$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft File: t7c-ibYhCBYJzWiasK73-vFIkmw.mft (raw, json) Hash identifier: Eb1B3tNOzp6GRK1XD1uw+3l9jRxAH4QFfeqQK4ryRoY= Subject key identifier: 17:D6:AD:C1:92:B1:18:A3:17:39:BB:26:CA:9D:FC:C2:30:3F:E4:E1 Authority key identifier: B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C Certificate issuer: /CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C Certificate serial: 2560 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft Manifest number: 24E9 Signing time: Sat 18 May 2024 16:04:26 +0000 Manifest this update: Sat 18 May 2024 16:04:26 +0000 Manifest next update: Sat 25 May 2024 16:04:26 +0000 Files and hashes: 1: t7c-ibYhCBYJzWiasK73-vFIkmw.crl (hash: KQ2neYdi2rzhb+0hdSybezz+CMU5PVnw8eResdv95HU=) 2: C9848396CD1711ED898C311FC4F9AE02.roa (hash: yZFbVVTPBwvrRTsqOgmswnZyFQQB/4sMbv/BLqO/6WI=) 3: 6223956A752011ED84F8CD3CC4F9AE02.roa (hash: pK13qwu7LElWcXQgX3OLiRCXBPJ1tlV1S05t+rUsNbE=) 4: AEEA3AE45BF611E984E25E54C4F9AE02.roa (hash: GP4xUsIduNh2HeQhVqr04ctEFbTYTxQ87e01idrQ4Gs=) 5: 8F92939C46C711E9A5547325C4F9AE02.roa (hash: 7iARUiMPv3HLznOKtpkc9GZoAlJZeWaZcC4qfythbSE=) 6: 3824883E72ED11EE812CE764C4F9AE02.roa (hash: DAO6vHZHvWIaCjO27w7a9G3/fUbdbGe7PN0mBE3O0ec=) 7: BE402F16707F11EDBD17DD28C4F9AE02.roa (hash: cALMs37p+SMm6hNGN+ODAKaucxmqQpq+zCtGE32DRaQ=) 8: 4A479BB45A7911E998A6BE80C4F9AE02.roa (hash: YkeekcBpQwTYjFjVb68ulLEw7AyNGZ6teI99pWERpdQ=) 9: BD9FC7C4707F11EDBD17DD28C4F9AE02.roa (hash: CsPLqLI82IuxldD9PNs5Yf0k+KTEXxOyQqE0W6w+Qck=) 10: 1A982CC85A7C11E9A28B110DC4F9AE02.roa (hash: bQ+SCtyavdW0tv1oFWRU07IvCRrAGCvxa4R1ht6P4dk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9568 (0x2560) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C Validity Not Before: May 18 16:04:26 2024 GMT Not After : May 25 16:04:26 2024 GMT Subject: CN=6648d18a-4eeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ef:70:9f:02:6a:e1:3c:44:de:14:40:55:79: 67:90:4b:81:b8:20:91:73:59:65:88:31:9b:45:2d: 84:a1:4d:04:60:92:d5:97:1a:b3:9d:3a:47:a9:1b: 14:08:d3:ea:23:f6:fd:75:fc:e8:6e:70:00:ed:e3: ce:c7:5c:2a:a3:c7:3b:e6:7d:18:be:cd:a7:f8:77: 59:42:46:58:ed:ff:cf:8a:af:2c:59:d4:dc:78:18: c5:a8:65:d6:5f:47:67:d1:4c:58:df:3b:e7:34:ca: 23:99:2a:ac:50:94:b1:5a:5a:25:8c:8d:5e:16:b1: f6:0b:03:e2:e6:59:e6:c5:76:1e:ac:86:48:ba:11: f1:1c:74:28:19:e7:bf:56:f9:7b:e4:ee:ad:2a:a3: 66:50:0f:7f:57:0d:d4:5a:0a:d9:a5:5b:81:ec:9f: 7b:fe:4c:6c:f8:31:eb:da:8e:3e:7f:6f:48:6c:dc: d3:9d:98:24:ee:8a:e8:59:48:bb:03:69:d6:34:27: 28:5c:bc:b5:c0:92:c2:ba:fa:7b:aa:c1:61:5d:ec: 37:a6:6d:8e:ec:d8:4f:58:a5:72:3e:a9:96:32:46: dc:e1:d2:0b:8a:0d:37:32:f3:63:e0:58:a3:5f:5b: b8:51:c8:dc:ce:0c:56:43:a1:51:87:63:f5:71:21: 24:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D6:AD:C1:92:B1:18:A3:17:39:BB:26:CA:9D:FC:C2:30:3F:E4:E1 X509v3 Authority Key Identifier: keyid:B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:30:f2:14:44:34:69:07:89:1e:2f:59:9e:bb:ec:a9:a6:31: 93:72:03:6c:28:f9:77:31:fe:f4:a2:0e:58:b6:ef:7a:12:0e: 27:0c:ba:c9:4c:f3:2f:01:5f:4e:7d:d7:98:ad:e1:82:a9:85: eb:fa:c7:fe:3f:5a:f2:26:f3:67:c5:7c:5f:fa:49:57:3a:cb: 98:c6:ee:b4:4c:16:f2:d9:53:eb:40:e6:43:4b:86:79:7e:f5: 6b:f2:f7:aa:a4:37:d4:e0:14:42:36:38:4f:06:4e:e8:47:8e: 8a:10:99:4a:96:17:80:16:7c:c4:83:0a:68:a4:18:a0:0f:72: f9:c8:aa:e2:45:73:67:50:7e:f8:f3:0f:a6:02:85:6b:6d:9d: 4c:78:7f:c3:93:e4:75:8b:59:78:91:12:dd:e5:a3:d4:fe:70: d1:4e:81:6d:6d:de:4a:7f:17:42:fd:28:eb:c5:e6:4f:38:15: 59:35:e0:a0:fa:5d:9a:9d:96:fc:9b:b1:12:b4:3e:7c:f2:25: 65:cd:8c:69:a5:56:6f:ee:ad:53:2f:3f:0e:b5:ee:60:2d:14: 3c:8b:54:3b:73:0b:d2:0f:51:9c:b1:6f:3a:91:f3:f2:35:4e: 11:1f:8e:fa:be:69:7d:2a:0d:4a:56:b2:32:63:32:d9:02:a5: 56:1a:71:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExMzYxMTAvBgNVBAUTKEI3QjczRTg5QjYyMTA4MTYwOUNENjg5QUIwQUVGN0ZB RjE0ODkyNkMwHhcNMjQwNTE4MTYwNDI2WhcNMjQwNTI1MTYwNDI2WjAYMRYwFAYD VQQDEw02NjQ4ZDE4YS00ZWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAve9wnwJq4TxE3hRAVXlnkEuBuCCRc1lliDGbRS2EoU0EYJLVlxqznTpHqRsU CNPqI/b9dfzobnAA7ePOx1wqo8c75n0Yvs2n+HdZQkZY7f/Piq8sWdTceBjFqGXW X0dn0UxY3zvnNMojmSqsUJSxWloljI1eFrH2CwPi5lnmxXYerIZIuhHxHHQoGee/ Vvl75O6tKqNmUA9/Vw3UWgrZpVuB7J97/kxs+DHr2o4+f29IbNzTnZgk7oroWUi7 A2nWNCcoXLy1wJLCuvp7qsFhXew3pm2O7NhPWKVyPqmWMkbc4dILig03MvNj4Fij X1u4UcjczgxWQ6FRh2P1cSEkEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBfWrcGS sRijFzm7Jsqd/MIwP+ThMB8GA1UdIwQYMBaAFLe3Pom2IQgWCc1omrCu9/rxSJJs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTEzNi9DRjMyODFDODIx NUIxMUU1QTdCRjg5MEVDNEY5QUUwMi90N2MtaWJZaENCWUp6V2lhc0s3My12Rklr bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q3Yy1pYlloQ0JZSnpXaWFzSzczLXZGSWttdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTEzNi9DRjMyODFDODIxNUIxMUU1QTdCRjg5MEVDNEY5QUUwMi90N2MtaWJZaENC WUp6V2lhc0s3My12RklrbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbMPIURDRpB4keL1meu+yppjGTcgNsKPl3Mf70og5Ytu96Eg4nDLrJ TPMvAV9OfdeYreGCqYXr+sf+P1ryJvNnxXxf+klXOsuYxu60TBby2VPrQOZDS4Z5 fvVr8veqpDfU4BRCNjhPBk7oR46KEJlKlheAFnzEgwpopBigD3L5yKriRXNnUH74 8w+mAoVrbZ1MeH/Dk+R1i1l4kRLd5aPU/nDRToFtbd5KfxdC/SjrxeZPOBVZNeCg +l2anZb8m7EStD588iVlzYxppVZv7q1TLz8Ote5gLRQ8i1Q7cwvSD1GcsW86kfPy NU4RH476vml9Kg1KVrIyYzLZAqVWGnFe -----END CERTIFICATE-----Generated at Sat May 18 16:57:54 2024 by rpki-client on console-fra.rpki-client.org