manifest this update: Sat 18 May 2024 18:46:08 +0000 Manifest next update: Sat 25 May 2024 18:46:08 +0000 Files and hashes: 1: 7BeaWHQiKOMLffeXiCZYOHglW3g.crl (hash: l0n7xBfOqUlK+SmHERMX5ZrbpCUtJp8DEpcD4mtmMmI=) 2: E64999C258D611ED86C99945C4F9AE02.roa (hash: GCvsBXw8hsLCyBZEAMehadv7yDLwMvsCH+SsV7Oukqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.crl rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3303 (0xce7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA95A/serialNumber=EC179A58742228E30B7DF7978826583878255B78 Validity Not Before: May 18 18:46:08 2024 GMT Not After : May 25 18:46:08 2024 GMT Subject: CN=6648f771-d6fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:27:dd:61:2a:dd:58:58:4c:42:08:78:26:70: a9:68:e2:38:ce:99:ec:fc:96:3c:76:87:de:26:4f: ec:0c:4d:e2:c2:24:7e:43:f9:6e:46:ea:09:c1:dc: 5f:fc:8e:85:43:fa:c6:85:0e:58:5b:d9:36:f8:d0: c7:49:e4:c4:f2:5f:57:7a:f1:b7:da:88:46:87:5c: 8a:1a:f5:b2:a8:72:38:77:e2:f4:a8:bc:db:52:ae: ef:c5:2c:ea:b0:be:7a:fc:81:97:b3:4f:b0:20:30: ec:0f:99:70:8c:9d:06:8b:e9:45:5c:6a:e5:18:26: 36:a7:e5:96:9c:5f:a4:1a:89:c1:ea:53:f7:26:bf: 6f:39:e2:a8:9d:d8:19:ca:14:bb:3b:13:f4:3d:1a: cc:1b:5e:8e:2a:1d:2e:7d:a0:7c:da:46:94:76:da: d9:0f:f6:d2:fd:51:a2:f9:3e:12:5e:72:9f:5e:a5: 0e:cb:43:88:40:2e:2a:d3:6e:74:ea:cc:ad:06:24: 63:f3:1f:4e:a7:f1:be:f5:d9:60:a2:9e:22:ff:0a: 38:64:23:d9:cc:a9:ca:6c:b5:10:2b:7c:ee:d8:a7: 8b:05:b6:d4:5d:1c:0f:08:1c:d1:9a:37:2f:cf:8f: 4b:27:a5:28:41:01:f1:ff:d5:2e:19:ee:30:1d:9e: 28:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:07:60:15:D9:6E:AA:62:27:1A:9B:5A:C4:35:FB:9E:DB:F5:D6:5C X509v3 Authority Key Identifier: keyid:EC:17:9A:58:74:22:28:E3:0B:7D:F7:97:88:26:58:38:78:25:5B:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:2a:cd:66:a2:66:4a:16:96:37:cd:a9:c1:d1:6c:2c:b4:22: 88:93:9a:5f:3d:7f:81:16:63:a1:a1:d7:2c:06:e1:07:8b:09: 0f:65:b3:88:c8:11:70:ba:05:91:84:cd:13:04:36:53:19:d9: 10:70:77:b8:32:db:6b:64:83:9e:45:f4:2a:f8:40:6a:de:b5: dc:de:ee:75:21:c7:55:73:b2:c6:9e:de:78:09:7d:e6:9b:fd: 25:06:e4:69:e5:fc:2f:4a:d9:1a:65:f3:83:93:0e:fd:69:f5: 62:73:38:d9:71:32:c6:21:d3:8e:da:b3:25:87:a9:7e:58:a5: bb:d4:70:48:44:0c:45:74:2c:29:65:2a:9a:d2:55:87:6f:a0: ee:90:8c:8b:cf:a2:8f:ad:94:3a:6f:ed:94:a4:e8:7b:7a:df: 16:74:87:5d:cf:2b:df:1c:a5:6c:57:11:7a:20:e4:65:2b:8e: e5:6a:f6:0a:8a:2a:a2:71:c0:7b:2d:0d:0c:e3:e9:ec:1a:be: a6:bd:df:c6:d2:dd:c4:dd:78:94:c8:f9:a8:ce:82:71:2c:f8: b5:21:4a:20:08:fc:6e:1a:6d:a5:9e:36:72:bd:31:45:e2:a0: 84:19:25:10:bd:c6:9a:03:c4:b5:cc:79:b1:4f:08:63:66:a5: b1:3e:b9:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE5NUExMTAvBgNVBAUTKEVDMTc5QTU4NzQyMjI4RTMwQjdERjc5Nzg4MjY1ODM4 NzgyNTVCNzgwHhcNMjQwNTE4MTg0NjA4WhcNMjQwNTI1MTg0NjA4WjAYMRYwFAYD VQQDEw02NjQ4Zjc3MS1kNmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwCfdYSrdWFhMQgh4JnCpaOI4zpns/JY8dofeJk/sDE3iwiR+Q/luRuoJwdxf /I6FQ/rGhQ5YW9k2+NDHSeTE8l9XevG32ohGh1yKGvWyqHI4d+L0qLzbUq7vxSzq sL56/IGXs0+wIDDsD5lwjJ0Gi+lFXGrlGCY2p+WWnF+kGonB6lP3Jr9vOeKondgZ yhS7OxP0PRrMG16OKh0ufaB82kaUdtrZD/bS/VGi+T4SXnKfXqUOy0OIQC4q0250 6sytBiRj8x9Op/G+9dlgop4i/wo4ZCPZzKnKbLUQK3zu2KeLBbbUXRwPCBzRmjcv z49LJ6UoQQHx/9UuGe4wHZ4o0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKgHYBXZ bqpiJxqbWsQ1+57b9dZcMB8GA1UdIwQYMBaAFOwXmlh0IijjC333l4gmWDh4JVt4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTk1QS9CMEQxRDVGQ0JF NzQxMUU5OEY5NUZBNjRDNEY5QUUwMi83QmVhV0hRaUtPTUxmZmVYaUNaWU9IZ2xX M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdCZWFXSFFpS09NTGZmZVhpQ1pZT0hnbFczZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTk1QS9CMEQxRDVGQ0JFNzQxMUU5OEY5NUZBNjRDNEY5QUUwMi83QmVhV0hRaUtP TUxmZmVYaUNaWU9IZ2xXM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpKs1momZKFpY3zanB0WwstCKIk5pfPX+BFmOhodcsBuEHiwkPZbOI yBFwugWRhM0TBDZTGdkQcHe4MttrZIOeRfQq+EBq3rXc3u51IcdVc7LGnt54CX3m m/0lBuRp5fwvStkaZfODkw79afViczjZcTLGIdOO2rMlh6l+WKW71HBIRAxFdCwp ZSqa0lWHb6DukIyLz6KPrZQ6b+2UpOh7et8WdIddzyvfHKVsVxF6IORlK47lavYK iiqiccB7LQ0M4+nsGr6mvd/G0t3E3XiUyPmozoJxLPi1IUogCPxuGm2lnjZyvTFF 4qCEGSUQvcaaA8S1zHmxTwhjZqWxPrlM -----END CERTIFICATE-----Generated at Sat May 18 20:16:01 2024 by rpki-client on console-ams.rpki-client.org