$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft File: 7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft (raw, json) Hash identifier: M/uTbvyYTl4PYTtdiSVd/6fM//L5e/OvbLXp+iq7gBY= Subject key identifier: 9A:77:B3:7E:31:AD:BE:0D:E5:A8:17:4D:5A:CE:4C:49:BF:43:19:DC Authority key identifier: ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25 Certificate issuer: /CN=A91C8236/serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25 Certificate serial: 0A1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft Manifest number: 0A03 Signing time: Sat 18 May 2024 20:41:34 +0000 Manifest this update: Sat 18 May 2024 20:41:33 +0000 Manifest next update: Sat 25 May 2024 20:41:33 +0000 Files and hashes: 1: 7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl (hash: 487F3rWV51BKN22Jgc1WLmxqUNCxh5p6nD/XRlaNkK8=) 2: 64460F68F17B11EC806AC312C4F9AE02.roa (hash: Cg+ozZFKJS0FjsmqsA75/MWl3j+ogYPR/cxj43bck4Y=) 3: B5D3426854F111ED85A7AC66C4F9AE02.roa (hash: IOzHtTbWHhgsZHthrmnKo8KE4uFqwhbjTMYbOTQH+38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2588 (0xa1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8236/serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25 Validity Not Before: May 18 20:41:33 2024 GMT Not After : May 25 20:41:33 2024 GMT Subject: CN=6649127e-b8e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9a:e9:87:c2:11:1c:60:74:8b:a0:ec:c3:93: 06:c8:8e:6c:df:97:7b:5c:be:7f:c0:71:7a:86:df: df:6d:df:7a:ee:7b:f3:a9:2f:53:38:4d:26:92:14: d5:03:5a:0f:ea:fe:9d:d2:98:65:68:ae:17:de:1e: 81:41:c0:73:14:ef:5a:3b:d0:46:bb:11:25:2b:8e: fe:1b:f2:c6:6e:b1:c6:fa:a6:c4:39:1c:3e:c1:ff: 26:d7:49:eb:7b:89:ba:5d:ee:9e:79:37:ad:81:5a: 23:0f:ef:c5:d6:b0:14:4c:65:b8:1a:c1:05:20:b0: 92:fc:f4:79:ea:f6:cf:4f:fd:7f:ff:e1:58:5d:98: 6b:1a:77:b0:ab:71:b3:ec:1c:f9:2a:bb:b3:90:2d: e0:8b:8e:5c:ab:ce:7d:69:60:4c:d2:47:dc:27:e4: 3e:07:2e:e2:b9:10:4c:de:c9:46:79:99:aa:bf:20: fc:39:eb:a8:ba:8b:b5:b1:8b:68:5e:3e:c0:19:68: e9:5b:6c:b0:ad:0b:4b:f9:91:b2:9e:2f:ca:7c:92: 91:48:63:82:0a:20:43:93:26:9e:60:75:88:8a:50: a8:8a:87:d9:bc:f8:d5:b6:da:5f:cd:c1:c4:c9:bc: 22:d5:27:9a:6a:a0:b2:2f:f0:1c:70:c2:39:1f:7b: 84:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:77:B3:7E:31:AD:BE:0D:E5:A8:17:4D:5A:CE:4C:49:BF:43:19:DC X509v3 Authority Key Identifier: keyid:ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:df:17:fc:a2:6c:e5:59:8d:40:b8:83:7b:39:10:bd:89:62: f6:fe:89:c1:4d:c8:0d:f0:50:6c:26:9c:13:c9:3c:05:36:b8: 18:bc:43:e2:80:3f:eb:3d:79:b9:33:a7:c8:50:ec:e5:0a:16: ef:ea:50:c9:d1:94:3f:81:f0:1d:aa:5e:d1:88:bb:68:d2:c5: 05:6f:21:1e:ef:3e:be:22:d1:06:61:01:cd:f1:87:ce:40:a0: c8:b5:c3:ca:55:78:11:b0:f7:56:96:bc:41:ae:79:ff:1e:36: e2:36:86:78:bb:f8:7a:6b:f4:b8:c9:24:06:07:0b:cd:1f:6c: fb:59:7e:f1:d9:a2:29:0b:ea:98:a8:86:33:32:a9:4f:0d:b0: f6:a5:4b:c7:04:dd:f5:85:b4:cc:ab:b8:02:43:50:80:c0:98: c7:0b:5c:31:9f:a6:cb:7c:d1:4a:e7:3b:07:eb:1e:d9:de:cd: fb:d6:b5:e9:33:8c:c2:11:74:21:ba:0d:70:ee:26:11:d2:95: 07:98:cc:40:3e:e3:c9:f1:78:76:16:6c:4a:4c:ef:bf:45:6b: 06:3b:f4:cb:16:46:2e:86:38:fc:b0:ca:c7:76:bd:45:2b:e5: 15:c3:bc:25:ba:a3:52:e0:da:d0:80:cd:a4:05:71:80:fb:c6: b7:c2:bf:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgyMzYxMTAvBgNVBAUTKEVEODVFRjc3MzQzQzU1NDEyQjA2QTUzQzJBNEUyMDc2 N0FEMTJGMjUwHhcNMjQwNTE4MjA0MTMzWhcNMjQwNTI1MjA0MTMzWjAYMRYwFAYD VQQDEw02NjQ5MTI3ZS1iOGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJrph8IRHGB0i6Dsw5MGyI5s35d7XL5/wHF6ht/fbd967nvzqS9TOE0mkhTV A1oP6v6d0phlaK4X3h6BQcBzFO9aO9BGuxElK47+G/LGbrHG+qbEORw+wf8m10nr e4m6Xe6eeTetgVojD+/F1rAUTGW4GsEFILCS/PR56vbPT/1//+FYXZhrGnewq3Gz 7Bz5KruzkC3gi45cq859aWBM0kfcJ+Q+By7iuRBM3slGeZmqvyD8Oeuouou1sYto Xj7AGWjpW2ywrQtL+ZGyni/KfJKRSGOCCiBDkyaeYHWIilCoiofZvPjVttpfzcHE ybwi1SeaaqCyL/AccMI5H3uErwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJp3s34x rb4N5agXTVrOTEm/QxncMB8GA1UdIwQYMBaAFO2F73c0PFVBKwalPCpOIHZ60S8l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODIzNi9ENDI4Nzk2RTUz MjcxMUVBOEM1N0UzN0FDNEY5QUUwMi83WVh2ZHpROFZVRXJCcVU4S2s0Z2RuclJM eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZWHZkelE4VlVFckJxVThLazRnZG5yUkx5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODIzNi9ENDI4Nzk2RTUzMjcxMUVBOEM1N0UzN0FDNEY5QUUwMi83WVh2ZHpROFZV RXJCcVU4S2s0Z2RuclJMeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAh3xf8omzlWY1AuIN7ORC9iWL2/onBTcgN8FBsJpwTyTwFNrgYvEPi gD/rPXm5M6fIUOzlChbv6lDJ0ZQ/gfAdql7RiLto0sUFbyEe7z6+ItEGYQHN8YfO QKDItcPKVXgRsPdWlrxBrnn/HjbiNoZ4u/h6a/S4ySQGBwvNH2z7WX7x2aIpC+qY qIYzMqlPDbD2pUvHBN31hbTMq7gCQ1CAwJjHC1wxn6bLfNFK5zsH6x7Z3s371rXp M4zCEXQhug1w7iYR0pUHmMxAPuPJ8Xh2FmxKTO+/RWsGO/TLFkYuhjj8sMrHdr1F K+UVw7wluqNS4NrQgM2kBXGA+8a3wr8E -----END CERTIFICATE-----Generated at Sat May 18 21:24:23 2024 by rpki-client on console-fra.rpki-client.org