$ rpki-client -vvf rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.mft File: fJ9yIp7REllMdyLTwhtRBeKfxIo.mft (raw, json) Hash identifier: /+VttBM+5lb3ZczIZIOavNR2n0fJpOxQyaN+w3K/R7o= Subject key identifier: 01:25:E5:7B:DC:0E:C8:5B:1B:AD:EC:BC:8E:A2:8E:A6:5A:3B:0E:76 Authority key identifier: 7C:9F:72:22:9E:D1:12:59:4C:77:22:D3:C2:1B:51:05:E2:9F:C4:8A Certificate issuer: /CN=A91F77AD/serialNumber=7C9F72229ED112594C7722D3C21B5105E29FC48A Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJ9yIp7REllMdyLTwhtRBeKfxIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.mft Manifest number: A7 Signing time: Sun 19 May 2024 06:45:41 +0000 Manifest this update: Sun 19 May 2024 06:45:41 +0000 Manifest next update: Sun 26 May 2024 06:45:41 +0000 Files and hashes: 1: fJ9yIp7REllMdyLTwhtRBeKfxIo.crl (hash: F4QmcXdlkoU0SNr7TBcO0fgTXGvNTdUmpHkXsenI7ec=) 2: 0D99319006F011EFA8C8D445C4F9AE02.roa (hash: C6re+QWyYWAh1U39CaaLD4VccggpP51RWJ3NUe7kXOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.crl rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJ9yIp7REllMdyLTwhtRBeKfxIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F77AD/serialNumber=7C9F72229ED112594C7722D3C21B5105E29FC48A Validity Not Before: May 19 06:45:41 2024 GMT Not After : May 26 06:45:41 2024 GMT Subject: CN=6649a015-bf73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:17:1f:ee:58:a3:5e:1b:e9:28:f2:96:54:45: 0b:4e:8c:e7:0e:8b:2f:f6:c2:dd:c0:09:57:66:04: 4e:c7:fe:9c:13:e2:25:03:dd:fc:cf:f8:82:40:a2: 94:3e:39:48:a0:72:1b:9e:0e:c2:8b:81:bb:68:1f: 4b:5b:80:de:37:73:9b:3a:a4:e5:0f:7c:1f:90:92: 44:c8:94:34:dd:6e:aa:41:b0:4f:30:b1:a5:24:56: 9b:4a:f1:48:7c:12:6a:44:18:da:cd:25:99:de:41: 91:50:1c:e0:6e:24:06:59:2f:0b:69:1f:d1:a9:28: d1:64:5b:e8:9e:45:39:04:3c:54:2b:1a:fd:a3:85: 12:41:f0:88:a5:5d:75:b5:78:b8:60:93:5d:0b:6d: 69:7f:7f:0c:e6:22:50:59:92:b0:66:d7:3b:93:a1: c8:1b:05:25:7c:7b:1c:38:94:ea:d4:f7:6a:43:d3: ff:15:d6:e6:3b:4b:90:1d:bd:b8:95:01:f5:e4:92: 5e:d9:fe:f7:da:90:81:5e:2d:6c:94:51:b7:1e:a8: 78:98:91:2e:af:18:cf:0d:b5:29:0f:43:6c:42:4d: 06:a3:0e:7f:19:b7:90:cd:6a:af:49:ad:d3:c3:ec: 42:94:c2:33:41:1f:f8:f8:96:14:4a:9b:f0:3e:36: 69:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:25:E5:7B:DC:0E:C8:5B:1B:AD:EC:BC:8E:A2:8E:A6:5A:3B:0E:76 X509v3 Authority Key Identifier: keyid:7C:9F:72:22:9E:D1:12:59:4C:77:22:D3:C2:1B:51:05:E2:9F:C4:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJ9yIp7REllMdyLTwhtRBeKfxIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:08:25:3a:6e:01:f8:46:45:7d:66:11:d1:ab:10:73:36:df: 57:ad:ed:ae:fe:54:a1:b7:f1:6c:55:4e:93:87:1a:77:53:59: 96:d7:a9:cc:7d:f9:77:3f:d6:e8:39:2c:d8:62:f0:6d:5c:8f: ea:01:45:bf:4e:a9:a3:fd:e4:2f:3e:d0:98:15:e7:42:cf:31: af:00:28:13:76:2c:01:7a:ed:58:db:bd:05:44:b4:72:70:5f: 29:1f:6e:d2:75:d6:f2:b7:4e:ff:49:87:dd:d5:b6:50:0d:e4: 04:1c:09:91:d0:5c:5a:1c:df:20:9e:4c:d1:86:d3:87:93:2d: 7d:3d:dc:6c:0c:5c:47:e4:04:7f:86:47:9d:bb:ec:fd:8e:19: 34:a0:6a:56:7c:32:5e:34:13:ee:c0:65:c4:2e:c8:ce:96:58: 8a:95:bf:66:55:e1:49:73:41:94:45:a2:c7:c2:b6:cd:43:e1: 5c:bd:b2:3c:16:46:a6:65:fe:36:9e:b0:65:5f:a9:42:99:9d: 74:c3:63:dd:6e:eb:c9:cc:a4:79:67:ec:d7:6e:0b:f0:da:b5: 6c:11:09:25:87:a3:7d:51:58:c9:dd:4c:8f:e4:f0:49:95:12: 44:4e:b9:e4:d7:24:e4:55:2e:d0:89:ad:d0:ca:a8:98:b3:41: 35:be:17:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc3QUQxMTAvBgNVBAUTKDdDOUY3MjIyOUVEMTEyNTk0Qzc3MjJEM0MyMUI1MTA1 RTI5RkM0OEEwHhcNMjQwNTE5MDY0NTQxWhcNMjQwNTI2MDY0NTQxWjAYMRYwFAYD VQQDEw02NjQ5YTAxNS1iZjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApRcf7lijXhvpKPKWVEULToznDosv9sLdwAlXZgROx/6cE+IlA938z/iCQKKU PjlIoHIbng7Ci4G7aB9LW4DeN3ObOqTlD3wfkJJEyJQ03W6qQbBPMLGlJFabSvFI fBJqRBjazSWZ3kGRUBzgbiQGWS8LaR/RqSjRZFvonkU5BDxUKxr9o4USQfCIpV11 tXi4YJNdC21pf38M5iJQWZKwZtc7k6HIGwUlfHscOJTq1PdqQ9P/FdbmO0uQHb24 lQH15JJe2f732pCBXi1slFG3Hqh4mJEurxjPDbUpD0NsQk0Gow5/GbeQzWqvSa3T w+xClMIzQR/4+JYUSpvwPjZpGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAEl5Xvc DshbG63svI6ijqZaOw52MB8GA1UdIwQYMBaAFHyfciKe0RJZTHci08IbUQXin8SK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzdBRC9DRTZDMjM3QTIw QTgxMUVFOTg2MzdGMjNDNEY5QUUwMi9mSjl5SXA3UkVsbE1keUxUd2h0UkJlS2Z4 SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZKOXlJcDdSRWxsTWR5TFR3aHRSQmVLZnhJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzdBRC9DRTZDMjM3QTIwQTgxMUVFOTg2MzdGMjNDNEY5QUUwMi9mSjl5SXA3UkVs bE1keUxUd2h0UkJlS2Z4SW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeCCU6bgH4RkV9ZhHRqxBzNt9Xre2u/lSht/FsVU6Thxp3U1mW16nM ffl3P9boOSzYYvBtXI/qAUW/Tqmj/eQvPtCYFedCzzGvACgTdiwBeu1Y270FRLRy cF8pH27Sddbyt07/SYfd1bZQDeQEHAmR0FxaHN8gnkzRhtOHky19PdxsDFxH5AR/ hkedu+z9jhk0oGpWfDJeNBPuwGXELsjOlliKlb9mVeFJc0GURaLHwrbNQ+FcvbI8 FkamZf42nrBlX6lCmZ10w2PdbuvJzKR5Z+zXbgvw2rVsEQklh6N9UVjJ3UyP5PBJ lRJETrnk1yTkVS7Qia3QyqiYs0E1vhco -----END CERTIFICATE-----Generated at Sun May 19 07:40:46 2024 by rpki-client on console-fra.rpki-client.org