$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.mft File: 7loKCg1eD1xijRpwW1rGj-8gxG8.mft (raw, json) Hash identifier: 4yDjxJZ7Bokl9cKNx7pmBX4FwqpLnPOoDKuq8px2keo= Subject key identifier: E1:40:C3:27:1A:C9:5B:E5:73:42:1B:44:4D:C8:8A:B8:B7:3F:36:A6 Authority key identifier: EE:5A:0A:0A:0D:5E:0F:5C:62:8D:1A:70:5B:5A:C6:8F:EF:20:C4:6F Certificate issuer: /CN=A91AB574/serialNumber=EE5A0A0A0D5E0F5C628D1A705B5AC68FEF20C46F Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7loKCg1eD1xijRpwW1rGj-8gxG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.mft Manifest number: 25 Signing time: Sat 01 Jun 2024 09:59:58 +0000 Manifest this update: Sat 01 Jun 2024 09:59:58 +0000 Manifest next update: Sat 08 Jun 2024 09:59:58 +0000 Files and hashes: 1: 7loKCg1eD1xijRpwW1rGj-8gxG8.crl (hash: hcg7jTStcq+GyO1hTWOYyvkYmeGTjcN44pBBMak/R9M=) 2: 521FC3D8E74211EE9A78EC6EC4F9AE02.roa (hash: 5XcitYYfn/BDYPUJL97dbacpyj7WrNOJRovactqO4kE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.crl rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7loKCg1eD1xijRpwW1rGj-8gxG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB574/serialNumber=EE5A0A0A0D5E0F5C628D1A705B5AC68FEF20C46F Validity Not Before: Jun 1 09:59:58 2024 GMT Not After : Jun 8 09:59:58 2024 GMT Subject: CN=665af11e-481d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fc:f9:2c:8e:d9:d3:5e:43:cc:3c:5a:c8:bf: c6:01:84:bd:b8:47:5d:d3:35:14:26:42:7a:1e:e3: 91:f6:f1:38:59:b1:03:cd:6d:10:c4:5b:44:28:da: 08:89:ef:38:43:06:cc:4b:cc:42:31:e8:bd:d6:da: c7:56:1a:2e:92:e0:7f:81:c5:ea:45:ce:e0:e5:f4: 0c:32:40:6d:64:87:15:45:3d:e0:b3:59:9a:06:13: 17:e2:7e:95:3f:4b:be:0c:f8:45:c6:83:c0:e8:39: 59:b2:cd:6b:ac:15:94:39:3a:36:43:36:3b:70:28: 0d:ad:7d:15:5e:fa:05:75:75:f5:8b:ac:08:8c:c9: 39:53:76:df:7b:f3:68:40:d7:b1:a6:93:a9:38:f8: 7f:bc:15:2b:a1:77:f0:59:02:e3:97:a6:af:7d:fd: 58:aa:15:64:d2:aa:1b:3d:d4:c8:a6:1f:31:df:e8: 28:c8:a1:22:ac:d3:6b:ed:5f:d6:11:9d:8c:fe:b6: 40:7c:b5:77:c8:fe:7d:5e:01:bd:56:60:e1:5d:c5: ef:c6:68:5a:7d:0e:00:5c:0c:30:8d:b8:05:b2:76: c3:7c:60:00:33:b4:92:28:3f:77:8f:76:8d:03:0b: 47:59:c5:19:59:ad:c1:10:1a:2f:c3:67:5a:f4:e7: 9b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:40:C3:27:1A:C9:5B:E5:73:42:1B:44:4D:C8:8A:B8:B7:3F:36:A6 X509v3 Authority Key Identifier: keyid:EE:5A:0A:0A:0D:5E:0F:5C:62:8D:1A:70:5B:5A:C6:8F:EF:20:C4:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7loKCg1eD1xijRpwW1rGj-8gxG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:76:98:50:fc:39:64:77:af:75:b9:fb:65:5d:04:4d:aa:d7: cd:bb:d8:35:49:82:2a:a4:d2:51:bc:aa:31:b5:51:70:7c:e5: de:da:f4:15:5d:4d:7d:11:27:9b:bb:a2:f6:f2:c7:4f:02:1e: fc:1d:5c:70:b6:09:62:2a:13:ff:83:b5:98:3a:57:04:fb:ce: 01:53:26:19:8a:7c:c8:77:61:a9:8b:e0:0e:ac:0d:2d:0d:f5: 5c:c0:a6:53:31:b5:f4:17:fb:1d:02:e7:d7:11:7e:24:f8:4e: ba:f5:53:e3:18:3c:d4:36:20:62:f3:b2:8c:5d:f7:c1:31:0e: 5d:50:c3:b1:b1:cc:a7:80:b2:f6:9d:0f:4a:3a:91:7b:09:4c: 4f:9b:a8:63:e9:a4:c5:9b:64:3b:73:7e:f7:0b:ac:5c:54:67: 93:3e:98:e8:58:dc:f1:0e:e4:f8:d2:3f:f8:5e:97:57:5a:57: 40:aa:81:3c:c4:89:85:dc:12:e8:63:e6:29:4b:00:16:c4:ae: 53:be:96:7e:e7:ed:9a:f2:d4:94:5e:aa:06:34:92:63:74:d5: 82:29:de:0d:76:12:c5:14:ad:3c:2f:7b:ae:bc:9e:0e:c8:7e: da:2d:e3:d4:e7:31:7a:66:69:7e:00:58:5f:8c:09:79:6a:48: f3:61:a7:08 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QjU3NDExMC8GA1UEBRMoRUU1QTBBMEEwRDVFMEY1QzYyOEQxQTcwNUI1QUM2OEZF RjIwQzQ2RjAeFw0yNDA2MDEwOTU5NThaFw0yNDA2MDgwOTU5NThaMBgxFjAUBgNV BAMTDTY2NWFmMTFlLTQ4MWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDD/PksjtnTXkPMPFrIv8YBhL24R13TNRQmQnoe45H28ThZsQPNbRDEW0Qo2giJ 7zhDBsxLzEIx6L3W2sdWGi6S4H+BxepFzuDl9AwyQG1khxVFPeCzWZoGExfifpU/ S74M+EXGg8DoOVmyzWusFZQ5OjZDNjtwKA2tfRVe+gV1dfWLrAiMyTlTdt9782hA 17Gmk6k4+H+8FSuhd/BZAuOXpq99/ViqFWTSqhs91MimHzHf6CjIoSKs02vtX9YR nYz+tkB8tXfI/n1eAb1WYOFdxe/GaFp9DgBcDDCNuAWydsN8YAAztJIoP3ePdo0D C0dZxRlZrcEQGi/DZ1r055stAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4UDDJxrJ W+VzQhtETciKuLc/NqYwHwYDVR0jBBgwFoAU7loKCg1eD1xijRpwW1rGj+8gxG8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFCNTc0L0YwN0VCQTI2RTc0 MTExRUU5M0U4RkM2REM0RjlBRTAyLzdsb0tDZzFlRDF4aWpScHdXMXJHai04Z3hH OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN2xvS0NnMWVEMXhpalJwd1cxckdqLThneEc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFC NTc0L0YwN0VCQTI2RTc0MTExRUU5M0U4RkM2REM0RjlBRTAyLzdsb0tDZzFlRDF4 aWpScHdXMXJHai04Z3hHOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB92mFD8OWR3r3W5+2VdBE2q18272DVJgiqk0lG8qjG1UXB85d7a9BVd TX0RJ5u7ovbyx08CHvwdXHC2CWIqE/+DtZg6VwT7zgFTJhmKfMh3YamL4A6sDS0N 9VzAplMxtfQX+x0C59cRfiT4Trr1U+MYPNQ2IGLzsoxd98ExDl1Qw7GxzKeAsvad D0o6kXsJTE+bqGPppMWbZDtzfvcLrFxUZ5M+mOhY3PEO5PjSP/hel1daV0CqgTzE iYXcEuhj5ilLABbErlO+ln7n7Zry1JReqgY0kmN01YIp3g12EsUUrTwve668ng7I ftot49TnMXpmaX4AWF+MCXlqSPNhpwg= -----END CERTIFICATE-----Generated at Sat Jun 1 11:14:30 2024 by rpki-client on console-fra.rpki-client.org