$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft File: 7drOQHH9qFhc8SNEuCUSze8H860.mft (raw, json) Hash identifier: rfC3n0Bg6yamu+6RRoRVHLRJ2gCjqHgMO1KsAe9J4u4= Subject key identifier: C4:D0:A1:F5:C4:BC:1F:39:2E:F0:B4:C4:7A:11:AE:56:8D:6C:E9:41 Authority key identifier: ED:DA:CE:40:71:FD:A8:58:5C:F1:23:44:B8:25:12:CD:EF:07:F3:AD Certificate issuer: /CN=A91D9335/serialNumber=EDDACE4071FDA8585CF12344B82512CDEF07F3AD Certificate serial: 33C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7drOQHH9qFhc8SNEuCUSze8H860.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft Manifest number: 33C9 Signing time: Fri 31 May 2024 14:39:54 +0000 Manifest this update: Fri 31 May 2024 14:39:53 +0000 Manifest next update: Fri 07 Jun 2024 14:39:53 +0000 Files and hashes: 1: 7drOQHH9qFhc8SNEuCUSze8H860.crl (hash: WKolQ0Jo5bxiglRHXCG5M0s8cR0DbzX54ds1CVYV6rI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.crl rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7drOQHH9qFhc8SNEuCUSze8H860.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:39:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13257 (0x33c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9335/serialNumber=EDDACE4071FDA8585CF12344B82512CDEF07F3AD Validity Not Before: May 31 14:39:53 2024 GMT Not After : Jun 7 14:39:53 2024 GMT Subject: CN=6659e13a-026a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e7:74:77:a5:eb:ed:6e:01:87:8f:72:e4:15: 18:53:d0:15:bc:44:b5:e1:95:14:b1:0b:58:5b:54: 3a:6c:38:cd:f5:80:9d:4f:54:ad:4d:e4:f3:67:d3: 37:8c:d5:39:24:9a:89:ff:39:b9:93:31:31:13:64: d7:40:5e:71:05:b1:55:d6:a9:72:1a:d9:5d:3b:83: 9b:e9:4f:8f:09:3c:23:03:98:36:5a:2b:00:8e:99: 77:ff:5b:2a:7c:fb:38:2b:80:d8:4d:29:a9:f6:94: fd:fb:3a:e6:38:3d:37:01:28:5e:b0:98:f9:35:b6: 58:40:20:26:9a:01:30:25:72:1c:ac:09:40:87:b0: 32:3a:85:99:1c:50:fb:08:a7:7e:96:48:df:91:bf: ff:57:94:45:3b:9a:91:17:5d:ff:b0:44:d3:c7:e2: c2:72:5c:2c:c5:a4:b9:55:62:1b:ac:c0:7b:81:06: cc:bd:55:81:8e:17:40:5d:89:a6:c1:05:ed:ec:dc: b6:21:51:e3:56:e2:cd:f9:7a:56:40:60:fc:d8:17: e1:48:5d:c7:6e:47:1d:f4:69:d4:6b:93:bb:a6:73: 99:dd:f0:19:ec:b2:7e:79:ba:f8:8d:48:9e:45:10: cc:bf:35:be:a2:ba:7a:46:a1:ef:fe:24:8d:36:81: a6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D0:A1:F5:C4:BC:1F:39:2E:F0:B4:C4:7A:11:AE:56:8D:6C:E9:41 X509v3 Authority Key Identifier: keyid:ED:DA:CE:40:71:FD:A8:58:5C:F1:23:44:B8:25:12:CD:EF:07:F3:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7drOQHH9qFhc8SNEuCUSze8H860.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:f7:24:14:c3:61:9b:b0:0b:90:c4:38:76:25:db:c1:92:81: 7f:04:25:d9:5b:8d:d2:d2:fc:0f:23:c3:c9:a2:56:80:92:90: 03:96:e8:41:06:0e:27:0d:41:9a:c5:9e:53:0c:bb:3b:bd:a5: 1f:a5:9b:e6:4e:2e:4f:62:5a:e9:2f:56:20:30:83:da:56:b4: ac:15:a4:1b:2e:9b:73:d9:15:40:ec:d1:a6:a3:b3:af:2e:2a: 8e:7a:c1:00:86:b4:b4:a1:6a:1a:0f:27:64:42:3d:1d:37:75: 8d:7b:33:9e:e4:e5:30:71:b6:2d:95:29:82:1d:12:56:15:a3: 88:c6:1a:42:7a:f1:5b:77:75:cb:03:8c:16:21:91:c8:14:9b: 97:4c:e0:b1:31:63:97:7c:60:c4:c8:bc:de:ea:75:9e:43:90: 1f:22:9a:57:92:70:42:58:d4:20:53:4b:70:ac:58:a3:24:49: ff:5a:09:dd:8d:cf:9a:b1:54:0b:85:9c:4e:a3:6e:4b:e0:d6: 4b:29:dd:65:c3:14:46:ac:13:af:d6:fa:58:d5:e4:bf:e7:5e: e6:a2:35:1b:e8:0e:26:fc:45:94:a8:ed:e4:ae:41:e0:6d:3c: 38:dd:ce:06:45:90:29:4f:10:1b:b9:1d:24:b4:81:9a:0a:e7: 7d:31:9d:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkzMzUxMTAvBgNVBAUTKEVEREFDRTQwNzFGREE4NTg1Q0YxMjM0NEI4MjUxMkNE RUYwN0YzQUQwHhcNMjQwNTMxMTQzOTUzWhcNMjQwNjA3MTQzOTUzWjAYMRYwFAYD VQQDEw02NjU5ZTEzYS0wMjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3+d0d6Xr7W4Bh49y5BUYU9AVvES14ZUUsQtYW1Q6bDjN9YCdT1StTeTzZ9M3 jNU5JJqJ/zm5kzExE2TXQF5xBbFV1qlyGtldO4Ob6U+PCTwjA5g2WisAjpl3/1sq fPs4K4DYTSmp9pT9+zrmOD03AShesJj5NbZYQCAmmgEwJXIcrAlAh7AyOoWZHFD7 CKd+lkjfkb//V5RFO5qRF13/sETTx+LCclwsxaS5VWIbrMB7gQbMvVWBjhdAXYmm wQXt7Ny2IVHjVuLN+XpWQGD82BfhSF3Hbkcd9GnUa5O7pnOZ3fAZ7LJ+ebr4jUie RRDMvzW+orp6RqHv/iSNNoGmGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMTQofXE vB85LvC0xHoRrlaNbOlBMB8GA1UdIwQYMBaAFO3azkBx/ahYXPEjRLglEs3vB/Ot MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTMzNS9FNjI2RTVEMDFE OEIxMUUyQUVGRERBRTYwOEIwMkNEMi83ZHJPUUhIOXFGaGM4U05FdUNVU3plOEg4 NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdkck9RSEg5cUZoYzhTTkV1Q1VTemU4SDg2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTMzNS9FNjI2RTVEMDFEOEIxMUUyQUVGRERBRTYwOEIwMkNEMi83ZHJPUUhIOXFG aGM4U05FdUNVU3plOEg4NjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ9yQUw2GbsAuQxDh2JdvBkoF/BCXZW43S0vwPI8PJolaAkpADluhB Bg4nDUGaxZ5TDLs7vaUfpZvmTi5PYlrpL1YgMIPaVrSsFaQbLptz2RVA7NGmo7Ov LiqOesEAhrS0oWoaDydkQj0dN3WNezOe5OUwcbYtlSmCHRJWFaOIxhpCevFbd3XL A4wWIZHIFJuXTOCxMWOXfGDEyLze6nWeQ5AfIppXknBCWNQgU0twrFijJEn/Wgnd jc+asVQLhZxOo25L4NZLKd1lwxRGrBOv1vpY1eS/517mojUb6A4m/EWUqO3krkHg bTw43c4GRZApTxAbuR0ktIGaCud9MZ1K -----END CERTIFICATE-----Generated at Fri May 31 16:41:44 2024 by rpki-client on console-ams.rpki-client.org