$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft File: c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft (raw, json) Hash identifier: 8izZrNG9jy89WJKWp5mj/E2Lm5CfWYL1ejOVeyXvlIo= Subject key identifier: BC:20:F6:73:B5:2F:04:D7:1C:04:39:DE:B0:58:9E:A9:27:43:B5:6D Authority key identifier: 73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2 Certificate issuer: /CN=A91B2492/serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2 Certificate serial: 0A6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft Manifest number: 0A65 Signing time: Sat 18 May 2024 20:19:31 +0000 Manifest this update: Sat 18 May 2024 20:19:30 +0000 Manifest next update: Sat 25 May 2024 20:19:30 +0000 Files and hashes: 1: c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl (hash: zcHJq1h25kGEsZmXObmAjoFqjQwALDSCigruwr2UTho=) 2: C8436A008D7B11EDB7EB7F37C4F9AE02.roa (hash: 42VvBlg/h+BrMDeCNHd6S2PYJbQdXPmTgZgY8yTqMto=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2669 (0xa6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2492/serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2 Validity Not Before: May 18 20:19:30 2024 GMT Not After : May 25 20:19:30 2024 GMT Subject: CN=66490d52-606a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:63:95:e6:87:f7:76:56:87:9f:fa:4b:9f:a0: 02:13:ef:bc:cf:50:5b:f6:a5:58:31:f6:35:f2:61: 24:bf:be:78:6b:ec:12:3c:c5:eb:32:b4:09:c3:03: 1c:9f:17:15:e2:82:1f:e5:41:29:41:55:3f:43:e7: 78:55:e0:73:90:19:fa:17:23:7c:4d:86:7a:f5:0a: 4d:7b:4b:43:4e:80:42:63:1e:35:16:62:9f:41:ca: 90:fc:c5:8d:a4:22:ea:4c:7e:20:67:ac:0d:f0:c5: 20:13:d2:72:89:ca:2d:04:00:25:29:0b:d7:48:34: 83:f3:c9:99:19:4d:bd:75:c5:b9:ba:76:28:1e:57: d4:9a:4f:11:65:a7:17:4c:2f:78:5c:fc:a3:84:5c: a4:51:db:03:92:e1:0d:b1:62:a2:78:45:bc:6d:de: 3d:18:ef:9d:82:a2:23:8d:8c:dd:f2:97:30:2b:75: ed:e3:ad:59:b3:1a:68:9e:81:f6:04:21:49:dd:4a: 50:f1:bf:db:3f:81:6b:fc:9f:c5:75:04:15:23:d9: 50:8d:85:81:be:47:aa:e6:fe:c7:cc:53:58:c9:7c: c6:51:45:c2:ba:5f:9a:c6:e8:ea:c7:54:a7:19:4e: 5f:a4:6b:d7:b6:f0:7a:e8:8a:87:28:66:bb:88:d2: 0c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:20:F6:73:B5:2F:04:D7:1C:04:39:DE:B0:58:9E:A9:27:43:B5:6D X509v3 Authority Key Identifier: keyid:73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:0b:15:30:28:03:d2:76:ad:38:3a:26:a5:7c:39:8d:ea:df: b5:9e:83:e3:81:51:1a:ac:ff:da:93:b5:2a:5b:af:cc:4a:a1: fd:8f:44:b0:8f:37:0f:f5:a1:0f:ec:0a:d5:0b:24:f1:c3:1f: ae:c3:1f:e4:46:81:41:73:1a:26:ff:a5:d8:62:ca:06:ab:56: e0:0f:3d:bf:bd:16:63:f0:48:5f:a3:86:1b:e7:bb:89:7e:c4: 5d:f1:70:3c:0e:33:54:bc:90:7f:38:2a:b8:37:c8:b6:51:24: cd:5d:b7:50:37:21:51:78:0d:d2:c1:bd:ca:15:a7:02:14:5d: 9d:bf:49:73:7a:01:85:dd:70:5f:b0:06:ee:6f:45:a8:07:43: 2c:5f:5d:42:86:2d:6d:e7:ec:51:8e:65:f8:9c:31:57:0f:b2: c0:1e:b9:f3:44:9d:ce:fc:f2:41:71:15:0d:01:ac:74:0a:b5: 96:4e:43:1c:4b:87:5f:b2:8e:7a:cf:8a:be:02:37:93:5b:37: e1:3d:ff:3b:a6:53:c1:b5:9c:ea:9a:fc:f9:d7:e2:d9:13:87: 05:75:86:6b:0c:36:e6:44:04:2e:30:72:fd:75:4f:d2:9e:e5: 7a:ad:99:f9:48:57:be:19:3e:cc:8c:67:f4:2d:00:93:0c:7e: 65:85:77:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI0OTIxMTAvBgNVBAUTKDczQjU2MURGM0E1ODk3NkY3RkFEOTk3QTlCQThERTVG Njc2RENGQjIwHhcNMjQwNTE4MjAxOTMwWhcNMjQwNTI1MjAxOTMwWjAYMRYwFAYD VQQDEw02NjQ5MGQ1Mi02MDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArWOV5of3dlaHn/pLn6ACE++8z1Bb9qVYMfY18mEkv754a+wSPMXrMrQJwwMc nxcV4oIf5UEpQVU/Q+d4VeBzkBn6FyN8TYZ69QpNe0tDToBCYx41FmKfQcqQ/MWN pCLqTH4gZ6wN8MUgE9JyicotBAAlKQvXSDSD88mZGU29dcW5unYoHlfUmk8RZacX TC94XPyjhFykUdsDkuENsWKieEW8bd49GO+dgqIjjYzd8pcwK3Xt461ZsxponoH2 BCFJ3UpQ8b/bP4Fr/J/FdQQVI9lQjYWBvkeq5v7HzFNYyXzGUUXCul+axujqx1Sn GU5fpGvXtvB66IqHKGa7iNIM0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLwg9nO1 LwTXHAQ53rBYnqknQ7VtMB8GA1UdIwQYMBaAFHO1Yd86WJdvf62Zepuo3l9nbc+y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjQ5Mi9EQUQ1MTBENDND QjUxMUVBQjgyQ0NDNkNDNEY5QUUwMi9jN1ZoM3pwWWwyOV9yWmw2bTZqZVgyZHR6 N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3VmgzenBZbDI5X3JabDZtNmplWDJkdHo3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjQ5Mi9EQUQ1MTBENDNDQjUxMUVBQjgyQ0NDNkNDNEY5QUUwMi9jN1ZoM3pwWWwy OV9yWmw2bTZqZVgyZHR6N0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFCxUwKAPSdq04OialfDmN6t+1noPjgVEarP/ak7UqW6/MSqH9j0Sw jzcP9aEP7ArVCyTxwx+uwx/kRoFBcxom/6XYYsoGq1bgDz2/vRZj8Ehfo4Yb57uJ fsRd8XA8DjNUvJB/OCq4N8i2USTNXbdQNyFReA3Swb3KFacCFF2dv0lzegGF3XBf sAbub0WoB0MsX11Chi1t5+xRjmX4nDFXD7LAHrnzRJ3O/PJBcRUNAax0CrWWTkMc S4dfso56z4q+AjeTWzfhPf87plPBtZzqmvz51+LZE4cFdYZrDDbmRAQuMHL9dU/S nuV6rZn5SFe+GT7MjGf0LQCTDH5lhXfK -----END CERTIFICATE-----Generated at Sat May 18 20:48:21 2024 by rpki-client on console-fra.rpki-client.org