$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft File: 7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft (raw, json) Hash identifier: kgQEfjre8Qyfg/WYrYz/UWt6yw+F0eWRI+i99GovDEI= Subject key identifier: DB:12:5F:9D:AD:DD:19:FB:52:D0:00:0A:C9:9C:F2:35:C1:99:57:E3 Authority key identifier: EE:5E:C3:7F:3D:3B:C5:75:99:F3:C7:3C:52:22:6E:7E:E0:50:BF:96 Certificate issuer: /CN=A91BCB3A/serialNumber=EE5EC37F3D3BC57599F3C73C52226E7EE050BF96 Certificate serial: 0A4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft Manifest number: 0A40 Signing time: Sat 18 May 2024 20:30:09 +0000 Manifest this update: Sat 18 May 2024 20:30:08 +0000 Manifest next update: Sat 25 May 2024 20:30:08 +0000 Files and hashes: 1: 7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl (hash: VSvjg13WEK8lFoaHQV4Rr7LO9NyudBYFpM+5vGAErNE=) 2: 9E5AF612533C11EAA9A27E3BC4F9AE02.roa (hash: +emRQurQ1nMIXSB4T9ERHTA19b2jrK6DVYXGiJPRtnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2634 (0xa4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCB3A/serialNumber=EE5EC37F3D3BC57599F3C73C52226E7EE050BF96 Validity Not Before: May 18 20:30:08 2024 GMT Not After : May 25 20:30:08 2024 GMT Subject: CN=66490fd0-d170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ed:d5:09:54:fb:36:c7:0c:54:17:a9:0e:59: fd:36:98:de:81:cf:b5:fd:9d:c3:ee:10:38:58:be: 16:c0:61:84:4d:ae:b1:ab:1a:22:c3:a6:0f:8f:38: e8:de:55:d8:9c:78:64:2c:5a:5b:49:49:a2:a2:bb: 11:09:48:e1:78:75:ae:8b:4f:3d:88:df:68:8f:e5: ef:a5:68:cd:e4:5c:dc:7b:31:e7:7c:ee:74:51:e3: 74:3b:f4:51:ff:7d:64:3a:3f:9b:66:25:16:86:85: c6:73:28:4b:0e:61:28:b2:27:94:2f:00:e5:3b:b3: da:37:c3:2f:61:ae:e4:4c:6e:46:6b:6e:3e:e6:3e: aa:45:b2:31:fb:19:96:2d:ec:7c:e8:36:f8:4d:15: f6:23:a4:2b:65:c1:c7:3e:8a:c1:68:96:02:73:a2: 10:22:b4:53:95:77:10:83:d7:5d:7c:96:f4:19:93: 67:20:78:23:cd:98:8d:7c:3b:46:0e:03:7c:75:de: 12:88:a4:1e:5c:21:48:24:c8:ef:d3:93:dd:26:38: 70:bb:df:15:3d:9d:e5:57:fe:47:9a:ab:af:c6:d4: d6:c3:bf:98:93:34:18:1b:f2:18:1c:f1:a6:f8:4e: 31:f3:27:21:08:d9:1f:55:97:a3:0f:dd:d9:d3:4e: ce:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:12:5F:9D:AD:DD:19:FB:52:D0:00:0A:C9:9C:F2:35:C1:99:57:E3 X509v3 Authority Key Identifier: keyid:EE:5E:C3:7F:3D:3B:C5:75:99:F3:C7:3C:52:22:6E:7E:E0:50:BF:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:d8:e5:61:ad:28:83:92:2f:7b:05:fb:a8:b1:1b:5c:8e:87: a5:d0:6b:6c:78:47:7a:c2:52:4b:fc:e6:81:7f:5e:10:00:b1: 51:94:21:c1:ab:56:f4:f1:f5:12:0c:05:d4:f5:92:f0:6a:f1: 45:6e:04:26:df:72:14:3d:a3:fe:ea:19:8f:ca:2b:81:f3:ea: 76:a5:ec:0c:a5:2e:5e:06:b3:41:97:0d:ce:60:1b:2e:e5:78: 3b:a9:07:f1:ed:99:3e:53:64:4e:70:5b:a9:c0:9f:e4:b6:e5: eb:50:79:d5:d3:13:c4:6f:6d:62:9b:34:c7:9b:0e:e3:00:f6: 02:9c:1f:ba:b6:84:dd:19:62:a3:53:48:92:02:20:8b:24:27: c1:29:6a:15:5a:b1:e2:2c:be:11:2a:df:43:23:76:f4:00:c1: 6b:87:dd:5f:68:b0:ea:85:70:3b:0d:d7:5b:53:fa:4e:60:fe: cd:2a:32:bc:60:04:57:40:d2:ce:ef:83:b0:e5:c6:ed:a8:a5: c2:07:3c:42:7c:e1:65:61:d1:c5:d1:45:86:d7:16:a4:fc:f6: 88:82:15:a3:db:8e:9a:06:36:a0:3f:8d:e7:d5:b6:03:1a:5c: 72:b4:10:9b:9c:be:c8:70:fe:23:39:21:db:7f:48:97:fc:28: 27:86:72:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNCM0ExMTAvBgNVBAUTKEVFNUVDMzdGM0QzQkM1NzU5OUYzQzczQzUyMjI2RTdF RTA1MEJGOTYwHhcNMjQwNTE4MjAzMDA4WhcNMjQwNTI1MjAzMDA4WjAYMRYwFAYD VQQDEw02NjQ5MGZkMC1kMTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAou3VCVT7NscMVBepDln9Npjegc+1/Z3D7hA4WL4WwGGETa6xqxoiw6YPjzjo 3lXYnHhkLFpbSUmiorsRCUjheHWui089iN9oj+XvpWjN5FzcezHnfO50UeN0O/RR /31kOj+bZiUWhoXGcyhLDmEosieULwDlO7PaN8MvYa7kTG5Ga24+5j6qRbIx+xmW Lex86Db4TRX2I6QrZcHHPorBaJYCc6IQIrRTlXcQg9ddfJb0GZNnIHgjzZiNfDtG DgN8dd4SiKQeXCFIJMjv05PdJjhwu98VPZ3lV/5HmquvxtTWw7+YkzQYG/IYHPGm +E4x8ychCNkfVZejD93Z007OqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNsSX52t 3Rn7UtAACsmc8jXBmVfjMB8GA1UdIwQYMBaAFO5ew389O8V1mfPHPFIibn7gUL+W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0IzQS85QUQ2QzVCODQ1 ODQxMUVBQTQ2RTc1NzFDNEY5QUUwMi83bDdEZnowN3hYV1o4OGM4VWlKdWZ1QlF2 NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdsN0RmejA3eFhXWjg4YzhVaUp1ZnVCUXY1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0IzQS85QUQ2QzVCODQ1ODQxMUVBQTQ2RTc1NzFDNEY5QUUwMi83bDdEZnowN3hY V1o4OGM4VWlKdWZ1QlF2NVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDD2OVhrSiDki97BfuosRtcjoel0GtseEd6wlJL/OaBf14QALFRlCHB q1b08fUSDAXU9ZLwavFFbgQm33IUPaP+6hmPyiuB8+p2pewMpS5eBrNBlw3OYBsu 5Xg7qQfx7Zk+U2ROcFupwJ/ktuXrUHnV0xPEb21imzTHmw7jAPYCnB+6toTdGWKj U0iSAiCLJCfBKWoVWrHiLL4RKt9DI3b0AMFrh91faLDqhXA7DddbU/pOYP7NKjK8 YARXQNLO74Ow5cbtqKXCBzxCfOFlYdHF0UWG1xak/PaIghWj246aBjagP43n1bYD GlxytBCbnL7IcP4jOSHbf0iX/CgnhnJi -----END CERTIFICATE-----Generated at Sat May 18 21:24:23 2024 by rpki-client on console-fra.rpki-client.org