$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft File: 7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft (raw, json) Hash identifier: CH7hl/zwTsIUXLFvLR5FykXTOgE0edWeYU22YjIt+ok= Subject key identifier: 7F:29:E4:9B:CF:6D:03:5F:46:B9:F8:DF:7E:4C:4C:2F:13:8C:ED:10 Authority key identifier: EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE Certificate issuer: /CN=A91B7BDC/serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft Manifest number: 2F Signing time: Sat 01 Jun 2024 03:46:53 +0000 Manifest this update: Sat 01 Jun 2024 03:46:53 +0000 Manifest next update: Sat 08 Jun 2024 03:46:53 +0000 Files and hashes: 1: 7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl (hash: 72E1QtHOZxglU9Ze+aBomqxPGsqlMhLhOXN9XkJ8wvE=) 2: EDED739CEC1E11EEBB363081C4F9AE02.roa (hash: PjjTXRndgc6+pGnQI6sN/dMSS0N1bNy1oveUIqguvWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 03:46:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7BDC/serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE Validity Not Before: Jun 1 03:46:53 2024 GMT Not After : Jun 8 03:46:53 2024 GMT Subject: CN=665a99ad-bbea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8b:e9:6e:0c:43:3e:f1:f4:19:7d:c6:3b:5b: f9:de:72:f0:1c:c6:43:18:77:14:d6:da:aa:37:b6: 11:c1:d0:fc:aa:1e:d9:63:72:12:5a:8a:fe:07:c1: 0a:11:25:72:4f:0b:52:ba:db:10:24:03:e8:2a:e9: 5f:fa:2e:54:06:01:f4:e4:bd:53:77:2d:5b:78:40: 26:f6:63:d6:6b:57:fa:16:0c:71:8b:59:44:14:f4: a6:b5:a7:bd:97:5b:7a:cf:88:13:80:69:47:7b:ab: bf:97:ae:b9:44:d4:0f:55:fd:9e:85:9a:98:7d:18: af:a6:76:b3:97:a7:4b:a6:ba:75:7f:1b:c2:2c:cc: 7d:a7:1a:31:af:ba:76:2a:09:a6:95:42:0a:e8:18: 2b:46:c9:f5:c3:03:c9:42:15:b7:83:9a:66:e6:a9: 1b:6f:41:0f:f7:01:b7:45:b6:1c:3e:ec:97:34:f8: 12:15:5b:ee:12:ea:6b:38:08:e1:cf:61:1f:89:37: 69:cb:e2:06:49:97:ae:59:6d:54:b1:45:88:b5:20: e1:4e:e9:2d:86:c6:80:bb:60:e4:c3:de:1f:b5:ec: 30:62:f5:e6:38:0c:98:9d:8b:39:7c:b1:37:0f:9c: 4a:c5:27:89:89:94:fa:0e:94:9d:c8:b2:5b:06:a0: 90:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:29:E4:9B:CF:6D:03:5F:46:B9:F8:DF:7E:4C:4C:2F:13:8C:ED:10 X509v3 Authority Key Identifier: keyid:EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:c6:6b:81:ef:97:81:e3:98:6b:a5:50:b2:56:10:1c:27:3c: 10:ba:d9:bc:fc:9b:a0:7a:ef:86:36:ef:a5:43:b2:3b:f8:dd: 89:c3:a7:dc:35:df:ec:e4:03:56:fd:0b:28:95:dc:07:14:d8: b5:97:ec:79:a6:cb:40:5f:ba:ad:0a:8c:7b:0c:a2:51:8d:c8: 78:29:07:fe:c4:55:12:46:05:1f:fb:e7:5c:2a:fb:47:7e:63: e0:17:30:41:d4:6a:2a:d1:db:9e:d1:21:70:b9:aa:7e:63:9f: 32:11:08:9f:8c:f5:ae:4e:21:c5:c1:e9:55:7e:73:99:65:6b: dc:24:ea:c1:10:7c:9f:cb:52:b3:1b:65:74:43:c1:2a:ed:24: af:2c:7c:4e:46:bf:2c:dd:c7:48:9d:7e:90:0e:ec:42:28:4e: bd:2f:92:a7:71:1f:1e:69:ba:82:4f:9e:55:a8:18:31:36:15: 70:18:18:b5:e7:e3:c5:ce:be:7c:c7:ed:44:f9:50:8a:98:d3: 1b:dc:d8:10:61:f3:10:a5:a6:78:64:bd:ea:7b:fd:f9:86:78: 49:74:5e:89:c7:86:d2:c6:c1:88:95:6f:b2:0c:c0:5d:9f:53: 17:96:10:88:5c:b3:53:70:61:75:67:d5:87:e3:11:d0:3d:54: e4:a3:fe:cc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC N0JEQzExMC8GA1UEBRMoRUYyNUE5MjVCRkJENENCQUVGNTI0NTZBQjNCMzA5Qjc0 NzA0MERGRTAeFw0yNDA2MDEwMzQ2NTNaFw0yNDA2MDgwMzQ2NTNaMBgxFjAUBgNV BAMTDTY2NWE5OWFkLWJiZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPi+luDEM+8fQZfcY7W/necvAcxkMYdxTW2qo3thHB0PyqHtljchJaiv4HwQoR JXJPC1K62xAkA+gq6V/6LlQGAfTkvVN3LVt4QCb2Y9ZrV/oWDHGLWUQU9Ka1p72X W3rPiBOAaUd7q7+XrrlE1A9V/Z6Fmph9GK+mdrOXp0umunV/G8IszH2nGjGvunYq CaaVQgroGCtGyfXDA8lCFbeDmmbmqRtvQQ/3AbdFthw+7Jc0+BIVW+4S6ms4COHP YR+JN2nL4gZJl65ZbVSxRYi1IOFO6S2GxoC7YOTD3h+17DBi9eY4DJidizl8sTcP nErFJ4mJlPoOlJ3IslsGoJABAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfynkm89t A19GufjffkxMLxOM7RAwHwYDVR0jBBgwFoAU7yWpJb+9TLrvUkVqs7MJt0cEDf4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3QkRDLzc5RUUwQkM0RTI3 MjExRUVCODNENjA2QkM0RjlBRTAyLzd5V3BKYi05VExydlVrVnFzN01KdDBjRURm NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvN3lXcEpiLTlUTHJ2VWtWcXM3TUp0MGNFRGY0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3 QkRDLzc5RUUwQkM0RTI3MjExRUVCODNENjA2QkM0RjlBRTAyLzd5V3BKYi05VExy dlVrVnFzN01KdDBjRURmNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF7Ga4Hvl4HjmGulULJWEBwnPBC62bz8m6B674Y276VDsjv43YnDp9w1 3+zkA1b9CyiV3AcU2LWX7Hmmy0Bfuq0KjHsMolGNyHgpB/7EVRJGBR/751wq+0d+ Y+AXMEHUairR257RIXC5qn5jnzIRCJ+M9a5OIcXB6VV+c5lla9wk6sEQfJ/LUrMb ZXRDwSrtJK8sfE5Gvyzdx0idfpAO7EIoTr0vkqdxHx5puoJPnlWoGDE2FXAYGLXn 48XOvnzH7UT5UIqY0xvc2BBh8xClpnhkvep7/fmGeEl0XonHhtLGwYiVb7IMwF2f UxeWEIhcs1NwYXVn1YfjEdA9VOSj/sw= -----END CERTIFICATE-----Generated at Sat Jun 1 07:08:25 2024 by rpki-client on console-ams.rpki-client.org