$ rpki-client -vvf rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft File: 7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft (raw, json) Hash identifier: QQV/AYoOZkERK705+Hee1XRRAG7kdnrewJgR0j7eMf0= Subject key identifier: F8:38:CF:9A:14:C8:43:72:52:47:67:83:74:97:23:DB:A9:97:2D:33 Authority key identifier: EC:58:B4:37:8F:CB:FF:4C:B1:24:1F:82:F3:BC:C0:E8:72:E4:B3:96 Certificate issuer: /CN=A91B04E3/serialNumber=EC58B4378FCBFF4CB1241F82F3BCC0E872E4B396 Certificate serial: 09C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft Manifest number: 09C3 Signing time: Sat 18 May 2024 20:48:07 +0000 Manifest this update: Sat 18 May 2024 20:48:07 +0000 Manifest next update: Sat 25 May 2024 20:48:07 +0000 Files and hashes: 1: 7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl (hash: U5thcwVF7isq8RxBqUwdRDxEmj2kBXa/ooT6lTaBr/k=) 2: A7D265605BB411EAB5B9A73BC4F9AE02.roa (hash: 1yNV4IlFTDqCdXIN8GAYKZjI05HGr3RV6cvcTz8go7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2504 (0x9c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B04E3/serialNumber=EC58B4378FCBFF4CB1241F82F3BCC0E872E4B396 Validity Not Before: May 18 20:48:07 2024 GMT Not After : May 25 20:48:07 2024 GMT Subject: CN=66491407-9629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:91:7f:74:56:dc:a4:dc:cc:3b:58:2e:4b:a1: d9:f4:81:8b:e4:e5:a0:69:6f:1d:3b:33:ca:cd:02: b8:39:ad:0e:e0:a9:f5:f5:e4:b7:4d:04:97:6b:48: f3:98:91:de:4c:32:81:4f:78:e1:b2:b3:f7:fa:4b: 22:ae:09:14:81:60:0a:25:2e:79:69:4f:8a:5c:d2: 48:92:4a:02:51:74:30:4b:12:77:0e:45:80:00:cd: 8a:d3:15:31:d1:d1:76:16:da:20:cf:7a:5c:b5:0d: f1:6f:8b:9f:7d:0f:7a:d7:4c:17:fd:40:56:2f:66: 67:0e:50:50:2a:fa:46:8e:78:0e:05:bb:c4:ea:30: 32:1c:18:72:c8:d5:e1:28:2e:9b:23:1a:fb:72:23: 80:5d:9d:77:3c:c9:eb:29:bd:de:5d:a0:ca:b9:52: ed:84:72:fb:f2:32:17:4e:8b:84:99:98:d8:72:13: 62:ec:9e:4c:22:e4:de:95:ff:8c:34:d2:e0:49:49: e9:ad:6a:20:e4:6c:fb:a9:3b:d7:0f:20:52:68:5a: 98:8f:76:e0:c0:49:ef:08:b6:79:3a:57:ab:c9:68: 3c:f6:90:ca:da:51:5a:86:57:ef:2a:d1:78:97:7e: fc:4b:ff:e9:9e:87:a5:6d:94:94:4c:09:27:be:ce: 56:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:38:CF:9A:14:C8:43:72:52:47:67:83:74:97:23:DB:A9:97:2D:33 X509v3 Authority Key Identifier: keyid:EC:58:B4:37:8F:CB:FF:4C:B1:24:1F:82:F3:BC:C0:E8:72:E4:B3:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:0b:8b:1e:dd:98:5c:93:48:cd:1e:59:9f:37:b1:cd:03:46: 97:15:54:6b:d2:a8:04:89:53:fc:ad:49:ce:a3:1e:72:f7:f8: e6:1e:9a:3d:e6:3a:f1:a9:ed:59:88:6d:9f:ab:f2:59:3d:c1: 28:a3:b3:da:18:eb:67:5e:fe:a0:8a:36:5b:52:ba:9c:dd:ec: 2c:fc:1f:91:7b:c3:56:02:3e:b1:b2:ee:99:6e:86:3a:d7:40: db:d8:2f:45:a6:1b:81:ac:57:72:96:fd:09:1b:a1:b2:85:b7: 1d:b1:56:48:c0:0c:d2:2f:21:65:b3:ca:2d:62:8e:44:17:a5: 49:03:2e:39:2e:3d:f6:c6:10:17:b0:4d:7d:7d:db:58:63:b9: 77:4c:8e:2b:58:35:95:c1:b5:24:07:74:e6:d5:47:40:05:76: 3e:57:e3:61:07:9e:5f:16:f4:e5:da:63:7e:f1:14:c2:c3:4f: 10:f4:77:a3:92:b4:47:1b:ce:ce:e1:5b:b4:88:61:4b:e4:56: 11:38:f7:6d:72:d4:23:fe:92:49:b6:61:70:ed:e5:71:07:0b: d3:a5:5b:11:ec:0c:1f:ef:79:77:dc:65:aa:f6:8a:6f:03:52: 28:0c:1b:a0:3e:36:87:7d:22:2b:d3:01:ea:e6:87:00:fa:16: 44:29:40:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA0RTMxMTAvBgNVBAUTKEVDNThCNDM3OEZDQkZGNENCMTI0MUY4MkYzQkNDMEU4 NzJFNEIzOTYwHhcNMjQwNTE4MjA0ODA3WhcNMjQwNTI1MjA0ODA3WjAYMRYwFAYD VQQDEw02NjQ5MTQwNy05NjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ZF/dFbcpNzMO1guS6HZ9IGL5OWgaW8dOzPKzQK4Oa0O4Kn19eS3TQSXa0jz mJHeTDKBT3jhsrP3+ksirgkUgWAKJS55aU+KXNJIkkoCUXQwSxJ3DkWAAM2K0xUx 0dF2Ftogz3pctQ3xb4uffQ9610wX/UBWL2ZnDlBQKvpGjngOBbvE6jAyHBhyyNXh KC6bIxr7ciOAXZ13PMnrKb3eXaDKuVLthHL78jIXTouEmZjYchNi7J5MIuTelf+M NNLgSUnprWog5Gz7qTvXDyBSaFqYj3bgwEnvCLZ5OleryWg89pDK2lFahlfvKtF4 l378S//pnoelbZSUTAknvs5W0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPg4z5oU yENyUkdng3SXI9uply0zMB8GA1UdIwQYMBaAFOxYtDePy/9MsSQfgvO8wOhy5LOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDRFMy8xNDgzQkQzNjVC QjQxMUVBODhENTY3M0JDNEY5QUUwMi83RmkwTjRfTF8weXhKQi1DODd6QTZITGtz NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGaTBONF9MXzB5eEpCLUM4N3pBNkhMa3M1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDRFMy8xNDgzQkQzNjVCQjQxMUVBODhENTY3M0JDNEY5QUUwMi83RmkwTjRfTF8w eXhKQi1DODd6QTZITGtzNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9C4se3Zhck0jNHlmfN7HNA0aXFVRr0qgEiVP8rUnOox5y9/jmHpo9 5jrxqe1ZiG2fq/JZPcEoo7PaGOtnXv6gijZbUrqc3ews/B+Re8NWAj6xsu6ZboY6 10Db2C9FphuBrFdylv0JG6GyhbcdsVZIwAzSLyFls8otYo5EF6VJAy45Lj32xhAX sE19fdtYY7l3TI4rWDWVwbUkB3Tm1UdABXY+V+NhB55fFvTl2mN+8RTCw08Q9Hej krRHG87O4Vu0iGFL5FYROPdtctQj/pJJtmFw7eVxBwvTpVsR7Awf73l33GWq9opv A1IoDBugPjaHfSIr0wHq5ocA+hZEKUAe -----END CERTIFICATE-----Generated at Sat May 18 21:24:23 2024 by rpki-client on console-fra.rpki-client.org